Um serviço de certificação digital para plataformas de middleware

Nowadays due to the security vulnerability of distributed systems, it is needed mechanisms to guarantee the security requirements of distributed objects communications. Middleware Platforms component integration platforms provide security functions that typically offer services for auditing, for guarantee messages protection, authentication, and access control. In order to support these functions, middleware platforms use digital certificates that are provided and managed by external entities. However, most middleware platforms do not define requirements to get, to maintain, to validate and to delegate digital certificates. In addition, most digital certification systems use X.509 certificates that are complex and have a lot of attributes. In order to address these problems, this work proposes a digital certification generic service for middleware platforms. This service provides flexibility via the joint use of public key certificates, to implement the authentication function, and attributes certificates to the authorization function. It also supports delegation. Certificate based access control is transparent for objects. The proposed service defines the digital certificate format, the store and retrieval system, certificate validation and support for delegation. In order to validate the proposed architecture, this work presents the implementation of the digital certification service for the CORBA middleware platform and a case study that illustrates the service functionalities

Estudo relativo à utilização dos Equipamentos de Medida e Precisão (EMP) nas ações de manutenção da frota F-16

Esta dissertação foi realizada, tendo como objecto de estudo a utilização de equipamentos de Medida e Precisão, em diversas áreas da manutenção da Base Aérea Nº 5. Como hipótese de trabalho, no âmbito da dissertação do Mestrado de Engenharia Instrumentação e Metrologia, foi proposta a elaboração de um estudo, tendo em vista, uma melhoria das capacidades da organização demonstrar certos requisitos no âmbito da gestão e controlo de equipamentos de Medida e Precisão. Assim, a metodologia utilizada para a realização desta dissertação, partiu da análise do estado da arte nas normas internacionais, da regulamentação emitida pela Força Aérea Portuguesa e no estudo das práticas em uso na manutenção da Base Aérea Nº 5, assim como, nos atuais meios de execução e controlo dessa gestão num sistema integrado de “gestão de conteúdos”. Foram realizados diversos trabalhos, tendo como objectivo uma melhoria no processo de gestão de Equipamentos de Medida e Precisão, com resultados imediatos, tais como um novo portal de metrologia, e-mail de informação sobre Equipamentos de Medida e Precisão e certificados digitais. Seguidamente, forma apresentados os resultados do estudo e demonstrada a necessidade de implementar um processo de recall, para as acções onde são usados Equipamentos de Medida e precisão. Na dissertação, são utilizadas terminologias aeronáuticas, por as mesmas serem comuns no seio da organização, assim como, consonantes com a prática usual na indústria de manutenção aeronáutica militar no mundo.

Desenvolupament d'un gestor únic de certificats digitals

Aquest projecte s’ha desenvolupat en l’àmbit de la seguretat informàtica i té com a objectiu la creació d’una aplicació que permeti la gestió dels certificats digitals de diferents aplicacions i tecnologies a la vegada i de forma conjunta, estalviant a l’usuari gestionar-los de forma individual. Al mateix temps aquest projecte pretén disminuir la complexitat d’alguns aspectes de la seguretat als que no tots els usuaris dels certificats digitals hi estan familiaritzats.

Analysis and Design of a secure WLAN solution for Cobre Las Cruces

Cobre Las Cruces is a renowned copper mining company located in Sevilla, with unexpected problems in wireless communications that have a direct affectation in production. Therefore, the main goals are to improve the WiFi infrastructure, to secure it and to detect and prevent from attacks and from the installation of rogue (and non-authorized) APs. All of that integrated with the current ICT infrastructure.This project has been divided into four phases, although only two of them have been included into the TFC; they are the analysis of the current situation and the design of a WLAN solution.Once the analysis part was finished, some weaknesses were detected. Subjects such as lack of connectivity and control, ignorance about installed WiFi devices and their localization and state and, by and large, the use of weak security mechanisms were some of the problems found. Additionally, due to the fact that the working area became larger and new WiFi infrastructures were added, the first phase took more time than expected.As a result of the detailed analysis, some goals were defined to solve and it was designed a centralized approach able to cope with them. A solution based on 802.11i and 802.1x protocols, digital certificates, a probe system running as IDS/IPS and ligthweight APs in conjunction with a Wireless LAN Controller are the main features.

