TCG based approach for secure management of virtualized platforms: state-of-the-art

There is a strong trend shift in the favor of adopting virtualization to get business benefits. The provisioning of virtualized enterprise resources is one kind of many possible scenarios. Where virtualization promises clear advantages it also poses new security challenges which need to be addressed to gain stakeholders confidence in the dynamics of new environment. One important facet of these challenges is establishing 'Trust' which is a basic primitive for any viable business model. The Trusted computing group (TCG) offers technologies and mechanisms required to establish this trust in the target platforms. Moreover, TCG technologies enable protecting of sensitive data in rest and transit. This report explores the applicability of relevant TCG concepts to virtualize enterprise resources securely for provisioning, establish trust in the target platforms and securely manage these virtualized Trusted Platforms

Final project report: EEC 2092/91 (ORGANIC) Revision

This report summarises the findings of the project that have been presented in a number of separate reports and publications. In the Chapters 2 to 5 the approach, results and conclusions of the project are summarised, following the structure of the different work packages. Chapter 2 summarises the work on ethical values of organic agriculture. Chapter 3 looks at the differences in the implementation of Regulation (EEC) 2092/91 across Europe and compares the European Regulation with international standards. Chapters 4 and 5 summarise the findings that relate to reducing the dependency on non-organic inputs in the case of feed and seed. The final Chapter 6 consolidates the recommendations of the whole project arising from the various different work packages in one place. Recommendations are aimed in particular at the second stage of the ongoing revision process of the European Regulation, the transfer of the detailed rules from the Annexes of the Regulation (EEC) 2092/91 that is expected to start after the completion of the project. Further recommendations for standard setting bodies, regulators and research recommendations are also presented. The overall objective of the project was to provide recommendations for the revision and further development of the Regulation (EEC) 2092/91 and other standards for organic agriculture, broken down into a number of specific objectives that resulted in 12 seperate reports. The basic ethical values and value differences of organic agriculture in Europe was identified through stakeholder consultation (D 2.1) and through literature as part of developing a procedure for balancing and integrating the basic values in developments of EU regulation (D 2.3). Organic standards from national and private organisations in Europe were compared with the EU regulation with help of database (www.organicrules.org) and differences were analysed to give recommendations on further harmonisation of the EU regulation (D 3.2). The knowledge on how to achieve 100 % organic rations in diets for livestock was expanded through a meta-analysis of literature and an overview of the current situation to characterise the availability of protein sources for 100% organic diets for pigs and poultry was produced (D 4.1 part 1 and 2). Criteria for use of organic inputs, evaluation criteria for Annex II C: Feed materials and Annex II D: Dietary supplements of Regulation (EEC) 2092/91 were developed (D. 4.2). A guide for operators was developed (D 4.3). The knowledge on how to reduce the use of non-organic seed and vegetative propagation materials was improved through reports on seed borne diseases in organic seed and propagation material (D 5.1), on the importance of quality characterising in organic seed and propagation material (D 5.2) and analysis of national derogation regimes (D 5.3). The project produced 12 reports, 7 scientific publications in peer-reviewed journals, and a project web-page at www.organic-revision.org where all reports and further documents are available. It organised 3 workshops with stakeholders and had ongoing communication with the Unit on Organic Farming in DG Agriculture responsible for the Organic Regulation. Members of the team produced in total more than 250 dissemination items

The new import regulation; More reliability for imported organic products? in The New EU Regulation for organic food and farming: (EC) No 834/2007

The European market for organic products is growing at a dynamic pace. Increasingly, processing and marketing companies are entering this market, which has a very promising future. However, organic farm production at the inter-European level has not increased at the same rate as the market for organic products

Balancing and integrating basic values in the development of organic regulations and standards: proposal for a procedure using case studies of conflicting areas

