Protection of big data privacy

In recent years, big data have become a hot research topic. The increasing amount of big data also increases the chance of breaching the privacy of individuals. Since big data require high computational power and large storage, distributed systems are used. As multiple parties are involved in these systems, the risk of privacy violation is increased. There have been a number of privacy-preserving mechanisms developed for privacy protection at different stages (e.g., data generation, data storage, and data processing) of a big data life cycle. The goal of this paper is to provide a comprehensive overview of the privacy preservation mechanisms in big data and present the challenges for existing mechanisms. In particular, in this paper, we illustrate the infrastructure of big data and the state-of-the-art privacy-preserving mechanisms in each stage of the big data life cycle. Furthermore, we discuss the challenges and future research directions related to privacy preservation in big data.

Assessing eco-environmental performance of agricultural production in OECD countries : combination of soil surface, soil system and farm gate methods of nutrient auditing

Nitrogen balance is increasingly used as an indicator of the environmental performance of agricultural sector in national, international, and global contexts. There are three main methods of accounting the national nitrogen balance: farm gate, soil surface, and soil system. OECD (2008) recently reported the nitrogen and phosphorus balances for member countries for the 1985 - 2004 period using the soil surface method. The farm gate and soil system methods were also used in some international projects. Some studies have provided the comparison among these methods and the conclusion is mixed. The motivation of this present paper was to combine these three methods to provide a more detailed auditing of the nitrogen balance and flows for national agricultural production. In addition, the present paper also provided a new strategy of using reliable international and national data sources to calculate nitrogen balance using the farm gate method. The empirical study focused on the nitrogen balance of OECD countries for the period from 1985 to 2003. The N surplus sent to the total environment of OECD surged dramatically in early 1980s, gradually decreased during 1990s but exhibited an increasing trends in early 2000s. The overall N efficiency however fluctuated without a clear increasing trend. The eco-environmental ranking shows that Australia and Ireland were the worst while Korea and Greece were the best.