Mecanismos de segurança para um sistema cooperativo de armazenamento de arquivos baseado em P2P

Previous works have studied the characteristics and peculiarities of P2P networks, especially security information aspects. Most works, in some way, deal with the sharing of resources and, in particular, the storage of files. This work complements previous studies and adds new definitions relating to this kind of systems. A system for safe storage of files (SAS-P2P) was specified and built, based on P2P technology, using the JXTA platform. This system uses standard X.509 and PKCS # 12 digital certificates, issued and managed by a public key infrastructure, which was also specified and developed based on P2P technology (PKIX-P2P). The information is stored in a special file with XML format which is especially prepared, facilitating handling and interoperability among applications. The intention of developing the SAS-P2P system was to offer a complementary service for Giga Natal network users, through which the participants in this network can collaboratively build a shared storage area, with important security features such as availability, confidentiality, authenticity and fault tolerance. Besides the specification, development of prototypes and testing of the SAS-P2P system, tests of the PKIX-P2P Manager module were also performed, in order to determine its fault tolerance and the effective calculation of the reputation of the certifying authorities participating in the system

Superando os riscos da segurança baseada em perímetro - Uma abordagem com identificação federada através de certificados digitais A3/ICP-Brasil e SAML

The traditional perimeter-based approach for computer network security (the castle and the moat model) hinders the progress of enterprise systems and promotes, both in administrators and users, the delusion that systems are protected. To deal with the new range of threats, a new data-safety oriented paradigm, called de-perimeterisation , began to be studied in the last decade. One of the requirements for the implementation of the de-perimeterised model of security is the definition of a safe and effective mechanism for federated identity. This work seeks to fill this gap by presenting the specification, modelling and implementation of a mechanism for federated identity, based on the combination of SAML and X.509 digital certificates stored in smart-cards, following the A3 standard of ICP-Brasil (Brazilian official certificate authority and PKI)

Context-enhanced authentication for infrastructureless network environments

Infrastructureless networks are becoming more popular with the increased prevalence of wireless networking technology. A significant challenge faced by these infrastructureless networks is that of providing security. In this paper we examine the issue of authentication, a fundamental component of most security approaches, and show how it can be performed despite an absence of trusted infrastructure and limited or no existing trust relationship between network nodes. Our approach enables nodes to authenticate using a combination of contextual information, harvested from the environment, and traditional authentication factors (such as public key cryptography). Underlying our solution is a generic threshold signature scheme that enables distributed generation of digital certificates.

Variables affecting government debt: A comparison of certificates of participation, tax -exempt revenue bonds and tax -exempt general obligation bonds

This dissertation analyzed and compared variables affecting interest rate and yield of certificates of participation, tax-exempt revenue bonds and tax-exempt general obligation bonds. The study employed qualitative and quantitative analysis methods. ^ Qualitative research methods included surveys, interviews and focus groups. The survey solicited debt load information from 67 Florida school districts (21 responded) and addressed the question which districts used certificates of participation and why. Eight individuals with experience dealing with all three debt instruments were interviewed. A follow-up focus group of six school district financial officers gathered additional data. Results from the qualitative methods revealed school districts used certificates of participation based on millage authority amount available relative to overall tax base. Also identified was the belief of a significant difference in certificates of participation costs and the other two debt instrument types. ^ The study's quantitative methods analyzed 1998 and 1999 initial issues of Moody's AAA rated certificates of participation, tax-exempt revenue bonds and tax-exempt general obligation bonds. Through an analysis of covariance (ANCOVA), the study examined interest rates and yields while controlling for the covariates of credit enhancement, issue size, and maturity date. The analysis identified no significant difference between interest rates of certificates of participation and tax-exempt general obligation bonds (p < 0.05). There was a significant difference between interest rates of tax-exempt revenue bonds and tax-exempt general obligation bonds. This study discerned no significant difference between yield on certificates of participation and tax-exempt general obligation bonds. It identified a difference in yield between both certificates of participation and tax-exempt general obligation bonds compared with tax-exempt revenue bonds. ^ The study found COPs to have lesser overall costs than RV bonds. COPs also have a quicker entry into the market resulting in construction cost savings. The study found policy implications such as investment portfolio limitations and public choice issues about using COPs as a mechanism to grow government. ^

[evaluation Of Data On Live Birth Certificates From The Information System On Live Births (sinasc) In Campinas, São Paulo, 2009].

To assess the completeness and reliability of the Information System on Live Births (Sinasc) data. A cross-sectional analysis of the reliability and completeness of Sinasc's data was performed using a sample of Live Birth Certificate (LBC) from 2009, related to births from Campinas, Southeast Brazil. For data analysis, hospitals were grouped according to category of service (Unified National Health System, private or both), 600 LBCs were randomly selected and the data were collected in LBC-copies through mothers and newborns' hospital records and by telephone interviews. The completeness of LBCs was evaluated, calculating the percentage of blank fields, and the LBCs agreement comparing the originals with the copies was evaluated by Kappa and intraclass correlation coefficients. The percentage of completeness of LBCs ranged from 99.8%-100%. For the most items, the agreement was excellent. However, the agreement was acceptable for marital status, maternal education and newborn infants' race/color, low for prenatal visits and presence of birth defects, and very low for the number of deceased children. The results showed that the municipality Sinasc is reliable for most of the studied variables. Investments in training of the professionals are suggested in an attempt to improve system capacity to support planning and implementation of health activities for the benefit of maternal and child population.

