When nightclub security agents assault clients.

In 2006, a medico-legal consultation service devoted to adult victims of interpersonal violence was set up at the Lausanne University Hospital Centre, Switzerland: the Violence Medical Unit. Most patients are referred to the consultation by the Emergency Department. They are received by forensic nurses for support, forensic examination (in order to establish medical report) and community orientation. Between 2007 and 2009, among community violence, aggressions by security agents of nightclubs on clients have increased from 6% to 10%. Most of the victims are young men who had drunk alcohol before the assault. 25.7% presented one or several fractures, all of them in the head area. These findings raise questions about the ability of security agents of nightclubs to deal adequately with obviously risky situations and ensure client security.

Going beyond energy intensity to understand the energy metabolism of nations: the case of Argentina

The link between energy consumption and economic growth has been widely studied in the economic literature. Understanding this relationship is important from both an environmental and a socio-economic point of view, as energy consumption is crucial to economic activity and human environmental impact. This relevance is even higher for developing countries, since energy consumption per unit of output varies through the phases of development, increasing from an agricultural stage to an industrial one and then decreasing for certain service based economies. In the Argentinean case, the relevance of energy consumption to economic development seems to be particularly important. While energy intensity seems to exhibit a U-Shaped curve from 1990 to 2003 decreasing slightly after that year, total energy consumption increases along the period of analysis. Why does this happen? How can we relate this result with the sustainability debate? All these questions are very important due to Argentinean hydrocarbons dependence and due to the recent reduction in oil and natural gas reserves, which can lead to a lack of security of supply. In this paper we study Argentinean energy consumption pattern for the period 1990-2007, to discuss current and future energy and economic sustainability. To this purpose, we developed a conventional analysis, studying energy intensity, and a non conventional analysis, using the Multi-Scale Integrated Analysis of Societal and Ecosystem Metabolism (MuSIASEM) accounting methodology. Both methodologies show that the development process followed by Argentina has not been good enough to assure sustainability in the long term. Instead of improving energy use, energy intensity has increased. The current composition of its energy mix, and the recent economic crisis in Argentina, as well as its development path, are some of the possible explanations.

Neopolystoma fentoni n. sp. (Monogenea: Polystomatidae) a parasite of the conjunctival sac of freshwater turtles in Costa Rica

Neopolystoma fentoni n. sp. is described from the conjunctival sac of Kinosternon leucostomum (Duméril, Bibron, and Duméril 1851) and Rhinoclemmys pulcherrima (Gray 1855) from the Guanacaste Conservation Area in Costa Rica. The new species differs from all other species of Neopolystoma, except N. elizabethae Platt 2000 in possessing a circle of eight genital spines that are recurved and possess a crescent-shaped base. N. fentoni n. sp. differs from N. elizabethae in lacking cecal diverticula and in a number of morphometric criteria.

Entourage des patients âgés avec une pathologie mentale [Carers of elderly patients suffering from mental disorders]

Mental disorders in the elderly lead their families to stand in and adopt a variety of roles before institutional care takes over. These pathologies carry a high risk of suffering for families and distress for professional caregivers. Thus, the psychological burden endured by the proxies of an elderly depressed patient, or of one who has committed suicide, or of patient suffering from dementia needs special attention and, in some cases, professional care. The discussion of these paradigmatic situations in this manuscript will be extended by a paragraph on specific stakes raised by alcoholic patients living in nursing homes. It will stress the complexity and requirements of professionalism when approaching the familial and professional circle of the elderly psychiatric patient.

A case of dissection of intracranial cerebral arteries with segmental mediolytic "arteritis".