Water Sensitive Urban Design (WSUD) application auditing

Background WSUD implementation in the Gold Coast City Council area commenced more than a decade ago. As a result, Council is expected to be in possession of WSUD assets valued at over tens of million dollars. The Gold Coast City Council is responsible for the maintenance and long-term management of these WSUD assets. Any shortcoming in implementation of best WSUD practices can potentially result in substantial liabilities and ineffective expenditure for the Council in addition to reduced efficiencies and outcomes. This highlights the importance of periodic auditing of WSUD implementation. Project scope The overall study entailed the following tasks: * A state-of-the-art literature review of the conceptual hydraulic and water quality treatment principles, current state of knowledge in relation to industry standards, best practice and identification of knowledge gaps in relation to maintenance and management practices and potential barriers to the implementation of WSUD. * Council stakeholder interviews to understand current practical issues in relation to the implementation of WSUD and the process of WSUD application from development application approval to asset management. * Field auditing of selected WSUD systems for condition assessment and identification of possible strengths and weaknesses in implementation. * Review of the Land Development Guidelines in order to identify any gaps and to propose recommendations for improvement. Conclusions Given below is a consolidated summary of the findings of the study undertaken. State-of-the-art literature review Though the conceptual framework for WSUD implementation is well established, the underlying theoretical knowledge underpinning the treatment processes and maintenance regimes and life cycle costing are still not well understood. Essentially, these are the recurring themes in the literature, namely, the inadequate understanding of treatment processes and lack of guidance to ensure specificity of maintenance regimes and life cycle costing of WSUDs. The fundamental barriers to successful WSUD implementation are: * Lack of knowledge transfer – This essentially relates to the lack of appropriate dissemination of research outcomes and the common absence of protocols for knowledge transfer within the same organisation. * Cultural barriers – These relate to social and institutional factors, including institutional inertia and the lack of clear understanding of the benefits. * Fragmented responsibilities – This results from poor administrative integration within local councils in relation to WSUDs. * Technical barriers – These relate to lack of knowledge on operational and maintenance practices which is compounded by model limitations and the lack of long-term quantitative performance evaluation data. * Lack of engineering standards – Despite the availability of numerous guidelines which are non-enforceable and can sometimes be confusing, there is a need for stringent engineering standards. The knowledge gaps in relation to WSUDs are only closing very slowly. Some of the common knowledge gaps identified in recent publications have been recognised almost a decade ago. The key knowledge gaps identified in the published literature are: * lack of knowledge on operational and maintenance practices; * lack of reliable methodology for identifying life cycle issues including costs; * lack of technical knowledge on system performance; * lack of guidance on retrofitting in existing developments. Based on the review of barriers to WSUD implementation and current knowledge gaps, the following were identified as core areas for further investigation: * performance evaluation of WSUD devices to enhance model development and to assess their viability in the context of environmental, economic and social drivers; establishing realistic life cycle costs to strengthen maintenance and asset management practices; * development of guidelines specific to retrofitting in view of the unique challenges posed by existing urban precincts together with guidance to ensure site specificity; establishment of a process for knowledge translation for enhancing currently available best practice guidelines; * identification of drivers and overcoming of barriers in the areas of institutional fragmentation, knowledge gaps and awareness of WSUD practices. GCCC stakeholder interviews Fourteen staff members involved in WSUD systems management in the Gold Coast City Council, representing four Directorates were interviewed using a standard questionnaire. The primary issues identified by the stakeholders were: * standardisation of WSUD terminology; * clear protocols for safeguarding devices during the construction phase; * engagement of all council stakeholders in the WSUD process from the initial phase; * limitations in the Land Development Guidelines; * ensuring public safety through design; * system siting to avoid conflicts with environmental and public use of open space; * provision of adequate access for maintenance; * integration of social and ecosystem issues to ensure long-term viability of systems in relation to both, vandalism and visual recreation; * lack of performance monitoring and inadequacy of the maintenance budget; * lack of technical training for staff involved in WSUD design approvals and maintenance; incentives for developers for acting responsibly in stormwater management. Field auditing of WSUD systems A representative cross section of WSUD systems in the Gold Coast were audited in the field. The following strengths and weaknesses in WSUD implementation were noted: * The implementation of WSUD systems in the field is not consistent. * The concerns raised by the stakeholders during the interviews in relation to WSUD implementation was validated from the observations from the field auditing, particularly in relation to the following: * safeguarding of devices during the construction phase * public safety * accessibility for maintenance * lack of performance monitoring by Council to assess system performance * inadequate maintenance of existing systems to suit site specific requirements. * A treatment train approach is not being consistently adopted. * Most of the systems audited have satisfactorily catered for public safety. Accessibility for maintenance has been satisfactorily catered for in most of the systems that were audited. * Systems are being commissioned prior to construction activities being substantially completed. * The hydraulic design of most systems appears to be satisfactory. * The design intent of the systems