Due to the enlargement of the use of Internet, computers are no longer separated systems. On the contrary, the frequency of sharing between computers¡¦ computing abilities, devices, and resources is surprisingly high in the last few decades. This situation makes people have a more convenient network situation. However, dangers also come along. Ever since the event occurred in 1988, the first computer worm (Morris Worm) makes people be aware of this issue. The computer network world has becoming an environment contains many potential dangers. Whereas the computer security incidents are increasing dramatically, many countries have established some specific organizations to solve these problems. TWCERT/CC (Taiwan Computer Emergency Response Team/ Coordination Center) is one of these organizations. The utilities of TWCERT/CC are to help people be aware of computer network dangers, to make responses and coordinate the security incidents inside and outside Taiwan, and to supervise the security circumstances in Taiwan and to announce alerts or take proper actions when the situation is serious. Responding and coordinating those incidents in TWCERT/CC is one crucial everyday job which requires a very complicated procedure. However, without a systematic method to handle the security incidents would be a heavy load for a computer security incident response team. This research is to develop a systematic method and procedure to handle incident and a system can implement this procedure. The goal is to shorten the processing time of incidents and enhance the accuracy of handling incidents, and to analyze the data collected from the system to get useful information.

none

The 2-28 Incident is one of the most influential events in recent Taiwan history. The establishing the Taipei 228 Memorial Museum is running on build-operate-transfer way. The Taiwan Peace Foundation was the first nongovernmental foundation commissioned to manage the museum's operations, which were achieved remarkable success. Then the Taipei 228 Memorial Museum were taken over by the Taiwan Area Development Research Institute from June 1, 2000 to December 31, 2002. The Taipei City Government's Department of Cultural Affairs assumed management duties for the museum on January 1, 2003, because of the uneconomic manpower and administrative expenditure. Manages the museum by the government, always has been criticized in inefficient management. Especially limits under the budget funds and the organization manpower in it which shrinks, therefore this hall museum function also receives limits, the such disadvantageous management situation also reflects in the visit population. This research inquired into the Taipei 228 Memorial Museum in the past, the present and the future operation, will borrow the business management five big function concept on the organization, the finance, the museum¡¦s collection, the research, the exhibition and the education . Presenting the past and the present of the Museum. Finally on present situation and questions proposed this museum about the future management and suggestions.

Thesis (M.A. in Security Studies (Homeland Security and Defense))--Naval Postgraduate School, December 2009. / Thesis Advisor(s): Bergin, Richard ; Josefek, Robert. "December 2009." Description based on title screen as viewed on January 27, 2010. Author(s) subject terms: Trust, collaboration, inter-organizational relations, interorganizational trust, cooperation, emergency management, trust building, New York City Fire Department. Includes bibliographical references (p. 101-102). Also available in print.

Non-recurring congestion caused by incidents is a major source of traffic delay in freeway systems. With the objective of reducing these traffic delays, traffic operation managers are focusing on detecting incident conditions and dispatching emergency management teams to the scene quickly. During the past few decades, a few number of conventional algorithms and artificial neural network models were proposed to automate the process of detecting incident conditions on freeways. These algorithms and models, known as automatic incident detection methods (AIDM), have experienced a varying degree of detection capability. Of these AIDMs, artificial neural network-based approaches have illustrated better detection performance than the conventional approaches such as filtering techniques, decision tree method, and catastrophe theory. So far, a few neural network model structures have been tested to detect freeway incidents. Since the freeway incidents directly affect the freeway traffic flow, majority of these models have used only traffic flow variables as model inputs. However, changes in traffic flow may also be stimulated by the other features (e.g., freeway geometry) to a greater extent. Many AIDMs have also used a conventional detection rate as a performance measure to assess the detection capability. Yet the principle function of incident detection model, which is to identify whether an incident condition exists for a given traffic pattern, is not measured in its entirety by this conventional measure. In this study, new input feature sets, including freeway geometry information, were proposed for freeway incident detection. Sixteen different artificial neural network (ANN) models based on feed forward and recurrent architectures with a variety of input feature sets were developed. ANN models with single and double hidden layers were investigated for incident detection performance. A modified form of a conventional detection rate was introduced to capture full capability of AIDMs in detecting incident patterns in the freeway traffic flow. Results of this study suggest that double hidden layer networks are better than single hidden layer networks. The study has demonstrated the potential of ANNs to improve the reliability using double layer networks when freeway geometric information is included in the model.