The intravital diagnosis of intracranial arterial dissection is not always possible due to atypic and non-specific clinical and radiological presentations. The postmortem pathological examination of cerebral blood vessels is therefore necessary to establish or confirm the presence of a dissecting aneurysm of intracranial arteries. Most of the described cases showed no significant underlying vascular pathology. Here we present the case of a 24-year-old women who died 5 days after admission to the hospital for a rapidly developing right-sided hemisyndrome. Neuroradiological examination had revealed ill-defined bifrontal hypodense lesions and angiographic findings were compatible with a dissection of the left extracranial internal carotid artery with embolic subocclusion of both anterior cerebral arteries. The pathological evaluation ruled out a thromboembolic occlusion of cerebral arteries and an extracranial internal carotid artery dissection but showed an extended dissecting process of variable age in the anterior circulation of the circle of Willis. The dissected vessels showed pathological changes characteristic of segmental mediolytic "arteritis" [Slavin and Gonzalez-Vitale 1976]. To our knowledge this is the first report on intracranial arteries being affected by this pathologic entity. Our case illustrates the importance of a postmortem examination of dissecting aneurysms of intracranial arteries. Careful serial section studies of dissected intracranial arteries in young subjects should be performed and may allow for a better understanding of the vascular pathology underlying the dissection processus.

Mophological analysis of the human vasculature from medical imaging. Application to cerebral and coranary arteries

In this project, we have investigated new ways of modelling and analysis of human vasculature from Medical images. The research was divided in two main areas: cerebral vasculature analysis and coronary arteries modeling. Regarding cerebral vasculature analysis, we have studed cerebral aneurysms, internal carotid and the Circle of Willis (CoW). Aneurysms are abnormal vessel enlargements that can rupture causing important cerebral damages or death. The understanding of this pathology, together with its virtual treatment, and image diagnosis and prognosis, includes identification and detailed measurement of the aneurysms. In this context, we have proposed two automatic aneurysm isolation method, to separate the abnormal part of the vessel from the healthy part, to homogenize and speed-up the processing pipeline usually employed to study this pathology, [Cardenes2011TMI, arrabide2011MedPhys]. The results obtained from both methods have been also compared and validatied in [Cardenes2012MBEC]. A second important task here the analysis of the internal carotid [Bogunovic2011Media] and the automatic labelling of the CoW, Bogunovic2011MICCAI, Bogunovic2012TMI]. The second area of research covers the study of coronary arteries, specially coronary bifurcations because there is where the formation of atherosclerotic plaque is more common, and where the intervention is more challenging. Therefore, we proposed a novel modelling method from Computed Tomography Angiography (CTA) images, combined with Conventional Coronary Angiography (CCA), to obtain realistic vascular models of coronary bifurcations, presented in [Cardenes2011MICCAI], and fully validated including phantom experiments in [Cardene2013MedPhys]. The realistic models obtained from this method are being used to simulate stenting procedures, and to investigate the hemodynamic variables in coronary bifurcations in the works submitted in [Morlachi2012, Chiastra2012]. Additionally, another preliminary work has been done to reconstruct the coronary tree from rotational angiography, and published in [Cardenes2012ISBI].

Automated Segmentation of Cerebral Vasculature with Aneurysms in 3DRA and TOF-MRA using Geodesic Active Regions: an Evaluation Study

Purpose: To evaluate the suitability of an improved version of an automatic segmentation method based on geodesic active regions (GAR) for segmenting cerebral vasculature with aneurysms from 3D X-ray reconstruc-tion angiography (3DRA) and time of °ight magnetic resonance angiography (TOF-MRA) images available in the clinical routine.Methods: Three aspects of the GAR method have been improved: execution time, robustness to variability in imaging protocols and robustness to variability in image spatial resolutions. The improved GAR was retrospectively evaluated on images from patients containing intracranial aneurysms in the area of the Circle of Willis and imaged with two modalities: 3DRA and TOF-MRA. Images were obtained from two clinical centers, each using di®erent imaging equipment. Evaluation included qualitative and quantitative analyses ofthe segmentation results on 20 images from 10 patients. The gold standard was built from 660 cross-sections (33 per image) of vessels and aneurysms, manually measured by interventional neuroradiologists. GAR has also been compared to an interactive segmentation method: iso-intensity surface extraction (ISE). In addition, since patients had been imaged with the two modalities, we performed an inter-modality agreement analysis with respect to both the manual measurements and each of the two segmentation methods. Results: Both GAR and ISE di®ered from the gold standard within acceptable limits compared to the imaging resolution. GAR (ISE, respectively) had an average accuracy of 0.20 (0.24) mm for 3DRA and 0.27 (0.30) mm for TOF-MRA, and had a repeatability of 0.05 (0.20) mm. Compared to ISE, GAR had a lower qualitative error in the vessel region and a lower quantitative error in the aneurysm region. The repeatabilityof GAR was superior to manual measurements and ISE. The inter-modality agreement was similar between GAR and the manual measurements. Conclusions: The improved GAR method outperformed ISE qualitatively as well as quantitatively and is suitable for segmenting 3DRA and TOF-MRA images from clinical routine.

