Vulnerability Information Research Articles

DETEKSI KONDISI KETAHANAN PANGAN BERAS MENGGUNAKAN PEMODELAN SPASIAL KERENTANAN PANGAN

In 2005 and 2009, BKP and WFP has provided food security conditions in Indonesia on Food Insecurity Map which were developed using food availability, food accessibility, food absorption and food vulnerability. There are 100 out of 265 districts in Indonesia or about 37,7%, which fall into the vulnerable to very vulnerable categories, where 11 districts were found in Java. The main objective of this research is to develope a spatial model of the rice production vulnerability (KPB) based on Remote Sensing and GIS technologies for estimating the food insecurity condition. Several criteria used to obtain food vulnerability information are percentage level of green vegetation (PV), rainfall anomaly (ACH), land degradation due to erosion (Deg), and paddy harvest failure due to drought and flood in paddy field (BK). Dynamic spatial information on the greenness level of land cover can be obtained from multitemporal EVI (Enhanced vegetation Index) of MODIS (Moderate Resolution Imaging Spectroradiometer) data. Spatial information of paddy harvest failure caused by drought and flood was estimated by using vegetation index, land surface temperature, rainfall and moisture parameters with advance image processing of multitemporal EVI MODIS data. The GIS technology were used to perform spatial modelling based on weighted overlay index (multicriteria analysis). The method for computing weight of factors in the vulnerability model was AHP (Analytical Hierarchy Process). The spatial model of production vulnerability (KPB) developed in this study is as follows: KPB = 0,102 PV + 0,179 Deg + 0,276 ACH + 0,443 BK. In this study, level of production vulnerability can be categorized into six classes, i.e.: (1) invulnerable; (2) very low vulnerability; (3) low vulnerability; (4) moderately vulnerable; (5) highly vulnerable; and (6) extremely vulnerable. The result of spatial modelling then was used to evaluate progress production vulnerability condition at several sub-districts in Indramayu Regency. According to the investigation results of WFP in 2005, this area fall into moderately vulnerable category. Only few sub-districts that fall into highly and extremely vulnerable during the period of May ~ August 2008, namely: Kandanghaur, Losarang, part of Lohbener, and Arahan. Keywords: remote sensing, GIS, food vulnerability, vegetation index, AHP

Assessing building vulnerability to earthquake and tsunami hazard using remotely sensed data

Quantification of building vulnerability to earthquake and tsunami hazards is a key component for the implementation of structural mitigation strategies fostering the essential shift from post-disaster crisis reaction to preventive measures. Facing accelerating urban sprawl and rapid structural change in modern urban agglomerations in areas of high seismic and tsunami risk, the synergetic use of remote sensing and civil engineering methods offers a great potential to assess building structures up-to-date and area-wide. This paper provides a new methodology contextualizing key components in quantifying building vulnerability with regard to sequenced effects of seismic and tsunami impact. The study was carried out in Cilacap, a coastal City in Central Java, Indonesia. Central is the identification of significant correlations between building characteristics, easily detectable by remote sensing techniques, and detailed in situ measurements stating precise building vulnerability information. As a result, potential vertical evacuation shelters in the study area are detected and a realistic vulnerability assessment of the exposed building stock is given. These findings obtained allow for prioritization of intervention measures such as awareness and preparedness strategies and can be implemented in local disaster management.

Extracting building stock information from optical satellite imagery for mapping earthquake exposure and its vulnerability

The paper focuses on automatic extraction of building stock information for quantifying physical exposure and its vulnerability from High and Very High Resolution (VHR) optical satellite imagery. We use two case studies. In Sana’a (Yemen), we use automatic techniques to extract the building stock as well as building height that is used to characterize its vulnerability. In Port-au-Prince (Haiti)—the area affected by the 2010 earthquake—we map the building stock based on a pre-disaster imagery, and we show the added value of area-based information when added to point-based damage assessment from visual change interpretation of post-disaster aerial images. This paper shows that VHR imagery can be used to locate and quantify the building stock and its height. This paper also shows that damages measured from changes detected from pre- and post-disaster imagery can in principle map and provide vulnerability information related to the structural fragility of the building stock.

