Contextualizing the tensions and weaknesses of information privacy and data breach notification laws

Data breach notification laws have detailed numerous failures relating to the protection of personal information that have blighted both corporate and governmental institutions. There are obvious parallels between data breach notification and information privacy law as they both involve the protection of personal information. However, a closer examination of both laws reveals conceptual differences that give rise to vertical tensions between each law and shared horizontal weaknesses within both laws. Tensions emanate from conflicting approaches to the implementation of information privacy law that results in different regimes and the implementation of different types of protections. Shared weaknesses arise from an overt focus on specified types of personal information which results in ‘one size fits all’ legal remedies. The author contends that a greater contextual approach which promotes the importance of social context is required and highlights the effect that contextualization could have on both laws.

Ceremony analysis : strengths and weaknesses

We investigate known security flaws in the context of security ceremonies to gain an understanding of the ceremony analysis process. The term security ceremonies is used to describe a system of protocols and humans which interact for a specific purpose. Security ceremonies and ceremony analysis is an area of research in its infancy, and we explore the basic principles involved to better understand the issues involved.We analyse three ceremonies, HTTPS, EMV and Opera Mini, and use the information gained from the experience to establish a list of typical flaws in ceremonies. Finally, we use that list to analyse a protocol proven secure for human use. This leads to a realisation of the strengths and weaknesses of ceremony analysis.

Weaknesses in the initialisation process of the Common Scrambling Algorithm Stream Cipher

The Common Scrambling Algorithm Stream Cipher (CSASC) is a shift register based stream cipher designed to encrypt digital video broadcast. CSA-SC produces a pseudo-random binary sequence that is used to mask the contents of the transmission. In this paper, we analyse the initialisation process of the CSA-SC keystream generator and demonstrate weaknesses which lead to state convergence, slid pairs and shifted keystreams. As a result, the cipher may be vulnerable to distinguishing attacks, time-memory-data trade-off attacks or slide attacks.

Strengths and weaknesses analysis of alcohol treatment programs. Report to Austroads (SS1755)

Austroads called for responses to a tender to investigate options for rehabilitation in alcohol interlock programs. Following successful application by the Centre for Accident Research and Road Safety – Queensland (CARRS‐Q), a program of work was developed. The project has four objectives: 1. Develop a matrix outlining existing policies in national and international jurisdictions with respect to treatment and rehabilitation programs and criteria for eligibility for interlock removal; 2. Critically review the available literature with a focus on evaluation outcomes regarding the effectiveness of treatment and rehabilitation programs; 3. Analyse and assess the strengths and weaknesses of the programs/approaches identified; and, 4. Outline options with an evidence base for consideration by licensing authorities...

The ASAS criteria for axial spondyloarthritis: Strengths, weaknesses, and proposals for a way forward

Classification criteria should facilitate selection of similar patients for clinical and epidemiologic studies, therapeutic trials, and research on etiopathogenesis to enable comparison of results across studies from different centers. We critically appraise the validity and performance of the Assessment of SpondyloArthritis international Society (ASAS) classification criteria for axial spondyloarthritis (axSpA). It is still debatable whether all patients fulfilling these criteria should be considered as having true axSpA. Patients with radiographically evident disease by the ASAS criteria are not necessarily identical with ankylosing spondylitis (AS) as classified by the modified New York criteria. The complex multi-arm selection design of the ASAS criteria induces considerable heterogeneity among patients so classified, and applying them in settings with a low prevalence of axial spondyloarthritis (SpA) greatly increases the proportion of subjects falsely classified as suffering from axial SpA. One of the unmet needs in non-radiographic form of axial SpA is to have reliable markers that can identify individuals at risk for progression to AS and thereby facilitate early intervention trials designed to prevent such progression. We suggest needed improvements of the ASAS criteria for axSpA, as all criteria sets should be regarded as dynamic concepts open to modifications or updates as our knowledge advances.

Weaknesses of Margulis and Ramanujan-Margulis low-density parity-check codes

We report weaknesses in two algebraic constructions of low-density parity-check codes based on expander graphs. The Margulis construction gives a code with near-codewords, which cause problems for the sum-product decoder; The Ramanujan-Margulis construction gives a code with low-weight codewords, which produce an error-floor. © 2004 Elsevier B.V.