Analysis of patient physical restraints usage in a Swiss emergency service

Introduction: Emergency services (ES) are often faced with agitated,confused or aggressive patients. Such situations may require physicalrestraint. The prevalence of these measures is poorly documented,concerning 1 to 10% of patients admitted in the ES. The indications forrestraint, the context and the related complications are poorly studied.The emergency service and the security service of our hospital havedocumented physical restraint for several years, using specific protocolsintegrated into the medical records. The study evaluated the magnitudeof the problem, the patient characteristics, and degree of adherence tothe restraint protocol.Methods: Retrospective study of physical restraint used on adultpatients in the ES in 2009. The study included analysis of medical anddemographic characteristics, indications justifying restraint and qualityof restraint documentation. Patients were identified from computerizedES and security service records. The data were supplemented byexamination of patients' medical records.Results: In 2009, according to the security service, 390 patients (1%)were physically restrained in the ES. The ES computerized systemidentified only 196 patients. Most patients were male (62%). The medianage was 40 years (15-98 years; P90 = 80 years). 63 % of the situationsoccurred between 18h00 and 6h00, and most frequently on Saturday(19%). Substance or alcohol abuse was present in 48.7% of cases andacute psychiatric crisis was mentioned in 16.7%. In most cases,restraint was motivated by extreme agitation or auto / hetero-aggressiveviolence. Most patients (68 %) were restrained with upper limb andabdominal restraints. More than three anatomic restraints werenecessary in 52 % of the patients. Intervention of security guards wasrequired in 77% of the cases. 61 restraint protocols (31 %) were missingand 57% of the records were incomplete. In many cases, the protocolsdid not include the signature of the physician (22%) or of the nurse(43.8%). Medical records analysis did not allow reliable estimation ofthe number of restraint-induced complications.Conclusions: Physical restraint is most often motivated by majoragitation and/or secondary to substance abuse. Caregivers regularlycall security guards for help. Restraint documentation is often missing orincomplete, requiring major improvement in education and prescription.

When nightclub security agents assault clients more insight through a qualitative approach.

Between 2007 and 2009, aggressions by security agents of nightclubs on clients increased from 6% to 10% among community violence situations encountered at the Violence Medical Unit (VMU) at the Lausanne University Hospital in Switzerland. Most victims were young men who had been drinking alcohol before the assault. About one quarter (25.7%) presented with one or several fractures, all of them in the head area. (For more details, refer to the previous article "When nightclub security agents assault clients" published in 2012(1).) Following this first study, we performed a second qualitative study in order to bring more information about the context and highlight victims' behaviors and experiences. Four themes emerged: how the assault began; the assault itself; third-party involvement; and the psychological state of victims when they consulted the VMU. The findings of this second study complemented the statistical results of the first study by showing under what circumstances security agents of nightclubs respond with physical violence to situations they consider a threat to security. Furthermore, the study described consequences for the victims that could be quite serious. Our findings support the need for nightclubs to improve selection and training of security staff.

