Reference monitor inlining is a technique for enforcing security policies by injecting security checks into the untrusted software in a style similar to aspect-oriented programming. The intention is that the injected code enforces compliance with the policy (security), without adding behavior (conservativity) or affecting existing policy compliant behavior (transparency). This thesis consists of four papers which covers a range of topics including formalization of monitor inlining correctness properties, certification of inlined monitors, limitations in multithreaded settings and extensions using data-flow monitoring. The first paper addresses the problem of having a potentially complex program rewriter as part of the trusted computing base. By means of proof-carrying code we show how the inliner can be replaced by a relatively simple proof-checker. This technique also enables the use of monitor inlining for quality assurance at development time, while minimizing the need for post-shipping code rewrites. The second paper focuses on the issues associated with monitor inlining in a concurrent setting. Specifically, it discusses the problem of maintaining transparency when introducing locks for synchronizing monitor state reads and updates. Due to Java's relaxed memory model, it turns out to be impossible for a monitor to be entirely transparent without sacrificing the security property. To accommodate for this, the paper proposes a set of new correctness properties shown to be realistic and realizable. The third paper also focuses on problems due to concurrency and identifies a class of race-free policies that precisely characterizes the set of inlineable policies. This is done by showing that inlining of a policy outside this class is either not secure or not transparent, and by exhibiting a concrete algorithm for inlining of policies inside the class which is secure, conservative, and transparent. The paper also discusses how certification in the style of proof-carrying code could be supported in multithreaded Java programs. The fourth paper formalizes a new type of data centric runtime monitoring which combines monitor inlining with taint tracking. As opposed to ordinary techniques which focus on monitoring linear flows of events, the approach presented here relies on tree shaped traces. The paper describes how the approach can be efficiently implemented and presents a denotational semantics for a simple ``while'' language illustrating how the theoretical foundations is to be used in a practical setting. Each paper is concluded by a practical evaluation of the theoretical results, based on a prototype implementation and case studies on real-world applications and policies. / Referensmonitorinvävning, eller monitorinvävning, är en teknik som används för att se till att en given säkerhetspolicy efterföljs under exekvering av potentiellt skadlig kod. Tekniken går ut på att bädda in en uppsättning säkerhetskontroller (en säkerhetsmonitor) i koden på ett sätt som kan jämföras med aspektorienterad programmering. Syftet med den invävda monitorn är att garantera att policyn efterföljs (säkerhet) utan att påverka ursprungsprogrammets beteende, såvida det följer policyn (transparans och konservativitet). Denna avhandling innefattar fyra artiklar som tillsammans täcker in en rad ämnen rörande monitorinvävning. Bland annat diskuteras formalisering av korrekthetsegenskaper hos invävda monitorer, certifiering av invävda monitorer, begränsningar i multitrådade program och utökningar för hantering av dataflödesmonitorering. Den första artikeln behandlar problemen associerade med att ha en potentiellt komplex programmodifierare som del i den säkerhetskritiska komponenten av ett datorsystem. Genom så kallad bevisbärande kod visar vi hur en monitorinvävare kan ersättas av en relativt enkel beviskontrollerare. Denna teknik möjliggör även användandet av monitorinvävning som hjälpmedel för programutvecklare och eliminerar behovet av programmodifikationer efter att programmet distribuerats. Den andra artikeln fokuserar på problemen kring invävning av monitorer i multitrådade program. Artikeln diskuterar problemen kring att upprätthålla transparans trots införandet av lås för synkronisering av läsningar av och skrivningar till säkerhetstillståndet. På grund av Javas minnesmodell visar det sig dock omöjligt att bädda in en säkerhetsmonitor på ett säkert och transparent sätt. För att ackommodera för detta föreslås en ny uppsättning korrekthetsegenskaper som visas vara realistiska och realiserbara. Den tredje artikeln fokuserar även den på problemen kring flertrådad exekvering och karaktäriserar en egenskap för en policy som är tillräcklig och nödvändig för att både säkerhet och transparens ska uppnås. Detta görs genom att visa att en policy utan egenskapen inte kan upprätthållas på ett säkert och transparent sätt, och genom att beskriva en implementation av en monitorinvävare som är säker och transparent för en policy som har egenskapen. Artikeln diskuterar också hur certifiering av säkerhetsmonitorer i flertrådade program kan realiseras genom bevisbärande kod. Den fjärde artikeln beskriver en ny typ av datacentrisk säkerhetsmonitorering som kombinerar monitorinvävning med dataflödesanalys. Till skillnad mot existerande tekniker som fokuserar på linjära sekvenser av säkerhetskritiska händelser förlitar sig tekniken som presenteras här på trädformade händelsesekvenser. Artikeln beskriver hur tekniken kan implementeras på ett effektivt sätt med hjälp av abstraktion. Varje artikel avslutas med en praktisk evaluering av de teoretiska resultaten baserat på en prototypimplementation och fallstudier av verkliga program och säkerhetsegenskaper. / <p>QC 20130220</p>

