Digital Commons Network^™

Edward Donnelly V. Trl Inc

2010 Decisions

USDC for the Middle District of Pennsylvania

Organisational Resilience: A Propositional Study To Understand And Identify The Essential Concepts, Bruce Braes, David Brooks

Australian Security and Intelligence Conference

Increased exposure to turmoil has raised business, social and governmental concerns over the ability of organisations to anticipate and respond positively to disruptions. Organisations are spending increased sums of money to raise levels of security; however, Organisational Resilience is a vague, multidisciplined and diverse philosophy, requiring a multiplicity of skills and knowledge that reaches far beyond security alone. The resilience domain is still developing and expanding; however, early embodiments of Organisational Resilience, originating in the United Kingdom and the United States, were nothing more than a rebranding of business continuity management strategies, put together as a ‘resilience processes’, or ‘resilience …

Assessing Vulnerabilities Of Biometric Readers Using An Applied Defeat Evaluation Methodology, David Brooks

Australian Security and Intelligence Conference

Access control systems using biometric identification readers are becoming common within critical infrastructure and other high security applications. There is a perception that biometric, due to their ability to identify and validate the user, are more secure. However, biometric systems are vulnerable to many categories of attack vectors and there has been restricted research into such defeat vulnerabilities. This study expands on a past article (Brooks, 2009) that presented a defeat evaluation methodology applied to high-security biometric readers. The defeat methodology is represented, but applied to both fingerprint and back-of-hand biometric readers. Defeat evaluation included both physical and technical integrity …

Terrorism In Australia: A Psychometric Study Into The Western Australian Public Perception Of Terrorism, Richard Sargent, David J. Brooks

Australian Security and Intelligence Conference

Terrorism is not a new concept, as historically terrorist organisations have used the threat of violence or actual violence to generate fear in individuals, organisations and governments alike. Fear is a weapon and is used to gain political, ideological or religious objectives. Past terrorist attacks have raised concerns around the world, as governments ensured that their anti-terrorism security strategies are adequate. Domestically, Australia upgraded its capacity to respond to terrorism events through security enhancements across many areas and with new initiatives such as the 2002 public counter terrorism campaign. Nevertheless, there has been restricted research into how terrorist events have …

Vangstad Receives Acuho Support Staff Recognition Award For Upper Midwest Region, University Relations

Campus News Archive

Vangstad emphasizes the team-oriented nature of her work.

Felixia M. Rosales '11 Honored With A Scholarly Excellence In Equity And Diversity Award, University Relations

Campus News Archive

Chancellor Jacqueline Johnson served as speaker for the Universitywide Office of Equity and Diversity awards event.

Australian Critical Infrastructure Protection: A Case Of Two Tales, Matthew Warren, Graeme Pye, William Hutchinson

Australian Information Warfare and Security Conference

The protection of critical infrastructures and the choices made in terms of priorities and cost, all impact upon the planning, precautions and security aspects of protecting these important systems. Often the when choices made is difficult to assess at the time the decision is taken and it is only after an incident that the truth of the choices made become fully evident. The paper focuses on two recent examples of Australian Critical Infrastructure protection and the issues that related to those examples.

Influence Operations: Action And Attitude, William Hutchinson

Australian Information Warfare and Security Conference

This paper investigates the relationships between attitudes, behaviour and influence. The major objective of influence operations is predominantly to exert soft power and in doing this there is an assumption that it will change attitudes. It is assumed that by changing attitudes favourable to the influencer that behaviours will be changed. However, this is a problematic assumption. Influence operations whose messages seem to contradict the real behaviour of the influencer tends to nullify the message; and, in fact, might reinforce the attitudes and behaviours of the foe and begin to alienate friends. Messages should be based on a credible reality; …

Threat Modelling With Stride And Uml, Michael N. Johnstone

Australian Information Security Management Conference

Threat modelling as part of risk analysis is seen as an essential part of secure systems development. Microsoft’s Security Development Lifecycle (SDL) is a well-known software development method that places security at the forefront of product initiation, design and implementation. As part of SDL, threat modelling produces data flow diagrams (DFDs) as key artefacts and uses those diagrams as mappings with STRIDE to identify threats. This paper uses a standard case study to illustrate the effects of using an alternative process model (UML activity diagrams) with STRIDE and suggests that using a more modern process diagram can generate a more …

A Proposed Policy-Based Management Architecture For Wireless Clients Operating In A Heterogeneous Mobile Environment, Mayank Keshariya, Ray Hunt

Australian Information Security Management Conference

The objective of this paper is to provide a managed always best connected service to mobile entities over underlying heterogeneous wireless and mobile platforms while maintaining negotiated security and quality of service (QoS). This paper proposes a new model and its architecture which is based upon Policy-based Management but provides a new framework based on layered-approach for the centralised management of mobile clients. In particular, we propose and implement a new model of a policy-managed mobile client and its architecture to support seamless handoff across multiple access networks. The proposed mobile client supports multi-domain authentication, authorisation and security based on …

