A dependência tecnológica das atividades e dos processos de negócios no mundo corporativo impulsionou o desenvolvimento de novas técnicas de auditoria para apurar possíveis falhas sistêmicas, que pudessem afetar os controles internos das companhias. Sendo assim, a necessidade de automação dos testes de auditoria motivou a elaboração do conceito e a implantação de projetos de auditoria contínua de dados no ambiente empresarial. Esta tese avalia os principais aspectos críticos para a construção da auditoria contínua de dados, considerando o uso da tecnologia da informação e das técnicas de auditoria com auxílio do computador. A partir da fundamentação teórica formularam-se quatro premissas básicas, as quais derivaram oito proposições e onze aspectos críticos, os quais foram colocados em prova de conceito, por meio de estudo de casos múltiplos no cenário empresarial brasileiro. A pesquisa afirma que os aspectos críticos para a construção da auditoria contínua de dados, originários da fundamentação teórica e corroborados pelo resultado do estudo de casos múltiplos, servirão como direcionadores para a inicialização de projetos de auditoria contínua, bem como para sua reestruturação. / The technology dependence of activities and business processes in corporate world driving the development of new audit techniques to investigate possible systemic failures, that could affect the internal controls of companies. Thus, the need for automation of auditing tests led to the development of the concept and implementation of projects for continuous auditing of data in the enterprise environment. This thesis evaluates the major critical issues for the construction of continuous auditing of data, considering the use of information technology and the computer assisted audit techniques. From the theoretical foundation formulated four basic premises, which were derived eight propositions and eleven critical aspects, which were placed in a proof of concept, through multiple case study in the Brazilian business scenario. The research argues that the critical aspects for the construction of continuous auditing of data, originated in theoretical foundation and corroborated by the results of multiple case study, will serve as drivers for the initialization of continuous auditing projects as well as for its restructuring.

The ability to detect and prevent a network from DDoS attack and to ensure the high quality infrastructure is a back bone of today’s network security issues. In this thesis, we have successfully validated an algorithm using OmNet++ Ver. 4.0 simulation to show how a DDoS attack can be detected and how the nodes can be protected from such an attack using GOSSIP protocol.

This diploma thesis deals with the project proposal to install continuous monitoring on company’s travel and expense, which will be performed by internal audit department. It contains an analysis of the current state of the company, based on which the project is designed using project management methods.

No description available.

No description available.

The use of real-time control (RTC) as an adaptation technique for improving existing stormwater systems has been gaining attention in recent years for its ability to enhance water quality and quantity treatment. A case study RTC retrofit of seven existing detention basins was simulated for a small (162 ha), urbanized watershed in Blacksburg, VA. Two heuristic, reactive control algorithms were tested and compared for their ability to improve hydraulic conditions at each detention basin and the watershed outlet through manipulation of an actuated valve, under various permutations of RTC retrofitting (single facility, multiple facilities, etc.). Change in peak flow during 24-hour design storms was assessed. RTC only reduced peak flows at some of the facilities for storms with a return period of 2 years or less. For larger storms, RTC maintained or increased peak flow rates. During a 15-year simulation with historic precipitation data, total duration of erosive flows was reduced for most facility retrofit simulations; however, the duration of high intensity flows increased, or remained unchanged. This result was also reflected at the watershed outlet. / Master of Science / Stormwater management helps protect natural waterways from the harmful impacts of human development. A growing field of research is investigating the potential for “smart” technologies to improve the efficiency of existing stormwater facilities. This study investigates the application of a “smart” stormwater retrofit, known as real-time control (RTC), to existing stormwater management facilities located in a small case study watershed. The RTC system is composed of hypothetical internet-connected sensors and control valves which control flows at several points within the test watershed. Two control algorithms were tested, and compared to the current conditions (scenario with no RTC), for a large range of storm events. Results of this study found that RTC would lead to improved stream health for most rainfall events, but could potentially worsen conditions for the largest, most rare storm events. In addition, RTC was found to be much more effective at some points in the watershed than other points. Prediction of where RTC will be most effective should be the focus of future research.

