Doctor of Philosophy / Department of Computing and Information Sciences / Xinming Ou / If you cannot measure it, you cannot improve it. Quantifying security with metrics is important not only because we want to have a scoring system to track our efforts in hardening cyber environments, but also because current labor resources cannot administrate the exponentially enlarged network without a feasible risk prioritization methodology. Unlike height, weight or temperature, risk from vulnerabilities is sophisticated to assess and the assessment is heavily context-dependent. Existing vulnerability assessment methodologies (e.g. CVSS scoring system, etc) mainly focus on the evaluation over intrinsic risk of individual vulnerabilities without taking their contexts into consideration. Vulnerability assessment over network usually output one aggregated metric indicating the security level of each host. However, none of these work captures the severity change of each individual vulnerabilities under different contexts. I have captured a number of such contexts for vulnerability assessment. For example, the correlation of vulnerabilities belonging to the same application should be considered while aggregating their risk scores. At system level, a vulnerability detected on a highly depended library code should be assigned with a higher risk metric than a vulnerability on a rarely used client side application, even when the two have the same intrinsic risk. Similarly at cloud environment, vulnerabilities with higher prevalences deserve more attention. Besides, zero-day vulnerabilities are largely utilized by attackers therefore should not be ignored while assessing the risks. Historical vulnerability information at application level can be used to predict underground risks. To assess vulnerability with a higher accuracy, feasibility, scalability and efficiency, I developed a systematic vulnerability assessment approach under each of these contexts. ​

Prescriptively, the requirement of fire safety protection systems for distribution substations is not provided in the compliance document for fire safety to the New Zealand Building Code. Therefore, the New Zealand Fire Service (NZFS) has proposed a list of fire safety protection requirements for distribution substations in a letter, dated 10th July 2002. A review by Nyman [1], has considered the fire safety requirements proposed by the NZFS and discussed the issues with a number of fire engineers over the last three years. Nyman concerned that one of the requirements regarding the four hour fire separation between the distribution substation and the interior spaces of the building may not be necessary when considering the risk exposure to the building occupants in different situations, such as the involvement of the sprinkler systems and the use of transformers with a lower fire hazard. Fire resistance rating (FRR) typically means the time duration for which passive fire protection system, such as fire barriers, fire walls and other fire rated building elements, can maintain its integrity, insulation and stability in a standard fire endurance test. Based on the literature review and discussions with industry experts, it is found that failure of the passive fire protection system in a real fire exposure could potentially occur earlier than the time indicated by the fire resistance rating derived from the standard test depending on the characteristics of the actual fire (heat release rate, fire load density and fire location) and the characteristics of the fire compartment (its geometric, ventilation conditions, opening definition, building services and equipment). Hence, it is known that a higher level of fire safety, such as 4 hour fire rated construction and use of sprinkler system, may significantly improve the fire risk to health of safety of occupants in the building; however, they could never eliminate the risk. This report presents a fire engineering Quantitative Risk Assessment (QRA) on a transformer fire initiating in a distribution substation inside a high-rise residential and commercial mixeduse building. It compares the fire safety protection requirements for distribution substations from the NZFS to other relevant documents worldwide: the regulatory standards in New Zealand, Australia and United States of America, as well as the non-regulatory guidelines from other stakeholders, such as electrical engineering organisation, insurance companies and electricity providers. This report also examines the characteristics of historical data for transformer fires in distribution substations both in New Zealand and United States of America buildings. Reliability of active fire safety protection systems, such as smoke detection systems and sprinkler systems is reviewed in this research. Based on the data analysis results, a fire risk estimate is determined using an Event Tree Analysis (ETA) for a total of 14 scenarios with different fire safety designs and transformer types for a distribution substation in a high-rise residential and commercial mixed-use building. In Scenario 1 to 10 scenarios, different combinations of fire safety systems are evaluated with the same type of transformer, Flammable liquid (mineral oil) insulated transformer. In Scenario 11 to Scenario 14, two particular fire safety designs are selected as a baseline for the analysis of transformer types. Two types of transformer with a low fire hazard are used to replace the flammable liquid (mineral oil) insulated transformer in a distribution substation. These are less flammable liquid (silicone oil) insulated transformers and dry type (dry air) transformers. The entire fire risk estimate is determined using the software package @Risk4.5. The results from the event tree analysis are used in the cost-benefit analysis. The cost-benefit ratios are measured based on the reduced fire risk exposures to the building occupants, with respect to the investment costs of the alternative cases, from its respective base case. The outcomes of the assessment show that the proposed four hour fire separation between the distribution substations and the interior spaces of the building, when no sprinkler systems are provided, is not considered to be the most cost-effective alternative to the life safety of occupants, where the cost-benefit ratio of this scenario is ranked fifth. The most cost-effective alternative is found to be the scenario with 30 minute fire separation and sprinkler system installed. In addition to the findings, replacing a flammable liquid insulated transformer with a less flammable liquid insulated transformer or a dry type transformer is generally considered to be economical alternatives. From the QRA analysis, it is concluded that 3 hour fire separation is considered to be appropriate for distribution substations, containing a flammable liquid insulated transformer and associated equipment, in non-sprinklered buildings. The fire ratings of the separation construction can be reduced to 30 minute FRR if sprinkler system is installed. This conclusion is also in agreement with the requirements of the National Fire Protection Association (NFPA).

