COLLABORATIVE PENETRATION TESTING

Penetrationstests stellen im IT-Sicherheitsmanagement großer Unternehmen einen Fixpunkt bei technischen Audits dar. Die Durchführung eines solchen Audits mit den Mitteln eines realen Angreifers stellt einen besonderen Mehrwert dar, da es eine realistische Einschätzung der aktuellen Sicherheitssituation zulässt. Collaborative Penetration Testing beschreibt die Möglichkeit der effektiveren Durchführung solcher Audits, um mit der Professionalisierung im Cybercrime Bereich Schritt zu halten. Durch Spezialisierung und daraus resultierende Arbeitsteilung wird ein effizienterer Einsatz des vorhandenen Testbudgets erreicht. Vorhandene Vorgehensmodelle können so in ihrer Produktivität gesteigert werden. Unseren Ansatz stellen wir anhand eines Prototyps vor

CollaborCrack: A Collaborative Password Cracking Solution for Windows Penetration Testing

Cybersecurity professionals attempt to crack password hashes during penetration tests to determine if they are strong enough. A password hash is a way to encode a password securely. This paper describes a proof-of-concept program called CollaborCrack, a team-based password cracking solution. CollaborCrack addresses the issues of computational complexity, remote cracking security, duplication of work, and the cost associated with password cracking. To address computational complexity, CollaborCrack enables remote password cracking. Remote cracking requires additional safeguards, which CollaborCrack mitigates by storing sensitive information locally. To reduce the duplication of work, CollaborCrack provides a shared interface designed around collaboration and teamwork. CollaborCrack reduces costs by decreasing the time it takes to crack groups of passwords and the number of password cracking computers needed. CollaborCrack breaks the traditional password cracking process into two parts: a collaboration client and collaboration server. CollaborCrack’s client serves as a shared password cracking interface for collaborating teams. The client organizes notes and facilitates collaboration among team members. CollaborCrack’s server increases password cracking efficiency while eliminating duplication of effort by allowing multiple team members to submit passwords to the same cracking server. If security professionals adopt this proof-of-concept, CollaborCrack could establish a more efficient and collaborative password cracking experience

A Scientific Roadmap for Antibiotic Discovery: A Sustained and Robust Pipeline of New Antibacterial Drugs and Therapies is Critical to Preserve Public Health

In recent decades, the discovery and development of new antibiotics have slowed dramatically as scientific barriers to drug discovery, regulatory challenges, and diminishing returns on investment have led major drug companies to scale back or abandon their antibiotic research. Consequently, antibiotic discovery—which peaked in the 1950s—has dropped precipitously. Of greater concern is the fact that nearly all antibiotics brought to market over the past 30 years have been variations on existing drugs. Every currently available antibiotic is a derivative of a class discovered between the early 1900s and 1984.At the same time, the emergence of antibiotic-resistant pathogens has accelerated, giving rise to life-threatening infections that will not respond to available antibiotic treatment. Inevitably, the more that antibiotics are used, the more that bacteria develop resistance—rendering the drugs less effective and leading public health authorities worldwide to flag antibiotic resistance as an urgent and growing public health threat

Mixed-method study of a conceptual model of evidence-based intervention sustainment across multiple public-sector service settings.

BackgroundThis study examines sustainment of an EBI implemented in 11 United States service systems across two states, and delivered in 87 counties. The aims are to 1) determine the impact of state and county policies and contracting on EBI provision and sustainment; 2) investigate the role of public, private, and academic relationships and collaboration in long-term EBI sustainment; 3) assess organizational and provider factors that affect EBI reach/penetration, fidelity, and organizational sustainment climate; and 4) integrate findings through a collaborative process involving the investigative team, consultants, and system and community-based organization (CBO) stakeholders in order to further develop and refine a conceptual model of sustainment to guide future research and provide a resource for service systems to prepare for sustainment as the ultimate goal of the implementation process.MethodsA mixed-method prospective and retrospective design will be used. Semi-structured individual and group interviews will be used to collect information regarding influences on EBI sustainment including policies, attitudes, and practices; organizational factors and external policies affecting model implementation; involvement of or collaboration with other stakeholders; and outer- and inner-contextual supports that facilitate ongoing EBI sustainment. Document review (e.g., legislation, executive orders, regulations, monitoring data, annual reports, agendas and meeting minutes) will be used to examine the roles of state, county, and local policies in EBI sustainment. Quantitative measures will be collected via administrative data and web surveys to assess EBI reach/penetration, staff turnover, EBI model fidelity, organizational culture and climate, work attitudes, implementation leadership, sustainment climate, attitudes toward EBIs, program sustainment, and level of institutionalization. Hierarchical linear modeling will be used for quantitative analyses. Qualitative analyses will be tailored to each of the qualitative methods (e.g., document review, interviews). Qualitative and quantitative approaches will be integrated through an inclusive process that values stakeholder perspectives.DiscussionThe study of sustainment is critical to capitalizing on and benefiting from the time and fiscal investments in EBI implementation. Sustainment is also critical to realizing broad public health impact of EBI implementation. The present study takes a comprehensive mixed-method approach to understanding sustainment and refining a conceptual model of sustainment

The Informatics Audit - A Collaborative Process

The paper present issues regarding the audit in informatics field, the audit seen as a collaborative process and how the collaborative banking systems are audited. In this paper, the methodology and techniques for an effective audit process are described. There are highlighted some aspects regarding the assessment of collaborative systems and specific flows of informatics audit.Informatics Audit, Collaborative Process, Collaborative System, Methodology, Banking

Small-scale assessment of corrosion-induced damage in hardmetals

In this work, the effect of corrosion-induced damage on the mechanical response of hardmetals was evaluated at small-scale level by means of nanoindentation and nanoscratch. Damage was introduced in a controlled way through immersion in acidic solution. It is found that surface degradation associated with corrosion leads to a strong reduction of hardness and elastic modulus, as compared to non-corroded samples. Similarly, significant differences are observed in nanoscratch response, regarding not only width and depth of tracks but also deformation mechanisms developed as contact load is progressively increased. Damage was already evidenced in corroded surfaces at scratching loads one order of magnitude lower than for virgin specimens. Cracking and fragmentation of individual WC grains, together with chipping of at the track edges were the main deformation and fracture micromechanisms identified. Changes in nanoindentation and nanoscratch response and damage scenario are discussed on the basis of the corrosion-induced changes within the intrinsic microstructural assemblage of hardmetals.Postprint (published version

Purposeful empiricism: how stochastic modeling informs industrial marketing research

It is increasingly recognized that progress can be made in the development of integrated theory for understanding, explaining and better predicting key aspects of buyer–seller relationships and industrial networks by drawing upon non-traditional research perspectives and domains. One such non-traditional research perspective is stochastic modeling which has shown that large scale regularities emerge from the individual interactions between idiosyncratic actors. When these macroscopic patterns repeat across a wide range of firms, industries and business types this commonality suggests directions for further research which we pursue through a differentiated replication of the Dirichlet stochastic model. We demonstrate predictable behavioral patterns of purchase and loyalty in two distinct industrial markets for components used in critical surgical procedures. This differentiated replication supports the argument for the use of stochastic modeling techniques in industrial marketing management, not only as a management tool but also as a lens to inform and focus research towards integrated theories of the evolution of market structure and network relationships