A Study on Database Vulnerable Object Analysis and Control Technology

The vulnerability exists in the database which stores important information, the incident that caused by vulnerability attacking appears as the loss or damage about important asset. In addition, preparation for Personal Information Protection Act which passed at National Assembly, database vulnerability analysis and research is needed for strengthening security. In this paper, the information in the database, weak data defined as Role Base, vulnerability analysis the database by role. For managing scattered vulnerable information and important information, analysis vulnerable objects and perform extraction and control. Research vulnerable object access control management modules and monitoring manage method according to the database access privileges, design and analysis audit records management modules. This study will contribute to enhanced database security and compliance with privacy laws.

Risk reduction at the “Last-Mile”: an attempt to turn science into action by the example of Padang, Indonesia

More than ever before, the last decade revealed the immense vulnerability of the world’s cities to natural hazards. Neither the tsunami in the Indian Ocean in 2004, the hurricane Katrina in 2005, the cyclone Nargis in 2008 nor the earthquakes in Sichuan in 2008 or in Haiti 2010 found the people, the city administrations or the national or international organizations well prepared in the advent of anticipated but to a large extent disregarded natural disasters. It is evident that the lack of tailor-made disaster management plans and standard operational procedures are often the crucial point in proper risk reduction approaches. This study presents an approach to transfer knowledge of an extensive multidisciplinary scientific study on risk identification into recommendations for risk reduction strategies. The study has been conducted by means of a combination of experts from different scientific communities coming from civil and coastal engineering, remote sensing, social sciences, evacuation modelling and capacity development. The paper presents the results of this research approach and interweaves key findings with recent experiences from an eyewitness on a previous hazard event. Thus, necessary tsunami hazard and vulnerability information as well as valuable insights into preparedness activities have been derived for initiating updated infrastructural designs and practical recommendations for emergency management as well as strategic spatial planning activities at the local scale. The approach was applied in the context of tsunami early warning and evacuation planning in the coastal city of Padang, Western Sumatra, Republic of Indonesia.

Seismic Risk and Society Development Indicators: Examination of Three Countries

AbstractThis paper investigates the underlying relationship between the implicit level of risk accepted for natural hazards, and the level of economic, social, and political development of the country. Vulnerability information is related to the seismic provisions of the building codes and the atmosphere of code enforcement. Haiti, Chile, and New Zealand all experienced major earthquakes in 2010. The loss of life and devastation in Haiti, however, was much worse than in Chile and New Zealand, despite a somewhat smaller magnitude of the earthquake. Specifically, this paper compares the differences among the three events, and notes some of the social aspects that led to the conditions in each country at the time of the earthquakes. Variables evaluated are aspects of the social solidity, political stability, and economic growth. Implicit considerations include magnitude of the earthquake, local geological conditions, demographics of the population, and population at seismic risk. Damage is continuing to be i...

Famines in Africa: is early warning early enough?

Following the second Sahelian famine in 1984–1985, major investments were made to establish Early Warning Systems. These systems help to ensure that timely warnings and vulnerability information are available to decision makers to anticipate and avert food crises. In the recent crisis in the Horn of Africa, alarming levels of acute malnutrition were documented from March 2010, and by August 2010, an impending food crisis was forecast. Despite these measures, the situation remained unrecognised, and further deteriorated causing malnutrition levels to grow in severity and scope. By the time the United Nations officially declared famine on 20 July 2011, and the humanitarian community sluggishly went into response mode, levels of malnutrition and mortality exceeded catastrophic levels. At this time, an estimated 11 million people were in desperate and immediate need for food. With warnings of food crises in the Sahel, South Sudan, and forecast of the drought returning to the Horn, there is an immediate need to institutionalize change in the health response during humanitarian emergencies. Early warning systems are only effective if they trigger an early response.

A comparison of threats, vulnerabilities and management approaches in global seagrass bioregions

Global seagrass habitats are threatened by multiple anthropogenic factors. Effective management of seagrasses requires information on the relative impacts of threats; however, this information is rarely available. Our goal was to use the knowledge of experts to assess the relative impacts of anthropogenic activities in six global seagrass bioregions. The activities that threaten seagrasses were identified at an international seagrass workshop and followed with a web-based survey to collect seagrass vulnerability information. There was a global consensus that urban/industrial runoff, urban/port infrastructure development, agricultural runoff and dredging had the greatest impact on seagrasses, though the order of relative impacts varied by bioregion. These activities are largely terrestrially based, highlighting the need for marine planning initiatives to be co-ordinated with adjacent watershed planning. Sea level rise and increases in the severity of cyclones were ranked highest relative to other climate change related activities, but overall the five climate change activities were ranked low and experts were uncertain of their effects on seagrasses. The experts’ preferred mechanism of delivering management outcomes were processes such as policy development, planning and consultation rather than prescriptive management tools. Our approach to collecting expert opinion provides the required data to prioritize seagrass management actions at bioregional scales.

