The thesis deals with the assessment of security vulnerabilities. The aim of this work is to create a new method of vulnerability assessment, which will better prioritize critical vulnerabilities and reflect parameters that are not used in currently used methods. Firstly, it describes the common methods used to assess vulnerabilities and the parameters used in each method. The first described method is the Common Vulnerability Scoring System for which are described all three types of scores. The second analysed method is OWASP Risk Rating Methodology. The second part is devoted to the design of the own method, which aims to assess vulnerabilities that it is easier to identify those with high priority. The method is based on three groups of parameters. The first group describes the technical assessment of the vulnerability, the second is based on the requirements to ensure the confidentiality, integrity and availability of the asset and the third group of parameters evaluates the implemented security measures. All three groups of parameters are important for prioritization. Parameters describing the vulnerability are divided into permanent and up-to-date, where the most important up-to-date parameter are Threat Intelligence and easy of exploitation. The parameters of the impact on confidentiality, integrity and availability are linked to the priority of the asset, and to the evaluation of security measures, which increase the protection of confidentiality, integrity and availability. The priority of the asset and the quality of the countermeasures are assessed based on questionnaires, which are submitted to the owners of the examined assets as part of the vulnerability assessment. In the third part of the thesis, the method is compared with the currently widely used the Common Vulnerability Scoring System. The strengths of the proposed method are shown in several examples. The effectiveness of prioritization is based primarily on the priority of the asset and the security measures in place. The method was practically tested in a laboratory environment, where vulnerabilities were made on several different assets. These vulnerabilities were assessed using the proposed method, the priority of the asset and the quality of the measures were considered, and everything was included in the priority of vulnerability. This testing confirmed that the method more effectively prioritizes vulnerabilities that are easily exploitable, recently exploited by an attacker, and found on assets with minimal protection and higher priority.

Observa-se que, desde o início da utilização do instituto da prisão penal como ferramenta de controle dos transgressores de um determinado sistema legal, a problemática da presença dos inimputáveis por transtornos mentais sempre desestabilizou os interiores dos estabelecimentos de cumprimento da pena, tanto em sua acepção meramente punitiva quanto na faceta atual da tríade punição/retribuição/reeducação. Desde a abordagem mais brutal do doente até a aplicação das “modernas” medidas de segurança visualiza-se uma inadequação por parte do Estado ao custodiar o inimputável que, abandonado à própria sorte, é vítima de um sistema carcerário precário no qual sua dignidade já comprometida é destruída, seja pelos sujeitos ativos do sistema, funcionários que deveriam resguardar sua integridade física e mental, ou pelos demais custodiados que acabam sendo os executores das antigas práticas atrozes outrora exercidas nos extintos asilos; os famigerados manicômios judiciais. Nessa messe, analisamos a forma como se dá a execução das medidas de segurança na modalidade internativa no Tocantins, bem como a postura do administrador público para sua efetivação na rede prisional. A falta de estabelecimento próprio para o cumprimento das medidas de segurança levanta-se como omissão do Estado do Tocantins que, ao abandonar os doentes mentais que acabam por cometer crimes em razão de sua enfermidade, sentencia-lhes à sobrevida num limbo social no qual não são criminosos cumprindo pena, mas também não são cidadãos cujos direitos e garantias fundamentais lhes são assegurados, passando a viver trancafiados ilegalmente em presídios onde se tornam vítimas das mais diversas formas de torturas e sofrimentos impingidos pelas dezenas de condenados que ali vivem em uma sociedade paralela na qual os inimputáveis são, novamente, brutalizados. / It is observed that since the beginning of the use of the prison of penal prison as a tool of control of the transgressors of a certain legal system, a problematic always destabilized the interiors of the establishments of fulfillment of the sentence, in its punitive sense as well as in the modern facet Of the punishment / retribution / reeducation triad, which is the mental patient's treatment within prisons. From the primitive approach of animalization of the patient to the application of "modern" security measures, a clairvoyant disregard of the State is seen in the custody of the unworthy who, abandoned to his own fate, was a victim of the notorious judicial asylums and today is a victim of A broken prison system in which its already compromised dignity is destroyed, either by the active subjects of the system (officials who should safeguard their physical and mental integrity) or by the other custodians who end up being the executors of the old animal practices practiced in the extinct asylums. In this messe, we analyze the contemporary conditions of the unenforceable in the prison system of the State of Tocantins, from the beginning of the criminal prosecution, to procedural instruction, to the application of the security measure by judicial sentence, and finally, the methods adopted by the public administrator to carry out Of that in their prison network. The lack of proper establishment to comply with security measures arises as an omission by the State of Tocantins, which, in abandoning the mentally ill who end up committing crimes due to their illness, sentence them to survival in a social limbo in which they do not Are criminals serving sentences, but they are not citizens whose fundamental rights and guarantees are guaranteed to them, and they live illegally in prisons where the most diverse forms of torture and suffering are practiced by the dozens of convicts who live there in a parallel society in which The inimitable ones are again animalized.

