Model-Driven Cyber Range Training: A Cyber Security Assurance Perspective

Security demands are increasing for all types of organisations, due to the ever-closer integration of computing infrastructures and smart devices into all aspects of the organisational operations. Consequently, the need for security-aware employees in every role of an organisation increases in accordance. Cyber Range training emerges as a promising solution, allowing employees to train in both realistic environments and scenarios and gaining hands-on experience in security aspects of varied complexity, depending on their role and level of expertise. To that end, this work introduces a model-driven approach for Cyber Range training that facilitates the generation of tailor-made training scenarios based on a comprehensive model-based description of the organisation and its security posture. Additionally, our approach facilitates the auto- mated deployment of such training environments, tailored to each defined scenario, through simulation and emulation means. To further highlight the usability of the proposed approach, this work also presents scenarios focusing on phishing threats, with increasing level of complexity and difficulty

National Working Conditions Surveys in Europe: A Compilation

[Excerpt] Eurofound’s European Working Conditions Survey (EWCS) has been measuring working conditions across the European Union for the past 20 years. It is a unique instrument for better understanding the quality of work and employment and the factors influencing it. Eurofound is committed to improving further the quality of the EWCS and strengthening its relevance for Eurofound’s tripartite stakeholders. Some of the most important sources of information for the development of the EWCS questionnaire are the national surveys on working conditions. This compilation is a follow-up of a study of working conditions surveys commissioned by Eurofound in 2006 which covered both national and transnational working conditions surveys (Eurofound, 2007). The main goals of this inventory are to: update the background information on existing national working conditions surveys; create a source of basic information from national working conditions surveys related to methodologies, quality control procedures, fieldwork and findings; provide a practical resource for researchers, policymakers, social partners and others with a professional interest in working conditions

Adding X-security to Carrel: security for agent-based healthcare applications

The high growth of Multi-Agent Systems (MAS) in Open Networks with initiatives such as Agentcities1 requires development in many different areas such as scalable and secure agent platforms, location services, directory services, and systems management. In our case we have focused our effort on security for agent systems. The driving force of this paper is provide a practical vision of how security mechanisms could be introduced for multi-agent applications. Our case study for this experiment is Carrel [9]: an Agent-based application in the Organ and Tissue transplant domain. The selection of this application is due to its characteristics as a real scenario and use of high-risk data for example, a study of the 21 most visited health-related web sites on the Internet discovered that personal information provided at many of the sites was being inadvertently leaked for unauthorized persons. These factors indicate to us that Carrel would be a suitable environment in order to test existing security safeguards. Furthermore, we believe that the experience gathered will be useful for other MAS. In order to achieve our purpose we describe the design, architecture and implementation of security elements on MAS for the Carrel System.Postprint (published version

\ud Tanzania Health Insurance Regulatory Framework Review\ud

Make sure that current policy objectives – achieving universal coverage, social health protection, good governance and cost-containment – are reflected in the relevant legislative documents, and provide the requisite legal tools, reflecting the chosen policy options and the institutional consequences of those options. Consider reducing the fragmentation of the health financing legislation which reflects the current fragmentation in health financing and in governance and oversight of the health financing and insurance systems. Develop an explicit policy on competition in health financing to close the current gaps in legislation and to prevent the possibly negative side effects for Tanzania citizens of such competition in the event that the Government of Tanzania (GOT) opts for a competition-based model of health financing. The model ultimately chosen will have consequences not only for health financing practise, but also for the relevant legislation. Consider the establishment of an independent accreditation body for external assessment and gradual improvement of the quality of care of all health services providers, regardless of their sources of financing. Plug the identified gaps in single enactments which can be done without embarking on any big policy changes. The latter can be included in the development of a planned National Health Financing Strategy. During this development process, it will be possible to focus on specific areas of interest and make detailed recommendations. After national adoption of the strategy, new legislation will have to be drawn up.\ud \u

Beck and beyond: Selling security in the world risk society

©2010 British International Studies AssociationExpanding on the works of Beck and others on the growing business of risk, this article examines the role of the private security industry in the creation, management and perpetuation of the world risk society. It observes that the replacement of the concept of security with risk over the past decades has permitted private firms to identify a growing range of unknown and unknown-unknown dangers which cannot be eliminated, but require permanent risk management. Using the discourse of risk and its strategies of commercialised, individualised and reactive risk management, the private risk industry thus has contributed to the rise of a world risk society in which the demand for security can never be satisfied and guarantees continuous profits

The commodification of security in the risk society

Expanding on the works of Beck and others on the growing business of risk, this paper examines the role of private industry in the creation, management and perpetuation of the world risk society. It observes that the replacement of the concept of security with risk over the past decades has permitted private firms to identify a growing range of unknown and unknown-unknown dangers which cannot be eliminated and require continuous risk management. Using the discourse of risk and its strategies of commercialized, individualized and reactive risk management, the private risk industry has thus contributed to the rise of a world risk society in which the demand for security can never be satisfied and so guarantees continuous profits