Privacidade no ciclo de vida do desenvolvimento seguro

Trabalho de projecto de mestrado, Engenharia Informática (Engenharia de Software) Universidade de Lisboa, Faculdade de Ciências, 2019Nos dias de hoje, as aplicações de software desempenham um papel crítico para as organizações. À medida que as empresas dependem cada vez mais da integração destas aplicações no desempenho do seu negócio, levantam-se diversas questões relativas à segurança da informação. Empresas que nunca se preocuparam com a segurança das suas aplicações começam agora a ter de considerar os riscos que estas podem representar, uma vez que demonstrar a capacidade de proteger os dados digitais, tanto proprietários como de clientes, é cada vez mais uma necessidade para o negócio ao mesmo tempo que garante vantagem competitiva. A maior parte dos processos de negócio de hoje em dia são suportados por aplicações de software, no entanto, os investimentos que têm vindo a ser feitos assentam mais na infraestrutura, deixando a segurança ao nível aplicacional para segundo plano. Em Portugal, uma grande parte das empresas estão ainda atrasadas no que diz respeito ao desenvolvimento de software seguro e devem mudar a forma como endereçam o ciclo de vida de desenvolvimento, nomeadamente ao nível de processos, que devem agora estar alinhados com o Regulamento Geral de Proteção de Dados, e ao nível de controlos técnicos, descritos em diversas normas de segurança e também agora na Resolução de Conselho de Ministros nº41/2018 obrigatória para os serviços públicos a partir de Outubro de 2019. Esta tese propõe uma framework para endereçar o problema supracitado, na medida em que fornece diretrizes para que as organizações alterem a forma como desenvolvem software, integrando a segurança nas suas aplicações, em todas as fases do seu ciclo de vida. A partir do trabalho desenvolvido, é possível que uma organização adapte os seus processos, métodos e ferramentas, para que os conceitos Security by Design e Privacy by Design passem a fazer parte as metodologias de desenvolvimento, e desta forma as organizações consigam obter um maior nível de segurança nas suas aplicações. A framework proposta consiste num processo de desenvolvimento de um sistema de software, e uma metodologia de segurança a ser integrada nos processos de desenvolvimento. O resultado final do trabalho pode ser visto como uma solução particular de uma metodologia de segurança, com o seu próprio conjunto de funcionalidades benéficas. A metodologia proposta fornece diretrizes sobre quais as medidas de segurança que devem ser consideradas, sem que sejam sobrecarregados os processos de desenvolvimento utilizados. Em complemento, a metodologia proposta promove a utilização de repositórios de informação de segurança, relacionando soluções, ameaças, vulnerabilidades e políticas de segurança e encorajando a incorporação das melhores práticas nos processos de desenvolvimento.Nowadays, software applications play a critical role for organizations. Since companies increasingly rely on the integration of these applications to assure the performance of their business, more and more information security issues are being raised. Companies that have never cared about the security of their applications are now beginning to consider the risks they may pose, since demonstrating the ability to protect digital data, both proprietary and customer, is increasingly business need while ensuring competitive advantage. While it is known that security measures need to be taken to protect applications, it is not always so obvious how to implement them. The truth is that most business processes today are supported by software applications. However, the investments that have been made are based more on the infrastructure, leaving security at the application level to the background. In Portugal, many companies are still behind in software development and should change the way they address the software development lifecycle, particularly at the process level, which should now be in line with the General Data Protection Regulation, and at the level of technical controls, described in various safety standards and also now in Council of Ministers Resolution No. 41/2018, mandatory for public services from October 2019. This thesis proposes a framework to address the above problem, It provides guidelines for organizations to change the way they develop software by integrating security into their applications at all stages of their life cycle. From the work developed, it is possible for an organization to adapt its processes, methods and tools, so that the concepts Security by Design and Privacy by Design become part of the development methodologies, and in that way organizations can achieve a higher level of security in their applications. The proposed framework consists of a development approach for software systems, and a security methodology to be integrated into the development processes. The final result of the work can be seen as a particular solution of a security methodology, with its own set of beneficial features. The proposed methodology provides guidelines on which security measures should be considered, without overburdening the development processes used. It promotes the use of security information repositories, relating solutions, threats, vulnerabilities and security policies and encouraging the incorporation of best practices in development processes

Educomunicação e suas áreas de intervenção: Novos paradigmas para o diálogo intercultural

oai:omp.abpeducom.org.br:publicationFormat/1O material aqui divulgado representa, em essência, a contribuição do VII Encontro Brasileiro de Educomunicação ao V Global MIL Week, da UNESCO, ocorrido na ECA/USP, entre 3 e 5 de novembro de 2016. Estamos diante de um conjunto de 104 papers executivos, com uma média de entre 7 e 10 páginas, cada um. Com este rico e abundante material, chegamos ao sétimo e-book publicado pela ABPEducom, em seus seis primeiros anos de existência. A especificidade desta obra é a de trazer as “Áreas de Intervenção” do campo da Educomunicação, colocando-as a serviço de uma meta essencial ao agir educomunicativo: o diálogo intercultural, trabalhado na linha do tema geral do evento internacional: Media and Information Literacy: New Paradigms for Intercultural Dialogue