Made available in DSpace on 2016-04-29T13:31:20Z (GMT). No. of bitstreams: 1 Alyne Alvarez Silva.pdf: 2096901 bytes, checksum: eccd273c6dd244679bcbb6137d3c83d5 (MD5) Previous issue date: 2015-10-08 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / In Brazil, people diagnosed with mental disorder are now considered subjects of rights from the Psychiatric Reform Law. The same can not be said if these same people come into conflict with the law. Understood as dangerous, they are throw out of the legal system aligned with human rights due to a supposed intellectual and volitional disability in the face of criminal act. The periculosity attested by forensic experts authorizes the justice to consider them in an inimputability situation, what, besides to not allow them to be called to answer for their acts, motivates the restriction of a number of constitutional rights. Considering the reality of rape and extreme violence own this context, this research aimed to discuss the processes of institutionalization and deinstitutionalization of so-called "insane offenders" in State of Pará, using the cartography method as intervention-research. We mapped some of the lines that establish the device "security measure" and the processes of institutionalization promoted by it, considering the production of fear as governmentality strategy in the constitution of punitive subjectivities. At the same time, we follow the flows triggered by the research towards the deinstitutionalization processes of this population. From the Custodial Psychiatric Hospital Santa Isabel of Pará, we have described the practices of power-knowledgesubjectivation intended for institutionalized people and profiled those submitted to security measure, these lives which have never been counted. In addition, it have been built devices - such as art workshops to psychiatric patients, itinerant exhibition of the resulting works, conversation circles with workers in the mental health network and a documentary film - favoring the connection of actors and various elements to function as machines that make see and talk about security measure dispositive, composing new sensibilities and forging aesthetic vectors of deinstitutionalization. The co-organization of a Meeting among various actors of justice and the rule of executive managers still allowed us following the configuration of a program of deinstitutionalization and approached the legal-political dimension of the Psychiatric Reform when we have discussed the person's responsabilization model with disorder mental in conflict with the law / No Brasil, as pessoas com diagnóstico de transtorno mental passaram a ser consideradas sujeitos de direitos a partir da Lei da Reforma Psiquiátrica. O mesmo não se pode afirmar se estas mesmas pessoas entram em conflito com a lei. Entendidas como perigosas, são lançadas para fora do ordenamento jurídico alinhado aos direitos humanos devido a uma suposta incapacidade intelectiva e volitiva diante do ato delituoso. A periculosidade atestada por peritos forenses autoriza a justiça a lhes considerar inimputáveis, o que, além de não permitir que sejam chamadas a responder por seus atos, motiva a restrição de uma série de direitos constitucionais. Considerando a realidade de extrema violação e violência própria desse contexto, esta pesquisa teve como objetivo problematizar os processos de institucionalização e desinstitucionalização dos chamados loucos infratores no Estado do Pará, utilizando o método da cartografia como pesquisa-intervenção. Mapeamos algumas linhas que constituem o dispositivo medida de segurança e os processos de institucionalização por ela promovidos, considerando a produção do medo como estratégia de governamentalidade na constituição de subjetividades punitivas. Ao mesmo tempo, seguimos os fluxos acionados pela pesquisa em direção aos processos de desinstitucionalização dessa população. A partir do HCTP de Santa Isabel do Pará, descrevemos as práticas de saber-poder-subjetivação destinadas às pessoas institucionalizadas e traçamos o perfil daquelas que aí cumpriam medida de segurança, estas vidas que não se contam. Além disso, foram construídos dispositivos como oficinas de arte aos internos, exposição itinerante das obras resultantes, rodas de conversa com trabalhadores da rede de saúde mental e um filme-documentário que favorecessem a conexão de atores e elementos diversos para funcionar como máquinas de fazer ver e falar o dispositivo medida de segurança, engendrando novas sensibilidades e forjando vetores estéticos de desinstitucionalização. A co-organização de um Encontro entre diversos atores da justiça e gestores do executivo do Estado nos permitiu ainda acompanhar a configuração de um Programa de desinstitucionalização e nos aproximou da dimensão jurídica-política da Reforma Psiquiátrica quando problematizamos o modelo de responsabilização da pessoa com transtorno mental em conflito com a lei

