Increasingly, e-books are becoming alternatives to print books in academic libraries, thus providing opportunities to assess how well the use of e-books meets the requirements of academics. This study uses the task-technology fit (TTF) model to explore the interrelationships of e-books, the affordances offered by smart readers, the information needs of academics, and the “fit” of technology to tasks as well as performance. We propose that the adoption of e-books will be dependent on how academics perceive the fit of this new medium to the tasks they undertake as well as what added-value functionality is delivered by the information technology that delivers the content. The study used content analysis and an online survey, administered to the faculty in Medicine, Science and Engineering at the University of New South Wales, to identify the attributes of a TTF construct of e-books in academic settings. Using exploratory factor analysis, preliminary findings confirmed annotation, navigation, and output as the core dimensions of the TTF construct. The results of confirmatory factor analysis using partial least squares path modeling supported the overall TTF model in reflecting significant positive impact of task, technology, and individual characteristics on TTF for e-books in academic settings; it also confirmed significant positive impact of TTF on individuals' performance and use, and impact of using e-books on individual performance. Our research makes two contributions: the development of an e-book TTF construct and the testing of that construct in a model validating the efficacy of the TTF framework in measuring perceived fit of e-books to academic tasks. © 2013 Wiley Periodicals, Inc.

/pdf/application-of-the-task-technology-fit-model-to-structure-qzle3xwyez.pdf

Application of the task-technology fit model to structure and evaluate the adoption of E -books by A cademics

In order to protect a cryptographic algorithm against Power Analysis attacks, a well-known method consists in hiding all the internal data with randomly chosen masks Following this idea, an AES implementation can be protected against Differential Power Analysis (DPA) by the Transformed Masking Method, proposed by Akkar and Giraud at CHES'2001, requiring two distinct masks At CHES'2002, Trichina, De Seta and Germani suggested the use of a single mask to improve the performances of the protected implementation We show here that their countermeasure can still be defeated by usual first-order DPA techniques In another direction, Akkar and Goubin introduced at FSE'2003 a new countermeasure for protecting secret-key cryptographic algorithms against high-order differential power analysis (HO-DPA) As particular case, the Unique Masking Method is particularly well suited to the protection of DES implementations However, we prove in this paper that this method is not sufficient, by exhibiting a (first-order) enhanced differential power analysis attack We also show how to avoid this new attack

Two power analysis attacks against one-mask methods

A framework and risk assessment approaches for risk-based access control in the cloud

Cloud identity management: A survey on privacy strategies

Cloud Computing is already a successful paradigm for distributed computing and is still growing in popularity. However, many problems still linger in the application of this model and some new ideas are emerging to help leverage its features even further. One of these ideas is the cloud federation, which is a way of aggregating different clouds to enable the sharing of resources and increase scalability and availability. One of the great challenges in the deployment of cloud federations is Identity and Access Management. This issue is usually solved by the creation of identity federations, but this approach is not optimal. In this paper, we propose an access control system for a highly scalable cloud federation. The presented system is dynamic and risk-based, allowing the use of cloud federations without the need of identity federations. We also present results of a prototype implementation and show that it is scalable and flexible enough to meet the requirements of this highly dynamic and heterogeneous environment.

http://www.inf.ufsc.br/~westphal/securware2013.pdf

Risk-based Dynamic Access Control for a Highly Scalable Cloud Federation

Identity Management is the one of web services that manages the digital identity and the personally identifiable information of the user who subscribed for various web services in Internet. It was developed to provide user with an easy way to use and manage various user's digital identities that were provided from each web service. If the user subscribes to an Identity Management service, the user can access the other web sites affiliated with the Identity Management service and use their web services by using the identity issued by the Identity Management service. And the user can manage the user's personally identifiable information distributed among various web sites in an integrated way through this service. However, if the identity provider, which provides this Identity Management service, discloses the user’s identity and personal identifiable information, identity theft can happen throughout the entire affiliated web sites. As a result, the privacy protection level of the Identity provider, that is, the level of protection for personally identifiable information, is the critical factor of successful Identity Management service. Therefore, Identity Provider should provide an easy way to the internal or external auditor of them for assessing the privacy protection level. This paper describes privacy threats for each identity life cycle, such as Identity provision, propagation, use and maintain, and destruction, and proposes the criteria that evaluate the privacy protection level provided by the Identity provider as a countermeasure against these threats. The internal or external auditor can use the criteria described in this paper, as a way of assessing the privacy protection level of Identity Provider

Criteria for Evaluating the Privacy Protection Level of Identity Management Services

Recently, studies on privacy enhancing technologies have been actively carried out, as the importance of enterprise information, as well as privacy information, is becoming increasingly emphasized. Several organizations and enterprises have been conducting researches sporadically on privacy information technology. However, concept of privacy enhancing technology is not defined yet and there is no particular technology but P3P so far. Therefore, this paper provide classification mythology of privacy enhancing technology based on privacy information life-cycle. Privacy enhancing technology are classified into 3 technologies, which are operation technology, common based technology and policy/management technology. This technological classification can be break down more specifically by privacy information life cycle.

Classification of Privacy Enhancing Technologies on Life-cycle of Information

At CHES 2007, Biryukov and Knovratovich intro- duced a concept of side-channel attacks based on impossible collisions, and applied it to AES with reduced masked rounds. In this paper, we propose impossible collision based side-channel attacks on HIGHT with 11 reduced masked rounds. Our attack needs 2 17 chosen plaintexts and 2 23.6 curve comparisons. It is known to be the first side-channel attack on HIGHT with reduced masked rounds. Index Terms—Side-Channel Attacks, HIGHT, Impossible- Collision

Hyangjin Lee

Papers

Criteria for Evaluating the Privacy Protection Level of Identity Management Services

Classification of Privacy Enhancing Technologies on Life-cycle of Information

Impossible Collision Based Side-Channel Attacks on HIGHT with Reduced Masked Rounds