This dissertation examines changes that companies made in order to obtain Forest Stewardship Council (FSC) certification in the Canadian provinces of British Columbia, Alberta, Ontario and Quebec, and the role that provincial governments have played in the implementation of this emerging market-based form of governance. It analyzes the indirect roles that governments have played in either encouraging or inhibiting the adoption of certification through their policies, as well as the direct roles played in response to particular certification attempts that occurred on public land. Through the use of case studies of individual operations in each province, the interaction between state and non-state authority is explored, as well as the role that forest tenure played in each operation’s ability to obtain certification. The results reveal that the changes required to obtain certification were substantial but associated with only a small subset of the FSC’s Principles and Criteria, heavily weighted towards environmental issues. While corrective action requests are issued to the company pursuing certification, the results show that non-exclusive tenure limits a company’s ability to respond to these requests without the cooperation of the provincial government and resource users with overlapping tenure rights. However, limited duration of forest tenure does not preclude certification, and for the most part, provincial governments are found to play important facilitative roles in certification, both through their policies and regulations, and as providers of information and technical support. Further, the majority of the corrective actions were not required to be implemented prior to certification being awarded, but within the five year term of the certificate. This appears to have acted as a flexibility mechanism, allowing the certification system to secure the participation of companies in the short term, with the hope of leveraging greater change in the long term from the company, the government in question, and other resource users with overlapping tenure rights.

Le but de cette thèse fut de comprendre l’apprentissage de formateurs d’entraîneurs et d’entraîneurs dans le Programme national de certification des entraîneurs. Deux études furent réalisées. La première porte sur l’apprentissage de cinq formateurs au moment d’être formé et en présentant des ateliers à des entraîneurs. La deuxième examine l’apprentissage de onze entraîneurs dans des ateliers. Les données furent collectées à partir de séances d’observation non participante et d’entretiens semi-structurés multiples. Elles furent analysées à partir de la théorie de l’apprentissage humain (Jarvis, 2006, 2007, 2008, 2009) et la théorie de Moon (2001) sur l’apprentissage dans les ateliers de courte durée. Les résultats révélèrent qu’apprendre peut être un processus cognitif, émotif et/ou pratique. Les formateurs apprirent autant en présentant les ateliers à des entraîneurs qu’au moment d’être formé. Les entraîneurs validèrent leur pratique, la modifièrent ou éprouvèrent de l’inconfort à la modifier. Des suggestions furent proposées aux responsables du programme.

