Semantic hierarchies for extracting, modeling, and connecting compliance requirements in information security control standards

Companies and government organizations are increasingly compelled, if not required by law, to ensure that their information systems will comply with various federal and industry regulatory standards, such as the NIST Special Publication on Security Controls for Federal Information Systems (NIST SP-800-53), or the Common Criteria (ISO 15408-2). Such organizations operate business or mission critical systems where a lack of or lapse in security protections translates to serious confidentiality, integrity, and availability risks that, if exploited, could result in information disclosure, loss of money, or, at worst, loss of life. To mitigate these risks and ensure that their information systems meet regulatory standards, organizations must be able to (a) contextualize regulatory documents in a way that extracts the relevant technical implications for their systems, (b) formally represent their systems and demonstrate that they meet the extracted requirements following an accreditation process, and (c) ensure that all third-party systems, which may exist outside of the information system enclave as web or cloud services also implement appropriate security measures consistent with organizational expectations. This paper introduces a step-wise process, based on semantic hierarchies, that systematically extracts relevant security requirements from control standards to build a certification baseline for organizations to use in conjunction with formal methods and service agreements for accreditation. The approach is demonstrated following a case study of all audit-related controls in the SP-800-53, ISO 15408-2, and related documents. Accuracy, applicability, consistency, and efficacy of the approach were evaluated using controlled qualitative and quantitative methods in two separate studies

Multimodal Data Fusion and Behavioral Analysis Tooling for Exploring Trust, Trust-propensity, and Phishing Victimization in Online Environments

Online environments, including email and social media platforms, are continuously threatened by malicious content designed by attackers to install malware on unsuspecting users and/or phish them into revealing sensitive data about themselves. Often slipping past technical mitigations (e.g. spam filters), attacks target the human element and seek to elicit trust as a means of achieving their nefarious ends. Victimized end-users lack the discernment, visual acuity, training, and/or experience to correctly identify the nefarious antecedents of trust that should prompt suspicion. Existing literature has explored trust, trust-propensity, and victimization, but studies lack data capture richness, realism, and/or the ability to investigate active user interactions. This paper defines a data collection and fusion approach alongside new open-sourced behavioral analysis tooling that addresses all three factors to provide researchers with empirical, evidence-based, insights into active end-user trust behaviors. The approach is evaluated in terms of comparative analysis, run-time performance, and fused data accuracy

Human Things: Rethinking Guitars and Ethnography

This work is about objects and their makers, their relationship, and the negotiation between tradition and innovation in the creation of things. I explore the relationship between tradition, innovation, and technology as it pertains to the creation, perception, and interaction with acoustic steel string guitars and ethnographies. First, I focus on the works of two Nashville based guitar makers, Grant and Cory Batson. I investigate the ways in which the Batsons critically evaluate traditional construction techniques and design features as they create their instruments, looking at their theories of tone production, methods of construction, and their perceptions and uses of various media within their guitars. Secondly, I recruit the Batsons’ theories, methods, and revisions of tradition as a metaphor to discuss the traditional ways of constructing ethnographic representations. Through this work, I argue for the craftsmanship of more responsive ethnographic things which take into account not only theoretical, but also methodological and media eclecticism

Education and Learning Opportunities (NVP 2014, Report 3)

With support and collaboration from the W.K. Kellogg Foundation through the America Healing initiative,  researchers at the University of Michigan are leading the National Voices Project (NVP) from 2011-2016. The central goals of the NVP are to examine the sourcesof racial/ethnic inequity and other disparitiesfor children in the United States today and identify interventions that address disparities effectively.The NVP offers an unprecedented perspective on community-level opportunities for children throughout the country, in the domains of health and nutrition, education and learning, and economic security – through the eyes of adults whose occupations and volunteer work affect such opportunities. In other words, the NVP reflects the perceptions of individuals throughout the United States who are in a position to improve children's opportunities inthe future. We generally use the word "children" throughout the report to describe children from age 0-18 years, unless otherwise noted.Previous reports for NVP 2014 focused chiefly on respondent characteristics and findings regarding health,  healthcare, and nutrition. This report for NVP 2014 will center on findings related to children's education and learning

Wide-field dynamic astronomy in the near-infrared with Palomar Gattini-IR and DREAMS

There have been a dramatic increase in the number of optical and radio transient surveys due to astronomical transients such as gravitational waves and gamma ray bursts, however, there have been a limited number of wide-field infrared surveys due to narrow field-of-view and high cost of infrared cameras, we present two new wide-field near-infrared fully automated surveyors; Palomar Gattini-IR and the Dynamic REd All-sky Monitoring Survey (DREAMS). Palomar Gattini-IR, a 25 square degree J-band imager that begun science operations at Palomar Observatory, USA in October 2018; we report on survey strategy as well as telescope and observatory operations and will also providing initial science results. DREAMS is a 3.75 square degree wide-field imager that is planned for Siding Spring Observatory, Australia; we report on the current optical and mechanical design and plans to achieve on-sky results in 2020. DREAMS is on-track to be one of the first astronomical telescopes to use an Indium Galium Arsenide (InGaAs) detector and we report initial on-sky testing results for the selected detector package. DREAMS is also well placed to take advantage and provide near-infrared follow-up of the LSST

