Methods for conflict resolution in policy-based management systems

While developments in distributed object computing environments, such as the Common Object Request Broker Architecture (CORBA) [17] and the Telecommunication Intelligent Network Architecture (TINA) [16], have enabled interoperability between domains in large open distributed systems, managing the resources within such systems has become an increasingly complex task. This challenge has been considered for several years within the distributed systems management research community and policy-based management has recently emerged as a promising solution. Large evolving enterprises present a significant challenge for policy-based management partly due to the requirement to support both mutual transparency and individual autonomy between domains [2], but also because the fluidity and complexity of interactions occurring within such environments requires an ability to cope with the coexistence of multiple, potentially inconsistent policies. This paper discusses the need of providing both dynamic (run-time) and static (compile-time) conflict detection and resolution for policies in such systems and builds on our earlier conflict detection work [7, 8] to introduce the methods for conflict resolution in large open distributed systems.

Modelos de avaliação da qualidade do atendimento na prestação de serviços públicos: aplicação da metodologia de scoping review à tomada de decisão com base na evidência (evidence-based management), na Administração Pública.

Dissertação apresentada como requisito parcial para obtenção do grau de Mestre em Estatística e Gestão de Informação

Scalable model-based configuration management of security services in complex enterprise networks

Security administrators face the challenge of designing, deploying and maintaining a variety of configuration files related to security systems, especially in large-scale networks. These files have heterogeneous syntaxes and follow differing semantic concepts. Nevertheless, they are interdependent due to security services having to cooperate and their configuration to be consistent with each other, so that global security policies are completely and correctly enforced. To tackle this problem, our approach supports a comfortable definition of an abstract high-level security policy and provides an automated derivation of the desired configuration files. It is an extension of policy-based management and policy hierarchies, combining model-based management (MBM) with system modularization. MBM employs an object-oriented model of the managed system to obtain the details needed for automated policy refinement. The modularization into abstract subsystems (ASs) segment the system-and the model-into units which more closely encapsulate related system components and provide focused abstract views. As a result, scalability is achieved and even comprehensive IT systems can be modelled in a unified manner. The associated tool MoBaSeC (Model-Based-Service-Configuration) supports interactive graphical modelling, automated model analysis and policy refinement with the derivation of configuration files. We describe the MBM and AS approaches, outline the tool functions and exemplify their applications and results obtained. Copyright (C) 2010 John Wiley & Sons, Ltd.

Formal validation of automated policy refinement in the management of network security systems

Policy hierarchies and automated policy refinement are powerful approaches to simplify administration of security services in complex network environments. A crucial issue for the practical use of these approaches is to ensure the validity of the policy hierarchy, i.e. since the policy sets for the lower levels are automatically derived from the abstract policies (defined by the modeller), we must be sure that the derived policies uphold the high-level ones. This paper builds upon previous work on Model-based Management, particularly on the Diagram of Abstract Subsystems approach, and goes further to propose a formal validation approach for the policy hierarchies yielded by the automated policy refinement process. We establish general validation conditions for a multi-layered policy model, i.e. necessary and sufficient conditions that a policy hierarchy must satisfy so that the lower-level policy sets are valid refinements of the higher-level policies according to the criteria of consistency and completeness. Relying upon the validation conditions and upon axioms about the model representativeness, two theorems are proved to ensure compliance between the resulting system behaviour and the abstract policies that are modelled.

Coastal Marine Mapping as an Ecosystem Based Management - the case study of the Baixada Santista Region - São Paulo, Brazil

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

El cuadro de mando integral, el activity based costing y la activity based management: un estudio empírico de su integración

La presente comunicación tiene como objetivo analizar la complementariedad y la posibilidad de integración entre las herramientas de gestión Cuadro de Mando Integral (CMI), Activity Based Costing (ABC) y Activity Based management (ABM). Para la realización del estudio empírico hemos recurrido a los datos obtenidos mediante la aplicación de un cuestionario postal a 591 organizaciones públicas (ayuntamientos, hospitales, empresas municipales y empresas intermunicipales) y 549 organizaciones privadas (grandes empresas y pequeñas y medianas empresas) portuguesas, con una tasa de respuesta total del 31,3%. Los resultados obtenidos indican que, contrariamente al registrado en las organizaciones públicas, observamos que un número significativo de organizaciones privadas ya utilizaba los sistemas ABC/ABM antes del CMI y que los han integrado (total o parcialmente) o esperan integrar en el CMI.

El cuadro de mando integral, el activity based costing y la activity based management: un estudio empírico de su integración

Este artículo tiene como objetivo analizar la complementariedad y la posibilidad de integración entre las herramientas de gestión Cuadro de Mando Integral (CMI), Activity Based Costing (ABC) y Activity Based management (ABM). Para la realización del estudio empírico hemos recurrido a los datos obtenidos mediante la aplicación de un cuestionario postal a 591 organizaciones públicas (ayuntamientos, hospitales, empresas municipales y empresas intermunicipales) y 549 organizaciones privadas (grandes empresas y pequeñas y medianas empresas) portuguesas, con una tasa de respuesta total del 31,3%. Los resultados obtenidos indican que, contrariamente al registrado en las organizaciones públicas, observamos que un número significativo de organizaciones privadas ya utilizaba los sistemas ABC/ABM antes del CMI y que los han integrado (total o parcialmente) o esperan integrar en el CMI.