Statistical downscaling of the French Mediterranean climate: assessment for present and projection in an anthropogenic scenario

Abstract. The Mediterranean basin is a particularly vulnerable region to climate change, featuring a sharply contrasted climate between the North and South and governed by a semi-enclosed sea with pronounced surrounding topography covering parts of the Europe, Africa and Asia regions. The physiographic specificities contribute to produce mesoscale atmospheric features that can evolve to high-impact weather systems such as heavy precipitation, wind storms, heat waves and droughts. The evolution of these meteorological extremes in the context of global warming is still an open question, partly because of the large uncertainty associated with existing estimates produced by global climate models (GCM) with coarse horizontal resolution (~200 km). Downscaling climatic information at a local scale is, thus, needed to improve the climate extreme prediction and to provide relevant information for vulnerability and adaptation studies. In this study, we investigate wind, temperature and precipitation distributions for past recent climate and future scenarios at eight meteorological stations in the French Mediterranean region using one statistical downscaling model, referred as the "Cumulative Distribution Function transform" (CDF-t) approach. A thorough analysis of the uncertainty associated with statistical downscaling and bi-linear interpolation of large-scale wind speed, temperature and rainfall from reanalyses (ERA-40) and three GCM historical simulations, has been conducted and quantified in terms of Kolmogorov-Smirnov scores. CDF-t produces a more accurate and reliable local wind speed, temperature and rainfall. Generally, wind speed, temperature and rainfall CDF obtained with CDF-t are significantly similar with the observed CDF, even though CDF-t performance may vary from one station to another due to the sensitivity of the driving large-scale fields or local impact. CDF-t has then been applied to climate simulations of the 21st century under B1 and A2 scenarios for the three GCMs. As expected, the most striking trend is obtained for temperature (median and extremes), whereas for wind speed and rainfall, the evolution of the distributions is weaker. Mean surface wind speed and wind extremes seem to decrease in most locations, whereas the mean rainfall value decreases while the extremes seem to slightly increase. This is consistent with previous studies, but if this trend is clear with wind speed and rainfall data interpolated from GCM simulations at station locations, conversely CDF-t produces a more uncertain trend.

Are markets for vulnerabilities effective

Current reward structures in security vulnerability disclosure may be skewed toward benefitting nefarious usage of vulnerability information rather than responsible disclosure. Recently suggested m...

안전한 웹 애플리케이션 개발을 위한 취약점 분석 및 위협 완화

Recently, as modern Internet uses mashups, Web 3.0, JavaScript/AJAX widely, the rate at which new vulnerabilities are being discovered is increasing rapidly. It can subsequently introduce big security threats. In order to efficiently mitigate these web application vulnerabilities and security threats, it is needed to rank vulnerabilities based on severity and consider the severe vulnerabilities during a specific phase of software development lifecycle (SDLC) for web applications. In this paper, we have first verified whether the risk rating methodology of OWASP Top 10 vulnerabilities is a reasonable one or not by analyzing the vulnerability data of web applications in the US National Vulnerability Database (NVD). Then, by inspecting the vulnerability information of web applications based on OWASP Top-10 2010 list and CWE (Common Weakness Enumeration) directory, we have mapped the web-related entries of CWE onto the entries of OWASP Top-10 2010 and prioritized them. We have also presented which phase of SDLC is associated with each vulnerability entry. Using this approach, we can prevent or mitigate web application vulnerabilities and security threats efficiently.

The Application of Data Fusion Technology Based on Neural Network in the Dynamic Risk Assessment

As As electric network being intelligent, risk assessment of power information system has faced with a lot of hidde dangers of information security. Based on diversified tools for network security management, this paper proposes to fuses a variety of information sources and then output the results of classification. This method provides information of credible threat and vulnerabilities.