Dans les années 1990, plusieurs initiatives des gouvernements, des industriels et surtout des organisations environnementales ont mené à une prolifération des programmes de certification forestière tels que le Forest Stewardship Council (FSC), le CSA/Z808 de l'Association canadienne des normes, la Sustainable Forestry Initiative (SFI) ou la norme ISO14001. La certification forestière est un instrument créé pour contrôler les pratiques et actions largement critiquées de l'industrie forestière. La présente recherche utilise la certification forestière comme un indicateur de mesure de la performance environnementale. Les études empiriques portant sur la relation entre la performance environnementale (PE) et la performance financière (PF) rapportent dans l'ensemble une relation positive entre ces deux variables (Klassen et McLaughlin, 1996; Hamilton, 1995; White, 1995; Shane et Spicer, 1983). D'un autre côté, les études empiriques portant sur la certification se sont intéressées, pour la plupart, à étudier la disposition des consommateurs pour acheter les produits certifiés. Toutefois, peu de recherches empiriques ont analysé la certification du point de vue des investisseurs. L'objectif de la présente recherche consiste à examiner la relation entre la performance environnementale, telle que mesurée par l'instrument de la certification forestière, et la performance financière, et ce, dans le contexte canadien et américain. Bien que la certification entraîne d'importants coûts directs et indirects, elle présente néanmoins certains avantages tels qu'une meilleure relation de l'entreprise certifiée avec les parties prenantes, des avantages de marché (ventes potentiellement supérieures), etc. Si les marchés financiers reconnaissent l'importance stratégique de la certification, ils accorderont probablement une valeur financière supérieure pour les entreprises certifiées. La question principale est de savoir si le marché accorde une «prime verte» pour les entreprises ayant adopté une telle initiative normative. Pour y répondre, nous avons utilisé la méthodologie événementielle qui permet de mesurer l'impact d'un événement, tel celui de l'adoption de la certification, sur la performance financière telle que mesurée par les rendements anormaux cumulés (RAC). Nous avons utilisé un échantillon de contrôle sélectionné en fonction de l'industrie (code SIC à 2 «digits») et de la taille (capitalisation boursière) comme référence («benchmark») pour les entreprises certifiées. En conceptualisant les certifications comme indicateurs d'une bonne performance environnementale et on les catégorisant en fonction de la nature des vérificateurs, nous avons analysé la réaction des investisseurs aux annonces de certification (FSC, CSA, SFI et ISO14001) à court et à moyen et long termes. Les résultats de l'étude à court terme suggèrent que la certification a un impact positif sur la performance financière, ce qui supporte l'argument en faveur d'une relation positive entre PE et PF. Toutefois, cette relation positive ne tient pas à moyen et long termes. En effet, les entreprises certifiées ont réalisé des rendements anormaux cumulés moyens négatifs et significatifs dans les 12, 24 et 36 mois suivant la certification. Cet impact négatif concerne essentiellement les entreprises ayant choisi l'option de vérification conduite par une tierce partie indépendante. Sur une période de 36 mois suivant la certification, le marché financier a récompensé les entreprises certifiées FSC (18,6 %), tandis qu'il a pénalisé les entreprises certifiées SFI, CSA et ISO14001 (-19,21 %, -37,37 % et -24,13 % respectivement). De plus, l'impact de la certification sur la performance financière dépend du secteur industriel et de la taille de l'entreprise. En outre, les entreprises certifiées avant décembre 2002 ont bénéficié d'une PF supérieure relativement à celles certifiées après cette date. Enfin, les certifications annoncées par les entreprises elles-mêmes ont bénéficié d'une PF supérieure relativement aux certifications annoncées par d'autres sources. ______________________________________________________________________________ MOTS-CLÉS DE L’AUTEUR : Développement durable, Certification forestière, Forest Stewardship Council (FSC), La norme CSA/Z808, Sustainable Forestry Initiative (SFI), La norme ISO14001, Performance environnementale, Performance financière, Étude événementielle, Rendement anormal, Rendement anormal cumulé.

This thesis examines if auditors, managers and workers see certification and auditing as tools to improve working conditions in the Kenyan cut flower industry. It scrutinizes if mentioned stakeholders think that certification has been effective, since the state of working conditions of the industry were brought to attention in 2002 by academics and non-governmental organizations. The study further examines what different stakeholders see as challenges with the certification process as well as with the auditing process. The theoretical framework for the study consists of several theories from previous studies, including Gereffi’s buyer-driven value chain and Barrientos and Smith’s distinction between outcome standards and process rights. The study is partly a literature review but focus of the study is on the findings from ten semi-structured interviews. Among the stakeholder groups there was not one commonly expressed understanding on if certification and auditing had improved the working conditions. All three stakeholders emphasized some positive changes because of certification although they saw remaining challenges with for example freedom of association and increasing the level of wages to becoming living wages. The main findings in the study support Barrientos and Smith’s distinction and certification and auditing are argued not to be effective tools alone to reach improvements in the industry.

Title: The implementation of a football certification system - Overcoming barriers and fulfilling success factors associated with the implementation process    Level: Final assignment for Master Degree in Business Administration   Authors: Robert Carlsson &amp; Emil Ring   Supervisor: Jonas Kågström   Date: 2012 – 05   Aim: The aim of this study is to investigate which factors that influence the implementation process regarding a football quality certification system and especially the certification system in Swedish elite football clubs. We will further look into which factors that are perceived as success factors and which factors that are perceived as barriers.   Method: Our study has the starting point from a previous study made by Carlsson (2011), where barriers and success factors in the implementing phase of the Swedish football certification process was investigated. In this study we wish to develop our understanding of different clubs’ experiences of the certification process, we have therefore used a qualitative approach where we have interviewed four clubs’ playing in Allsvenskan (first division in Sweden).   Result &amp; Conclusions: We can conclude that even though the work with the certification system is fairly new for the Swedish elite football clubs, it appears as they have a satisfying insight into the organizational demands’ of the certification system.   One significant success factor identified in the study is the clubs’ attitude towards the system, where positive attitude overcomes the experienced difficulties associated with the process. Other importing factors that have a major impact of the overall result of the process is having the right prerequisites in terms of staff, time and documentation before implementing the certification system in the club.   Contribution of the thesis: This study has contributed to provide an extensive framework of the possible affecting factors when implementing a football specific quality certification system. Further contribution is the identification of two affecting factors not mentioned in the theoretical framework, communication in the establishing phase and geographical location.   Key words: Football certification system, quality improvement, success factors, barriers, implementation process

