Security Assurance for Web Device APIs

There are currently proposals for web access to devices. The security threats are obvious. We propose design principles intended to ensure that the user actually controls access, despite potential errors in judgment, tricky web pages, or flaws in browsers

N-Acetyl and Glutamatergic Neurometabolites in Perisylvian Brain Regions of Methamphetamine Users.

Background:Methamphetamine induces neuronal N-acetyl-aspartate synthesis in preclinical studies. In a preliminary human proton magnetic resonance spectroscopic imaging investigation, we also observed that N-acetyl-aspartate+N-acetyl-aspartyl-glutamate in right inferior frontal cortex correlated with years of heavy methamphetamine abuse. In the same brain region, glutamate+glutamine is lower in methamphetamine users than in controls and is negatively correlated with depression. N-acetyl and glutamatergic neurochemistries therefore merit further investigation in methamphetamine abuse and the associated mood symptoms. Methods:Magnetic resonance spectroscopic imaging was used to measure N-acetyl-aspartate+N-acetyl-aspartyl-glutamate and glutamate+glutamine in bilateral inferior frontal cortex and insula, a neighboring perisylvian region affected by methamphetamine, of 45 abstinent methamphetamine-dependent and 45 healthy control participants. Regional neurometabolite levels were tested for group differences and associations with duration of heavy methamphetamine use, depressive symptoms, and state anxiety. Results:In right inferior frontal cortex, N-acetyl-aspartate+N-acetyl-aspartyl-glutamate correlated with years of heavy methamphetamine use (r = +0.45); glutamate+glutamine was lower in methamphetamine users than in controls (9.3%) and correlated negatively with depressive symptoms (r = -0.44). In left insula, N-acetyl-aspartate+N-acetyl-aspartyl-glutamate was 9.1% higher in methamphetamine users than controls. In right insula, glutamate+glutamine was 12.3% lower in methamphetamine users than controls and correlated negatively with depressive symptoms (r = -0.51) and state anxiety (r = -0.47). Conclusions:The inferior frontal cortex and insula show methamphetamine-related abnormalities, consistent with prior observations of increased cortical N-acetyl-aspartate in methamphetamine-exposed animal models and associations between cortical glutamate and mood in human methamphetamine users

Simple-VPN: Simple IPsec Configuration

The IPsec protocol promised easy, ubiquitous encryption. That has never happened. For the most part, IPsec usage is confined to VPNs for road warriors, largely due to needless configuration complexity and incompatible implementations. We have designed a simple VPN configuration language that hides the unwanted complexities. Virtually no options are necessary or possible. The administrator specifies the absolute minimum of information: the authorized hosts, their operating systems, and a little about the network topology; everything else, including certificate generation, is automatic. Our implementation includes a multitarget compiler, which generates implementation-specific configuration files for three different platforms; others are easy to add

Toward Usable Access Control for End-users: A Case Study of Facebook Privacy Settings

Many protection mechanisms in computer security are designed to enforce a configurable policy. The security policy captures high-level goals and intentions, and is managed by a policy author tasked with translating these goals into an implementable policy. In our work, we focus on access control policies where errors in the specified policy can result in the mechanism incorrectly denying a request to access a resource, or incorrectly allowing access to a resource that they should not have access to. Due to the need for correct policies, it is critical that organizations and individuals have usable tools to manage security policies. Policy management encompasses several subtasks including specifying the initial security policy, modifying an existing policy, and comprehending the effective policy. The policy author must understand the configurable options well enough to accurately translate the desired policy into the implemented policy. Specifying correct security policies is known to be a difficult task, and prior work has contributed policy authoring tools that are more usable than the prior art and other work has also shown the importance of the policy author being able to quickly understand the effective policy. Specifying a correct policy is difficult enough for technical users, and now, increasingly, end-users are being asked to make access control decisions in regard to who can access their personal data. We focus on the need for an access control mechanism that is usable for end-users. We investigated end-users who are already managing an access control policy, namely social network site (SNS) users. We first looked at how they manage the access control policy that defines who can access their shared content. We accomplish this by empirically evaluating how Facebook users utilize the available privacy controls to implement an access control policy for their shared content and found that many users have policies are inconsistent with their sharing intentions. Upon discovering that many participants claim they will not take corrective action in response to inconsistencies in their existing settings, we collected quantitative and qualitative data to measure whether SNS users are concerned with the accessibility of their shared content. After confirming that users do in fact care about who accesses their content, we hypothesize that we can increase the correctness of users' SNS privacy settings by introducing contextual information and specific guidance based on their preferences. We found that the combination of viewership feedback, a sequence of direct questions to audit the user's sharing preferences, and specific guidance motivates some users to modify their privacy settings to more closely approximate their desired settings. Our results demonstrate the weaknesses of ACL-based access control mechanisms, and also provide support that it is possible to improve the usability of such mechanisms. We conclude by outlining the implications of our results for the design of a usable access control mechanism for end-users