A importância da gestão baseada na criação de valor para o acionista (Value-Based Management): o caso do Grupo Galp Energia

A avaliação de empresas sempre constituiu um tema de elevada reflexão, sendo que vários especialistas tentam encontrar os modelos que melhor se adaptam a situações específicas e para as quais precisam de determinar um valor. No contexto empresarial português começa a ganhar significância a prática da gestão orientada para a criação de valor (Value-Based Management). O conceito de Value-Based Management assistiu a um particular desenvolvimento nos últimos 20 anos como resultado da globalização e desregulamentação dos mercados financeiros, dos avanços nas tecnologias de informação e do aumento da importância dos investidores institucionais. Vários analistas apresentaram evidência de que as empresas que adotam sistemas VBM melhoram o seu desempenho económico em relação a outras de dimensão semelhante no mesmo setor. É neste contexto que o EVA (Economic Value Added) se apresenta como uma métrica de desempenho privilegiada nos processos de controlo das decisões estratégicas tomadas. No presente trabalho pretendemos abordar o conceito da gestão baseada na criação de valor e a sua importância para o acionista, o que implica rever outros modelos de avaliação tradicionais baseados no valor contabilístico. Como métrica de avaliação do desempenho passado da empresa ao nível da criação de valor vamos dar particular importância ao estudo do EVA, fazendo referência à possível correlação entre esta métrica e o MVA (Market Value Added). O objetivo principal é analisar empiricamente a relação do EVA como medida de desempenho associada à criação de valor para os acionistas com a performance da empresa. Com efeito, vamos efetuar um estudo de caso, que vai incidir sobre um grupo empresarial português, referência no seu setor de atividade, o Grupo Galp Energia, cotado na Euronext Lisbon. Pensamos que a crescente prática da gestão baseada na criação de valor nas empresas cotadas em Portugal e a necessidade de aferir os resultados desta, tornam esta investigação pertinente, para além do facto de serem poucos os estudos empíricos à questão da criação de valor e a sua correlação com o valor acrescentado de mercado e com o valor de mercado dos capitais próprios das empresas cotadas em Portugal.

Rapid diagnostic tests for the home-based management of malaria, in a high-transmission area.

Rapid diagnostic tests (RDT) are sometimes recommended to improve the home-based management of malaria. The accuracy of an RDT for the detection of clinical malaria and the presence of malarial parasites has recently been evaluated in a high-transmission area of southern Mali. During the same study, the cost-effectiveness of a 'test-and-treat' strategy for the home-based management of malaria (based on an artemisinin-combination therapy) was compared with that of a 'treat-all' strategy. Overall, 301 patients, of all ages, each of whom had been considered a presumptive case of uncomplicated malaria by a village healthworker, were checked with a commercial RDT (Paracheck-Pf). The sensitivity, specificity, and positive and negative predictive values of this test, compared with the results of microscopy and two different definitions of clinical malaria, were then determined. The RDT was found to be 82.9% sensitive (with a 95% confidence interval of 78.0%-87.1%) and 78.9% (63.9%-89.7%) specific compared with the detection of parasites by microscopy. In the detection of clinical malaria, it was 95.2% (91.3%-97.6%) sensitive and 57.4% (48.2%-66.2%) specific compared with a general practitioner's diagnosis of the disease, and 100.0% (94.5%-100.0%) sensitive but only 30.2% (24.8%-36.2%) specific when compared against the fulfillment of the World Health Organization's (2003) research criteria for uncomplicated malaria. Among children aged 0-5 years, the cost of the 'test-and-treat' strategy, per episode, was about twice that of the 'treat-all' (U.S.$1.0. v. U.S.$0.5). In older subjects, however, the two strategies were equally costly (approximately U.S.$2/episode). In conclusion, for children aged 0-5 years in a high-transmission area of sub-Saharan Africa, use of the RDT was not cost-effective compared with the presumptive treatment of malaria with an ACT. In older patients, use of the RDT did not reduce costs. The question remains whether either of the strategies investigated can be made affordable for the affected population.

Rapid Diagnostic Test-Based Management of Malaria: An Effectiveness Study in Papua New Guinean Infants With Plasmodium falciparum and Plasmodium vivax Malaria.

Background. In malaria-endemic areas it is recommended that febrile children be tested for malaria by rapid diagnostic test (RDT) or blood slide (BS) and receive effective malaria treatment only if results are positive. However, RDTs are known to perform less well for Plasmodium vivax. We evaluated the safety of withholding antimalarial drugs from young Papua New Guinean children with negative RDT results in areas with high levels of both Plasmodium falciparum and P. vivax infections. Methods. longitudinal prospective study of children aged 3-27 months visiting outpatient clinics for fever. RDT was administered at first visit. RDT and microscopy were performed if children returned because of persistent symptoms. Outcomes were rates of reattendance and occurrence of severe illnesses. Results. Of 5670 febrile episodes, 3942 (70%) involved a negative RDT result. In 133 cases (3.4%), the children reattended the clinic within 7 days for fever, of whom 29 (0.7%) were parasitemic by RDT or microscopy. Of children who reattended, 24 (0.7%) presented with a severe illness: 2 had lower respiratory tract infections (LRTIs) with low-density P. vivax on BS; 2 received a diagnosis of P. vivax malaria on the basis of RDT but BSs were negative; 16 had LRTIs; 3 had alternative diagnoses. Of these 24, 22 were cured at day 28. Two children died of illnesses other than malaria and were RDT and BS negative at the initial and subsequent visits. Conclusion. Treatment for malaria based on RDT results is safe and feasible even in infants living in areas with moderate to high endemicity for both P. falciparum and P. vivax infections.