As the environmental awarenesshas increasedin recent decadessohas the society’s demand forenvironmentalresponsible companies(Ammenberg, 2004).One way for companies to take responsibility and work with environmental issues is to implement anenvironmental management system(EMS). EMSserves as a tool for companies to systematically work with environmental issues and develop the company's environmental efforts. ISO 14001 is theEMSaccording to whichthat the majority of companies today choose to get certified(Brorson &amp; Almgren, 2007). The introduction and operation of the ISO 14001 requires significant financial and human resources and it can therefore be questioned whether the environmental managementsystem is adaptable forall companysizes.The purpose of this studyis to examine whether EMScan provide environmental and economic benefits for companies of all sizes and ifthe conditions to get certifiedaccordingto ISO 14001 is the same for large and smallcompanies.A literature study was made to collect information on company'simplementation of ISO 14001. Furthermore, as a complementto the literature study,an empirical investigationincluding e-mail correspondence with four consulting companies thatoffer services for companies that want to get certifiedaccordingto ISO 14001was made. The result of the study showsthat there are different conditions for large and small companies to get certified to ISO 14001, and these differencesis mainly because large companies have morefinancial and human resources.There are disagreementsin the literature whether ISO 14001 is designed for both large and small companies, where critics argue that the EMS primarily are adapted for large companies, and then transferred to small companies.The more positive arguments to ISO 14001 arethat the EMS is flexible and therefore adaptable, in similarity with the arguments put forward by the informants.Despite the factthat all of the informants replied that ISO 14001 is designed for both large and small companies, two of them also claimthat there are some difficulties for small companieswhen implementing and working with the EMS.

Taiwan, as one of the Far East Asian countries, has been founded on agriculture since ancient times. Historically, farming has always played a pivotal role in the economic development of Taiwan. However, there have problems since the implementation of ¡§customary line of farming¡¨, which has been excessively adapted to the traditional farming method. For instance, the widespread use of pesticides and chemical fertilizer has not only severely damaged farmlands but has also threatened the quality of life for those involved in them. As well as the humanitarian issue of inorganic farming effecting workers within the industry, there is also a strong need to revise production from a growing change in demand in Taiwan¡¦s markets. It has been found that consumers are becoming more aware about issues regarding the quality, or lack of quality, in food available to them. This can be explained in relation to improvements in technology and increased living standards, where people are now able to be more selective about what they eat. This has lead to a general increase in the demand for organic produce in an attempt to achieve a healthier diet. From a growing awareness about where their food comes from, consumers are more cautious about buying from producers whose products fail to meet the required standards expected from organic produce. As well as a shift in demand within Taiwan¡¦s agricultural industry, the growing popularity of organic products in other counties has also affected Taiwan export markets. If the agricultural industry wishes to maintain the levels of prosperity it has enjoyed historically, it must yield to the growing demands of the market. But despite the growing appreciation for organic produce, there is a problem of how to verify authentically organic products from the inorganic. Whether or not organic products sold in the market are the genuine has been a growing dispute. It can be seen that more needs to be done encourage the verification system. This is if consumers peace of mind is to be properly addressed as to what can be safely regarded as genuinely organic. Also, further investigation into differences between organic and inorganic need to be continued if the implications to health are to be properly understood. With the increasingly recognized and trusted stamp of organic approval, advantages are available to both the consumer and producer. For consumers, it grantees quality of produce and assures consumers not to worry about and health and security issues. For producers, benefits from this system include an increase to their competitive advantages by way of offering higher quality produce. As a result, it can be argued to be beneficial to help farmers attain a verified stamp of approval for their produce.

