Search

The paper introduces an approach to privacy enhancing technologies that sees privacy not merely as an individual right, but as a public good. This understanding of privacy has recently gained ground in the debate on appropriate legal protection for privacy in an online environment. The jurisprudential idea that privacy is a public good and prerequisite for a functioning democracy also entails that its protection should not be left exclusively to the individual whose privacy is infringed. This idea finds its correspondence in our approach to privacy protection through obfuscation, where everybody in a group takes a small privacy risk to protect the anonymity of fellow group members. We show how these ideas can be computationally realised in an Investigative Data Acquisition Platform (IDAP). IDAP is an efficient symmetric Private Information Retrieval (PIR) protocol optimised for the specific purpose of facilitating public authorities’ enquiries for evidence.

This paper proposes a new identity, and its underlying meta-data, model. The approach enables secure spanning of identity meta-data across many boundaries such as health-care, financial and educational institutions, including all others that store and process sensitive personal data. It introduces the new concepts of Compound Personal Record (CPR) and Compound Identifiable Data (CID) ontology, which aim to move toward own your own data model. The CID model ensures: authenticity of identity meta-data; high availability via unified Cloud-hosted XML data structure; and privacy through encryption, obfuscation and anonymity applied to Ontology-based XML distributed content. Additionally CID via XML ontologies is enabled for identity federation. The paper also proposes that access over sensitive data is strictly governed through an access control model with granular policy enforcement on the service side. This includes the involvement of relevant access control model entities which are enabled to authorize an ad-hoc break-glass data access which should give high accountability for data access attempts.

Investigators define invasion of privacy during their operations as collateral damage. Inquiries that require gathering data about potential suspects from third parties, such as banks, Internet Service Providers (ISPs) or employers are likely to impact the relation between the data subject and the data controller. In this research a novel privacy-preserving approach to mitigating collateral damage during the acquisition process is presented and Investigative Data Acquisition Platform (IDAP) is defined. IDAP is an efficient symmetric Private Information Retrieval (PIR) protocol optimised for the specific purpose of facilitating public authorities’ enquiries for evidence. This research introduces a semi-trusted proxy into the PIR process in order to gain the acceptance of the general public for the trap-door based privacy-preserving techniques. Then the dilution factor is defined as a level of anonymity required in a given investigation. Defining this factor allows restricting the number of records processed, and therefore, minimising the processing time while maintaining an appropriate level of privacy. Finally, the technique allowing retrieval of records matching multiple selection criteria is described.

The aim of this paper is to provide profiles for crimes which can be used to model the context for information sharing between the police and community partner organisations. This context can then be integrated with information-sharing syntax used by Single Point of Contact (SPoC) agents to process information sharing requests [1]. The questionnaires attempt to clas-sify crimes into categories, with identify profiles of crime-types, according to the level of in-formation sharing they necessitate between community partner organisations. Crimes are sepa-rated into classifications, which are based on the perceived level of necessary information-exchange among police and community partners. The aim of the questionnaire is to gather academic responses to identify the level of risk in order that it can be defined as risk assess-ment level, which is key to enhancing the public?s reassurance in the police.