Made available in DSpace on 2016-04-25T20:22:44Z (GMT). No. of bitstreams: 1 Maria Izabel Sanches Costa.pdf: 7821633 bytes, checksum: c864063665dd0fb83a3ec0c4334cff44 (MD5) Previous issue date: 2009-04-22 / Conselho Nacional de Desenvolvimento Científico e Tecnológico / This dissertation aims to genealogically analyze the approach of legal and psychiatric discourses in defense of the insane criminal restraint in regard to security measure issues and they internment in Manicômios Judiciários (a Judiciary Mental Health Hospital), currently known as the Hospitals of Custody and Psychiatric Treatment (HCPT). Since the appearance of the psychiatrist in court, the figure of the insane criminal emerged as a freak that needs to be studied, treated and normalized. Thus, the knowledge of criminal psychiatry led health policies to approach the security policies as a way to suppress these dangerous individuals, removing them from the social living, legitimized by the concept of social dangerousness. Indeed, they were taken to the State custody, for the maintenance of order and the social welfare through the execution of the security measure. This work tried to investigate the technical procedures of power that produces a disciplinary control over the body, in regard to gestures, attitudes and behavior of insane criminals. From a study of the different historical phases of Manicômio Judiciário de Franco da Rocha, it was shown that the notion of dangerous individuals, and its proposal for the model of treatment / custody, changes in each current socio-political discourse / Esta dissertação tem por objetivo analisar genealogicamente a aproximação dos discursos jurídico e psiquiátrico, em defesa da contenção do louco criminoso, no que tange à problemática da medida de segurança e à internação nos Manicômios Judiciários, atualmente conhecidos como Hospitais de Custódia e Tratamento Psiquiátrico (HCTP). A partir do aparecimento do psiquiatra nos tribunais, a figura do louco criminoso emergiu como um anormal que necessita ser estudado, tratado e normalizado. Desse modo, o saber da psiquiatria penal levou as políticas de saúde, legitimadas pelo conceito de periculosidade a aproximarem-se das políticas de segurança, como uma forma de reprimir esses indivíduos perigosos, retirando-os do convívio social. Com efeito, eles passam à custódia do Estado, em prol da manutenção da ordem e do bem-estar da sociedade através da imputação da medida de segurança. Neste trabalho, procurou-se investigar os procedimentos técnicos de poder que realizam um controle disciplinar do corpo, em relação aos gestos, atitudes, comportamento dos loucos criminosos. A partir de um estudo das diferentes fases históricas do Manicômio Judiciário de Franco da Rocha, demonstrou-se que tanto a noção de indivíduo perigoso, bem como o modelo tratamento/custódia, modificam-se em cada discurso sócio-político vigente

Made available in DSpace on 2016-04-26T14:57:36Z (GMT). No. of bitstreams: 1 Maria Izabel Sanches Costa.pdf: 7821633 bytes, checksum: c864063665dd0fb83a3ec0c4334cff44 (MD5) Previous issue date: 2009-04-22 / Conselho Nacional de Desenvolvimento Científico e Tecnológico / This dissertation aims to genealogically analyze the approach of legal and psychiatric discourses in defense of the insane criminal restraint in regard to security measure issues and they internment in Manicômios Judiciários (a Judiciary Mental Health Hospital), currently known as the Hospitals of Custody and Psychiatric Treatment (HCPT). Since the appearance of the psychiatrist in court, the figure of the insane criminal emerged as a freak that needs to be studied, treated and normalized. Thus, the knowledge of criminal psychiatry led health policies to approach the security policies as a way to suppress these dangerous individuals, removing them from the social living, legitimized by the concept of social dangerousness. Indeed, they were taken to the State custody, for the maintenance of order and the social welfare through the execution of the security measure. This work tried to investigate the technical procedures of power that produces a disciplinary control over the body, in regard to gestures, attitudes and behavior of insane criminals. From a study of the different historical phases of Manicômio Judiciário de Franco da Rocha, it was shown that the notion of dangerous individuals, and its proposal for the model of treatment / custody, changes in each current socio-political discourse / Esta dissertação tem por objetivo analisar genealogicamente a aproximação dos discursos jurídico e psiquiátrico, em defesa da contenção do louco criminoso, no que tange à problemática da medida de segurança e à internação nos Manicômios Judiciários, atualmente conhecidos como Hospitais de Custódia e Tratamento Psiquiátrico (HCTP). A partir do aparecimento do psiquiatra nos tribunais, a figura do louco criminoso emergiu como um anormal que necessita ser estudado, tratado e normalizado. Desse modo, o saber da psiquiatria penal levou as políticas de saúde, legitimadas pelo conceito de periculosidade a aproximarem-se das políticas de segurança, como uma forma de reprimir esses indivíduos perigosos, retirando-os do convívio social. Com efeito, eles passam à custódia do Estado, em prol da manutenção da ordem e do bem-estar da sociedade através da imputação da medida de segurança. Neste trabalho, procurou-se investigar os procedimentos técnicos de poder que realizam um controle disciplinar do corpo, em relação aos gestos, atitudes, comportamento dos loucos criminosos. A partir de um estudo das diferentes fases históricas do Manicômio Judiciário de Franco da Rocha, demonstrou-se que tanto a noção de indivíduo perigoso, bem como o modelo tratamento/custódia, modificam-se em cada discurso sócio-político vigente