is not always clear. Review of Land Development Guidelines The Land Development Guidelines (TDG) was extensively reviewed and the following primary issues were noted in relation to WSUD implementation: * the LDG appears to have been prepared primarily to provide guidance to developers. It is not clear to what extent the guidelines are applicable to Council staff involved in WSUD maintenance and management; * Section 13 is very voluminous and appears to be a compilation of a series of individual documents resulting in difficulties in locating specific information, a lack of integration and duplication of information; * the LDG has been developed with a primary focus on new urban precinct development and the retrofitting of systems in existing developments has not been specifically discussed; * WSUDs are discussed in two different sections in the LDG and it is not clear which section takes precedence as there are inconsistencies between the two sections; there is inconsistent terminology being used; * there is a need for consolidation of information provided in different sections in the LDG; * there are inconsistencies in the design criteria provided; * there is a need for regular updating of the LDG to ensure that the information provided encompasses the state-of-the-art; * there is limited guidance provided for the preparation of maintenance plans and life cycle costing to assist developers in asset handover and to assist Council staff in assessment. * Based on these observations, eleven recommendations have been provided which are discussed below. Additionally, the stakeholder provided the following specific comments during the interviews in relation to the LDG: * lack of flexibility to cover the different stages of the life cycle of the systems; * no differentiation in projects undertaken by developers and Council; * inadequate information with regards to safety issues such as maximum standing water depth, fencing and safety barriers and public access; * lack of detailed design criteria in relation to Crime Prevention through Environmental Design, safety, amenity, environment, surrounding uses and impacts on surroundings; * inadequate information regarding maintenance requirements specific to the assessment and compliance phases; * recommendations for plantings are based primarily on landscape requirements rather than pollutant uptake capability. Recommendations With regards to the Land Development Guidelines, the following specific recommendations are provided: 1. the relevant sections and their extent of applicability to Council should be clearly identified; 2. integration of the different subsections within Section 13 and re-formatting the document for easy reference; 3. the maintenance guidelines provided in Section 13 should be translated to a maintenance manual for guidance of Council staff; 4. should consider extending the Guidelines to specifically encompass retrofitting of WSUD systems to existing urban precincts; 5. Section 3 needs to be revised to be made consistent with Section 13, to ensure priority for WSUD practices in urban precincts and to move away from conventional stormwater drainage design such as kerb and channelling; 6. it would also be good to specify as to which Section takes predominance in relation to stormwater drainage. It is expected that Section 13 would take predominance over the other sections in the LDG; 7. terminology needs to be made consistent to avoid confusion among developers and Council staff. Water Sensitive Urban Design is the term commonly used in Australia for stormwater quality treatment, rather than Stormwater Quality Improvement Devices. This once again underlines the need for ensuring consistency between Section 3 and Section 13; 8. it would also be good if there is a glossary of commonly used terms in relation to WSUD for use by all stakeholders and which should also be reflected in the LDG; 9. consolidation of all WSUD information into one section should be considered together with appropriate indicators in other LDG Sections regarding the availability of WSUD information. Ensuring consistency in the information provided is implied; 10. Section 13 should be updated at regular intervals to ensure the incorporation of the latest in research outcomes and incorporating criteria and guidance based on the state-of-the-art knowledge. The updating could be undertaken, say, in five year cycles. This would help to overcome the current lack of knowledge transfer; 11. the Council should consider commissioning specialised studies to extend the current knowledge base in relation to WSUD maintenance and life cycle costing. Additionally, Recommendation 10 is also applicable in this instance. The following additional recommendations are made based on the state-of-the-art literature review, stakeholder interviews and field auditing of WSUD systems: 1. Performance monitoring of existing systems to assess improvements to water quality, identify modifications and enhancements to improve performance; 2. Appropriate and monitored maintenance during different phases of development of built assets over time is needed to investigate the most appropriate time/phase of development to commission the final WSUD asset. 3. Undertake focussed investigations in the areas of WSUD maintenance and asset management in order to establish more realistic life cycle costs of systems and maintenance schedules; 4. the engagement of all relevant Council stakeholders from the initial stage of concept planning through to asset handover, and ongoing monitoring. This close engagement of internal stakeholders will assist in building a greater understanding of responsibilities and contribute to overcoming constraints imposed by fragmented responsibilities; 5. the undertaking of a public education program to inform the community of the benefits and ecosystem functions of WSUD systems; 6. technical training to impart state-of-the-art knowledge to staff involved in the approval of designs and maintenance and management of WSUD projects; 7. during the construction phase, it is important to ensure that appropriate measures to safeguard WSUD devices are implemented; 8. risks associated with potential public access to open water zones should be minimised with the application of appropriate safety measures; 9. system siting should ensure that potential conflicts are avoided with respect to public and ecosystem needs; 10. integration of social and ecosystem issues to ensure long-term viability of systems; provide incentives to developers who are proactive and responsible in the area of stormwater management.