Micro-Blogging In The Workplace, Chia Yao Lee, Matthew Warren

Australian Information Security Management Conference

Micro-blogging services such as Twitter, Yammer, Plurk and Google Buzz have generated substantial interest among members of the business community in recent years. Many CEOs, managers and front-line employees have embraced micro-blogs as a tool for interacting with colleagues, employees, customers, suppliers and investors. Micro-blogs are considered a more informal channel than emails and official websites, and thus present a different set of challenges to businesses. As a positional paper, this paper uses a case study of a bogus Twitter account to emphasise security and ethical issues relating to (i) Trust, Accuracy and Authenticity of Information, (ii) Privacy and Confidentiality, …

A Novel Design And Implementation Of Dos-Resistant Authentication And Seamless Handoff Scheme For Enterprise Wlans, Isaac Lee, Ray Hunt

Australian Information Security Management Conference

With the advance of wireless access technologies, the IEEE 802.11 wireless local area network (WLAN) has gained significant increase in popularity and deployment due to the substantially improved transmission rate and decreased deployment costs. However, this same widespread deployment makes WLANs an attractive target for network attacks. Several vulnerabilities have been identified and reported regarding the security of the current 802.11 standards. To address those security weaknesses, IEEE standard committees proposed the 802.11i amendment to enhance WLAN security. The 802.11i standard has demonstrated the capability of providing satisfactory mutual authentication, better data confidentiality, and key management support, however, the design …

An Information Security Governance Framework For Australian Primary Care Health Providers, Donald C. Mcdermid, Rachel J. Mahncke, Patricia A H Williams

Australian Information Security Management Conference

The competitive nature of business and society means that the protection of information, and governance of the information security function, is increasingly important. This paper introduces the notion of a governance framework for information security for health providers. It refines the idea of an IT Balanced Scorecard into a scorecard process for use in governing information security for primary care health providers, where IT and security skills may be limited. The approach amends and justifies the four main elements of the scorecard process. The existence of a governance framework specifically tailored for the needs of primary care practice is a …

Information Leakage Through Online Social Networking: Opening The Doorway For Advanced Persistence Threats, Nurul Nuha Abdul Molok, Shanton Chang, Atif Ahmad

Australian Information Security Management Conference

The explosion of online social networking (OSN) in recent years has caused damages to organisations due to leakage of information by their employees. Employees’ social networking behaviour, whether accidental or intentional, provides an opportunity for advanced persistent threats (APT) attackers to realise their social engineering techniques and undetectable zero-day exploits. APT attackers use a spear-phishing method that targeted on key employees of victim organisations through social media in order to conduct reconnaissance and theft of confidential proprietary information. This conceptual paper posits OSN as the most challenging channel of information leakage and provides an explanation about the underlying factors of …

Yet Another Symbian Vulnerability Update, Nizam Uddin Bhuiyan

Australian Information Security Management Conference

The more the mobile devices are approaching to advance their security, the numbers of vulnerabilities are also becoming more astonishing. The number of mobile phones including smart phones is rising vertically, and so has the amount of malware activity. This report documents the latest threats in Symbian mobile industry and analyses the consequence. In addition, it will suggest the possible solution that may help individuals to protect their device & ultimately maintain the privacy.

Education In The Environment: A Strategy For Continued Interagency Outdoor Education Programming: Quarterly Progress Report: Period Ending November 30, 2010, Margaret N. Rees

Reports (PLI Education)

Highlights of the university’s focused efforts during the past three months include the following:

• Two Families in Nature events were held, benefitting approximately 100 people.
• The Nevada Children’s Outdoor Bill of Rights was officially launched on October 9, 2010.
• A total of 18 people are finishing capstone projects and homework to complete requirements for the Nevada State Certification in Environmental Education and Interpretation.
• Forever Earth was scheduled for 35 days serving 965 people.
• Discover Mojave Outdoor World events were conducted for 253 people.

Education In The Environment: A Strategy For Continued Interagency Outdoor Education Programming: Quarterly Progress Report: Period Ending November 30, 2010, Margaret N. Rees

Reports (PLI Education)

Highlights of the university’s focused efforts during the past three months include the following:

• Two Families in Nature events were held, benefitting approximately 100 people.
• The Nevada Children’s Outdoor Bill of Rights was officially launched on October 9, 2010.
• A total of 18 people are finishing capstone projects and homework to complete requirements for the Nevada State Certification in Environmental Education and Interpretation.
• Forever Earth was scheduled for 35 days serving 965 people.
• Discover Mojave Outdoor World events were conducted for 253 people.

Mustang Daily, November 30, 2010

Cal Poly Student Newspaper

Student newspaper of California Polytechnic State University, San Luis Obispo, CA.

Report: The Illinois State University Faculty-Staff Newsletter, November 30, 2010, Illinois State University

Illinois State University Report (1966-2012)

Illinois State University bi-weekly employee newsletter.

