Challenges and research directions for heterogeneous cyber–physical system based on IEC 61850: Vulnerabilities,security requirements,and security architecture

IEC 61850, an international standard for communication networks, is becoming prevalent in the cyber–physical system (CPS) environment, especially with regard to the electrical grid. Recently, since cyber threats in the CPS environment have increased, security matters for individual protocols used in this environment are being discussed at length. However, there have not been many studies on the types of new security vulnerabilities and the security requirements that are required in a heterogeneous protocol environment based on IEC 61850. In this paper, we examine the electrical grid in Korea, and discuss security vulnerabilities, security requirements, and security architectures in such an environment.     

IT security testing,a practical guide — Part 2: The security testing process

IT security testing consists of a number of discrete stages. This article, which is the second in a series of nine on the subject of IT security testing, describes these phases and the documents which should be produced at each stage.     

A systematic review on security in Process-Aware Information Systems – Constitution,challenges, and future directions

ContextSecurity in Process-Aware Information Systems (PAIS) has gained increased attention in current research and practice. However, a common understanding and agreement on security is still missing. In addition, the proliferation of literature makes it cumbersome to overlook and determine state of the art and further to identify research challenges and gaps. In summary, a comprehensive and systematic overview of state of the art in research and practice in the area of security in PAIS is missing.ObjectiveThis paper investigates research on security in PAIS and aims at establishing a common understanding of terminology in this context. Further it investigates which security controls are currently applied in PAIS.MethodA systematic literature review is conducted in order to classify and define security and security controls in PAIS. From initially 424 papers, we selected in total 275 publications that related to security and PAIS between 1993 and 2012. Furthermore, we analyzed and categorized the papers using a systematic mapping approach which resulted into 5 categories and 12 security controls.ResultsIn literature, security in PAIS often centers on specific (security) aspects such as security policies, security requirements, authorization and access control mechanisms, or inter-organizational scenarios. In addition, we identified 12 security controls in the area of security concepts, authorization and access control, applications, verification, and failure handling in PAIS. Based on the results, open research challenges and gaps are identified and discussed with respect to possible solutions.ConclusionThis survey provides a comprehensive review of current security practice in PAIS and shows that security in PAIS is a challenging interdisciplinary research field that assembles research methods and principles from security and PAIS. We show that state of the art provides a rich set of methods such as access control models but still several open research challenges remain.     

Editor’s Note: Special issue on advanced P2P security and privacy

Peer-to-Peer Networking and Applications -     

Student trajectories in high school mathematics: Issues of choice,support, and identity‐making

Abstract

This study explores the range of experiences students have when making two kinds of decisions in relation to high school mathematics courses: what course to take, and how to and how much to apply themselves. Looking at the choices of students about to enter Grade 10, the first decision is their choice of courses. In mathematics, students leaving Grade 9 selected one course (usually), from five possibilities, for their Grade 10 year: an advanced‐placement Honours stream, an academic course with a traditional symbol‐manipulation approach, an academic course with a technology‐based applications approach, a non‐academic mathematics‐for‐citizenship course, and (as an imposed choice) repeating the Grade 9 mathematics course. The second point of decision‐making occurred within their mathematics and science courses—students constantly made choices about how, and how much, to apply themselves to the challenges of succeeding in the courses they had chosen. These students’ course choices, to a considerable extent, conformed to expectations based on the influence of socioeconomic status and prior achievement. Overwhelmingly, students were concerned more in the credentialing value of courses than their educational value or structural nature. Within their courses, most students focused their attention on doing the work rather than the content or the learning process. Students reported being encouraged to do their work by teachers, but could not provide any indication of tactical support with becoming effective learners. The final outcomes of the students’ marks suggest that, in the context of the study, Grade 10 mathematics courses are much more effective as gate‐keeping mechanisms than as opportunities for students to improve and succeed.     

Palladium,fraud, and surviving terrorism — Compsec 2002: Preview of Compsec 2002, 30 Oct–1 Nov,Queen Elizabeth II Conference Centre,Westminster, London,UK

This year’s Compsec addresses security issues brought to the fore by the terrorist attacks and frauds that have rocked the US in the last year. Sarah Hilley, Editor of Computer Fraud & Security, and Network Security previews the event.     

