Eliciting Security Requirements and Tracing them to Design: An Integration of Common Criteria, Heuristics, and UMLsec

Building secure systems is difficult for many reasons. This paper deals with two of the main challenges: (i) the lack of security expertise in development teams, and (ii) the inadequacy of existing methodologies to support developers who are not security experts. The security standard ISO 14508 (Common Criteria) together with secure design techniques such as UMLsec can provide the security expertise, knowledge, and guidelines that are needed. However, security expertise and guidelines are not stated explicitly in the Common Criteria. They are rather phrased in security domain terminology and difficult to understand for developers. This means that some general security and secure design expertise are required to fully take advantage of the Common Criteria and UMLsec. In addition, there is the problem of tracing security requirements and objectives into solution design,which is needed for proof of requirements fulfilment. This paper describes a security requirements engineering methodology called SecReq. SecReq combines three techniques: the Common Criteria, the heuristic requirements editorHeRA, andUMLsec. SecReqmakes systematic use of the security engineering knowledge contained in the Common Criteria and UMLsec, as well as security-related heuristics in the HeRA tool. The integrated SecReq method supports early detection of security-related issues (HeRA), their systematic refinement guided by the Common Criteria, and the ability to trace security requirements into UML design models. A feedback loop helps reusing experiencewithin SecReq and turns the approach into an iterative process for the secure system life-cycle, also in the presence of system evolution.

Potentially inappropriate prescribing in two populations with differing socio-economic profiles: a cross-sectional database study using the PROMPT criteria

PURPOSE: The purpose of this study is to establish the prevalence of potentially inappropriate prescribing (PIP) in middle-aged adults (45-64 years) in two populations with differing socio-economic profiles, and to investigate factors associated with PIP, using the PROMPT (PRescribing Optimally in Middle-aged People's Treatments) criteria.METHODS: A retrospective cross-sectional study was conducted using 2012 data from the Enhanced Prescribing Database (EPD), covering the full population in Northern Ireland and the Health Services Executive Primary Care Reimbursement Service (HSE-PCRS) database, covering the most socio-economically deprived third of the population in this age group in the Republic of Ireland. The prevalence for each PROMPT criterion and overall prevalence of PIP were calculated. Logistic regression was used to investigate the association between PIP and gender, age group and polypharmacy.RESULTS: This study included 441,925 patients from the EPD and 309,748 patients from the HSE-PCRS database. Polypharmacy was common in both datasets (46.7 % in the HSE-PCRS and 20.3 % in the EPD). The prevalence of PIP was 42.9 % (95%CI 42.7, 43.1) in the HSE-PCRS and 21.1 % (95%CI 21.0, 21.2) in the EPD. Age group, female gender and polypharmacy were significantly associated with PIP in both populations (p < 0.05) and polypharmacy had the strongest association.CONCLUSIONS: PIP is common amongst middle-aged people with the risk of PIP increasing with polypharmacy. Differences in the prevalence of polypharmacy and PIP between the two populations may relate to heterogeneity in healthcare services and different socio-economic profiles, with higher rates of multimorbidity and associated polypharmacy in more deprived groups.

Modeling Habitat Associations for the Common Loon (Gavia immer) at Multiple Scales in Northeastern North America

Common Loon (Gavia immer) is considered an emblematic and ecologically important example of aquatic-dependent wildlife in North America. The northern breeding range of Common Loon has contracted over the last century as a result of habitat degradation from human disturbance and lakeshore development. We focused on the state of New Hampshire, USA, where a long-term monitoring program conducted by the Loon Preservation Committee has been collecting biological data on Common Loon since 1976. The Common Loon population in New Hampshire is distributed throughout the state across a wide range of lake-specific habitats, water quality conditions, and levels of human disturbance. We used a multiscale approach to evaluate the association of Common Loon and breeding habitat within three natural physiographic ecoregions of New Hampshire. These multiple scales reflect Common Loon-specific extents such as territories, home ranges, and lake-landscape influences. We developed ecoregional multiscale models and compared them to single-scale models to evaluate model performance in distinguishing Common Loon breeding habitat. Based on information-theoretic criteria, there is empirical support for both multiscale and single-scale models across all three ecoregions, warranting a model-averaging approach. Our results suggest that the Common Loon responds to both ecological and anthropogenic factors at multiple scales when selecting breeding sites. These multiscale models can be used to identify and prioritize the conservation of preferred nesting habitat for Common Loon populations.