Os sistemas de monitoração contínua da glicose (SMCG) foram desenvolvidos para monitorar as concentrações intersticiais de glicose em pacientes diabéticos, eliminando a necessidade de repetidas coletas de sangue. Vários estudos em humanos e animais indicam que a glicose intersticial possui correlação com a glicose sanguínea, mas poucos estudos abordam o uso clínico em equinos e há poucos aparelhos padronizados na espécie. O presente estudo teve como objetivo padronizar um novo SMCG intersticial (FreeStyle Libre) em cavalos hígidos e obesos, avaliar a fixação do sensor na pele do cavalo, e avaliar a eficácia do dispositivo no auxílio ao diagnóstico de resistência à insulina durante o teste combinado de glicose e insulina. Para isso foram usados 10 equinos adultos. O sensor foi fixado na região dorsolateral do terço inicial do pescoço de todos os animais. A dosagem de glicemia laboratorial e pelo aparelho foram comparadas em vários tempos. Em cinco cavalos (com escore corporal de 5 a 6) foram apenas realizadas essas dosagens e o acompanhamento por 7 dias da fixação do sensor. Nos outros cinco animais (com escore corporal acima de 7), foi realizado também o teste combinado de glicose e insulina. O aparelho permaneceu fixado entre 3 e 7 dias em 6 dos 10 animais. Houve ótima concordância entre os valores de glicose nos dois sistemas, ocorrendo apenas um pequeno atraso na detecção de variações bruscas de glicemia pelo aparelho testado. Assim conclui-se que o sistema de monitoramento contínuo da glicose FreeStyle Libre pode ser utilizado para avaliação indireta da glicemia por meio da glicose intersticial em cavalos adultos hígidos e obesos, inclusive durante o teste combinado de glicose e insulina. / Continuous glucose monitoring systems (CGMS) have been developed to monitor interstitial glucose concentrations in diabetic patients, eliminating the need for repeated blood sampling. Several studies in humans and animals indicate that interstitial glucose correlates with blood glucose, but few studies address clinical use in horses and there are few standardized devices in the species. The present study aimed to standardize a new interstitial CGMS (FreeStyle Libre) on healthy and obese horses, to evaluate the fixation of the sensor on horse skin, and to evaluate the efficacy of the device in aiding the diagnosis of insulin resistance during the combined test of glucose and insulin. For this, 10 adult horses were used. The sensor was attached to the dorsolateral region of the initial third of the neck of all animals. Dosage of laboratory blood glucose and by the device were compared at various times. In five horses (with a body score of 5 to 6), these measurements were only performed and the 7-day follow-up of the sensor fixation was performed. In the other five animals (with body score above 7), the combined glucose and insulin test was also performed. The device remained fixed for 3 to 7 days in 6 of the 10 animals. There was excellent agreement between the glucose values in both systems, with only a slight delay in the detection of abrupt changes in glycemia by the tested device. Thus, it can be concluded that the FreeStyle Libre glucose monitoring system can be used for indirect evaluation of glycemia through interstitial glucose in healthy and obese adult horses, including during the combined glucose and insulin test.

Continuous security monitoring is the process of following up the IT systems by collecting measurements, reporting and analysis of the results for comparing the security level of the organization on continuous time axis to see how organizational security is progressing in the course of time. In the related literature there is very limited work done to continuously monitor the security of the organizations. In this thesis, a continuous security monitoring framework based on security metrics is proposed. Moreover, to decrease the burden of implementation a software tool called SecMon is introduced. The implementation of the framework in a public organization shows that the proposed system is successful for building an organizational memory and giving insight to the security stakeholders about the IT security level in the organization.