Source Prefix Filtering in ROFL

Traditional firewalls have the ability to allow or block traffic based on source address as well as destination address and port number. Our original ROFL scheme implements firewalling by layering it on top of routing; however, the original proposal focused just on destination address and port number. Doing route selection based in part on source addresses is a form of policy routing, which has started to receive increased amounts of attention. In this paper, we extend the original ROFL (ROuting as the Firewall Layer) scheme by including source prefix constraints in route announcement. We present algorithms for route propagation and packet forwarding, and demonstrate the correctness of these algorithms using rigorous proofs. The new scheme not only accomplishes the complete set of filtering functionality provided by traditional firewalls, but also introduces a new direction for policy routing

Does private vehicle transport in trauma really save you time and money?

Introduction: Current data suggest trauma patients arriving via private vehicle transport (PVT) have improved outcomes compared to patients arriving via EMS due to quicker hospital arrival. Though some researchers have speculated that this may be due to a quicker arrival to the hospital, arrival by PVT may actually impair resuscitation efforts due to the lack of pre-hospital triage leading to delayed mobilization of teams, patient drop-offs at the wrong location, more frequent transfers to another facility, and the transport of patients who may have otherwise been declared dead on scene. This study hypothesizes PVT actually lengthens time to care, impairs resuscitation efforts, and increases overall costs due to the lack of pre-hospital triage. Methods: This is a single-site retrospective study conducted at an academic, regional, Level 1 Trauma Center in Detroit from 2013-2017. Inclusion criteria were trauma patients presenting to the hospital utilizing PVT that were admitted, died in the emergency department, or transferred out of hospital. Exclusion criteria include patients transferred from outside hospitals. Patients with the same inclusion and exclusion criteria utilizing EMS transportation were the comparison group (N=4997, PVT n=1782). The data were obtained from a trauma registry and chart review. To describe statistical significance (p\u3c0.01), chi-square tests were utilized for nominal data and independent samples t-tests were utilized for continuous data. Results: In total, 36% of trauma patients utilized PVT. Of the 11% of patients were transferred out of the hospital, 60% arrived by PVT. The vast majority (76%) of patients transferred were burn or pediatric patients. The overall rate of DOA was 3%, 89% of which arrived by EMS. There was no significant difference in time from arrival to disposition from the ED overall. However time to disposition was shorter for patients arriving by PVT in patients activated at the highest level and longer for patients who were admitted to the ICU. Cost associated with patients who were transferred out of the hospital and those pronounced DOA are described. Conclusions: Though the hypothesis is supported by the significantly higher proportion of patients who arrived by PVT requiring transfer out of our hospital and associated cost, contrary to the hypothesis there was and no difference with time to disposition overall and a lower proportion of patients who were pronounced DOA. A possible explanation is extensive diagnostic studies and procedures for patients arriving by EMS as previous studies demonstrate these patients are more likely to have poly-trauma, injuries to the head or torso and higher injury severity.https://scholarlycommons.henryford.com/merf2019hvc/1007/thumbnail.jp

