Towards operational measures of computer security

Ideally, a measure of the security of a system should capture quantitatively the intuitive notion of ‘the ability of the system to resist attack’. That is, it should be operational, reflecting the degree to which the system can be expected to remain free of security breaches under particular conditions of operation (including attack). Instead, current security levels at best merely reflect the extensiveness of safeguards introduced during the design and development of a system. Whilst we might expect a system developed to a higher level than another to exhibit ‘more secure behaviour’ in operation, this cannot be guaranteed; more particularly, we cannot infer what the actual security behaviour will be from knowledge of such a level. In the paper we discuss similarities between reliability and security with the intention of working towards measures of ‘operational security’ similar to those that we have for reliability of systems. Very informally, these measures could involve expressions such as the rate of occurrence of security breaches (cf rate of occurrence of failures in reliability), or the probability that a specified ‘mission’ can be accomplished without a security breach (cf reliability function). This new approach is based on the analogy between system failure and security breach. A number of other analogies to support this view are introduced. We examine this duality critically, and have identified a number of important open questions that need to be answered before this quantitative approach can be taken further. The work described here is therefore somewhat tentative, and one of our major intentions is to invite discussion about the plausibility and feasibility of this new approach

Therapeutic and educational objectives in robot assisted play for children with autism

“This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. In most cases, these works may not be reposted without the explicit permission of the copyright holder." “Copyright IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.” DOI: 10.1109/ROMAN.2009.5326251This article is a methodological paper that describes the therapeutic and educational objectives that were identified during the design process of a robot aimed at robot assisted play. The work described in this paper is part of the IROMEC project (Interactive Robotic Social Mediators as Companions) that recognizes the important role of play in child development and targets children who are prevented from or inhibited in playing. The project investigates the role of an interactive, autonomous robotic toy in therapy and education for children with special needs. This paper specifically addresses the therapeutic and educational objectives related to children with autism. In recent years, robots have already been used to teach basic social interaction skills to children with autism. The added value of the IROMEC robot is that play scenarios have been developed taking children's specific strengths and needs into consideration and covering a wide range of objectives in children's development areas (sensory, communicational and interaction, motor, cognitive and social and emotional). The paper describes children's developmental areas and illustrates how different experiences and interactions with the IROMEC robot are designed to target objectives in these areas.Final Published versio

Modelling the spatial distribution of DEM Error

Assessment of a DEM’s quality is usually undertaken by deriving a measure of DEM accuracy – how close the DEM’s elevation values are to the true elevation. Measures such as Root Mean Squared Error and standard deviation of the error are frequently used. These measures summarise elevation errors in a DEM as a single value. A more detailed description of DEM accuracy would allow better understanding of DEM quality and the consequent uncertainty associated with using DEMs in analytical applications. The research presented addresses the limitations of using a single root mean squared error (RMSE) value to represent the uncertainty associated with a DEM by developing a new technique for creating a spatially distributed model of DEM quality – an accuracy surface. The technique is based on the hypothesis that the distribution and scale of elevation error within a DEM are at least partly related to morphometric characteristics of the terrain. The technique involves generating a set of terrain parameters to characterise terrain morphometry and developing regression models to define the relationship between DEM error and morphometric character. The regression models form the basis for creating standard deviation surfaces to represent DEM accuracy. The hypothesis is shown to be true and reliable accuracy surfaces are successfully created. These accuracy surfaces provide more detailed information about DEM accuracy than a single global estimate of RMSE

Results from two years of ozone data taken with a new, ground-based microwave instrument: An overview

An overview of two years of data obtained with a ground-based microwave instrument is given. Intercomparisons with data obtained by the co-located JPL lidar and by SAGE 2 during near overpasses of the site are discussed, as are comparisons with mesospheric data taken earlier by SME and LIMS. Observations of diurnal variations of mesospheric ozone are shown

Responsibility modelling for civil emergency planning

This paper presents a new approach to analysing and understanding civil emergency planning based on the notion of responsibility modelling combined with HAZOPS-style analysis of information requirements. Our goal is to represent complex contingency plans so that they can be more readily understood, so that inconsistencies can be highlighted and vulnerabilities discovered. In this paper, we outline the framework for contingency planning in the United Kingdom and introduce the notion of responsibility models as a means of representing the key features of contingency plans. Using a case study of a flooding emergency, we illustrate our approach to responsibility modelling and suggest how it adds value to current textual contingency plans

The ATLAS3D project - XXV: Two-dimensional kinematic analysis of simulated galaxies and the cosmological origin of fast and slow rotators

We present a detailed two-dimensional stellar dynamical analysis of as ample of 44 cosmological hydrodynamical simulations of individual central galaxies with stellar masses of 2 x 1010Msun ∼≤ Mstar ∼≤ 6x 1011Msun. Kinematic maps of the stellar line-of-sight velocity, velocity dispersion, and higher-order Gauss-Hermite moments h3 and h4 are constructed for each central galaxy and for the most massive satellites. The amount of rotation is quantified using the λR-parameter. The velocity, velocity dispersion, h3, and h4 fields of the simulated galaxies show a diversity similar to observed kinematic maps of early-type galaxies in the ATLAS3D survey. This includes fast (regular), slow, and misaligned rotation, hot spheroids with embedded cold disk components as well as galaxies with counter-rotating cores or central depressions in the velocity dispersion. We link the present-day kinematic properties to the individual cosmological formation histories of the galaxies. In general, major galaxy mergers have a significant influence on the rotation properties resulting in both a spin-down as well as a spin-up of the merger remnant. Lower mass galaxies with significant in-situ formation of stars, or with additional gas-rich major mergers - resulting in a spin-up - in their formation history, form elongated fast rotators with a clear anti-correlation of h3 and v/σ. An additional formation path for fast rotators includes gas-poor major mergers leading to a spin-up of the remnants. This formation path does not result in anti-correlated h3 and v/σ. The galaxies most consistent with the rare class of non-rotating round early-type galaxies grow by gas-poor minor mergers alone. In general, more massive galaxies have less in-situ star formation since z ∼ 2, rotate slower and have older stellar populations. (shortened)PostprintPeer reviewe