Matching what industry wants with what applicants want is a major problem for any IT academic department is matching what the jobs market requires to the types of courses which appeal to applicants. At the current time there is massive demand in the industry for software and embedded engineers, but IT academic departments have generally struggled to recruit candidates to these types of courses. At present courses focused on gaming, computer security, digital forensics, cybercrime, and digital design, are seeing a fast growth in applications. These hotspots, though, can create considerable problems for departments, especially as popular courses are often initially starved in terms teaching resources, because the staff cannot, or do not want to, move quickly enough into the new areas. Overall this tends to be the problem for the head of school who must judge whether something is a short-term ‘flash in the pan’ or a long-term trend. A few good examples of courses which had a peak and then settled down well to good amounts of long-term recruitment have been in software engineering, computer networking, and multimedia, all of which had a significant peak, and then have encountered glitches in recruitment, but have generally settled down to providing solid student recruitment. A major problem is thus in creating courses which are appealing to applicants and any existing student base, but which might not match to the requirements of industry. The way that academia often deals with this is to focus a great deal of attention on the programme title, so that it is attractive to candidates, while also being useful in defining the scope of the programme to recruiters. Buried within the programme, though, are the areas of study which are the key things that industry actually needs. This is why many IT programmes often do not mention the words software development, business studies, project management, and ethics within the programme title, but still teach them. Useful within the title would be things such as media design, digital forensics, and gaming, as these are likely to attract candidates. Employers thus often need to avoid looking at the programme title, and look in more detail at the actual modules which are used in the programme, to see the scope of any software development and business integration. Within many programmes in IT there can be a marginalisation of the subject area due to the demands of students currently on these courses. This has been seen with computer networks, where programmes were created with a wide range of modules, in areas such as business studies and software development, which generally enrich the scope of the programme. Over the year, though, students often demand more modules in their focus, which can be to their disadvantage when they join the jobs market. The push of the major vendors In the IT industry one of the major moves over the last few years has been from vendors such as Cisco Systems, Microsoft and Juniper, providing a wide range of professional certification, intended to match training to the actual needs of industry. Academia then has a difficulty in whether to adopt and integrate the professional certification into their programmes, or to continue to focus on core academic skills development. Applicants, though, are now becoming generally savvy in spotting where this type of infrastructure has been created, which makes programmes which integrate the material more attractive in future job potentials. Thus many programmes now highlight the integration with Microsoft and Cisco Systems, in providing relevant professional skills. A major worry for many though is that academic programmes are far too focused on material produced by the major vendors, which limits the scope of knowledge that students can gain. While there has been a reduction in the focus of vendor derived material on their own product range, there still seems to be a lack of strong academic underpinning in much vendor-produced material. A good academic department will understand the importance of following parts of the vendor certification, but giving a wide coverage of the key academic principles behind any topic. Along with this it is important that academic departments encourage their students into continual professional study, to gain advantage in the jobs market. Differing departmental profiles One thing for sure is that every IT academic department has a different profile in terms of its focus, and it is often this focus which can define how innovative a department is, and how much they need to be. In traditional research areas, there are many distinguished seats of learning, which have long track records for excellence and innovation in research and teaching. Medical and Business Schools, for example, have generally built up their expertise over many decades, and continue to be known for their lead in their domain. Computing and IT, though, is ever-changing, and each department has the opportunity to gain a lead over others by gaining a first-mover advantage. Over the past few decades this has happened with digital electronics, signal processing, microprocessor design, and so on. Each new technology brings opportunities to move and gain an advantage. Often this movement can fit into various profiles: • Old School, Slow Mover. Often a traditional learning institution, which does not require to adopt to new teaching environments and subjects, as it can easily recruit without showing new innovations. Over time it will generally adopt new subject areas depending on their factors such as their research profile. • New School, Fast Mover. This is a department which bases its growth on identifying new and exciting areas, and has key innovators who can move quickly and change their environments and subjects to match. If they move fast enough they can gain a significant lead on the rest of academia, and gain a significant reputation, especially if they can support the development of a research infrastructure with the development of the newly developed teaching area. This profile can be further split into ones which pick the right things, and then move in resources to expand the area, and ones which fail to sustain the investment, and lose out in the long term as the resources do not follow the initial lead. Some new subject areas can be slow burners, where a significant growth in applications is not seen for a year or two, while other can sparkle for a short time, and then fail in the medium term. • Old School, Late Mover. This is a department which generally does not innovate, but watches how other departments are performing in terms of recruitment, and adopts ideas that have been proven to be successful. There is generally less risk, but it can suffer from general down-turns in recruitment in the short-term, as there are no programmes giving a recruitment spike to overcome the general downturn. IT has been shown to be ever-changing, with new technologies springing up on a regular basis. This often leaves great opportunities for first movers, which could prove a winner in gaining a reputation in certain technological areas. The University of Abertay with Computer Games, and the University of Glamorgan with Computer Forensics, are good examples of how leadership can be gained with departments which move quickly and focus their resources into appealing areas. Without a sustained investment in research and knowledge transfer the first mover advantage can often lead to very little overall advantage, but the benefits can be great, in terms of the long-term sustainability of the whole department. Often, subjects which do not recruit well need the new areas to be able to justify their long-term base. Any department needs bright sparks, the people who are willing to move into new areas and take risks. Thus it is likely that new blood needs to be brought in on a regular basis, as departments can often stagnate around their existing expertise, leading to a long-term decline. Generally it is unusual to see new programmes filled with completely new modules. The most common is to see one or two new modules, often in the later years of courses, which start to show some appeal to existing students or to industry. This appeal is then often used to justify the development of a programme of study, in which the department needs to decide whether it can be sustained, given a few years to prove itself. Academia in the UK has often seen the creation of programmes which have failed due to a lack of market demand. A major problem is that it is often difficult to get real-life market assessments, and most departments will typically try an idea, and see if it attracts students. If it does, the resources will generally follow. Cloud-based Teaching A major problem in academia is to try and keep up-to-date with subjects and technologies, so that it often lags industry. The use of virtualised and cloud-based environments, though, provides an excellent opportunity to enhance learning and to provide students with skills which exactly match the requirements of industry, along with integrating with professional certification. At Edinburgh Napier University, a VMware vCenter Cloud infrastructure has been created to teach computer security and digital forensics, where students can learn on an enhanced infrastructure which would not have been possible before the extensive development of virtualised and cloud-based infrastructures. For enhanced methods used within computer security, a private cloud can be used, and for more general teaching, such as in databases and operating systems, a public cloud can be used to support this. This then provides exposure to a wide range of environments which are pre-build, or which are built-up throughout the module, and thus supports the students within a safe environment in which they can learn without any danger, and where errors can be easily undone. The environments can thus be created to use industry-standard tools and infrastructure, and these can be joined together to create collaborative work, along with the continuation of work after the practical lab work has been done. In fact virtualisation offers academia the opportunity to create infrastructures that would be difficult within a real-world, and also match-up with the requirements of professional certification, as illustrated in Figure 1. http://content.yudu.com/Library/A1toxn/VitALMagazineSeptemb/resources/index.htm?referrerUrl=http%3A%2F%2Fwww.yudu.com%2Fitem%2Fdetails%2F394350%2FVitAL-Magazine-September-2011