abstract: With the growth of IT products and sophisticated software in various operating systems, I observe that security risks in systems are skyrocketing constantly. Consequently, Security Assessment is now considered as one of primary security mechanisms to measure assurance of systems since systems that are not compliant with security requirements may lead adversaries to access critical information by circumventing security practices. In order to ensure security, considerable efforts have been spent to develop security regulations by facilitating security best-practices. Applying shared security standards to the system is critical to understand vulnerabilities and prevent well-known threats from exploiting vulnerabilities. However, many end users tend to change configurations of their systems without paying attention to the security. Hence, it is not straightforward to protect systems from being changed by unconscious users in a timely manner. Detecting the installation of harmful applications is not sufficient since attackers may exploit risky software as well as commonly used software. In addition, checking the assurance of security configurations periodically is disadvantageous in terms of time and cost due to zero-day attacks and the timing attacks that can leverage the window between each security checks. Therefore, event-driven monitoring approach is critical to continuously assess security of a target system without ignoring a particular window between security checks and lessen the burden of exhausted task to inspect the entire configurations in the system. Furthermore, the system should be able to generate a vulnerability report for any change initiated by a user if such changes refer to the requirements in the standards and turn out to be vulnerable. Assessing various systems in distributed environments also requires to consistently applying standards to each environment. Such a uniformed consistent assessment is important because the way of assessment approach for detecting security vulnerabilities may vary across applications and operating systems. In this thesis, I introduce an automated event-driven security assessment framework to overcome and accommodate the aforementioned issues. I also discuss the implementation details that are based on the commercial-off-the-self technologies and testbed being established to evaluate approach. Besides, I describe evaluation results that demonstrate the effectiveness and practicality of the approaches. / Dissertation/Thesis / M.S. Computer Science 2014