The basic aim of the report is to develop a procedure for the integration of the ethical value base of organic farming into standards and regulations. For this it is necessary to identify the core ethical value of organic production, consider their coherence and relate them to existing practice of organic food and farming. Ethical values are per se in need of interpretation. It is therefore also necessary to consider the process of decision-making, when aiming to achieve a coherent integration of such values in the structure of a standard or regulation. In line with the European Action Plan for organic food and farming from 2004 the Project EEC 2092/91 (Organic) Revision supports the idea that delegating a larger role to values and basic principles will help to harmonise the rules, provide room for flexibility in implementation and to simplify the European Regulation for organic production. It is important to include basic values in standards and regulations, because organic farming is value based and all actors/stakeholders have value expectations, including consumers who the regulation wants to protect. Standards and regulations form the basis of a virtual contract between the consumer and the producers. By following the practices set out in the standards, producers give a promise to the consumer to deliver on additional ethical values, beyond the legal minimum standards for conventional agriculture and food. The growing and globalised organic market and the involvement of large companies have resulted in renewed interest in the values and principles of organic farming. There has been concern that the organic food and farming sector is becoming more conventionalised, and has lost touch with its basic values. Thus it will no longer function effectively as a real alternative to general agriculture for consumers, producers and also for policy makers. The report analyses what core ethical value are associated with organic agriculture and should therefore be considered for inclusion in a regulation. This value base is contrasted with the existing Regulation (EEC) 2092/91 and with examples of current practice of organic agriculture in Europe. The implications of including ethical values in the structure of a regulation for decisionmaking are considered. Following on from the European Action Plan a process of total revision of the EU regulation on organic production is underway. A new European Regulation for organic production was adopted by the European Council of Ministers in June 2006 and will come into force in Jan 2009. The text of the near final proposal from December 2006 has been considered in several sections of the report. The report finishes with some conclusions and recommendations for the EU Commission and other standard setting bodies regarding the choice and roles of values in organic standard, the rules for decision-making processes in relation to integrating values, and regarding the ongoing revision of the organic regulation in Europe

State of Alaska Election Security Project Phase 2 Report

A laska’s election system is among the most secure in the country, and it has a number of safeguards other states are now adopting. But the technology Alaska uses to record and count votes could be improved— and the state’s huge size, limited road system, and scattered communities also create special challenges for insuring the integrity of the vote. In this second phase of an ongoing study of Alaska’s election security, we recommend ways of strengthening the system—not only the technology but also the election procedures. The lieutenant governor and the Division of Elections asked the University of Alaska Anchorage to do this evaluation, which began in September 2007.Lieutenant Governor Sean Parnell. State of Alaska Division of Elections.List of Appendices / Glossary / Study Team / Acknowledgments / Introduction / Summary of Recommendations / Part 1 Defense in Depth / Part 2 Fortification of Systems / Part 3 Confidence in Outcomes / Conclusions / Proposed Statement of Work for Phase 3: Implementation / Reference

Reflections on security options for the real-time transport protocol framework

The Real-time Transport Protocol (RTP) supports a range of video conferencing, telephony, and streaming video ap- plications, but offers few native security features. We discuss the problem of securing RTP, considering the range of applications. We outline why this makes RTP a difficult protocol to secure, and describe the approach we have recently proposed in the IETF to provide security for RTP applications. This approach treats RTP as a framework with a set of extensible security building blocks, and prescribes mandatory-to-implement security at the level of different application classes, rather than at the level of the media transport protocol

The exclusion of improperly obtained evidence in Greece: Putting constitutional rights first

Copyright @ 2007 Vathek PublishingIn contrast with England and Wales, where there is a discretion to exclude improperly obtained evidence, exclusion in Greece is automatic. Article 177 para. 2 of the Code of Penal Procedure mandates that evidence obtained by the commission of criminal offences is not taken into consideration. In addition, article 19 para. 3 of the Constitution prohibits the use of evidence obtained in violation of the right to privacy. Inspired by the rigidity of these exclusionary rules, the rights-centred approach that they reflect and the context of a constitutional criminal procedure within which they apply, this article sheds light on the protection of constitutional rights as a rationale for the exclusion of improperly obtained evidence. It does so against the background of the reliability-centred exclusionary doctrine in England

Smart Ticket Protection: An Architecture for Cyber-Protecting Physical Tickets Using Digitally Signed Random Pattern Markers

In order to counter forgeries of tickets for public transport or mass events, a method to validate them, using printed unique random pattern markers was developed. These markers themselves are unforgeable by their physically random distribution. To assure their authenticity, however, they have to be cryptographically protected and equipped with an environment for successful validation, combining physical and cyber security protection. This paper describes an architecture for cryptographically protecting these markers, which are stored in Aztec codes on physical tickets, in order to assure that only an authorized printer can generate a valid Aztec code of such a pattern, thus providing forge protection in combination with the randomness and uniqueness of the pattern. Nevertheless, the choice of the signature algorithm is heavily constrained by the sizes of the pattern, ticket provider data, metadata and the signature confronted by the data volume the code hold. Therefore, this paper also defines an example for a signature layout for the proposed architecture. This allows for a lightweight ticket validation system that is both physically and cryptographically secured to form a smart solution for mass access verification for both shorter to longer periods at relatively low cost.Comment: 4 pages, 2 figure