This paper focuses on the integration of virtualised environments within the teaching of computer security and digital forensics, and includes three case studies. The first case study involves assessing student perception on the usage of VMware Workstation and AWS (Amazon Web Services) for security and digital forensics labs, while the other two present a performance and reflective evaluation of a Cloud-based infrastructure using VMware ESXi. The evaluation for the first case study shows the results of a questionnaire for the integration of VMware Workstation and AWS, and highlights that the virtualised environment seems to engage students more than traditional desktop ones, along with identifying the key areas which seem to be useful, such as for network forensics and in running instances within a sand-boxed environment. The other two case studies show an evaluation of the performance impact of security and digital forensics students using a Cloud-based infrastructure for their labs, and that the developed infrastructure copes well with both scheduled lab-based classes, remote access, and a virtualised environment for courseworks.

Coding for Success was published in 2007 and described how bar coding and similar technologies can be used to improve patient safety, reduce costs and improve efficiency. This review aims to outline progress made since 2007, and was recommended by the Health Select Committee in its 2009 report on Patient Safety.

This paper outlines the usage of AES in Microsoft .NET. It provides a basic overview of the AES method, along with a review of other popular encryption methods and some sample code which can be used to implement AES.

The introduction of Information Governance throughout the NHS in Great Britain from 2004 onwards, saw Pri-mary Care Medicine subject to a regulatory regime aligning current practice with codes, ethics, legislation and standards. However the Information Commissioners Office, as regulator of Healthcare Data Controllers, has issued statu-tory Undertakings to stem the tide of continued leakage of sensitive health data. Drawing on research from America, the issue of IT Security Risk is presented as problematic given the limitations of surveys indentifying industry trends and is viewed beyond the traditional Threat Value Asset Matrix towards a framework incorporating the reasonable man –taking all due care and diligence as is reasonably practicable in the circumstances. Following the identification of major problems across 10% of English general practices in comply-ing with both Confidentiality and Data Protection Assurance, and Information Security Assurance, a national survey of GP Practices was undertaken to investigate security incidents and risk. Contemporaneous to this, information on reported unto-ward security incidents was obtained from the regulator and all Health Boards across Scotland. Together, these results identified actual risk to securing patient data and concerns voiced from within the sector. This may be of relevance to practitioners, managers as well as policy makers particularly where changes to the structure of the NHS are proposed.

This paper outlines the usage of 3DES in Microsoft .NET. It provides a basic overview of the 3-DES method, along with a review of other popular encryption methods and some sample code which can be used to implement 3DES.

This paper argues that despite the wide adoption of Internet technologies in destination marketing, information is still disseminated through printed brochures that have largely remained unchanged and unaffected by the trend towards greater personalisation of service. We argue that innovations in IT such as digital printing, allow for the replacement of the inflexible brochures of the past with dynamic, customised brochures. Such changes allow the Destination Marketing Organisations (DMOs) and other tourism providers to significantly improve the element of personalisation of their products, gain valuable marketing and intelligence data about their customers and substantially reduce their printing and posting costs.

Przyst?pny i praktyczny poradnik dotycz?cy u?ytkowania komputerów, obejmuj?cy szeroki zakres zagadnie? zwi?zanych z przetwarzaniem informacji i transmisj? danych oraz ich kompresj?, przechowywaniem, szyfrowaniem i bezpiecze?stwem, zawieraj?cy tak?e opis protokó?u internetowego, sieci WWW, poczty elektronicznej i multimediów. Samodzielne rozwi?zanie zamieszczonych ?wicze? testowych u?atwi zrozumienie i utrwalenie tre?ci poszczególnych rozdzia?ów.

The second edition of the Handbook of Data Communications and Networks covers many of the key areas in modern communication systems. It is split into several sections, including: Data Communications, Interfaces, Networks, Network Protocols, Networking Elements, Session Protocols, Network Operating Systems.