Depuis son invention en 1940 mais surtout consécutivement à sa fermeture au public en 1963, la conservation de la Grotte de Lascaux se base entre autres sur la compréhension de ses interactions avec le massif karstique environnant et notamment les processus siégeant dans l’épikarst et la zone de transmission superficielle. Ces travaux de thèse se sont donc attachés à comprendre la dynamique du CO2 dans le continuum sol-épikarst-cavité afin d’en évaluer les potentiels impacts sur la conservation des parois. Nous bénéficions à Lascaux d’une fenêtre d’observation sur les écoulements provenant de l’épikarst sus-jacent dans le SAS 1 de la cavité, mais aussi d’une instrumentation conséquente. Elle permet l’acquisition de nombreuses séries de données temporelles des paramètres microclimatiques ainsi que des teneurs en CO2 de l’air en différents points de la cavité ou encore du débit de l’émergence épikarstique depuis le début des années 2000.Une première partie de l’étude est consacrée à la caractérisation de la dynamique du CO2 dans le contexte d’un épikarst sous couverture pédologique. A cette fin, une parcelle expérimentale est instrumentée afin d’effectuer un suivi des paramètres hydroclimatiques et des teneurs en CO2 à différentes profondeurs. Des périodes de recharge (accumulation) et de vidange (émanations vers l’atmosphère) du CO2 de l’épikarst superficiel sont démontrées tout comme la constitution d’un stock de CO2 peu variable dans l’épikarst subsuperficiel. La compréhension de ces différents mécanismes aboutit à un schéma général de la dynamique du CO2 dans l’épikarst.Cette dynamique est étudiée dans la Grotte de Lascaux au cours d’une seconde partie à partir des séries temporelles des paramètres microclimatiques et des teneurs en CO2, mais aussi du signal isotopique en 13C. Il est alors démontré que les flux de CO2 entrant dans la cavité proviennent de trois origines distinctes : l’atmosphère (entrée), l’épikarst superficiel (Galerie Mondmilch et Salles Ensablées) et le massif (éboulis du Puits du Sorcier). Parallèlement, deux régimes aérologiques responsables de la répartition spatio-temporelle des teneurs en CO2 dans la cavité sont observés : stratification et thermoconvections. Ils sont les principaux responsables de la dynamique du CO2 dans la Grotte de Lascaux du fait des faibles échanges entre cette dernière et l’atmosphère comparativement à d’autres cavités karstiques de la région. Enfin, l’impact du dispositif du pompage de l’air sur l’aérologie et la dynamique du CO2 dans la Grotte de Lascaux est évalué. La comparaison de ces dynamiques avec et sans extraction de l’air de la cavité conduit à la création de schémas conceptuels de la dynamique du CO2 dans la Grotte Lascaux.L’étude des conditions d’écoulement dans l’épikarst de la Grotte de Lascaux, troisième partie de ces travaux, a été effectuée à partir d’un suivi en continu des débits, paramètres physico-chimiques et de la fluorescence naturelle de l’eau. L’analyse des séries temporelles de ces traceurs naturels conduit caractériser de façon détaillée les conditions d’écoulement et notamment l’importance de la teneur en eau de l’épikarst sur la taille zone d’alimentation et les types d’eau arrivant à l’exutoire. Parallèlement, l’impact de ces conditions d’écoulement sur les équilibres calco-carboniques des eaux arrivant dans la cavité est analysé.Enfin, les connaissances acquises sont appliquées pour déterminer l’impact potentiel en continu des eaux (condensation et exfiltration) présentes aux parois ornées de la cavité. A cette fin, une méthodologie d’estimation de la masse de calcite potentiellement précipitée par les eaux d’exfiltration et dissoute par les eaux de condensation basée sur des simulations hydrogéochimiques est développée. Son application à la paroi gauche de la Salle de la Taureaux en contextes de pompage et naturel conduit à l’évaluation de l’impact potentiel du pompage mais aussi de l’aérologie de la cavité sur la conservation des parois. / Since its invention in 1940 but especially as a result of its closure to the public in 1963, the preservation of the Cave of Lascaux bases itself among others on the understanding of its interactions with the surrounding karstic massif in particular the processes sitting in the épikarst and the zone of superficial transmission. That is why this thesis research attempted to understand the dynamics of the CO2 in the continuum soil-epikarst-cave to estimate the potential impacts on the preservation of walls. We benefit in Lascaux of an observation window on the flows resulting from the epikarst known emergence in the SAS 1 of the cavity, but also the consequent instrumentation. It allows the acquisition of numerous time series data of the microclimatic parameters, carbon dioxide partial pressures at different points of the cave and the discharge of the epikarstic emergence since the beginning of the century.A first part of the study is dedicated to the characterization of the dynamics of the CO2 in the context of an epikarst under soil cover. To this end, an experimental parcel is instrumented to follow the hydroclimatic parameters and the contents in PCO2 at various depths. Periods of recharge (accumulation) and draining (emanations towards the atmosphere) of the superficial epikarst CO2 are highlighted when the constitution of a low variable CO2 stock is observed in the subsuperficiel epikarst. The understanding of these various mechanisms ends in a conceptual scheme of the CO2 dynamics in the epikarst.In a second part, this dynamic is studied in the Cave of Lascaux from the temporal series of the microclimatic parameters and the contents in CO2, but also the δ13CCO2. It is then demonstrated that the flows of CO2 entering the cavity result from three different origins: the atmosphere (entrance), the superficial epikarst (Mondmilch Gallery and Silted-up Rooms) and the massif (screw of the Shaft of the Sorcerer). At the same time, two aerological regimes responsible for the spatiotemporal distribution of the PCO2 in the cavity are observed: stratification and thermoconvection. They are the main mechanisms responsible for the dynamics of the CO2 in the Cave of Lascaux because of the low exchanges with the atmosphere. Finally, the impact of the pumping of the air on the aerology and the dynamics of the CO2. The comparison of these dynamics with and without extraction of the air of the cavity leads to the creation of conceptual schemes of the dynamics of the CO2 in the Cave Lascaux.The study of the flowing conditions in the epikarst of the Cave of Lascaux, the third part of these works, was made from a continuous monitoring of the discharge, physico-chemical parameters and the natural fluorescence of the water. The analysis of the temporal series of these natural tracers leads to characterize in a detailed way the flowing conditions and the importance of the moisture content of the epikarst on the size of the recharge area and the types of water arriving at the emergence. In parallel, the impact of these conditions on the calco-carbonic balances of waters arriving in the cavity is analyzed.Finally, the acquired knowledge are applied to determine the potential continuous impact of the waters (condensation and exfiltration) present at the adorned walls of the cave. To this end, a methodology of estimation of the mass of calcite potentially precipitated by exfiltration and dissolved by condensation based on hydrogeochemical simulations is developed. Its application to the left wall of the Hall of the Bulls with and without pumping leads to the evaluation of the potential impact of this device but also the aerology of the cavity on the preservation of walls.