A growing number of traditional school boards and city mayors are looking for the next generation of school superintendents to come prepared with a variety of professional backgrounds to provide instructional leadership for school districts. The primary purpose of this qualitative study was to examine and describe the experiences, of five urban non-traditional superintendents. Associated research methods, namely interviews with study participants and the identification of major themes emerging from the data, were employed. Six emergent themes were revealed, including change agent, accountability, political connection/clout, school reform, student achievement and excellent leadership. Profiles of the participants were offered to provide a context for the results of this study. In relation to the major themes, these participants believed that their backgrounds in corporate worlds and other professions uniquely prepared them for the increased challenges of today’s school superintendency. They all indicated that they assumed the helms in their respective school systems for altruistic reasons. However, once on the job, the participants noted that they suffered personally and professionally. They found themselves victims of little respect from the community, media and from their own governing bodies. In terms of preparation for the job, the non-traditional superintendents practiced self-study through reading leadership and journal articles and by attending conferences. The participants also experienced different challenges in gaining certification for the superintendency due to disparate state regulations governing licensure. Several recommendations resulted from the findings of this study. Since academic performance is the primary indicator of success or failure in education today, future researchers in this area might consider a quantitative analysis of student achievement in districts led by non-traditional superintendents compared to academic performance in those systems led by their traditional counterparts. In addition, it is suggested that these participants’ views on superintendent preparation and certification and on governance issues may be considered by school districts, state and federal agencies and by universities as they develop future policy and programs. Other recommendations addressed the need to study female non-traditional superintendent governance and non-traditional leaders in smaller school districts as it relates to these issues.

The related and sound method, juridical protection, prevention, compensation and reconstruction for the whole domestic occupational accident labor protection system, currently lack of more thorough research on it. In order to understand the problem of occupational accident labor protection system, this study was adopted by qualitative in-depth interviews and comparatively second data to analyze subsidies of the implements, current method evaluations and influences of the administration for occupational accident labor protection system. There were 18 interviews, who divided into 4 categories including 3 administrators, 2 workers, 6 managers and other scholars. In view of interviews and related theories, the study examined occupational accident labor protection system in Taiwan, and concluded on the following chapters: 1.According to Occupational Accident Labor Protection Act and its Enforcement Rules, these relativity compiled related laws and regulations through the website¡]intranet¡^that integrated the database of information. It was not only convenient for workers to find out various rights of this Act, but also modified related Occupational Accident Labor Protection Act and regulations, build up more complete occupational accident labor protection system and reformed the direction for juridical protection. Firstly, the prevention of occupational accidents was for workers; Secondly, the responsibility of compensation was undertaken by the social insurance, moreover the atypical employment need to be protected and esteemed in the field of occupational accidents. 2.The implemented system of the occupation accident prevention needs to be strengthened, carrying out educational safety and health training, creating enterprise safety and health culture, re-examining the related regulations, and solving the managed problems of machinery or equipment determined to be potentially dangerous. To look into the policies of construction industry with the constructing of safety problems, identify the explicit standard basis of occupation accidents, build up complete supervising system of the occupation accidents, promote the quality of the labor health inspection, enhance the prevention of occupation health, and gives workers e a predominant position for safety and health. 3.The subsidies of occupation accidents were allocated according to the tendency of ¡§need", increasing family subsidies for occupation accidents, preventing from receiving various subsidies before the family problems were happened, strengthening the implementation of the occupation accidents for employer compensation system. 4.It carefully sets up the complete reconstructed system of occupation accidents, enhances occupation reconstruction, builds up the assessed mode of occupation accidents with the damaged degree of workers, integrates the welfare services of medical treatment, labor affairs, and social affairs, and constructs the perfect and complete mechanism of rebuilt occupation accidents. According to this study, the suggestion and reform of occupational accident labor protection system were presented as followed: 1.In legislative views: In the short-term goal, the various regulations of occupational accident subsidies have to be simplified with one-way law or regulation, and in the long-term goal, it need draw up "the occupational accident insurance act" in the future. 2.In administrative views: (1)With revising each regulation related occupational accident labor protection, the labor dispatched protection law will be enacted that strengthens the worker¡¦s rights and protections for the atypical employment model in the occurrence of occupational accident labor protection. (2)The resolving problems of occupational accident labor protection system include: we have to strengthen educational safety and healthy training, resolve potentially dangerous machinery or equipment managed problems, solve construction industry building safe problems, re-examine occupational accident identified problems, reviser complete related regulations of occupational accident supervisory system, amend the quality of labor physical examinations, enhance the labor safety and health guidance and inspection, resolve occupational accident insurance benefits and subsidizing procedures and build up complete the reconstruction of occupation accident system. 3.The subsidies of occupation accidents were allocated according to the tendency of ¡§need¡¨, increasing family subsidies for occupation accidents, preventing from receiving various subsidies before the family problems were happened, strengthening the implementation of the occupation accidents for employer compensation system. 4.In employee views: Workers have the good habit of working safety and strengthen related occupation accident labor protection system and measure, coagulate union consciousness, express collective efforts, by means of the negotiation of labor union and the employer to fight for their benefits and rights.