Safe abstractions of data encodings in formal security protocol models

When using formal methods, security protocols are usually modeled at a high level of abstraction. In particular, data encoding and decoding transformations are often abstracted away. However, if no assumptions at all are made on the behavior of such transformations, they could trivially lead to security faults, for example leaking secrets or breaking freshness by collapsing nonces into constants. In order to address this issue, this paper formally states sufficient conditions, checkable on sequential code, such that if an abstract protocol model is secure under a Dolev-Yao adversary, then a refined model, which takes into account a wide class of possible implementations of the encoding/decoding operations, is implied to be secure too under the same adversary model. The paper also indicates possible exploitations of this result in the context of methods based on formal model extraction from implementation code and of methods based on automated code generation from formally verified model

Formal Verification of Security Protocol Implementations: A Survey

Automated formal verification of security protocols has been mostly focused on analyzing high-level abstract models which, however, are significantly different from real protocol implementations written in programming languages. Recently, some researchers have started investigating techniques that bring automated formal proofs closer to real implementations. This paper surveys these attempts, focusing on approaches that target the application code that implements protocol logic, rather than the libraries that implement cryptography. According to these approaches, libraries are assumed to correctly implement some models. The aim is to derive formal proofs that, under this assumption, give assurance about the application code that implements the protocol logic. The two main approaches of model extraction and code generation are presented, along with the main techniques adopted for each approac

Effect of Ferric Sodium EDTA administration, in combination with vitamin C, folic acid, copper gluconate, zinc gluconate and selenomethionine, on cardiovascular risk evaluation: exploration of the HRV frequency domain

diseases. Using the Heart Rate Variability (HRV) analysis is possible to provide an evaluation of the safety and the effectiveness of intervention. Objective: To evaluate the efficacy and safety of Ferric Sodium EDTA in combination with vitamin C, folic acid, copper gluconate, zinc gluconate and selenomethionine (Ferachel forte®) 2 tabs/day for 24 days in elderly patients with secondary anaemia, by exploring the HRV frequency domain. Methods: In 45 elderly patients with secondary anaemia and/or low-moderate kidney failure, laboratory values after administration of Ferric Sodium EDTA, 2 tabs a day, in combination with vitamin C, folic acid, copper gluconate, zinc gluconate and selenomethionine (Ferachel forte®) for 24 days (N=16 patients) or ferrous gluconate 63 mg/day added to saline solution, administered using intravenous access during the hospitalization period of 15 ± 5 days (N=29 patients) were evaluated. Also, ECG signals and bioelectrical impedance (BIA) were measured. Results: Oral iron supplementation with Ferric Sodium EDTA, in combination with vitamin C, folic acid, copper gluconate, zinc gluconate and selenomethionine (Ferachel forte®) confirmed to be effective and safe about the cardiovascular risk in old patients. This study showed the real superiority of the oral administration about the cardiovascular risk in elderly patients in comparison with intravenous administration of ferrous gluconate. Conclusion: This study confirms that Ferric Sodium EDTA combination (Ferachel forte®) can be a valid alternative to ferrous gluconate intravenous therapy (gold standard) in the treatment of secondary anaemia in elderly patients. In fact, during the treatment, efficacy results have been maintained without statistically significant variations about cardiovascular risk, evaluated by exploring the HRV frequency domain

Circular Economy: A Performance Evaluation Perspective

Circular Economy has emerged in the last years as an industrial pattern that rethinks the entire design and production cycle of products and goods, to obtain the minimal environmental impact and maximize the energy efficiency. This pattern creates product transformation cycles, that allow to re-use parts and renew energy, defining Circular Economy Ecosystems. Such cycles, are very interesting systems from a performance evaluation point of view: in this paper we give a Colored Petri Net perspective to circular economy. In particular, we focus on an example taken from the literature that considers car manufacturing, and we show how we can deal with the problem using standard performance evaluation techniques. Results from performance analysis of the case study, allow to focus on new interesting metrics and performance indicators, that might not be fully studied with conventional techniques applied by expert of the economical domain

Dynamic MR of the pelvic floor. Influence of alternative methods to draw the pubococcygeal line (PCL) on the grading of pelvic floor descent

Objective: To evaluate the impact of the pubococcygeal line (PCL) position on hiatal descent grading, comparing the method recommended by the official guidelines with the other two most common methods reported in literature. Methods: Female patients prospectively included performed dynamic-MR (1,5 T) in supine position. Rectum and vagina were filled with ultrasound gel. MR protocol included TSE T2 weighted sequences on axial/sagittal/coronal planes and steady-state sequences (FIESTA) on midsagittal plane during three phases (rest, strain and defecation). On each phase, the posterior point of PCL was traced in the region recommended by the official guidelines (last coccygeal joint or PCLcc) and in the other two regions: coccyx's tip (PCLtip) and sacrococcygeal joint (PCLsc). The resulting grades of pelvic floor descent (according to HMO-System) were compared. Inter-reader and intra-reader agreement were evaluated. Results: The final population consisted of 60 patients (56yy±10). No significant differences in grading were observed using PCLtip and PCLcc in all phases (p = 0.3016/0.0719/0.0719 during rest/strain/defecation). Using PCLsc, the grading was significantly overestimated compared to PCLcc in all phases (p = 0.0041/0.0001/0.0001 during rest/strain/defecation). Inter-reader and intra-reader agreement were significantly higher using PCLtip (p < 0.05). Conclusions: PCLtip is a reliable and highly reproducible option to the official PCLcc to correctly grade the pelvic floor descent and could be used when the PCLcc is not clearly visible. The use of PCLsc overestimates the grading compared to the official PCLcc and should not be used to avoid wrong patients’ management