Formação Afetiva em Educação Pré-escolar no Chile

El currículum de educación preescolar en Chile propone una educación integral del alumnado, por tanto el currículo de este ciclo educativo contiene diferentes objetivos de aprendizaje afectivo que refieren a las emociones, las actitudes o los intereses del alumnado. Entre los antecedentes teóricos del tema destaca una propuesta basada en la teoría del bienestar subjetivo. Sin embargo, la formación afectiva requiere también ser integrada a la educación moral. Por esa razón la finalidad de este estudio es analizar los objetivos de aprendizaje del ámbito afectivo en el currículo de educación parvularia de Chile en función de la formación moral del alumnado. La metodología responde al enfoque cualitativo, con un diseño de estudio documental, de modo que se analizaron todos los objetivos de aprendizaje del currículo preescolar. Los datos fueron sometidos a un análisis de contenido deductivo-inductivo, con la utilización del programa Atlas.ti versión 7.5. Los resultados indican que existen objetivos de aprendizaje del ámbito afectivo planteados desde una perspectiva abierta y contextualizada que favorecen una comprensión crítica de la afectividad. Así, se plantean aprendizajes coherentes tanto con una educación emocional situada y flexible como con los intereses personales. Desde esta perspectiva se acepta con normalidad el afecto tanto positivo como negativo para el bienestar subjetivo. Pero también existen objetivos que responden a una perspectiva cerrada y estandarizada en la que solo se promueve el afecto positivo para el bienestar subjetivo, desconociendo la función del afecto negativo para el bienestar subjetivo o la posibilidad de percibir afectos diferentes a los que propone el currículum. Finalmente, se concluye que el currículo exige al alumnado preescolar experimentar emociones positivas para el bienestar subjetivo ante ciertos contenidos curriculares, ignorando que en esencia las emociones no se aprenden porque son respuestas ante ciertos aprendizajes de diferentes ámbitos, como el de la formación moral

Quiet in the Operating Room! Team STEPPS and OR Distractions

Background and Objective: From the moment that a patient enters the operating room to the time that they are brought to the post anesthesia care unit, a distraction has the potential to lead to an adverse outcome for the patient. During the critical portions of the surgery, it is even more important for all members of the operating staff to be focused and engaging in safe practices. Distractions in the operating room can hinder safe communication and potentially endanger patient safety. Team training has been shown to both improve team communication and reduce distractions. The objective of this project was using Team STEPPS training to reduce distractions during the critical portions of surgery, defined as the time of anesthesia induction, the time out, and the time of emergence from anesthesiahttps://jdc.jefferson.edu/patientsafetyposters/1060/thumbnail.jp

RUST: A Retargetable Usability Testbed for Website Authentication Technologies

Website authentication technologies attempt to make the identity of a website clear to the user, by supplying information about the identity of the website. In practice however, usability issues can prevent users from correctly identifying the websites they are interacting with. To help identify usability issues we present RUST, a Retargetable USability Testbed for website authentication technologies. RUST is a testbed that consists of a test harness, which provides the ability to easily configure the environment for running usability study sessions, and a usability study design that evaluates usability based on spoofability, learnability, and acceptability. We present data collected by RUST and discuss preliminary results for two authentication technologies, Microsoft CardSpace and Verisign Secure Letterhead. Based on the data collected, we conclude that the testbed is useful for gathering data on a variety of technologies

Formación afectiva en la educación parvularia de Chile

El currículum de educación preescolar en Chile propone una educación integral del alumnado, por tanto el currículo de este ciclo educativo contiene diferentes objetivos de aprendizaje afectivo que refieren a las emociones, las actitudes o los intereses del alumnado. Entre los antecedentes teóricos del tema destaca una propuesta basada en la teoría del bienestar subjetivo. Sin embargo, la formación afectiva requiere también ser integrada a la educación moral. Por esa razón la finalidad de este estudio es analizar los objetivos de aprendizaje del ámbito afectivo en el currículo de educación parvularia de Chile en función de la formación moral del alumnado. La metodología responde al enfoque cualitativo, con un diseño de estudio documental, de modo que se analizaron todos los objetivos de aprendizaje del currículo preescolar. Los datos fueron sometidos a un análisis de contenido deductivo-inductivo, con la utilización del programa Atlas.ti versión 7.5. Los resultados indican que existen objetivos de aprendizaje del ámbito afectivo planteados desde una perspectiva abierta y contextualizada que favorecen una comprensión crítica de la afectividad. Así, se plantean aprendizajes coherentes tanto con una educación emocional situada y flexible como con los intereses personales. Desde esta perspectiva se acepta con normalidad el afecto tanto positivo como negativo para el bienestar subjetivo. Pero también existen objetivos que responden a una perspectiva cerrada y estandarizada en la que solo se promueve el afecto positivo para el bienestar subjetivo, desconociendo la función del afecto negativo para el bienestar subjetivo o la posibilidad de percibir afectos diferentes a los que propone el currículum. Finalmente, se concluye que el currículo exige al alumnado preescolar experimentar emociones positivas para el bienestar subjetivo ante ciertos contenidos curriculares, ignorando que en esencia las emociones no se aprenden porque son respuestas ante ciertos aprendizajes de diferentes ámbitos, como el de la formación moral