Centralised versus Decentralised Management of Patients's Medical Records

For more than 20 years, many countries have been trying to set up a standardised medical record at the regional or at the national level. Most of them have not reached this goal, essentially due to two main difficulties related to patient identification and medical records standardisation. Moreover, the issues raised by the centralisation of all gathered medical data have to be tackled particularly in terms of security and privacy. We discuss here the interest of a noncentralised management of medical records which would require a specific procedure that gives to the patient access to his/her distributed medical data, wherever he/she is located.

Analysis of patient physical restraints usage in a Swiss emergency service

Introduction: Emergency services (ES) are often faced with agitated,confused or aggressive patients. Such situations may require physicalrestraint. The prevalence of these measures is poorly documented,concerning 1 to 10% of patients admitted in the ES. The indications forrestraint, the context and the related complications are poorly studied.The emergency service and the security service of our hospital havedocumented physical restraint for several years, using specific protocolsintegrated into the medical records. The study evaluated the magnitudeof the problem, the patient characteristics, and degree of adherence tothe restraint protocol.Methods: Retrospective study of physical restraint used on adultpatients in the ES in 2009. The study included analysis of medical anddemographic characteristics, indications justifying restraint and qualityof restraint documentation. Patients were identified from computerizedES and security service records. The data were supplemented byexamination of patients' medical records.Results: In 2009, according to the security service, 390 patients (1%)were physically restrained in the ES. The ES computerized systemidentified only 196 patients. Most patients were male (62%). The medianage was 40 years (15-98 years; P90 = 80 years). 63 % of the situationsoccurred between 18h00 and 6h00, and most frequently on Saturday(19%). Substance or alcohol abuse was present in 48.7% of cases andacute psychiatric crisis was mentioned in 16.7%. In most cases,restraint was motivated by extreme agitation or auto / hetero-aggressiveviolence. Most patients (68 %) were restrained with upper limb andabdominal restraints. More than three anatomic restraints werenecessary in 52 % of the patients. Intervention of security guards wasrequired in 77% of the cases. 61 restraint protocols (31 %) were missingand 57% of the records were incomplete. In many cases, the protocolsdid not include the signature of the physician (22%) or of the nurse(43.8%). Medical records analysis did not allow reliable estimation ofthe number of restraint-induced complications.Conclusions: Physical restraint is most often motivated by majoragitation and/or secondary to substance abuse. Caregivers regularlycall security guards for help. Restraint documentation is often missing orincomplete, requiring major improvement in education and prescription.

Security strategies and equilibria in multiobjetives matrix games

Multiobjective matrix games have been traditionally analyzed from two different points of view: equiibrium concepts and security strategies. This paper is based upon the idea that both players try to reach equilibrium points playing pairs of security strategies, as it happens in scalar matrix games. We show conditions guaranteeing the existence of equilibria in security strategies, named security equilibria

Security strategies and equilibria in multiobjetives matrix games

Multiobjective matrix games have been traditionally analyzed from two different points of view: equiibrium concepts and security strategies. This paper is based upon the idea that both players try to reach equilibrium points playing pairs of security strategies, as it happens in scalar matrix games. We show conditions guaranteeing the existence of equilibria in security strategies, named security equilibria