Mapping density, diversity and species-richness of the Amazon tree flora

Using 2.046 botanically-inventoried tree plots across the largest tropical forest on Earth, we mapped tree species-diversity and tree species-richness at 0.1-degree resolution, and investigated drivers for diversity and richness. Using only location, stratified by forest type, as predictor, our spatial model, to the best of our knowledge, provides the most accurate map of tree diversity in Amazonia to date, explaining approximately 70% of the tree diversity and species-richness. Large soil-forest combinations determine a significant percentage of the variation in tree species-richness and tree alpha-diversity in Amazonian forest-plots. We suggest that the size and fragmentation of these systems drive their large-scale diversity patterns and hence local diversity. A model not using location but cumulative water deficit, tree density, and temperature seasonality explains 47% of the tree species-richness in the terra-firme forest in Amazonia. Over large areas across Amazonia, residuals of this relationship are small and poorly spatially structured, suggesting that much of the residual variation may be local. The Guyana Shield area has consistently negative residuals, showing that this area has lower tree species-richness than expected by our models. We provide extensive plot meta-data, including tree density, tree alpha-diversity and tree species-richness results and gridded maps at 0.1-degree resolution

Geographic patterns of tree dispersal modes in Amazonia and their ecological correlates

Aim: To investigate the geographic patterns and ecological correlates in the geographic distribution of the most common tree dispersal modes in Amazonia (endozoochory, synzoochory, anemochory and hydrochory). We examined if the proportional abundance of these dispersal modes could be explained by the availability of dispersal agents (disperser-availability hypothesis) and/or the availability of resources for constructing zoochorous fruits (resource-availability hypothesis). Time period: Tree-inventory plots established between 1934 and 2019. Major taxa studied: Trees with a diameter at breast height (DBH) ≥ 9.55 cm. Location: Amazonia, here defined as the lowland rain forests of the Amazon River basin and the Guiana Shield. Methods: We assigned dispersal modes to a total of 5433 species and morphospecies within 1877 tree-inventory plots across terra-firme, seasonally flooded, and permanently flooded forests. We investigated geographic patterns in the proportional abundance of dispersal modes. We performed an abundance-weighted mean pairwise distance (MPD) test and fit generalized linear models (GLMs) to explain the geographic distribution of dispersal modes. Results: Anemochory was significantly, positively associated with mean annual wind speed, and hydrochory was significantly higher in flooded forests. Dispersal modes did not consistently show significant associations with the availability of resources for constructing zoochorous fruits. A lower dissimilarity in dispersal modes, resulting from a higher dominance of endozoochory, occurred in terra-firme forests (excluding podzols) compared to flooded forests. Main conclusions: The disperser-availability hypothesis was well supported for abiotic dispersal modes (anemochory and hydrochory). The availability of resources for constructing zoochorous fruits seems an unlikely explanation for the distribution of dispersal modes in Amazonia. The association between frugivores and the proportional abundance of zoochory requires further research, as tree recruitment not only depends on dispersal vectors but also on conditions that favour or limit seedling recruitment across forest types

Consistent patterns of common species across tropical tree communities

Trees structure the Earth’s most biodiverse ecosystem, tropical forests. The vast number of tree species presents a formidable challenge to understanding these forests, including their response to environmental change, as very little is known about most tropical tree species. A focus on the common species may circumvent this challenge. Here we investigate abundance patterns of common tree species using inventory data on 1,003,805 trees with trunk diameters of at least 10 cm across 1,568 locations1,2,3,4,5,6 in closed-canopy, structurally intact old-growth tropical forests in Africa, Amazonia and Southeast Asia. We estimate that 2.2%, 2.2% and 2.3% of species comprise 50% of the tropical trees in these regions, respectively. Extrapolating across all closed-canopy tropical forests, we estimate that just 1,053 species comprise half of Earth’s 800 billion tropical trees with trunk diameters of at least 10 cm. Despite differing biogeographic, climatic and anthropogenic histories7, we find notably consistent patterns of common species and species abundance distributions across the continents. This suggests that fundamental mechanisms of tree community assembly may apply to all tropical forests. Resampling analyses show that the most common species are likely to belong to a manageable list of known species, enabling targeted efforts to understand their ecology. Although they do not detract from the importance of rare species, our results open new opportunities to understand the world’s most diverse forests, including modelling their response to environmental change, by focusing on the common species that constitute the majority of their trees.Publisher PDFPeer reviewe

Photography-based taxonomy is inadequate, unnecessary, and potentially harmful for biological sciences

The question whether taxonomic descriptions naming new animal species without type specimen(s) deposited in collections should be accepted for publication by scientific journals and allowed by the Code has already been discussed in Zootaxa (Dubois & Nemésio 2007; Donegan 2008, 2009; Nemésio 2009a–b; Dubois 2009; Gentile & Snell 2009; Minelli 2009; Cianferoni & Bartolozzi 2016; Amorim et al. 2016). This question was again raised in a letter supported by 35 signatories published in the journal Nature (Pape et al. 2016) on 15 September 2016. On 25 September 2016, the following rebuttal (strictly limited to 300 words as per the editorial rules of Nature) was submitted to Nature, which on 18 October 2016 refused to publish it. As we think this problem is a very important one for zoological taxonomy, this text is published here exactly as submitted to Nature, followed by the list of the 493 taxonomists and collection-based researchers who signed it in the short time span from 20 September to 6 October 2016

Global patient outcomes after elective surgery: prospective cohort study in 27 low-, middle- and high-income countries.

