Category / Fusion Investment Fund

Security by Design through “Human Centered” Specification Exemplars

IMG_2778-300x300

A year ago, we received Fusion funding to build the Bournemouth-Athens Network in Critical Infrastructure Security. The aim of this project was to build collaborative links between the BU Cyber Security Research group and the Information Security & Critical Infrastructure Protection Laboratory at Athens University of Economics & Business (AUEB). We built these links by working on a joint project, which we advanced through visits and other activities.

The aim of our joint activities was to build human-centered specification exemplars of Critical Infrastructure (CI) operating environments.
We depend on infrastructure associated with things like water, gas, electricity, or transport, but the criticality of such infrastructure is usually lost on us because it fades into the background of our everyday lives. The damage or loss of such infrastructure is only felt when it becomes unavailable, and its significance can range from mild annoyance if its means the trains are late, through to civil disorder and loss of life if we are unable to access clean water for a prolonged period. Despite their importance, there are no useful models of environments that people can use when developing or evaluating technology for CI. Our work aimed to remedy this by building specification exemplars for typical CI companies. In doing so, these would capture the human nuances associated with different aspects of CI, and help people identify possible security issues associated with new ideas before, rather than after, they are deployed in the field.

Together, a team of BU and AUEB researchers carried out work to build two specification exemplars of hypothetical CI companies. One of these was a UK Water Company (ACME Water). The other was a rail company in South East Europe (Balkan Rail). BU hosted researchers from AUEB and ran a number of workshops to identify different security aspects of these companies. In return, AUEB hosted BU undergraduate research assistants as they collected data from a Greek CI company, and ran workshops to develop and evaluate different aspects of the exemplars with AUEB researchers.

The exemplars have been made publicly available, and are modelled using CAIRIS – an open-source security design tool maintained by researchers at BU. To date, several publications have so far arisen from our preliminary work building [1] and applying the ACME Water exemplar [2, 3, 4]. We’re also using the exemplars as part of our teaching to provide case studies for Forensic & Computer Security lab exercises and seminars. Although the studies provided are hypothetical, they are grounded in real world data, and make visible to students the root causes of a variety of cybersecurity risks.

Looking forward, our work has gained the interest of a number of UK and international collaborators, and we’re looking for opportunities to build a library of human-cantered specification exemplars for many other, non-CI, environments. Such environments might include homes, and different types of ‘soft target’. Our long term aim is to make sure people don’t design security as an afterthought. Our work on BANCIS has made a small, but significant, step towards achieving this goal.

References

[1] S. Faily, G. Lykou, A. Partridge, D. Gritzalis, A. Mylonas, and V. Katos, “Human-Centered Specification Exemplars for Critical Infrastructure Environments,” in Proceedings of the 30th British HCI Group Annual Conference on People and Computers, 2016.

[2] S. Faily, C. Iacob, and S. Field, “Ethical Hazards and Safeguards in Penetration Testing,” in Proceedings of the 30th British HCI Group Annual Conference on People and Computers: Fusion, 2016. 

[3] D. Ki-Aries, S. Faily, and K. Beckers, “Persona-Driven Information Security Awareness,” in Proceedings of the 30th British HCI Group Annual Conference on People and Computers: Fusion, 2016. 

[4] A. Partridge and S. Faily, “The application of useless japanese inventions for requirements elicitation in information security,” in Proceedings of the 30th British HCI Group Annual Conference on People and Computers: Fusion, 2016. 

Assessing Undergraduate Research Assistants’ Learning through Participatory Methods

This blog post reports on the progress of the CEL-Fusion Funded project Assessing Undergraduate Research AssistantsLearning through Participatory Methods (AURAL).

The Undergraduate Research Assistantship (URA) is an institutional programme run by BU’s Research and Knowledge Exchange Office (RKEO), which furnishes academics with the financial means to hire a part-time (spring cohort) or full-time (summer cohort) research assistant who works between 75 and 225 hours on the academics’ research projects. This scheme runs twice a year and this year alone attracted 95 applications from academics with the most diverse projects.

Student researchers plan their diaries' content over pizza and snacks.

Student researchers plan their diaries’ content over pizza and snacks.

Interventions that use a ‘students-as-researchers’ pedagogy, where undergraduate students are involved in research-intensive projects, are increasing in the UK (Walkington, 2015) and internationally (Healey, 2014). BU’s URA programme is an apposite case study given its arrangements of paid research placements, which position the scheme as both research-based and work-based learning. This research contributes to the burgeoning literature on students-as-researchers through its employment of a dialogical participatory research design whereby students actively self-monitor their evolving learning when working on a research project. Through the use of reflective diaries and participatory sessions, students engaged in the process of evaluating the impact of this university-wide scheme.

In this endeavour, RKEO and CEL worked closely to embed the research into the scheme. We matched a participatory planning session for those students taking part in the research with the induction for the entire cohort of URA, so that the timing would be convenient for the majority of them. In addition, the research was run in parallel with their URA placements, and the necessary adjustments were made when students continued working beyond their URA contracts.