Fire Service commanders work in a very dynamic environment. This research investigated the process they use to make sense and thereby develop understanding of situations during the response to a large-scale emergency. In previous research that investigated decision-making and situation awareness in real-life environments, the need for commanders to understand an incident is emphasised. This research aimed to generate new insights into the process individuals follow to build and improve situational understanding. An exploratory project phase was used to focus the research. Data from emergency exercises and interviews resulted in the design for the main study regarding application domain, data sources and methodological issues. For the main study, records of publicly available interviews with senior officers of the New York Fire Department on their experience of the response to the events at the World Trade Center on September, 11 2001 were analysed. Findings include six variations of the sensemaking process structure, which is characterised by distinct stages. A following investigation into why these stages occur took a theory-building approach and revealed two insights. First, process stages are tied to seven hierarchical but interlinked levels of understanding. Second, three groups of underlying mechanisms trigger process stages: four cognitive factors, eight needs to understand and three situational factors. The mechanisms occur in different combinations across process variations and have varying explanatory power. This study contributes to knowledge on the process of building and improving situational understanding and its link to understanding. A micro-level view of the sensemaking process is provided, showing the specific understanding that is gained and evolves along its stages. The view of sensemaking is extended from understanding what is going on and what can be done to include understanding performance of action. A review with experts revealed that findings adequately reflect the thinking of commanders during incident response and might have practical relevance for training and command support.

The present study investigated what helped and what hindered multicultural supervision. The participants consisted of 19 females, and 6 males, including Asian-Canadians, Indo- Canadians, First Nations, Latin-Canadian and Afro-Canadian. They were individually interviewed, following an expanded version of Flanagan's (1954) Critical Incident Technique. There were 340 relevant meaning units related to positive incidents and 386 meaning units related to negative incidents. Forty-two meaning units were associated with coping efforts, and 87 meaning units were on recommendations. Categories extracted from these meaning units were grouped as follows: (a) 20 positive categories, (b) 15 negative categories, (c) 15 coping categories, and (d) 33 recommendations. The reliability of classifying meaning units according to these categories was satisfactory, based on inter-judge agreement (80% and higher). The validity of content analysis was established by (a) confirmation by participants, (b) crossvalidation by other participants, (c) cross-validation by an independent judge, and (d) cross-validation by other researchers. The most frequently cited positive categories were subsumed under five key areas: (a) personal attributes of the supervisor, (b) supervision competencies, (c) mentoring, (d) relationship, and (e) multicultural supervision competencies. The most frequently reported negative categories were associated with the following five areas: (a) personal difficulties as a visible minority, (b) negative personal attributes of the supervisor, (c) lack of a safe and trusting relationship, (d) lack of multicultural supervision competencies, and (e) lack of supervision competencies. The coping efforts employed were grouped into four areas: (a) help seeking, (b) existential coping, (c) active coping, and (d) emotional coping. Finally, recommendations were also grouped into four broad areas: (a) needs to improve the quality of supervision, (b) needs to improve multicultural supervision competencies, (c) needs for educational institutions to make changes, and (d) needs for minority students to make changes. The study provided a comprehensive picture of what works and what does not work in multicultural supervision. The results support a mentoring model, which posits that supervision is effective to the extent that the supervisor takes on the role of a mentor. The practical implications of the study include the need for cross-cultural supervision competencies and mentoring graduate students.