Large-Scale Population Analysis Challenges the Current Criteria for the Molecular Diagnosis of Fascioscapulohumeral Muscular Dystrophy

Facioscapulohumeral muscular dystrophy (FSHD) is a common hereditary myopathy causally linked to reduced numbers (<= 8) of 3.3 kilobase D4Z4 tandem repeats at 4q35. However, because individuals carrying D4Z4-reduced alleles and no FSHD and patients with FSHD and no short allele have been observed, additional markers have been proposed to support an FSHD molecular diagnosis. In particular a reduction in the number of D4Z4 elements combined with the 4A(159/161/168)PAS haplotype (which provides the possibility of expressing DUX4) is currently used as the genetic signature uniquely associated with FSHD. Here, we analyzed these DNA elements in more than 800 Italian and Brazilian samples of normal individuals unrelated to any FSHD patients. We find that 3% of healthy subjects carry alleles with a reduced number (4-8) of D4Z4 repeats on chromosome 4q and that one-third of these alleles, 1.3%, occur in combination with the 4A161PAS haplotype. We also systematically characterized the 4q35 haplotype in 253 unrelated FSHD patients. We find that only 127 of them (50.1%) carry alleles with 1-8 D4Z4 repeats associated with 4A161PAS, whereas the remaining FSHD probands carry different haplotypes or alleles with a greater number of D4Z4 repeats. The present study shows that the current genetic signature of FSHD is a common polymorphism and that only half of FSHD probands carry this molecular signature. Our results suggest that the genetic basis of FSHD, which is remarkably heterogeneous, should be revisited, because this has important implications for genetic counseling and prenatal diagnosis of at-risk families.

Vapor-liquid equilibria using the Gibbs energy and the common tangent plane criterion

Phase thermodynamics is often perceived as a difficult subject that many students never become fully comfortable with. The Gibbsian geometrical framework can help students to gain a better understanding of phase equilibria. An exercise to interpret the vapor-liquid equilibrium of a binary azeotropic mixture, using the equilibrium condition based on the common tangent plane criterion (the Gibbs stability test), is presented in this paper. From a T-composition phase diagram for the mixture, the temperature is set at different values: above, intermediate to, and below the boiling temperatures of the pure components, to intersect different regions of the system. Students prepare an Excel spreadsheet where the Gibbs energy of mixing of the vapor and liquid mixtures are calculated and represented over the whole range of compositions and then, apply the Gibbs stability test to ascertain the aggregation state of the system and to calculate the VL phase equilibrium compositions. Finally, Matlab is used to generate the 3D Gibbs energy of mixing surfaces for both phases over the whole range of temperatures which facilitates the geometrical interpretation of the vapor-liquid equilibrium.

Improved cryptanalysis of the Common Scrambling Algorithm Stream Cipher

This paper provides a fresh analysis of the widely-used Common Scrambling Algorithm Stream Cipher (CSA-SC). Firstly, a new representation of CSA-SC with a state size of only 89 bits is given, a significant reduction from the 103 bit state of a previous CSA-SC representation. Analysis of this 89-bit representation demonstrates that the basis of a previous guess-and-determine attack is flawed. Correcting this flaw increases the complexity of that attack so that it is worse than exhaustive key search. Although that attack is not feasible, the reduced state size of our representation makes it obvious that CSA-SC is vulnerable to several generic attacks, for which feasible parameters are given.

Anti-metabolic effects of Galanthus nivalis agglutinin and wheat germ agglutinin on nymphal stages of the common brown leafhopper using a novel artificial diet system