An assurance-based model to holistically assess the information security posture

EXECUTIVE SUMMARY : Evaluating Information Security Posture within an organization is becoming a very complex task. Currently, the evaluation and assessment of Information Security are commonly performed using frameworks, methodologies and standards which often consider the various aspects of security independently. Unfortunately this is ineffective because it does not take into consideration the necessity of having a global and systemic multidimensional approach to Information Security evaluation. At the same time the overall security level is globally considered to be only as strong as its weakest link. This thesis proposes a model aiming to holistically assess all dimensions of security in order to minimize the likelihood that a given threat will exploit the weakest link. A formalized structure taking into account all security elements is presented; this is based on a methodological evaluation framework in which Information Security is evaluated from a global perspective. This dissertation is divided into three parts. Part One: Information Security Evaluation issues consists of four chapters. Chapter 1 is an introduction to the purpose of this research purpose and the Model that will be proposed. In this chapter we raise some questions with respect to "traditional evaluation methods" as well as identifying the principal elements to be addressed in this direction. Then we introduce the baseline attributes of our model and set out the expected result of evaluations according to our model. Chapter 2 is focused on the definition of Information Security to be used as a reference point for our evaluation model. The inherent concepts of the contents of a holistic and baseline Information Security Program are defined. Based on this, the most common roots-of-trust in Information Security are identified. Chapter 3 focuses on an analysis of the difference and the relationship between the concepts of Information Risk and Security Management. Comparing these two concepts allows us to identify the most relevant elements to be included within our evaluation model, while clearing situating these two notions within a defined framework is of the utmost importance for the results that will be obtained from the evaluation process. Chapter 4 sets out our evaluation model and the way it addresses issues relating to the evaluation of Information Security. Within this Chapter the underlying concepts of assurance and trust are discussed. Based on these two concepts, the structure of the model is developed in order to provide an assurance related platform as well as three evaluation attributes: "assurance structure", "quality issues", and "requirements achievement". Issues relating to each of these evaluation attributes are analysed with reference to sources such as methodologies, standards and published research papers. Then the operation of the model is discussed. Assurance levels, quality levels and maturity levels are defined in order to perform the evaluation according to the model. Part Two: Implementation of the Information Security Assurance Assessment Model (ISAAM) according to the Information Security Domains consists of four chapters. This is the section where our evaluation model is put into a welldefined context with respect to the four pre-defined Information Security dimensions: the Organizational dimension, Functional dimension, Human dimension, and Legal dimension. Each Information Security dimension is discussed in a separate chapter. For each dimension, the following two-phase evaluation path is followed. The first phase concerns the identification of the elements which will constitute the basis of the evaluation: ? Identification of the key elements within the dimension; ? Identification of the Focus Areas for each dimension, consisting of the security issues identified for each dimension; ? Identification of the Specific Factors for each dimension, consisting of the security measures or control addressing the security issues identified for each dimension. The second phase concerns the evaluation of each Information Security dimension by: ? The implementation of the evaluation model, based on the elements identified for each dimension within the first phase, by identifying the security tasks, processes, procedures, and actions that should have been performed by the organization to reach the desired level of protection; ? The maturity model for each dimension as a basis for reliance on security. For each dimension we propose a generic maturity model that could be used by every organization in order to define its own security requirements. Part three of this dissertation contains the Final Remarks, Supporting Resources and Annexes. With reference to the objectives of our thesis, the Final Remarks briefly analyse whether these objectives were achieved and suggest directions for future related research. Supporting resources comprise the bibliographic resources that were used to elaborate and justify our approach. Annexes include all the relevant topics identified within the literature to illustrate certain aspects of our approach. Our