Daily Eastern News: November 30, 2010, Eastern Illinois University

November

No abstract provided.

Systems And Methods For Providing Compact Illumination In Head Mounted Displays, Jannick Rolland, Yonggang Ha, Vesselin Shaoulov

UCF Patents

Disclosed are systems and methods for providing illumination in a head mounted display. In one embodiment a method includes emitting light from a plurality of sources at a plurality of wavelengths and transmitting the light from the plurality of sources to a first device. The method further includes combining the light, utilizing the first device, from the plurality of sources into a combined light signal and creating telecentricity in the combined light signal. The method also includes receiving a telecentric light signal on a display surface. In one embodiment the system includes a light source, a hybrid reflective structure configured …

The Daily Gamecock, Tuesday, November 30, 2010, University Of South Carolina, Office Of Student Media

November

No abstract provided.

Clarion Ledger: Health Care Squeeze Forcing Some Mississippi Kids Out, Admin

University of Mississippi News

No abstract provided.

Market Notice - Expanding Eligible Collateral In The Discount Window Facility (11/30/2010), Bank Of England/Central Bank Of The United Kingdom

Documents

No abstract provided.

Beginning Teachers' Job Satisfaction And Intention To Remain In Teaching: A Comparison Of Traditionally Prepared Teachers And Teachers Prepared By Alternative Methods, Jerome Romell Boyd

Graduate Student Dissertations, Theses, Capstones, and Portfolios

The teaching profession has been concerned within the past several years, with the preparation of traditional and alternative route teachers. Urban districts have been trying to address how effective teachers are in regards to their training and educational preparation.

The purpose of this study was to examine the differences in beginning teachers (those who have taught between one and three years) who chose the traditional route of teacher education and teachers who pursued an alternative route of teacher preparation in terms of educational background. personal characteristics, school characteristics, mentoring experience, and career adaptability and the relationship to job satisfaction and …

A Flexible Context Architecture For A Multi-User Gui, Yue Xu

Theses and Dissertations

This thesis focuses on the design and development of a flexible context architecture for a multi-user GUI that serves several users engaged in collaborative computer-aided applications (CAx). The objective of this thesis is to extend previous research into multi-user GUI's by providing multiple users with a flexible context interface for interaction with other users working on the same part at distributed locations. The investigation will consider how distributed users, through user interfaces, interact to simultaneously build models and how interaction context might be presented to regulate the way they wish to interact. The implementation integrates a Multi-User GUI (MUG) with …

Defining The Security Professional: Definition Through A Body Of Knowledge, Mel Griffiths, David J. Brooks, Jeffrey Corkill

Australian Security and Intelligence Conference

A subject that eludes a consensus definition, security is an amalgam of disciplines that is moving inexorably towards professionalisation. Yet identifying who or what defines a security professional remains as difficult and elusory as a comprehensive definition of security that captures all of its modern facets and many actors. The view of elevating such a discipline as security to the status of a profession provokes polarised opinions. This article reviews the literature, examining what elements identify a security professional and exploring the significant themes and issues. To support these elements, security experts (n=27) were surveyed using a multidimensional scaling technique …

Development And Evaluation Of A Secure Web Gateway Using Existing Icap Open Source Tools, Michael Pearce, Ray Hunt

Australian Information Security Management Conference

This work in progress paper discusses the development and evaluation of an open source secure web gateway. The proof of concept system uses a combination of open source software (including the Greasyspoon ICAP Server, Squid HTTP proxy, and Clam Antivirus) to perform the various security tasks that range from simple (such as passive content insertion) to more advanced (such as active content alteration) by modules installed on the server. After discussing the makeup of the proof of concept system we discuss our evaluation methodology for both effectiveness and performance. The effectiveness was tested using comparative analysis of groups of self-browsing …

Success Of Agile Environment In Complex Projects, Abbass Ghanbary, Julian Day

Australian Information Warfare and Security Conference

This paper discusses the impact of agile methodology in complex and modular interrelated projects based on the authors’ practical experience and observations. With the advancement of Web technologies and complex computer systems, business applications are able to transcend boundaries in order to fully meet business requirements and comply with the legislation, policies and procedures. The success of software development as well as software deployment of these complex applications is dependent upon the employed methodology and project management. This is so because employed methodology plays an important position in capturing and modeling of business requirements and project management helps to ensure …

Investigating Parents' Of Immigrant Origins Perceptions, Expectations And Experiences With American Educational Communities, Mary Jo Palmer

Electronic Theses and Dissertations Archive

The purpose of this qualitative study is to investigate parents of Latino origins' perceptions of educational environments in preschool programs in the US by examining individual experiences, expectations and socio-cultural understanding regarding American educational systems. Thisstudy consist of five female parents of Latino origin with children enrolled in a child care programat a midsouthern US, urban community college. Across the eight-week data collection period, the parents participated in a series of activities to communicate their perceptions and experiences with North American educational institutions. primary methods of collecting data includeda sequence ofinterviews, field observations recorded in a journal, parents' photo representations …