BACKGROUND: As global initiatives increase patient access to surgical treatments, there remains a need to understand the adverse effects of surgery and define appropriate levels of perioperative care. METHODS: We designed a prospective international 7-day cohort study of outcomes following elective adult inpatient surgery in 27 countries. The primary outcome was in-hospital complications. Secondary outcomes were death following a complication (failure to rescue) and death in hospital. Process measures were admission to critical care immediately after surgery or to treat a complication and duration of hospital stay. A single definition of critical care was used for all countries. RESULTS: A total of 474 hospitals in 19 high-, 7 middle- and 1 low-income country were included in the primary analysis. Data included 44 814 patients with a median hospital stay of 4 (range 2-7) days. A total of 7508 patients (16.8%) developed one or more postoperative complication and 207 died (0.5%). The overall mortality among patients who developed complications was 2.8%. Mortality following complications ranged from 2.4% for pulmonary embolism to 43.9% for cardiac arrest. A total of 4360 (9.7%) patients were admitted to a critical care unit as routine immediately after surgery, of whom 2198 (50.4%) developed a complication, with 105 (2.4%) deaths. A total of 1233 patients (16.4%) were admitted to a critical care unit to treat complications, with 119 (9.7%) deaths. Despite lower baseline risk, outcomes were similar in low- and middle-income compared with high-income countries. CONCLUSIONS: Poor patient outcomes are common after inpatient surgery. Global initiatives to increase access to surgical treatments should also address the need for safe perioperative care. STUDY REGISTRATION: ISRCTN5181700

Mapping density, diversity and species-richness of the Amazon tree flora

Using 2.046 botanically-inventoried tree plots across the largest tropical forest on Earth, we mapped tree species-diversity and tree species-richness at 0.1-degree resolution, and investigated drivers for diversity and richness. Using only location, stratified by forest type, as predictor, our spatial model, to the best of our knowledge, provides the most accurate map of tree diversity in Amazonia to date, explaining approximately 70% of the tree diversity and species-richness. Large soil-forest combinations determine a significant percentage of the variation in tree species-richness and tree alpha-diversity in Amazonian forest-plots. We suggest that the size and fragmentation of these systems drive their large-scale diversity patterns and hence local diversity. A model not using location but cumulative water deficit, tree density, and temperature seasonality explains 47% of the tree species-richness in the terra-firme forest in Amazonia. Over large areas across Amazonia, residuals of this relationship are small and poorly spatially structured, suggesting that much of the residual variation may be local. The Guyana Shield area has consistently negative residuals, showing that this area has lower tree species-richness than expected by our models. We provide extensive plot meta-data, including tree density, tree alpha-diversity and tree species-richness results and gridded maps at 0.1-degree resolution

Unraveling Amazon tree community assembly using Maximum Information Entropy: a quantitative analysis of tropical forest ecology

In a time of rapid global change, the question of what determines patterns in species abundance distribution remains a priority for understanding the complex dynamics of ecosystems. The constrained maximization of information entropy provides a framework for the understanding of such complex systems dynamics by a quantitative analysis of important constraints via predictions using least biased probability distributions. We apply it to over two thousand hectares of Amazonian tree inventories across seven forest types and thirteen functional traits, representing major global axes of plant strategies. Results show that constraints formed by regional relative abundances of genera explain eight times more of local relative abundances than constraints based on directional selection for specific functional traits, although the latter does show clear signals of environmental dependency. These results provide a quantitative insight by inference from large-scale data using cross-disciplinary methods, furthering our understanding of ecological dynamics

Unraveling Amazon tree community assembly using Maximum Information Entropy: a quantitative analysis of tropical forest ecology

In a time of rapid global change, the question of what determines patterns in species abundance distribution remains a priority for understanding the complex dynamics of ecosystems. The constrained maximization of information entropy provides a framework for the understanding of such complex systems dynamics by a quantitative analysis of important constraints via predictions using least biased probability distributions. We apply it to over two thousand hectares of Amazonian tree inventories across seven forest types and thirteen functional traits, representing major global axes of plant strategies. Results show that constraints formed by regional relative abundances of genera explain eight times more of local relative abundances than constraints based on directional selection for specific functional traits, although the latter does show clear signals of environmental dependency. These results provide a quantitative insight by inference from large-scale data using cross-disciplinary methods, furthering our understanding of ecological dynamics