Information Security evaluation model is based on and integrates different Information Security best practices, standards, methodologies and research expertise which can be combined in order to define an reliable categorization of Information Security. After the definition of terms and requirements, an evaluation process should be performed in order to obtain evidence that the Information Security within the organization in question is adequately managed. We have specifically integrated into our model the most useful elements of these sources of information in order to provide a generic model able to be implemented in all kinds of organizations. The value added by our evaluation model is that it is easy to implement and operate and answers concrete needs in terms of reliance upon an efficient and dynamic evaluation tool through a coherent evaluation system. On that basis, our model could be implemented internally within organizations, allowing them to govern better their Information Security. RÉSUMÉ : Contexte général de la thèse L'évaluation de la sécurité en général, et plus particulièrement, celle de la sécurité de l'information, est devenue pour les organisations non seulement une mission cruciale à réaliser, mais aussi de plus en plus complexe. A l'heure actuelle, cette évaluation se base principalement sur des méthodologies, des bonnes pratiques, des normes ou des standards qui appréhendent séparément les différents aspects qui composent la sécurité de l'information. Nous pensons que cette manière d'évaluer la sécurité est inefficiente, car elle ne tient pas compte de l'interaction des différentes dimensions et composantes de la sécurité entre elles, bien qu'il soit admis depuis longtemps que le niveau de sécurité globale d'une organisation est toujours celui du maillon le plus faible de la chaîne sécuritaire. Nous avons identifié le besoin d'une approche globale, intégrée, systémique et multidimensionnelle de l'évaluation de la sécurité de l'information. En effet, et c'est le point de départ de notre thèse, nous démontrons que seule une prise en compte globale de la sécurité permettra de répondre aux exigences de sécurité optimale ainsi qu'aux besoins de protection spécifiques d'une organisation. Ainsi, notre thèse propose un nouveau paradigme d'évaluation de la sécurité afin de satisfaire aux besoins d'efficacité et d'efficience d'une organisation donnée. Nous proposons alors un modèle qui vise à évaluer d'une manière holistique toutes les dimensions de la sécurité, afin de minimiser la probabilité qu'une menace potentielle puisse exploiter des vulnérabilités et engendrer des dommages directs ou indirects. Ce modèle se base sur une structure formalisée qui prend en compte tous les éléments d'un système ou programme de sécurité. Ainsi, nous proposons un cadre méthodologique d'évaluation qui considère la sécurité de l'information à partir d'une perspective globale. Structure de la thèse et thèmes abordés Notre document est structuré en trois parties. La première intitulée : « La problématique de l'évaluation de la sécurité de l'information » est composée de quatre chapitres. Le chapitre 1 introduit l'objet de la recherche ainsi que les concepts de base du modèle d'évaluation proposé. La maniéré traditionnelle de l'évaluation de la sécurité fait l'objet d'une analyse critique pour identifier les éléments principaux et invariants à prendre en compte dans notre approche holistique. Les éléments de base de notre modèle d'évaluation ainsi que son fonctionnement attendu sont ensuite présentés pour pouvoir tracer les résultats attendus de ce modèle. Le chapitre 2 se focalise sur la définition de la notion de Sécurité de l'Information. Il ne s'agit pas d'une redéfinition de la notion de la sécurité, mais d'une mise en perspectives des dimensions, critères, indicateurs à utiliser comme base de référence, afin de déterminer l'objet de l'évaluation qui sera utilisé tout au long de notre travail. Les concepts inhérents de ce qui constitue le caractère holistique de la sécurité ainsi que les éléments constitutifs d'un niveau de référence de sécurité sont définis en conséquence. Ceci permet d'identifier ceux que nous avons dénommés « les racines de confiance ». Le chapitre 3 présente et analyse la différence et les relations qui existent entre les processus de la Gestion des Risques et de la Gestion de la Sécurité, afin d'identifier les éléments constitutifs du cadre de protection à inclure dans notre modèle d'évaluation. Le chapitre 4 est consacré à la présentation de notre modèle d'évaluation Information Security Assurance Assessment Model (ISAAM) et la manière dont il répond aux exigences de l'évaluation telle que nous les avons préalablement présentées. Dans ce chapitre les concepts sous-jacents relatifs aux notions d'assurance et de confiance sont analysés. En se basant sur ces deux concepts, la structure du modèle d'évaluation est développée pour obtenir une plateforme qui offre un certain niveau de garantie en s'appuyant sur trois attributs d'évaluation, à savoir : « la structure de confiance », « la qualité du processus », et « la réalisation des exigences et des objectifs ». Les problématiques liées