The common brown leafhopper, Orosius orientalis (Matsumura) (Homoptera: Cicadellidae), previously described as Orosius argentatus (Evans), is an important vector of several viruses and phytoplasmas worldwide. In Australia, phytoplasmas vectored by O. orientalis cause a range of economically important diseases, including legume little leaf (Hutton & Grylls, 1956), tomato big bud (Osmelak, 1986), lucerne witches broom (Helson, 1951), potato purple top wilt (Harding & Teakle, 1985), and Australian lucerne yellows (Pilkington et al., 2004). Orosius orientalis also transmits Tobacco yellow dwarf virus (TYDV; genus Mastrevirus, family Geminiviridae) to beans, causing bean summer death disease (Ballantyne, 1968), and to tobacco, causing tobacco yellow dwarf disease (Hill, 1937, 1941). TYDV has only been recorded in Australia to date. Both diseases result in significant production and quality losses (Ballantyne, 1968; Thomas, 1979; Moran & Rodoni, 1999). Although direct damage caused by leafhopper feeding has been observed, it is relatively minor compared to the losses resulting from disease (P Tr E bicki, unpubl.).

Case studies of statutory interventions into the common law concept of charity

This paper considers four examples of statutory interventions into the common law concept of charity, namely, those of Pennsylvania, Barbados, the definition recommended by the Report of the Inquiry into the Definition of Charities in Australia, and the Recreational Charities legislation of the United Kingdom. It comments on some issues affecting each style of intervention. The paper does not argue against statutory intervention but submits that legislative changes are best made by deeming a particular purpose to be charitable, or not charitable, so that, except to that extent, the common law concept remains intact – this is the approach adopted by the Recreational Charities legislation.

EPG monitoring of the probing behaviour of the common brown leafhopper Orosius orientalis on artificial diet and selected host plants

The common brown leafhopper Orosius orientalis (Hemiptera: Cicadellidae) is a polyphagous vector of a range of economically important pathogens, including phytoplasmas and viruses, which infect a diverse range of crops. Studies on the plant penetration behaviour by O. orientalis were conducted using the electrical penetration graph (EPG) technique to assist in the characterisation of pathogen acquisition and transmission. EPG waveforms representing different probing activities were acquired from adult O. orientalis probing in planta, using two host species, tobacco Nicotiana tabacum and bean Phaseolus vulgaris, and in vitro using a simple sucrose-based artificial diet. Five waveforms (O1–O5) were evident when O. orientalis fed on bean, whereas only four waveforms (O1–O4) and three waveforms (O1–O3) were observed when the leafhopper fed on tobacco and on the artificial diet, respectively. Both the mean duration of each waveform and waveform type differed markedly depending on the food substrate. Waveform O4 was not observed on the artificial diet and occurred relatively rarely on tobacco plants when compared with bean plants. Waveform O5 was only observed with leafhoppers probing on beans. The attributes of the waveforms and comparative analyses with previously published Hemipteran data are presented and discussed, but further characterisation studies will be needed to confirm our suggestions.

The specialist nurse : an investigation of the common and distinct aspects of practice

Over the past decade the discipline of nursing has been reviewing its practice, especially in relation to specialty areas. There has been an appreciation by nursing leaders that specialisation brings with it concerns related to a disuniting effect on the discipline and a fragmentation of nursing's traditional generalist practice. Accompanying these concerns is a debate over what is a specialty and how to define a specialist. This qualitative study drew upon a constructivist methodology, to explore how nurses, working in specialty areas, define and give meaning to their practice. Three groups of nurses (n=20) from the specialty of critical care were interviewed using a focus group technique. The data were analysed to build constructions of specialty practice. A distinct and qualitative difference was recognised in the practice behaviours of nurses working in the specialty area. The qualitatively different practice behaviours have been identified as ‘nursing-in-a-specialty’ and ‘specialist nurse’. Two constructions emerged to differentiate the skill behaviours, these were ‘practice’ and ‘knowledge’. The specialist nurse practices were based on two distinct types of practice, that of ‘discretion’ and ‘incorporation’. ‘Knowledge’ was constructed as a synthesis of propositional and practice knowledge.

Weaknesses in the initialisation process of the Common Scrambling Algorithm Stream Cipher

The Common Scrambling Algorithm Stream Cipher (CSASC) is a shift register based stream cipher designed to encrypt digital video broadcast. CSA-SC produces a pseudo-random binary sequence that is used to mask the contents of the transmission. In this paper, we analyse the initialisation process of the CSA-SC keystream generator and demonstrate weaknesses which lead to state convergence, slid pairs and shifted keystreams. As a result, the cipher may be vulnerable to distinguishing attacks, time-memory-data trade-off attacks or slide attacks.