La pathologisation du criminel n’est pas un fait nouveau, pas plus que ne l’est la tendance latente à considérer le délinquant comme un malade. Pourtant, la sanction pénale semble avoir dépassé progressivement l’association symbolique en distillant progressivement au cœur de son fonctionnement le principe d’une réponse médicale à l’acte infractionnel. Ce faisant elle s’inscrit progressivement dans un mouvement plus vaste, celui décrit par les sociologues du milieu du XXème siècle : le processus de médicalisation. L’étude de la médicalisation de la sanction pénale démontre d’une mutation inédite prenant appui sur une catégorie à définir, celle des soins pénalement ordonnés. Elle tend alors à mesurer les différentes mutations opérées par une série de législations marquée par l’accélération et l’expansion d’un processus longtemps associé à des problématiques addictives. Le soin a t-il vocation à se substituer à la sanction, à devenir sanction ? Telles sont désormais les nouvelles problématiques qui innervent la matière. Dans ce qui se profile comme une redéfinition de l’architecture de la sanction pénale, pour les responsables comme les irresponsables pénaux le système pénal n’admet plus de culpabilité sans sanction, ni de sanction sans traitement. La tangibilité du processus de médicalisation de la sanction pénale naît alors du déplacement progressif et à dessein des fondements traditionnels de la sanction pénale tandis que, dans un mouvement inverse, ses finalités se resserrent, depuis leur réception théorique jusque dans leur mise en œuvre, autour d’un objectif thérapeutique / Pathologising the criminal is nothing new, no more than is the latent trend to consider the offender as a patient. Yet criminal sanction appears to have gradually exceeded this symbolic association, progressively distilling the principle of a medical response to the unlawful act into the core of its operation. In doing so it gradually falls within a broader movement, that described by sociologists from the middle of the twentieth century: the medicalisation process.The study of the medicalisation of criminal punishments demonstrates an unprecedented mutation based on taking a class yet to be defined, that of care as a criminal punishment. It tends to measure different mutations carried by a series of laws marked by the acceleration and expansion of a process long associated with addictive problems. Has care become a substitute for punishment, or even a punishment in itself ? These are now the new problems that are stirring things up. In what is emerging as a redefinition of the architecture of punishment, for those responsible just like those who are criminally irresponsible, the penal system no longer recognises guilt without punishment, nor punishment without treatment. The tangibility of the process of medicalisation of criminal punishment was born of the progressive and intentional movement away from the traditional foundations of criminal punishment while, in a reverse movement, tightening its purposes, hence their theoretical reception right through to its implementation, around a therapeutic target

Motivation This project was of specific importance to the private security industry, victims of residential burglary, community policing forums and the South African Police Service in providing detailed information regarding recommendations of how to manage and combat residential burglary in two selected northern suburbs of Johannesburg. Problem statement Residential burglary is categorised in the top three highest reported crimes according to the official South African Police Service statistics for the 2006/7 financial years. A series of victim interviews, docket analysis, case plotting and residential security audit surveys were conducted to determine the extent (or lack thereof) of security measures at a burgled residence in the selected area. Approach Field data was collected through docket analysis, plotting crime scenes (descriptive mapping), victim interviews and residential security audit surveys. Results The majority of victims of burglary interviewed did not have the minimum security system (integrated measures) in place. Those victims, who had security measures, appeared not to have made or implemented effective use of them. Conclusion Security at a residence extends beyond just the immediate house area and the focus (security risk assessment) should start with the immediate neighbourhood (community) area working inwards towards the property perimeter (boundary), inner perimeter (garden area) and then finally the immediate house area. / CRIMINOLOGY / MTECH: SECURITY RISK MAN

Motivation This project was of specific importance to the private security industry, victims of residential burglary, community policing forums and the South African Police Service in providing detailed information regarding recommendations of how to manage and combat residential burglary in two selected northern suburbs of Johannesburg. Problem statement Residential burglary is categorised in the top three highest reported crimes according to the official South African Police Service statistics for the 2006/7 financial years. A series of victim interviews, docket analysis, case plotting and residential security audit surveys were conducted to determine the extent (or lack thereof) of security measures at a burgled residence in the selected area. Approach Field data was collected through docket analysis, plotting crime scenes (descriptive mapping), victim interviews and residential security audit surveys. Results The majority of victims of burglary interviewed did not have the minimum security system (integrated measures) in place. Those victims, who had security measures, appeared not to have made or implemented effective use of them. Conclusion Security at a residence extends beyond just the immediate house area and the focus (security risk assessment) should start with the immediate neighbourhood (community) area working inwards towards the property perimeter (boundary), inner perimeter (garden area) and then finally the immediate house area. / CRIMINOLOGY / MTECH: SECURITY RISK MAN