Transition From Glass To Digital Slide Microscopy In The Teaching Of Oral Pathology In A Brazilian Dental School.

Several medical and dental schools have described their experience in the transition from conventional to digital microscopy in the teaching of general pathology and histology disciplines; however, this transitional process has scarcely been reported in the teaching of oral pathology. Therefore, the objective of the current study is to report the transition from conventional glass slide to virtual microscopy in oral pathology teaching, a unique experience in Latin America. An Aperio ScanScope® scanner was used to digitalize histological slides used in practical lectures of oral pathology. The challenges and benefits observed by the group of Professors from the Piracicaba Dental School (Brazil) are described and a questionnaire to evaluate the students' compliance to this new methodology was applied. An improvement in the classes was described by the Professors who mainly dealt with questions related to pathological changes instead of technical problems; also, a higher interaction with the students was described. The simplicity of the software used and the high quality of the virtual slides, requiring a smaller time to identify microscopic structures, were considered important for a better teaching process. Virtual microscopy used to teach oral pathology represents a useful educational methodology, with an excellent compliance of the dental students.

Avaliação de técnicas de classificação digital de imagens landsat em diferentes padrões de cobertura da terra em Rondônia

Remotely sensed imagery has been widely used for land use/cover classification thanks to the periodic data acquisition and the widespread use of digital image processing systems offering a wide range of classification algorithms. The aim of this work was to evaluate some of the most commonly used supervised and unsupervised classification algorithms under different landscape patterns found in Rondônia, including (1) areas of mid-size farms, (2) fish-bone settlements and (3) a gradient of forest and Cerrado (Brazilian savannah). Comparison with a reference map based on the kappa statistics resulted in good to superior indicators (best results - K-means: k=0.68; k=0.77; k=0.64 and MaxVer: k=0.71; k=0.89; k=0.70 respectively for three areas mentioned). Results show that choosing a specific algorithm requires to take into account both its capacity to discriminate among various spectral signatures under different landscape patterns as well as a cost/benefit analysis considering the different steps performed by the operator performing a land cover/use map. it is suggested that a more systematic assessment of several options of implementation of a specific project is needed prior to beginning a land use/cover mapping job.

Modelo de inclusão digital para construção do conhecimento em qualidade de vida e atividade fisica

Universidade Estadual de Campinas. Faculdade de Educação Física

Digital subtraction radiographic analysis of the combination of bioabsorbable membrane and bovine morphogenetic protein pool in human periodontal infrabony defects

OBJECTIVES: This study assessed the bone density gain and its relationship with the periodontal clinical parameters in a case series of a regenerative therapy procedure. MATERIAL AND METHODS: Using a split-mouth study design, 10 pairs of infrabony defects from 15 patients were treated with a pool of bovine bone morphogenetic proteins associated with collagen membrane (test sites) or collagen membrane only (control sites). The periodontal healing was clinically and radiographically monitored for six months. Standardized pre-surgical and 6-month postoperative radiographs were digitized for digital subtraction analysis, which showed relative bone density gain in both groups of 0.034 ± 0.423 and 0.105 ± 0.423 in the test and control group, respectively (p>0.05). RESULTS: As regards the area size of bone density change, the influence of the therapy was detected in 2.5 mm² in the test group and 2 mm² in the control group (p>0.05). Additionally, no correlation was observed between the favorable clinical results and the bone density gain measured by digital subtraction radiography (p>0.05). CONCLUSIONS: The findings of this study suggest that the clinical benefit of the regenerative therapy observed did not come with significant bone density gains. Long-term evaluation may lead to a different conclusions.

Evaluation of the maxillary premolar roots dissociation using radiographic holders with conventional and digital radiography

This in vivo study evaluated the dissociation quality of maxillary premolar roots combining variations of vertical and horizontal angulations by using X-ray holders (Rinn -XCP), and made a comparison between two types of intraoral radiography systems - conventional film (Kodak Insight, Rochester, USA) and digital radiography (Kodak RVG 6100, Kodak, Rochester, USA). The study sample was comprised of 20 patients with a total of 20 maxillary premolars that were radiographed, using the paralleling angle technique (GP), with a 20º variation of the horizontal angle (GM) and 25º variation of the horizontal angle combined with 15º vertical angle (GMV). Each image was independently analyzed by two experienced examiners. These examiners assigned a score to the diagnostic capability of root dissociation and the measurement of the distance between the apexes. Statistical data was derived using the Wilcoxon Signed Rank test, Friedman and T test. The means of the measured distances between buccal and lingual root apexes were greater for the GMV, which ranged from 2.3 mm to 3.3 mm. A statistically significant difference was found between GM and GMV when compared to GP with p < 0.01. An established best diagnostic dissociation roots image was found in the GMV. These results support the use of the anterior X-ray holders which offer a better combined deviation (GMV) to dissociate maxillary premolar roots in both radiography systems.