Cookies
O website necessita de alguns cookies e outros recursos semelhantes para funcionar. Caso o permita, o INESC TEC irá utilizar cookies para recolher dados sobre as suas visitas, contribuindo, assim, para estatísticas agregadas que permitem melhorar o nosso serviço. Ver mais
Aceitar Rejeitar
  • Menu
Publicações

2023

Exploring a Multidisciplinary Assessment of Organisational Maturity in Business Continuity: A Perspective and Future Research Outlook

Autores
Russo, N; Mamede, HS; Reis, L; Martins, J; Branco, F;

Publicação
APPLIED SCIENCES-BASEL

Abstract
In a competitive business landscape heavily reliant on information and communication technology, organisations must be prepared to address disruptions in their business operations. Business continuity management involves effective planning for the swift reestablishment of business processes in the short term. However, there are still obstacles to implementing business continuity plans, which can be justified by various factors. The purpose of this study is to present the perspectives and future research paths based on a systematic literature review from the peer-reviewed literature published from 1 January 2000 to 31 December 2021. This systematic literature review adheres to the guidelines established by evidence-based software engineering and leverages the Parsifal online tool. The primary research results identify and establish connections between the common components and activities of business continuity management as defined in international standards and frameworks to identify gaps in the existing knowledge. These findings will contribute to the development of a framework that provides a practical approach applicable to organisations of all sizes, taking into account each aspect of business continuity management, with a particular emphasis on information and communication technology systems. This paper's contribution lies in offering insights from a systematic literature review regarding the strategic principles for designing and implementing a business continuity plan, along with a comprehensive overview of related research. Furthermore, it presents a path forward to guide future research efforts aimed at addressing the gaps in the literature concerning continuity planning.

2023

Rogue key and impersonation attacks on FIDO2: From theory to practice

Autores
Barbosa, M; Cirne, A; Esquível, L;

Publicação
18TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY & SECURITY, ARES 2023

Abstract
FIDO2 is becoming a defacto standard for passwordless authentication. Using FIDO2 and WebAuthn, web applications can enable users to associate cryptographic credentials to their profiles, and then rely on an external authenticator (e.g., a hardware token plugged into the USB port) to perform strong signature-based authentication when accessing their accounts. The security of FIDO2 has been theoretically validated, but these analyses follow the threat model adopted in the FIDO2 design and explicitly exclude some attack vectors as being out of scope. In this paper we show that two of these attacks, which appear to be folklore in the community, are actually straightforward to launch in practice (user PIN extraction, impersonation and rogue key registration). We demonstrate a deployment over vanilla Linux distributions and commercial FIDO2 authenticators. We discuss the potential impact of our results, which we believe will contribute to the improvement of future versions of the protocol.

2023

TADA: A Toolkit for Approximate Distributed Agreement

Autores
da Conceiçao, EL; Alonso, AN; Oliveira, RC; Pereira, JO;

Publicação
DISTRIBUTED APPLICATIONS AND INTEROPERABLE SYSTEMS, DAIS 2023

Abstract
Approximate agreement has long been relegated to the sidelines compared to exact consensus, with its most notable application being clock synchronisation. Other proposed applications stemming from control theory target multi-agent consensus, namely for sensor stabilisation, coordination in robotics, and trust estimation. Several proposals for approximate agreement follow the Mean Subsequence Reduce approach, simply applying different functions at each phase. However, taking clock synchronisation as an example, applications do not fit neatly into the MSR model: Instead they require adapting the algorithms' internals. Our contribution is two-fold. First, we identify additional configuration points, establishing a more general template of MSR approximate agreement algorithms. We then show how this allows us to implement not only generic algorithms but also those tailored for specific purposes (clock synchronisation). Second, we propose a toolkit for making approximate agreement practical, providing classical implementations as well as allow these to be configured for specific purposes. We validate the implementation with classical algorithms and clock synchronisation.

2023

Foundational DevOps Patterns

Autores
Marques, P; Correia, FF;

Publicação
CoRR

Abstract

2023

Witnessing a Forbush Decrease with a Microscintillator Ionisation Detector over the Atlantic Ocean

Autores
Tabbett, J; Aplin, K; Barbosa, S;

Publicação

Abstract
<p>A novel ionisation detector, previously deployed on meteorological radiosonde flights, has demonstrated responsivity to X-rays and gamma radiation, and additionally, is thought to be sensitive to ionising radiation from cosmic rays. The PiN detector, composed of a 1x1x0.8 cm<sup>3 </sup>CsI(Tl) microscintillator coupled to a PiN photodiode, was deployed on the NRP Sagres sailing vessel on a cruise in the Atlantic between Portugal and the Azores in 2021. The instrument can determine both the count rate and energy of incoming ionising radiation particles.</p><p>The instrument was operational during the voyage in November 2021 when a coronal mass ejection event induced a sudden decrease in the observed cosmic ray intensity, known as a Forbush decrease. We present data recorded by the ionisation detector during this period, to characterise the instrument’s ability to detect cosmic ray events, and we compare the performance with neutron monitoring stations Oulu in Finland, and Dourbes in Belgium. As the PiN detector provides spectral and count rate data, it is possible to group events by their energy, and investigate the count rates of specific energy regimes. This approach is useful as many sources – including high and low energy ionising radiation from cosmic rays – contribute to the background energy spectrum. As a result, more meaningful comparisons and relationships can be established with the neutron monitoring stations.</p>

2023

Quantum Bayesian Decision-Making

Autores
de Oliveira, M; Barbosa, LS;

Publicação
FOUNDATIONS OF SCIENCE

Abstract
As a compact representation of joint probability distributions over a dependence graph of random variables, and a tool for modelling and reasoning in the presence of uncertainty, Bayesian networks are of great importance for artificial intelligence to combine domain knowledge, capture causal relationships, or learn from incomplete datasets. Known as a NP-hard problem in a classical setting, Bayesian inference pops up as a class of algorithms worth to explore in a quantum framework. This paper explores such a research direction and improves on previous proposals by a judicious use of the utility function in an entangled configuration. It proposes a completely quantum mechanical decision-making process with a proven computational advantage. A prototype implementation in Qiskit (a Python-based program development kit for the IBM Q machine) is discussed as a proof-of-concept.

  • 620
  • 4505