Quality metrics for assessing security-critical computer programs

Existing secure software development principles tend to focus on coding vulnerabilities, such as buffer or integer overflows, that apply to individual program statements, or issues associated with the run-time environment, such as component isolation. Here we instead consider software security from the perspective of potential information flow through a program’s object-oriented module structure. In particular, we define a set of quantifiable "security metrics" which allow programmers to quickly and easily assess the overall security of a given source code program or object-oriented design. Although measuring quality attributes of object-oriented programs for properties such as maintainability and performance has been well-covered in the literature, metrics which measure the quality of information security have received little attention. Moreover, existing securityrelevant metrics assess a system either at a very high level, i.e., the whole system, or at a fine level of granularity, i.e., with respect to individual statements. These approaches make it hard and expensive to recognise a secure system from an early stage of development. Instead, our security metrics are based on well-established compositional properties of object-oriented programs (i.e., data encapsulation, cohesion, coupling, composition, extensibility, inheritance and design size), combined with data flow analysis principles that trace potential information flow between high- and low-security system variables. We first define a set of metrics to assess the security quality of a given object-oriented system based on its design artifacts, allowing defects to be detected at an early stage of development. We then extend these metrics to produce a second set applicable to object-oriented program source code. The resulting metrics make it easy to compare the relative security of functionallyequivalent system designs or source code programs so that, for instance, the security of two different revisions of the same system can be compared directly. This capability is further used to study the impact of specific refactoring rules on system security more generally, at both the design and code levels. By measuring the relative security of various programs refactored using different rules, we thus provide guidelines for the safe application of refactoring steps to security-critical programs. Finally, to make it easy and efficient to measure a system design or program’s security, we have also developed a stand-alone software tool which automatically analyses and measures the security of UML designs and Java program code. The tool’s capabilities are demonstrated by applying it to a number of security-critical system designs and Java programs. Notably, the validity of the metrics is demonstrated empirically through measurements that confirm our expectation that program security typically improves as bugs are fixed, but worsens as new functionality is added.

Its place in property education : where does property law fit into property programs?

Property law is one of the key elements in any property-based degree program. In particular, an understanding of 'property law' is one of the required knowledge fields for inclusion in property programs accredited by professional institutes such as the Royal Institution of Chartered Surveyors, the Appraisal Institute and the Australian Property Institute. Despite the importance of property law as a cornerstone element of all property programs this aspect of the program is often approached from a more generic legal perspective with teaching resources used and pedagogical approach more aligned to the study of law that property. The specificity of this type of program is rarely adequately acknowledged. The question arises as to what the study of 'property law' entails and what the composition of a 'property law' subject should be. Replicating the methodology used by Placid and Weeks (2009) in their examination of the current composition of real estate law courses in the United States, this paper examines the current composition and pedagogical approach adopted by Australian universities based on the study of three Queensland property programs. In particular the curriculum, teaching resources used, assessment and engagement strategies are considered with a view to making improvements to the way these property law courses can be more effectively tailored to property students. It is anticipated that the outcomes of this paper will be of interest to all academics who are responsible for developing and delivering property law subjects and those who manage property programs in Australia and internationally.

Risky business : managing creative practice postgraduates through HDR programs

In Australia, as elsewhere, universities are being encouraged to grow their postgraduate research candidature base while at the same time there is increasing pressure on resources with which to manage the burgeoning groups. In this environment HDR supervision strategies are seen as increasingly important as research managers seek the best possible ‘fit’ for an applicant: the candidate who will provide a sound return on investment and demonstrate endurance in the pursuit of a timely completion. As research managers know, the admissions process can be a risky business. The process may be tested further in the context of the new models of doctoral cohort supervision that are being discussed in the higher degree research management sector. The focus of this paper is an examination of the results of investigations of two models of postgraduate cohort supervision in the creative arts Master of Arts research program at QUT with a view to identifying attributes that may be useful for the formation of cohort models of supervision in the doctoral area.

New evaluation methodologies for public art programs in cultural instiutions

I put my abstract in for this conference back in March, based on some evaluation work I had been doing in 2010 with my colleague Professor Greg Hearn for the 3C Regional Writing NeoGreography Project. I had been swapping notes with a colleague from the Smithsonian’s Centre for Folklife and Cultural Heritage about their evaluation work, and stuck inside during the rains of January, I decided to apply for a Qld Smithsonian fellowship based on the quandary of evaluation-particular in public histories (oral histories) and digital storytelling. In July I was awarded the fellowship, so I have tweaked my presentation to talk about what we hope to do with this collaboration, to propel the importance placed on evaluation in public arts programs in Qld and beyond.

Enhancing student success and retention : an institution-wide strategy for peer programs

Higher Education's widening participation agenda prioritises improving access to university for low-SES students. Parallel with these ambitious national participation targets, is the challenge for universities to significantly improve student retention rates; hence, the need to implement strategies aimed to improve the quality of the student learning experience and build a 'sense of belonging'. Within the framework of the First Year Experience Program, Queensland University of Technology has embarked on establishing a whole-of-institution model for peer programs that aims to: 1) improve the student learning experience and outcomes; and, 2) establish quality assured and sustainable programs. This paper reports on the maturation university-wide peer program strategy and considers the challenges of implementing, evaluating and resourcing a sustainable and inclusive approach to peer programs.