HeatWave : a handheld 3D thermography system for energy auditing

Energy auditing is an effective but costly approach for reducing the long-term energy consumption of buildings. When well-executed, energy loss can be quickly identified in the building structure and its subsystems. This then presents opportunities for improving energy efficiency. We present a low-cost, portable technology called "HeatWave" which allows non-experts to generate detailed 3D surface temperature models for energy auditing. This handheld 3D thermography system consists of two commercially available imaging sensors and a set of software algorithms which can be run on a laptop. The 3D model can be visualized in real-time by the operator so that they can monitor their degree of coverage as the sensors are used to capture data. In addition, results can be analyzed offline using the proposed "Spectra" multispectral visualization toolbox. The presence of surface temperature data in the generated 3D model enables the operator to easily identify and measure thermal irregularities such as thermal bridges, insulation leaks, moisture build-up and HVAC faults. Moreover, 3D models generated from subsequent audits of the same environment can be automatically compared to detect temporal changes in conditions and energy use over time.

Principals of audit: Testing, data and ‘implicated advocacy’

Historically, school leaders have occupied a somewhat ambiguous position within networks of power. On the one hand, they appear to be celebrated as what Ball (2003) has termed the ‘new hero of educational reform'; on the other, they are often ‘held to account’ through those same performative processes and technologies. These have become compelling in schools and principals are ‘doubly bound’ through this. Adopting a Foucauldian notion of discursive production, this paper addresses the ways that the discursive ‘field’ of ‘principal’ (within larger regimes of truth such as schools, leadership, quality and efficiency) is produced. It explores how individual principals understand their roles and ethics within those practices of audit emerging in school governance, and how their self-regulation is constituted through NAPLAN – the National Assessment Program, Literacy and Numeracy. A key effect of NAPLAN has been the rise of auditing practices that change how education is valued. Open-ended interviews with 13 primary and secondary school principals from Western Australia, South Australia and New South Wales asked how they perceived NAPLAN's impact on their work, their relationships within their school community and their ethical practice.

SNC / NCRF 24 – Acontecimentos após a data do balanço e suas implicações fiscais e de auditoria

Orientador Prof. Dr. João Domingues Costa

Data-Driven Text Generation using Neural Networks & Provenance is Complicated and Boring — Is there a solution?

Title: Data-Driven Text Generation using Neural Networks Speaker: Pavlos Vougiouklis, University of Southampton Abstract: Recent work on neural networks shows their great potential at tackling a wide variety of Natural Language Processing (NLP) tasks. This talk will focus on the Natural Language Generation (NLG) problem and, more specifically, on the extend to which neural network language models could be employed for context-sensitive and data-driven text generation. In addition, a neural network architecture for response generation in social media along with the training methods that enable it to capture contextual information and effectively participate in public conversations will be discussed. Speaker Bio: Pavlos Vougiouklis obtained his 5-year Diploma in Electrical and Computer Engineering from the Aristotle University of Thessaloniki in 2013. He was awarded an MSc degree in Software Engineering from the University of Southampton in 2014. In 2015, he joined the Web and Internet Science (WAIS) research group of the University of Southampton and he is currently working towards the acquisition of his PhD degree in the field of Neural Network Approaches for Natural Language Processing. Title: Provenance is Complicated and Boring — Is there a solution? Speaker: Darren Richardson, University of Southampton Abstract: Paper trails, auditing, and accountability — arguably not the sexiest terms in computer science. But then you discover that you've possibly been eating horse-meat, and the importance of provenance becomes almost palpable. Having accepted that we should be creating provenance-enabled systems, the challenge of then communicating that provenance to casual users is not trivial: users should not have to have a detailed working knowledge of your system, and they certainly shouldn't be expected to understand the data model. So how, then, do you give users an insight into the provenance, without having to build a bespoke system for each and every different provenance installation? Speaker Bio: Darren is a final year Computer Science PhD student. He completed his undergraduate degree in Electronic Engineering at Southampton in 2012.

Modeling data processing activity to assess the internal control function

This thesis describes research that was conducted into the potential of modeling the activities of the Data Processing Department as an aid to the computer auditor. A methodology is composed to aid in the evaluation of the Internal Controls, particularly the General Controls relative to computer processing. Consisting of three major components, the methodology enables the auditor to model the presumed activities of the Data Processing Department against the actual activities, as recorded on the Operating System Log. The first component of the methodology is the construction and loading of a model of the presumed activities of the Data Processing Department from its verbal, scheduled, and reported activities. The second component is the generation of a description of the actual activities of the Data Processing Department from the information recorded on the Operating System Log. This is effected by reducing the Operating System Log to the format described by the Standard Audit File concept. Finally, the third component in the methodology is the modeling process itself. This is in fact a new analysis technique proposed for use by the EDP auditor. The modeling process is composed of software that compares the model developed and loaded in the first component, with the description of actual activity as collated by the second component. Results from this comparison are then reviewed by the auditor, who determines if they adequately depict the situation, or whether the models description as specified in the first component requires to be altered, and the modeling process re-initiated. In conducting the research, information and data from a production installation was used. Use of the ‘real-world’ input proved both the feasibility of developing a model of the reported activities of the Data Processing Department, and the adequacy of the operating system log as a source of information to report the departments actual activities. Additionally, it enabled the involvement and comment of practicing auditors. The research involved analysis of the effect of EDP on the audit process, structure of the EDP audit process, data reduction, data structures, model formalization, and model processing software. Additionally, the Standard Audit File concept was verified through its use by practising auditors, and expanded by the development of an indexed data structure, which enabled its analysis to be conducted interactively. Results from the trial implementation of the research software and methodology at a production installation confirmed the research hypothesis that the activities of the Data Processing Department could be modelled, and that there are substantial benefits from the EDP auditor in analysing this process. The research in fact provides a new source of information, and develops a new analysis technique for the EDP auditor. It demonstrates the utilization of computer technology to monitor itself for the audit function, and reasserts auditor independence by providing access to technical detail describing the processing activities of the computer.