Weaknesses of margulis and ramanujan-margulis low-density parity-check codes

We report weaknesses in two algebraic constructions of low-density parity-check codes based on expander graphs. The Margulis construction gives a code with near-codewords, which cause problems for the sum-product decoder; The Ramanujan-Margulis construction gives a code with low-weight codewords, which produce an error-floor. ©2003 Published by Elsevier Science B. V.

World meeting on stock assessment of bluefin tunas: strengths and weaknesses

The Inter-American Tropical Tuna Commission (IATTC) hosted a meeting, sponsored jointly by the IATTC and the Australian Fisheries Service, to discuss and report on the strengths and weaknesses of stock assessment techniques used on bluefin tuna stocks in the Pacific, Indian, and Atlantic Oceans and the Mediterranean Sea. The meeting was held in La Jolla, California, on Mat 25-31, 1990.

Community-based aquaculture in India: strengths, weaknesses, opportunities and threats

Community-based aquaculture founded on the principles of common interest groups working together regardless of sex and age has been an effective tool for implementing scientific aquaculture programs in India. Water bodies that do not interset villagers are targeted for use to avoid communal problems. Farmers who share common interests are identified and organized and a team leader chosen among them. An inventory of resources using the SWOT analysis is made. A participatory approach to identify major problems, socioeconomic and biophysical constraints is used and appropriate interventions are planned. This process is then evaluated and the results of the impact assessment are provided to research/extension /policy planners for setting directions and priorities for further improvement. The potential for expanding community aquaculture for generating self-employment and improving food security of the rural poor as well as improving the environmental conditions of the villages in India can be further tapped.

The BRUTUS Automatic Cryptanalytic Framework: Testing CAESAR Authenticated Encryption Candidates for Weaknesses

This report summarizes our results from security analysis covering all 57 competitions for authenticated encryption: security, applicability, and robustness (CAESAR) first-round candidates and over 210 implementations. We have manually identified security issues with three candidates, two of which are more serious, and these ciphers have been withdrawn from the competition. We have developed a testing framework, BRUTUS, to facilitate automatic detection of simple security lapses and susceptible statistical structures across all ciphers. From this testing, we have security usage notes on four submissions and statistical notes on a further four. We highlight that some of the CAESAR algorithms pose an elevated risk if employed in real-life protocols due to a class of adaptive-chosen-plaintext attacks. Although authenticated encryption with associated data are often defined (and are best used) as discrete primitives that authenticate and transmit only complete messages, in practice, these algorithms are easily implemented in a fashion that outputs observable ciphertext data when the algorithm has not received all of the (attacker-controlled) plaintext. For an implementor, this strategy appears to offer seemingly harmless and compliant storage and latency advantages. If the algorithm uses the same state for secret keying information, encryption, and integrity protection, and the internal mixing permutation is not cryptographically strong, an attacker can exploit the ciphertext–plaintext feedback loop to reveal secret state information or even keying material. We conclude that the main advantages of exhaustive, automated cryptanalysis are that it acts as a very necessary sanity check for implementations and gives the cryptanalyst insights that can be used to focus more specific attack methods on given candidates.

Benchmarking or business opportunity: Using milk recording data to expose your clients' weaknesses

Routine milk recording data, often covering many years, are available for approximately half the dairy herds of England and Wales. In addition to milk yield and quality, these data include production events that can be used to derive objective Key Performance Indicators (KPI) describing a herd's fertility and production. Recent developments in information systems give veterinarians and other technical advisers access to these KPIs on-line. In addition to reviewing individual herd performance, advisers can establish local benchmark groups to demonstrate the relative performance of similar herds in the vicinity. The use of existing milk recording data places no additional demands on farmer's time or resources. These developments could also readily be exploited by universities to introduce veterinary undergraduates to the realities of commercial dairy production.

Visuospatial cognition in Williams syndrome: reviewing and accounting for the strengths and weaknesses in performance

Individuals with Williams syndrome typically show relatively poor visuospatial abilities in comparison to stronger verbal skills. However, individuals' level of performance is not consistent across all visuospatial tasks. The studies assessing visuospatial functioning in Williams syndrome are critically reviewed, to provide a clear pattern of the relative difficulty of these tasks. This prompts a possible explanation of the variability in performance seen, which focuses on the processing demands of some of these tasks. Individuals with Williams syndrome show an atypical processing style on tests of construction, which does not affect tests of perception.