Franck—Condon analyses on a personal computer: Quadratic coupling,linear coupling,and line broadening

A previously reported program for the calculation of vibronically resolved electronic absorption and emission spectra has been substantially improved to allow for the inclusion of up to five linearly coupled vibronic modes, in addition to the original three quadratically coupled modes, and for energy-weighted line broadening.     

Accessibility,usability, and security evaluation of universities’ prospective student web pages: a comparative study of Europe,North America,and Oceania

Universal Access in the Information Society - Universities' prospective student web pages aim to disseminate information about their academic and social opportunities to their stakeholders;...     

The impact of the nature of globally distributed work arrangement on work–life conflict and valence: the Indian GSD professionals’ perspective

While there is a rich literature exploring the various facets of Globally Distributed Systems Development (GSD), there is scant attention given to the human resource issues such as work–life conflict (WLC) faced by GSD professionals and their valence toward globally distributed work. In this study, we attempt to identify factors that influence offshore GSD workers’ WLC and their valence toward globally distributed work. Specifically, we focus on factors related to the nature of the distributed work arrangements as experienced by offshore Indian workers involved in GSD. On the basis of survey data, we find support for the impact of a number of distribution-related variables on WLC and valence.     

Detection of crawler traps: formalization and implementation—defeating protection on internet and on the TOR network

In the domain of web security, websites strive to prevent themselves from data gathering performed by automatic programs called bots. In that way, crawler traps are an efficient brake against this kind of programs. By creating similar pages or random content dynamically, crawler traps give fake information to the bot and resulting by wasting time and resources. Nowadays, there is no available bots able to detect the presence of a crawler trap. Our aim was to find a generic solution to escape any type of crawler trap. Since the random generation is potentially endless, the only way to perform crawler trap detection is on the fly. Using machine learning, it is possible to compute the comparison between datasets of webpages extracted from regular websites from those generated by crawler traps. Since machine learning requires to use distances, we designed our system using information theory. We considered widely used distances compared to a new one designed to take into account heterogeneous data. Indeed, two pages does not have necessary the same words and it is operationally impossible to know all possible words by advance. To solve our problematic, our new distance compares two webpages and the results showed that our distance is more accurate than other tested distances. By extension, we can say that our distance has a much larger potential range than just crawler traps detection. This opens many new possibilities in the scope of data classification and data mining.

     

Examining the factorial structure,measurement invariance and convergent and discriminant validity of a novel self-report measure of work ability: work ability – personal radar

For identification of groups and domains for work ability promotion, brief self-report measure, work ability – personal radar (WA-PR), based on the ‘the house of work ability’ model is presented and psychometrically evaluated in the structural equation framework using data from technological sector (N = 3754). The house model had acceptable fit to the data. In addition, factor loadings in the model were invariant across groups, demonstrating metric invariance of the WA-PR. Scalar invariance of WA-PR was fully demonstrated across men and women, and partially demonstrated across age and employee groups. Comparisons between groups revealed lower levels of health and functional capacity, but higher levels of four other WA-PR dimensions in older employees. In addition, all house structures showed convergence with alternative work ability measures. WA-PR demonstrated potential for effective measurement of multiple work ability dimensions from employees' perspective. It provides means for efficient location of relevant domains and focus groups for work ability promotion.     

Task variation during simulated,repetitive, low-intensity work – influence on manifestation of shoulder muscle fatigue,perceived discomfort and upper-body postures

Work-related musculoskeletal disorders are increasing due to industrialisation of work processes. Task variation has been suggested as potential intervention. The objectives of this study were to investigate, first, the influence of task variation on electromyographic (EMG) manifestations of shoulder muscle fatigue and discomfort; second, noticeable postural shoulder changes over time; third, if the association between task variation and EMG might be biased by postural changes. Outcome parameters were recorded using multichannel EMG, Optotrak and the Borg scale. Fourteen participants performed a one-hour repetitive Pegboard task in one continuous and two interrupted conditions with rest and a pick-and-place task, respectively. Manifestations of shoulder muscle fatigue and discomfort feelings were observed throughout the conditions but these were not significantly influenced by task variation. After correction for joint angles, the relation between task variation and EMG was significantly biased but significant effects of task variation remained absent.

Practitioner Summary: Comparing a one-hour continuous, repetitive Pegboard task with two interrupted conditions revealed no significant influences of task variation. We did observe that the relation between task variation and EMG was biased by posture and therefore advise taking account for posture when investigating manifestations of muscle fatigue in assembly tasks.