Data Integration Protocol In Ten-steps (DIPIT) : a new standard for medical researchers

The exponential increase in data, computing power and the availability of readily accessible analytical software has allowed organisations around the world to leverage the benefits of integrating multiple heterogeneous data files for enterprise-level planning and decision making. Benefits from effective data integration to the health and medical research community include more trustworthy research, higher service quality, improved personnel efficiency, reduction of redundant tasks, facilitation of auditing and more timely, relevant and specific information. The costs of poor quality processes elevate the risk of erroneous outcomes, an erosion of confidence in the data and the organisations using these data. To date there are no documented set of standards for best practice integration of heterogeneous data files for research purposes. Therefore, the aim of this paper is to describe a set of clear protocol for data file integration (Data Integration Protocol In Ten-steps; DIPIT) translational to any field of research.

Verifiable auditing for outsourced database in cloud computing

The notion of database outsourcing enables the data owner to delegate the database management to a cloud service provider (CSP) that provides various database services to different users. Recently, plenty of research work has been done on the primitive of outsourced database. However, it seems that no existing solutions can perfectly support the properties of both correctness and completeness for the query results, especially in the case when the dishonest CSP intentionally returns an empty set for the query request of the user. In this paper, we propose a new verifiable auditing scheme for outsourced database, which can simultaneously achieve the correctness and completeness of search results even if the dishonest CSP purposely returns an empty set. Furthermore, we can prove that our construction can achieve the desired security properties even in the encrypted outsourced database. Besides, the proposed scheme can be extended to support the dynamic database setting by incorporating the notion of verifiable database with updates.

EDP auditing : the Illinois experience /

Mode of access: Internet.

Platform Privacy: The Missing Piece of Data Protection Legislation

After years of deliberation, the EU commission sped up the reform process of a common EU digital policy considerably in 2015 by launching the EU digital single market strategy. In particular, two core initiatives of the strategy were agreed upon: General Data Protection Regulation and the Network and Information Security (NIS) Directive law texts. A new initiative was additionally launched addressing the role of online platforms. This paper focuses on the platform privacy rationale behind the data protection legislation, primarily based on the proposal for a new EU wide General Data Protection Regulation. We analyse the legislation rationale from an Information System perspective to understand the role user data plays in creating platforms that we identify as “processing silos”. Generative digital infrastructure theories are used to explain the innovative mechanisms that are thought to govern the notion of digitalization and successful business models that are affected by digitalization. We foresee continued judicial data protection challenges with the now proposed Regulation as the adoption of the “Internet of Things” continues. The findings of this paper illustrate that many of the existing issues can be addressed through legislation from a platform perspective. We conclude by proposing three modifications to the governing rationale, which would not only improve platform privacy for the data subject, but also entrepreneurial efforts in developing intelligent service platforms. The first modification is aimed at improving service differentiation on platforms by lessening the ability of incumbent global actors to lock-in the user base to their service/platform. The second modification posits limiting the current unwanted tracking ability of syndicates, by separation of authentication and data store services from any processing entity. Thirdly, we propose a change in terms of how security and data protection policies are reviewed, suggesting a third party auditing procedure.

RESULTADOS DO 13º CONTECSI USP – CONGRESSO INTERNACIONAL DE GESTÃO DA TECNOLOGIA E SISTEMAS DE INFORMAÇÃO; 36th WCARS – WORLD CONTINUOUS AUDITING AND REPORTING SYSTEMS SYMPOSIUM; 2º TOI ECA USP

In this document, we wish to describe statistics, data and the importance of the 13th CONTECSI – International Conference on Information Systems and Technology Management, which took place in the University of São Paulo, from June 1st through 3rd and was organized by TECSI/EAC/FEA/USP/ECA/POLI. This report presents statistics of the 13th CONTECSI, Goals and Objectives, Program, Plenary Sessions, Doctoral Consortium, Parallel Sessions, Honorable Mentions and Committees. We would like to point out the huge importance of the financial aid given by CAPES, CNPq, FAPESP, as well as the support of FEA USP, POLI USP, ECA USP, ANPAD, AIS, ISACA, UNINOVE, Mackenzie, Universidade do Porto, Rutgers School/USA, São Paulo Convention Bureau and CCINT-FEA-USP.