This research examined leadership in difficult situations using phenomenological and critical incident analyses of 14 interviews with respected leaders. Leadership in difficult situations was examined as a personal experience consistent with the perspective of counselling psychology. The phenomenological analysis has produced four voices. The first voice captures the participants' description of leadership as a paradox of personal and situational dynamics. The second voice forms an uncommon elucidation of the lived experience of leadership in difficult situations. The participants are seen to be striving in a resilient manner characterized by a sense of acceptance and authenticity. The third and fourth voices describe the means by which the participants are effective in difficult situations. The third voice captures the intra-personal process of resonance, personal and social awareness, personal supports, mastery of the issues, and the capacity to generate remarkable outcomes. The fourth phenomenological voice captures the participant's active engagement in connecting with people, shaping the work context and leading collaboration to develop a successful process. Five categories have been produced by the Critical Incident Technique, which examined what helps and what hinders in the experience of leadership through difficult situations. The five categories are: being experienced, principled and self-aware; having personal supports and influences; being interested and skilled in connecting with people; being both energetic and able to withdraw appropriately; finally, actively cultivating their perspective or vision. These five categories indicate the capacity of the participants for diverse means of participation in difficult situations. Results are discussed in terms of implications for research and practice.

This report describes an assessment of using dedicated short-range communications(DSRC) technology to perform travel time monitoring and automated incident detectionon a segment of rural freeway. The assessment used the CORSIM traffic simulation toolto simulate traffic and incidents on a segment of rural freeway. Output data from thesimulation was subjected to post-processing to produce the "probe and beacon" data thatwould be produced by a DSRC-based system. An incident detection algorithm wasdeveloped, which used a travel time threshold and a counter. Travel times exceeding thethreshold incremented the counter, while travel times below the threshold decrementedthe counter (unless it was at zero). An alarm was generated when the counter reached apre-selected level. This algorithm was tested on selected data files, and the results wereused to identify the "best" values of the threshold and counter alarm level. Using these"best" values, the algorithm was then applied to the "probe and beacon" data todetermine how quickly the system could detect various traffic incidents. The analysisshowed that the system could provide rapid and reliable detection of incidents.During the simulation and analysis, several parameters were varied to observe theirimpacts on the system performance. These parameters included traffic volume, incidentseverity, percentage of vehicles with transponders, spacing of roadside readers, andlocation of the incident relative to the next downstream reader. Each parameter proved tohave a significant effect on the detection time, and the observed impacts were consistentwith logical expectations. In general, the time to detect an incident was reduced inresponse to (1) an increase in traffic volume, (2) an increase in incident severity, (3) anincrease in transponder population, (4) a reduction in reader spacing, and (5) a reductionin distance from incident location to next downstream reader.Preliminary estimates were developed of the costs associated with implementing aDSRC-based traffic monitoring system. The relationship between system cost andsystem performance was explored and illustrated.Recommendations were developed and presented. These included further analysis basedon traffic simulations, followed by a limited field deployment to validate the analysisresults.

As ambulance staff, are there any risks that critical incidents may be experienced as traumatic and affect the individual negatively? What the outcome will be for those affected depends on how well prepared the ambulance staff is. Research shows that peer support is an important feature to reduce the risk of the caregiver to suffer from posttraumatic stress disorder and how the continued careing becomes. The first support, however, is the most important thing when a carer experiences a critical incident. The aim of this study was to identify how ambulance staff experiences peer support. The methodology of the study was a triangulation, which means that quantitative and qualitative methods are mixed. This methodology makes it possible to study the subject as deeply as possible and still maintain a high validity and reliability. A questionnaire was designd and sent out to the informants. There were 169 persons who were asked to participate. The survery was voluntary and anonymous. A total number of 100 carers with different job titles chose to participate. A majority of the ambulance staff said that they had experienced a critical incident that influenced them at work. The results show that peer support is important to most people and that a majority of those affected chose to talk to their colleague in connection with the incident. When peer support was not used this had to do with personal chemistry and/or that it was not considered necessary. The results show that it would be desirable if a professional kept regular monitoring or reflection with those affected by a critical incident. Not a colleague since personal chemistry may lead to unsatisfactory results.