à chacun de ces attributs d'évaluation sont analysées en se basant sur l'état de l'art de la recherche et de la littérature, sur les différentes méthodes existantes ainsi que sur les normes et les standards les plus courants dans le domaine de la sécurité. Sur cette base, trois différents niveaux d'évaluation sont construits, à savoir : le niveau d'assurance, le niveau de qualité et le niveau de maturité qui constituent la base de l'évaluation de l'état global de la sécurité d'une organisation. La deuxième partie: « L'application du Modèle d'évaluation de l'assurance de la sécurité de l'information par domaine de sécurité » est elle aussi composée de quatre chapitres. Le modèle d'évaluation déjà construit et analysé est, dans cette partie, mis dans un contexte spécifique selon les quatre dimensions prédéfinies de sécurité qui sont: la dimension Organisationnelle, la dimension Fonctionnelle, la dimension Humaine, et la dimension Légale. Chacune de ces dimensions et son évaluation spécifique fait l'objet d'un chapitre distinct. Pour chacune des dimensions, une évaluation en deux phases est construite comme suit. La première phase concerne l'identification des éléments qui constituent la base de l'évaluation: ? Identification des éléments clés de l'évaluation ; ? Identification des « Focus Area » pour chaque dimension qui représentent les problématiques se trouvant dans la dimension ; ? Identification des « Specific Factors » pour chaque Focus Area qui représentent les mesures de sécurité et de contrôle qui contribuent à résoudre ou à diminuer les impacts des risques. La deuxième phase concerne l'évaluation de chaque dimension précédemment présentées. Elle est constituée d'une part, de l'implémentation du modèle général d'évaluation à la dimension concernée en : ? Se basant sur les éléments spécifiés lors de la première phase ; ? Identifiant les taches sécuritaires spécifiques, les processus, les procédures qui auraient dû être effectués pour atteindre le niveau de protection souhaité. D'autre part, l'évaluation de chaque dimension est complétée par la proposition d'un modèle de maturité spécifique à chaque dimension, qui est à considérer comme une base de référence pour le niveau global de sécurité. Pour chaque dimension nous proposons un modèle de maturité générique qui peut être utilisé par chaque organisation, afin de spécifier ses propres exigences en matière de sécurité. Cela constitue une innovation dans le domaine de l'évaluation, que nous justifions pour chaque dimension et dont nous mettons systématiquement en avant la plus value apportée. La troisième partie de notre document est relative à la validation globale de notre proposition et contient en guise de conclusion, une mise en perspective critique de notre travail et des remarques finales. Cette dernière partie est complétée par une bibliographie et des annexes. Notre modèle d'évaluation de la sécurité intègre et se base sur de nombreuses sources d'expertise, telles que les bonnes pratiques, les normes, les standards, les méthodes et l'expertise de la recherche scientifique du domaine. Notre proposition constructive répond à un véritable problème non encore résolu, auquel doivent faire face toutes les organisations, indépendamment de la taille et du profil. Cela permettrait à ces dernières de spécifier leurs exigences particulières en matière du niveau de sécurité à satisfaire, d'instancier un processus d'évaluation spécifique à leurs besoins afin qu'elles puissent s'assurer que leur sécurité de l'information soit gérée d'une manière appropriée, offrant ainsi un certain niveau de confiance dans le degré de protection fourni. Nous avons intégré dans notre modèle le meilleur du savoir faire, de l'expérience et de l'expertise disponible actuellement au niveau international, dans le but de fournir un modèle d'évaluation simple, générique et applicable à un grand nombre d'organisations publiques ou privées. La valeur ajoutée de notre modèle d'évaluation réside précisément dans le fait qu'il est suffisamment générique et facile à implémenter tout en apportant des réponses sur les besoins concrets des organisations. Ainsi notre proposition constitue un outil d'évaluation fiable, efficient et dynamique découlant d'une approche d'évaluation cohérente. De ce fait, notre système d'évaluation peut être implémenté à l'interne par l'entreprise elle-même, sans recourir à des ressources supplémentaires et lui donne également ainsi la possibilité de mieux gouverner sa sécurité de l'information.

JXTA security in mobile constrained devices

JXME is the JXTA protocols implementation formobile devices using J2ME. Two different flavors of JXME have been implemented, each one specific for a particular set of devices, according to their capabilities. The main value of JXME is its simplicity to create peer-to-peer (P2P) applications in limited devices. In addition to assessing JXME functionalities, it is also important to realize the default security level provided. This paper presents a brief analysis of the current state of security in JXME, focusing on the JXME-Proxied version, identifies existing vulnerabilities and proposes further improvements in this field.