Use of hierarchical cluster analysis to assess the representativeness of a baseline groundwater quality monitoring network: comparison of New Zealand’s national and regional groundwater monitoring programs

Baseline monitoring of groundwater quality aims to characterize the ambient condition of the resource and identify spatial or temporal trends. Sites comprising any baseline monitoring network must be selected to provide a representative perspective of groundwater quality across the aquifer(s) of interest. Hierarchical cluster analysis (HCA) has been used as a means of assessing the representativeness of a groundwater quality monitoring network, using example datasets from New Zealand. HCA allows New Zealand's national and regional monitoring networks to be compared in terms of the number of water-quality categories identified in each network, the hydrochemistry at the centroids of these water-quality categories, the proportions of monitoring sites assigned to each water-quality category, and the range of concentrations for each analyte within each water-quality category. Through the HCA approach, the National Groundwater Monitoring Programme (117 sites) is shown to provide a highly representative perspective of groundwater quality across New Zealand, relative to the amalgamated regional monitoring networks operated by 15 different regional authorities (680 sites have sufficient data for inclusion in HCA). This methodology can be applied to evaluate the representativeness of any subset of monitoring sites taken from a larger network.

ACE research vignette 018 : experiments in the MBA classroom : the case of time frames in project teams

This series of research vignettes is aimed at sharing current and interesting research findings from our team of international Entrepeneurship researchers. In this vignette, Dr Rene Bakker considers project team dynamics and how executive education can be enriched by studying them in the classroom.

Researching doctoral pedagogy close up : design and action in two doctoral programs

With growing international interest in diversifying sites for pedagogical work within the doctorate, doctoral programs of different kinds are being developed in different disciplinary, institutional and national settings. However, little is known about how the pedagogical work of these programs is designed and enacted, and with what effects. In this paper, we present two cases of doctoral pedagogical work being undertaken within different disciplinary and institutional settings to describe how learning opportunities were designed and to theorise what it means to be engaged in doing doctoral pedagogy. Starting from the position that working from a design model supports systematic and rigorous documentation and development of pedagogy, we employ the twin concepts of design and action, drawing broadly on rhetorical and ethnomethodological understandings of pedagogy as social action. Of particular interest within the concept of design itself is the concept of enactment, the translation of designs into the practices of doctoral work. Together, the two cases become a resource for ‘slowing down’ and making visible the practices of doctoral pedagogy that often go unrecognised because they appear so ordinary and everyday. This call for examining close-up existing doctoral education practices and relationships is attending to the ‘next challenge for doctoral education’ (Green, 2009).

Articulation in property programs : an international multi-campus tertiary model

This paper will present program developers and institutional administrators with a program delivery model suitable for cross cultural international delivery developing students from industry through to master’s level tertiary qualifications. The model was designed to meet the needs of property professionals from an industry where technical qualifications are the norm and tertiary qualifications are emerging. A further need was to develop and deliver a program that enhanced the University’s current program profile in both the domestic and international arenas. Early identification of international educational partners, industry need and the ability to service the program were vital to the successful development of Master of Property program. The educational foundations of the program rest in educational partners, local tutorial support, international course management, cultural awareness of and in content, online communication fora, with a delivery focus on problem-based learning, self-directed study, teamwork and the development of a global understanding and awareness of the international property markets. In enrolling students from a diverse cultural background with technical qualifications and/or extensive work experience there are a number of educational barriers to be overcome for all students to successfully progress and complete the program. These barriers disappear when the following mechanisms are employed: individual student pathways, tutorial support by qualified peers, enculturation into tertiary practice, assessment tasks that recognise cultural norms and values, and finally that value is placed on the experiential knowledge, cultural practices and belief systems of the students.

Understanding injury-related disability in non-Western societies can contribute to more effective road safety policies and programs

• Road crashes as a cause of disability • Disability in the study of road safety • Thai spinal injury study – Contextual information – beliefs and community – Transport system and hidden safety costs – Cambodia experience – Pakistan fatalism study • Feedback to policies and programs

Investigating knowledge transfer through transnational programs between Indonesian and Australian universities : A conceptual framework

Globalization stimulated demand for transnational higher education. However, little is known about how transnational programs can facilitate knowledge transfer between the partner universities—something that is often implied in the partnership arrangement. For the purpose of this paper transnational programs will be limited to dual degree programs between Indonesian and Australian universities, which, in recent years have been rising. Nevertheless, the discussion and synthesis may have value to other transnational programs. Situating the knowledge transfer in the wider context of globalization of higher education and the current reforms in Indonesian education, the paper acknowledges the tension between the need to generate revenue and the ideals of facilitating knowledge transfer and capacity development for Indonesian universities. Drawing on a detailed review of research findings in the business and education sector literature, this paper presents a conceptual framework that may be used to analyze knowledge transfer between Indonesian and Australian universities. Such investigations delineate the significant drivers underlying transnational programs for supporting knowledge transfer. The proposed framework incorporates the types of knowledge, knowledge transfer mechanisms, and the processes. It also considers how the inter-university antecedents may affect the potential for knowledge transfer between the universities. A discussion of how the framework may be used to implemented knowledge transfer concludes this paper.