An Approach to Obtain Software Security Vulnerabilities Based on Vertical Search

we propose an effective approach to obtain software security vulnerabilities in web with vertical search technique in this paper. We use a keyword-trainer to get domain keywords in software security domain. Then the web page filter is designed after analyzing the obtained domain keywords and the structure of the URL topology. Finally, we design a vertical search crawler based on the webpage filter to search for the information of software security vulnerabilities in Web. This approach effectively discovers and digs out the information of software security vulnerabilities presenting in Web. It helps provides the primary knowledge and information for constructing security-knowledge database and analyze the vulnerabilities of software.

ADDRESSING THE CHALLENGES OF CLIMATE CHANGE TO NUTRITION SECURITY

Background/Aim: More than one billion people are suffering malnutrition. Food and nutrition security have deteriorated and reductions in child malnutrition are proceeding too slowly to meet the Millennium Development Goal (MDG) target of halving hunger by 2015. Three major challenges threaten current and future efforts to overcome food and nutrition insecurity: climate change, the growing use of food crops as a source of fuel and the soaring food prices. Methods: The analysis of the impacts of climate change of climate change and bioenergy on health, food and nutrition security is based on the four-dimensional food security framework defined by FAO’s Food Insecurity and Vulnerability Information and Mapping Systems (FIVIMS) combined with a nutrition security framework which includes environmental health, house hold food access and maternal and child care practices. The paper provides a cross sectoral analysis of the adaptation strategies and policies to address climate change and bioenergy challenges. Results: Climate change is projected to affect the health status of millions of people through increases in malnutrition. Climate change and variability exacerbates climate-sensitive impediments to sustainable development faced by developing countries particularly in Africa and SE Asia. Two case studies in Ethiopia and Bangladesh suggest that to address these challenges requires integrated approaches for adaptation, mitigation and sustainable development. Strategies include measures that would simultaneously reduce pressures on biodiversity and food and nutrition security and contribute to carbon sequestration. Conclusion: Agriculture, health, and nutrition security policies need to be integrated onto national and international climate change agendas, in order to devise effective and pro-poor policies. Efforts to improve food and nutrition security in the face of challenges, including climate change and bioenergy production should to place the achievement of the MDGs at the centre of human endeavour. In particular, it remains essential to accelerate progress in reducing poverty and malnutrition while protecting the environment in Sub-Saharan Africa and SE Asia.

MAPPING HUMAN HEALTH VULNERABILITY TO CLIMATE CHANGE IN MEXICO

Background and Aims: Mexico is particularly vulnerable to climate change and climate variability due to its geographical location topography, hydrology and other factors like urbanization, deforestation and relative growth of poverty. For this reason we are building a human health vulnerability atlas, in order to assisting decision-makers in identifying risk, and planning and mapping a future, which would be more resilient to the changing climatic conditions in México. Methods: The first stage of the analysis was to obtain baseline data of climatic variables (1970-1999) and epidemiological data from acute diarrheal disease (ADD) and dengue (1998-2005). Secondly we generated a regionalized climate change projections for Mexico, from the downscaling of the results of General Circulation Models (GCMs): HadCM3, GFDL and ECHam4, and the A2 scenario. Finally we projected the incidence of ADD and dengue in 2030, including information of precipitation, temperature and human vulnerability. Results: Our study predicts that in 2030 the states of Veracruz, Tabasco and Chiapas will have high risk to ADD and almost all costal states will have high risk to dengue. There will be an increase in 2030´s rate ratios from the month of June and September for ADD and dengue, respectively. Conclusions: The preliminary results indicate that in 2030 there will be an excess for ADD and dengue cases attributable to climate change. Climate change will add to the burdens of those who are already poor and vulnerable.The results of the analysis are thus indicative only. Even so, they are useful for several purposes.

Vulnerability Analysis in SOA-Based Business Processes

Business processes and services can more flexibly be combined when based upon standards. However, such flexible compositions practically always contain vulnerabilities, which imperil the security and dependability of processes. Vulnerability management tools require patterns to find or monitor vulnerabilities. Such patterns have to be derived from vulnerability types. Existing analysis methods such as attack trees and FMEA result in such types, yet require much experience and provide little guidance during the analysis. Our main contribution is ATLIST, a new vulnerability analysis method with improved transferability. Especially in service-oriented architectures, which employ a mix of established web technologies and SOA-specific standards, previously observed vulnerability types and variations thereof can be found. Therefore, we focus on the detection of known vulnerability types by leveraging previous vulnerability research. A further contribution in this respect is the, to the best of our knowledge, most comprehensive compilation of vulnerability information sources to date. We present the method to search for vulnerability types in SOA-based business processes and services. Also, we show how patterns can be derived from these types, so that tools can be employed. An additional contribution is a case study, in which we apply the new method to an SOA-based business process scenario.