Submitted by Fabio Sobreira Campos da Costa (fabio.sobreira@ufpe.br) on 2016-08-05T15:07:47Z No. of bitstreams: 2 license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) 20160404 Tese final Duarte catalogada formato digital.pdf: 4026733 bytes, checksum: d6ac5259ffcea51116ee53e1ba8c164a (MD5) / Made available in DSpace on 2016-08-05T15:07:47Z (GMT). No. of bitstreams: 2 license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) 20160404 Tese final Duarte catalogada formato digital.pdf: 4026733 bytes, checksum: d6ac5259ffcea51116ee53e1ba8c164a (MD5) Previous issue date: 2016-03-18 / CNPq / The environment is a complex system where human, ecological environment (e.g., plants, animals, microbes), materials (eg, pollutants, medical), and meteorological/oceanographic conditions interact. The human impact has potential to cause significant damage to the ecological environment (e.g., potential oil spills on the coast cause risk to coastal ecosystems, tuna industrial fishing cause risk to sharks that are bycaught). Similarly, the human impact may turn against the human itself by favoring the growth of populations of unwanted species (e.g., poor sanitation favors the growth of microbial populations that cause risk of an excessive proportion of sick humans). Therefore, it has been demanded an efficient method of quantifying the risks in systems where plant, animals or microbes populations are involved in order to give support to risk management in environmental issues, fisheries management and public health. First, this paper proposes a methodology capable of quantifying ecological risks (i.e., likelihood of adverse effects on the ecosystem, in the long term, due to exposure to stressors such as chemical, fishing, etc.) or microbial risks (i.e., likelihood of adverse effects in humans, in the long term, due to exposure to microbial pathogens). It uses population modeling to simulate future changes in populations of ecologically important species (e.g., fish, corals, sharks), or undesirable (e.g., parasites), under conditional scenarios simulating the influence humans impacting and/or managing the risks. The risk is calculated in terms of probability of extinction or decline, explosion or growth of these populations over time. Second, the methodology is applied to four case studies in Brazil. Each of them have their specific conclusions, as follows. (1) Ecological Risk Assessment caused by potential maritime accidents in the transportation of oil to the port of Suape. Conclusion: low but significant ecological risk. (2) Ecological Risk Assessment caused by potential maritime accidents in the passage of oil tankers nearby Fernando de Noronha. Conclusion: negligible ecological risk, although a more detailed analysis is required due to limited data. (3) Microbial Risk Assessment to Porto de Galinhas community inherent to sanitation and medical treatment program. Conclusion: high microbial risk, the current sanitation level is not enough to contain the spread of schistosomiasis disease, and periodic treatment of patients is not efficient to reduce risks significantly. (4) Ecological Risk Assessment of tuna industrial fishing in Brazilian waters. Conclusion: industrial tuna fishing does not cause significant risks to the population of Mako sharks in the South Atlantic Ocean. In each case study, several conditional scenarios were simulated for the next 100 years, including adverse scenarios and scenarios with risk control measures. Thus, it was possible to quantify the added risk caused by each adverse condition as well as the reduced risk caused by each control measure. In this way, the manager has objective information to prioritize scenarios and evaluate the cost-effectiveness of control measures. The general conclusion of this work is that the proposed methodology has proven to be practicable, useful and efficient. / O meio-ambiente é um sistema complexo onde interagem humanos, meio ecológico (e.g., plantas, animais, micróbios), materiais (e.g., poluentes, medicinais) e condições meteorológicas/oceanográficas. O impacto humano tem potencial para causar danos significativos ao meio ecológico (e.g., potenciais vazamentos de petróleo na costa causam risco ao ecossistema costeiro, pesca industrial de atum causa risco aos tubarões que são pescados por acidente). Similarmente, o impacto humano pode se voltar contra o próprio humano ao favorecer o crescimento de populações de espécies indesejáveis (e.g., saneamento básico precário favorece o crescimento de populações de micróbios que causam risco de haver uma excessiva parcela de humanos doentes). Portanto, tem sido demandado um método eficiente de quantificar os riscos inerentes a sistemas onde populações de plantas, animais ou micróbios estejam envolvidas, de forma a dar suporte para o gerenciamento dos riscos em problemas de gestão ambiental, gestão pesqueira e saúde pública. Em primeiro lugar, este trabalho propõe uma metodologia capaz de quantificar riscos ecológicos (i.e., probabilidade de ocorrência de efeitos adversos no ecossistema, no longo prazo, devido à exposição a estressores como químicos, pesca, entre outros) ou microbianos (i.e., probabilidade de ocorrência de efeitos adversos em humanos, no longo prazo, devido à exposição a patógenos microbianos). Utilizase a modelagem populacional para simular futuras mudanças nas populações de espécies ecologicamente importantes (e.g., peixes, corais), ou indesejáveis (e.g., parasitas), quando condicionadas a cenários que simulam a influência do humano causando impacto e/ou gerindo os riscos. O risco é calculado em termos de probabilidade de extinção ou declínio, explosão ou crescimento, dessas populações ao longo do tempo. Em segundo lugar, aplica-se a metodologia para avaliar o risco inerente a quatro estudos de caso no Brasil. Cada um deles tem sua conclusão específica, como segue. (1) Análise de Risco Ecológico causado por potenciais acidentes marítimos no transporte de petróleo para o porto de Suape. Conclusão: baixo risco ecológico, porém significativo. (2) Análise de Risco Ecológico causado por potenciais acidentes marítimos na passagem de navios petroleiros ao largo de Fernando de Noronha. Conclusão: risco ecológico negligenciável, mas uma análise mais detalhada é necessária devido à escassez de dados. (3) Análise de Risco Microbiano à comunidade de Porto de Galinhas inerentes ao sistema de saneamento básico e programa de tratamento medicinal. Conclusão: alto risco microbiano, o nível de saneamento básico atual não é suficiente para conter a proliferação da doença esquistossomose, e o tratamento periódico de doentes não é eficiente para reduzir os riscos significativamente. (4) Análise de Risco Ecológico causado pela pesca industrial de atum em águas brasileiras. Conclusão: a pesca industrial de atuns não causa riscos significativos à população de tubarões Mako no oceano Atlântico Sul. Em cada estudo de caso, foram simulados diversos cenários condicionais para os próximos 100 anos, incluindo cenários adversos e cenários com medidas de controle dos riscos. Assim, foi possível quantificar a adição do risco causada por cada cenário adverso e a redução do risco causada por cada medida de controle. Desta forma, o gestor tem informação objetiva para priorizar cenários e avaliar o custo-benefício das medidas de controle. A principal conclusão deste trabalho é que a metodologia proposta provou-se ser praticável, útil e eficiente.

Submitted thesis deal with estimation safeness of electroplating technologi with reference to occurrence hazardous substances falls on man and environment. To identification diversification was used quantitative risk assessment and chemical exposure index.

Safety study of refuelling station. Diploma thesis, Institute of Metrology and Quality Assurance Testing, Brno University of Technology. This Diploma thesis deal with quantitative risk assessment of exposure. It means for population, animals and environment stocking, transport and manipulation with vairous fuel at refuelling station in particular area and influence of other industrial effects in close area of this refuelling station. There is more specified a Method of Dow´s fire and explosion Index, method of Guidelines for Quantitative Risk Assessment and method FMEA (Failure Mode and Effect Analysis).