Cataclysmic Variables in the First Year of the Zwicky Transient Facility

Using selection criteria based on amplitude, time, and color, we have identified 329 objects as known or candidate cataclysmic variables (CVs) during the first year of testing and operation of the Zwicky Transient Facility. Of these, 90 are previously confirmed CVs, 218 are strong candidates based on the shape and color of their light curves obtained during 3–562 days of observation, and the remaining 21 are possible CVs but with too few data points to be listed as good candidates. Almost half of the strong candidates are within 10 deg of the galactic plane, in contrast to most other large surveys that have avoided crowded fields. The available Gaia parallaxes are consistent with sampling the low mass transfer CVs, as predicted by population models. Our follow-up spectra have confirmed Balmer/helium emission lines in 27 objects, with four showing high-excitation He ii emission, including candidates for an AM CVn, a polar, and an intermediate polar. Our results demonstrate that a complete survey of the Galactic plane is needed to accomplish an accurate determination of the number of CVs existing in the Milky Way

Discovery of an intermediate-luminosity red transient in M51 and its likely dust-obscured, infrared-variable progenitor

We present the discovery of an optical transient (OT) in Messier 51, designated M51 OT2019-1 (also ZTF19aadyppr, AT 2019abn, ATLAS19bzl), by the Zwicky Transient Facility (ZTF). The OT rose over 15 days to an observed luminosity of $M_r=-13$ (${\nu}L_{\nu}=9\times10^6~L_{\odot}$), in the luminosity gap between novae and typical supernovae (SNe). Spectra during the outburst show a red continuum, Balmer emission with a velocity width of $\approx400$ km s$^{-1}$, Ca II and [Ca II] emission, and absorption features characteristic of an F-type supergiant. The spectra and multiband light curves are similar to the so-called "SN impostors" and intermediate-luminosity red transients (ILRTs). We directly identify the likely progenitor in archival Spitzer Space Telescope imaging with a $4.5~\mu$m luminosity of $M_{[4.5]}\approx-12.2$ and a $[3.6]-[4.5]$ color redder than 0.74 mag, similar to those of the prototype ILRTs SN 2008S and NGC 300 OT2008-1. Intensive monitoring of M51 with Spitzer further reveals evidence for variability of the progenitor candidate at [4.5] in the years before the OT. The progenitor is not detected in pre-outburst Hubble Space Telescope optical and near-IR images. The optical colors during outburst combined with spectroscopic temperature constraints imply a higher reddening of $E(B-V)\approx0.7$ mag and higher intrinsic luminosity of $M_r\approx-14.9$ (${\nu}L_{\nu}=5.3\times10^7~L_{\odot}$) near peak than seen in previous ILRT candidates. Moreover, the extinction estimate is higher on the rise than on the plateau, suggestive of an extended phase of circumstellar dust destruction. These results, enabled by the early discovery of M51 OT2019-1 and extensive pre-outburst archival coverage, offer new clues about the debated origins of ILRTs and may challenge the hypothesis that they arise from the electron-capture induced collapse of extreme asymptotic giant branch stars.Comment: 21 pages, 5 figures, published in ApJ

A search for radio afterglows from gamma-ray bursts with the Australian Square Kilometre Array Pathfinder

We present a search for radio afterglows from long gamma-ray bursts using the Australian Square Kilometre Array Pathfinder (ASKAP). Our search used the Rapid ASKAP Continuum Survey, covering the entire celestial sphere south of declination $+41^\circ$, and three epochs of the Variables and Slow Transients Pilot Survey (Phase 1), covering $\sim 5,000$ square degrees per epoch. The observations we used from these surveys spanned a nine-month period from 2019 April 21 to 2020 January 11. We crossmatched radio sources found in these surveys with 779 well-localised (to $\leq 15''$) long gamma-ray bursts occurring after 2004 and determined whether the associations were more likely afterglow- or host-related through the analysis of optical images. In our search, we detected one radio afterglow candidate associated with GRB 171205A, a local low-luminosity gamma-ray burst with a supernova counterpart SN 2017iuk, in an ASKAP observation 511 days post-burst. We confirmed this detection with further observations of the radio afterglow using the Australia Telescope Compact Array at 859 days and 884 days post-burst. Combining this data with archival data from early-time radio observations, we showed the evolution of the radio spectral energy distribution alone could reveal clear signatures of a wind-like circumburst medium for the burst. Finally, we derived semi-analytical estimates for the microphysical shock parameters of the burst: electron power-law index $p = 2.84$, normalised wind-density parameter $A_* = 3$, fractional energy in electrons $\epsilon_{e} = 0.3$, and fractional energy in magnetic fields $\epsilon_{B} = 0.0002$.Comment: 18 pages, 7 figures; accepted for publication in MNRA

Community-powered urban stream restoration: A vision for sustainable and resilient urban ecosystems

Urban streams can provide amenities to people living in cities, but those benefits are reduced when streams become degraded, potentially even causing harm (disease, toxic compounds, etc.). Governments and institutions invest resources to improve the values and services provided by urban streams; however, the conception, development, and implementation of such projects may not include meaningful involvement of community members and other stakeholders. Consequently, project objectives may be misaligned with community desires and needs, and projects may fail to achieve their goals. In February 2020, the 5(th) Symposium on Urbanization and Stream Ecology, an interdisciplinary meeting held every 3 to 5 y, met in Austin, Texas, USA, to explore new approaches to urban stream projects, including ways to maximize the full range of potential benefits by better integrating community members into project identification and decision making. The symposium included in-depth discussion about 4 nearby field case studies, participation of multidisciplinary urban stream experts from 5 continents, and input from the Austin community. Institutional barriers to community inclusion were identified and analyzed using real-world examples, both from the case studies and from the literature, which clarified disparities in power, equity, and values. Outcomes of the symposium have been aggregated into a vision that challenges the present institutional approach to urban stream management and a set of strategies to systematically address these barriers to improve restoration solutions. Integrating community members and other stakeholders throughout the urban restoration process, and a transparent decision-making process to resolve divergent objectives, can help identify appropriate goals for realizing both the ecological and social benefits of stream restoration