The preliminary results of AURAL were reported during CELebrate, through a session that provided a link with other colleagues interested in fostering research-based learning and its university-wide implementation. Twelve students from the spring cohort agreed to take part in the research, but only 7 wrote at least one diary entry and 3 made it to the closing session. All students who agreed to take part are being invited for an in-depth interview, while 17 new participants have been recruited from the summer cohort.

For a flavour of the passages coded under ‘research skills’ gained by participants, see the quotes below:

I learnt how to successfully collect various forms of offline data in order to provide some background data for a study. I have also learnt that the collection process is not a scary as first thought, and confidence and professionalism is key to the collection of good data and a happy participant. The participant feel safe and confident and more willing to participate if you actually look like you know what you’re doing and happy to be doing so (Participant 3, Diary entry 5)

I understood Thematic Analysis a lot better and felt more comfortable doing it now knowing what I was doing (Participant 4, Diary entry 2)

The full results of this scheme will be ready by the end of the summer. Watch this space!

References

Healey, M. (2014). Integrating Undergraduate Research into the Curriculum: International Perspectives on Capstone and Final-year Projects. CUR Quarterly, 34(4), 26-32.
Walkington, H. (2015). Students as researchers: Supporting undergraduate research in the disciplines in higher education. York: Higher Education Academy.

Note: Earlier versions of this text were submitted as part of a number of internal and external applications and presented at CELebrate. The blog post was first published at the CEL Blog, and is reposted here with permission.

Seminar, Prof Edwin van Teijlingen, ‘Maternal Mortality in Nepal’, Wed 20th April, Royal London House, R303, 13:00-13:50.

Maternal Mortality in Nepal
Abstract: The session links various social and political factors that affect maternal mortality. Women dying in pregnancy and childbirth is very much a problem of and in low-income countries. This talk focuses on Nepal, one of the poorer countries of the world, to highlight a range of maternal health issues and wider influencing factors including globalisation and the influence of global organisations such as the World Health Organisation.

For further information regarding the Social Science seminar series, get in touch with Dr Mastoureh Fathi (mfathi@boutnemouth.ac.uk).

The British Conference of Undergraduate Research (BCUR) is coming to BU!

On 25-26 Apr 2017, BU will be hosting the highly valued and increasingly popular BCUR (http://www.bcur.org/).  Almost 400 UG students from across the country attended BCUR 2016 at Manchester Metropolitan University. Hosting BCUR will be hard work, but also a great opportunity to promote BU’s excellent facilities and postgraduate opportunities. Undergraduates of all levels are invited to submit an abstract to BCUR, abstracts are peer-reviewed and works accepted can be presented in a variety of formats (oral presentations, posters, art displays, workshops and performances).

Prof Gail Thomas (Head of CEL), Dr Luciana Esteves (SciTech) and Dr Mary Beth Gouthro (Faculty of Management) are co-chairing BCUR 2017 and are currently setting up the organising committee. If you are interested in helping organising the event, please contact one of the chairs. Representatives from all Faculties, SUBU and central services are welcome.

You can also help by stimulating your students to submit their abstracts to BCUR – your incentive is the most important factor influencing students’ decisions in taking part of extra-curricular activities. Submissions are likely to be open between Oct-Dec – so watch this space!

BU’s application to host BCUR was one of the successful outcomes of the Fusion-funded SURE project (Showcasing Undergraduate Research Excellence). The project has delivered two SURE conferences (March 2015 and 2016), an  extra-curricular opportunity open to all BU UG students (across all levels and programmes). You can find a brief summary of the two conferences in this CEL blog.

BU students taking part in the SURE conferences not only gain valuable transferable skills and experience, they can win fantastic awards and prizes (see below) and be selected to present their work in the Posters in Parliament event. You can read about this year’s BU research showcased in Parliament here.

SURE Conference award winners:

Research Excellence (MSc or MRes fee waiver): Jozef Kulik, Psychology (2015); Rosie Lumley, Nutrition (2016)

Best oral presentation (funds to present at an external conference): Ben Hayes, Physiotherapy (2015); Charlotte Fodor, English (2016)

Best poster (iPad): Emma Packer, Biological Sciences (2015); Christopher Dwen, Forensic Science (2016)

2016 winners

 

URA Academic Applications – FINAL CALL

The deadline for the Undergraduate Research Assistantship (URA) programme is Sunday 21st February.

The application form to apply for funding to recruit a student to work on your research full time for six weeks during the summer can be found here.

The programme is funded by the Fusion Investment Fund and aims to support undergraduates to undertake paid work under the guidance of an experienced academic in a research position that is directly related to their career path and/or academic discipline.

The summer programme is for students to work full-time (37.5 hours per week) for six weeks over the summer. This programme will have the capacity for approximately 20 placements.

If you have any questions relating to the programme, please contact Rachel Clarke, KE Adviser (KTP) on 01202 961347 or email clarker@bournemouth.ac.uk