Building an Active Computer Security Ethics Community

In spite of significant ethical challenges faced by researchers evaluating modern threats, the computer security field has yet to grow its own active ethics community to describe and evaluate the ethical implications of its work. Modern threats such as denial-of-service (DoS) attacks, worms, viruses, phishing, and botnets underscore the need for Internet security research in an increasingly networked and computationally reliant society. This research involves not only appropriate responses but also difficult issues of privacy and responsible disclosure of vulnerability information.

A Methodology for Seismic Loss Estimation in Urban Regions Based on Ground-Motion Simulations

Seismic vulnerability assessment of residential buildings in regions of high seismicity is an interdisciplinary problem requiring major inputs from fields of seismology and earthquake engineering. The basic two components of loss estimation methods are information on regional seismicity and building stock. This study presents a realistic loss estimation methodology where the first component, input ground motions, is obtained from regional ground-motion simulations using the stochastic finite-fault technique. The second component, building vulnerability information, on the other hand, is taken into account using fragility analyses. Introducing the ground-motion intensity parameters obtained from simulations to the fragility curves, we obtain seismic loss distribution in a region. In this study, we demonstrate the loss estimation methodology with an application to three northwestern cities in Turkey (Duzce, Bolu, and Kaynasli) that experienced two major earthquakes (![Graphic][1] and ![Graphic][2] ) in less than three months in 1999. We initially verify the methodology with comparisons of observed and estimated damage ratios for the 12 November 1999 (![Graphic][3] ) Duzce earthquake. Later, we present the estimated damage ratios under scenario earthquakes in the region for a magnitude range of ![Graphic][4] . ![Graphic][5] is predicted to be the threshold magnitude for the cities of Duzce and Kaynasli where more than 60% of the building stock experience moderate and heavy damage. Because Bolu is at a farther distance from the fault plane, less damage is estimated for ![Graphic][6] than those in the other centers. For ![Graphic][7] , all three cities are predicted to experience substantial rates of heavy damage and collapse. [1]: /embed/inline-graphic-1.gif [2]: /embed/inline-graphic-2.gif [3]: /embed/inline-graphic-3.gif [4]: /embed/inline-graphic-4.gif [5]: /embed/inline-graphic-5.gif [6]: /embed/inline-graphic-6.gif [7]: /embed/inline-graphic-7.gif

Measuring and ranking attacks based on vulnerability analysis

As the number of software vulnerabilities increases, the research on software vulnerabilities becomes a focusing point in information security. A vulnerability could be exploited to attack the information asset with the weakness related to the vulnerability. However, multiple attacks may target one software product at the same time, and it is necessary to rank and prioritize those attacks in order to establish a better defense. This paper proposes a similarity measurement to compare and categorize vulnerabilities, and a set of security metrics to rank attacks based on vulnerability analysis. The vulnerability information is retrieved from a vulnerability management ontology integrating commonly used standards like CVE ( http://www.cve.mitre.org/ ), CWE ( http://www.cwe.mitre.org/ ), CVSS ( http://www.first.org/cvss/ ), and CAPEC ( http://www.capec.mitre.org/ ). This approach can be used in many areas of vulnerability management to secure information systems and e-business, such as vulnerability classification, mitigation and patching, threat detection and attack prevention.

Correlation Is Not Causation

Security people are constantly presented with circumstances in which causation is rather unclear, and our desire to discover it is irresistible. Code-complexity measures do seem to be highest in applications that have rather a lot to do. Having massive numbers of code paths does make security hard because massive numbers of code paths means a large attack surface, but massive numbers of code paths have an even more pronounced effect on modification. This paper presents the vulnerability information in Open Source Vulnerability Database (OSVDB), US National Vulnerability Database (NVD) and it's Common Vulnerability Enumeration (CVE).