Attacker Control and Impact for Confidentiality and Integrity

Language-based information flow methods offer a principled way to enforce strong security properties, but enforcing noninterference is too inflexible for realistic applications. Security-typed languages have therefore introduced declassification mechanisms for relaxing confidentiality policies, and endorsement mechanisms for relaxing integrity policies. However, a continuing challenge has been to define what security is guaranteed when such mechanisms are used. This paper presents a new semantic framework for expressing security policies for declassification and endorsement in a language-based setting. The key insight is that security can be characterized in terms of the influence that declassification and endorsement allow to the attacker. The new framework introduces two notions of security to describe the influence of the attacker. Attacker control defines what the attacker is able to learn from observable effects of this code; attacker impact captures the attacker's influence on trusted locations. This approach yields novel security conditions for checked endorsements and robust integrity. The framework is flexible enough to recover and to improve on the previously introduced notions of robustness and qualified robustness. Further, the new security conditions can be soundly enforced by a security type system. The applicability and enforcement of the new policies is illustrated through various examples, including data sanitization and authentication

Neuropsychological effects of chronic low-dose exposure to polychlorinated biphenyls (PCBs): A cross-sectional study

BACKGROUND: Exposure to indoor air of private or public buildings contaminated with polychlorinated biphenyls (PCBs) has raised health concerns in long-term users. This exploratory neuropsychological group study investigated the potential adverse effects of chronic low-dose exposure to specific air-borne low chlorinated PCBs on well-being and behavioral measures in adult humans. METHODS: Thirty employees exposed to indoor air contaminated with PCBs from elastic sealants in a school building were compared to 30 non-exposed controls matched for education and age, controlling for gender (age range 37–61 years). PCB exposure was verified by external exposure data and biological monitoring (PCB 28, 101, 138, 153, 180). Subjective complaints, learning and memory, executive function, and visual-spatial function was assessed by standardized neuropsychological testing. Since exposure status depended on the use of contaminated rooms, an objectively exposed subgroup (N = 16; PCB 28 = 0.20 μg/l; weighted exposure duration 17.9 ± 7 years) was identified and compared with 16 paired controls. RESULTS: Blood analyses indicated a moderate exposure effect size (d) relative to expected background exposure for total PCB (4.45 ± 2.44 μg/l; d = 0.4). A significant exposure effect was found for the low chlorinated PCBs 28 (0.28 ± 0.25 μg/l; d = 1.5) and 101 (0.07 ± 0.09 μg/l; d = 0.7). Although no neuropsychological effects exceeded the adjusted significance level, estimation statistics showed elevated effect sizes for several variables. The objectively exposed subgroup showed a trend towards increased subjective attentional and emotional complaints (tiredness and slowing of practical activities, emotional state) as well as attenuated attentional performance (response shifting and alertness in a cued reaction task). CONCLUSION: Chronic inhalation of low chlorinated PCBs that involved elevated blood levels was associated with a subtle attenuation of emotional well-being and attentional function. Extended research is needed to replicate the potential long-term low PCB effects in a larger sample

Toward an improved representation of middle atmospheric dynamics thanks to the ARISE project

This paper reviews recent progress toward understanding the dynamics of the middle atmosphere in the framework of the Atmospheric Dynamics Research InfraStructure in Europe (ARISE) initiative. The middle atmosphere, integrating the stratosphere and mesosphere, is a crucial region which influences tropospheric weather and climate. Enhancing the understanding of middle atmosphere dynamics requires improved measurement of the propagation and breaking of planetary and gravity waves originating in the lowest levels of the atmosphere. Inter-comparison studies have shown large discrepancies between observations and models, especially during unresolved disturbances such as sudden stratospheric warmings for which model accuracy is poorer due to a lack of observational constraints. Correctly predicting the variability of the middle atmosphere can lead to improvements in tropospheric weather forecasts on timescales of weeks to season. The ARISE project integrates different station networks providing observations from ground to the lower thermosphere, including the infrasound system developed for the Comprehensive Nuclear-Test-Ban Treaty verification, the Lidar Network for the Detection of Atmospheric Composition Change, complementary meteor radars, wind radiometers, ionospheric sounders and satellites. This paper presents several examples which show how multi-instrument observations can provide a better description of the vertical dynamics structure of the middle atmosphere, especially during large disturbances such as gravity waves activity and stratospheric warming events. The paper then demonstrates the interest of ARISE data in data assimilation for weather forecasting and re-analyzes the determination of dynamics evolution with climate change and the monitoring of atmospheric extreme events which have an atmospheric signature, such as thunderstorms or volcanic eruptions