Medical Product Manufacturing News

The regular issues of Medical Product Manufacturing News contain product and literature news, case histories, buyers guides, and industry news. The Annual Buyers Guide issue, published in December, is a comprehensive resource listing over 3,000 companies in more than 300 specific categories. Request Free!

View post:
Medical Product Manufacturing News

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

Read the rest »

Materials Science and Mathematics Research Honored at Nation’s Premier High School Science Competition

2009 Siemens Competition Regional Winners Announced at The University of Texas at Austin; Will Move on to National Finals for Chance at $100,000 Peter Hu Wins Top Individual Prize; Sean Karson, Dan Liu and Kevin Chen Win Top Team Prize.

Research projects in the areas of materials science and mathematics scored top marks this evening, as Peter Hu of Denton, Texas and the team of Sean Karson of Winter Park, Florida, Dan Liu of Austin, Texas and Kevin Chen of Missouri City, Texas received the highest honors at the Region Two Finals of the 2009 Siemens Competition in Math, Science & Technology, the nation’s premier high school science competition.

Tonight’s winners will receive thousands of dollars in college scholarships and be invited to compete at the National Finals in New York City on December 3-7, where the winners of six regional competitions across the United States will vie for scholarships ranging from $10,000 to the top prize of $100,000. The Siemens Competition, a signature program of the Siemens Foundation, is administered by the College Board.

“These students have just earned their place among the nation’s greatest high school scientists,” said James Whaley, President of the Siemens Foundation, based in Iselin, New Jersey. “Each year, the students’ work becomes more impressive, and in a record-setting year such as this one, their achievements become even more outstanding. We are proud to welcome them into our family of Siemens Scholars and look forward to their participation at the national finals in New York City.”

The students presented their research this weekend to a panel of judges from The University of Texas at Austin, host of the Siemens Competition Region Two Finals.

Individual Winner

Peter Hu, a senior at the Texas Academy of Mathematics and Science in Denton, Texas, won the individual category and a $3,000 college scholarship for his materials science project that aimed to develop a novel and biologically compatible material for protein drug delivery. While similar delivery systems for therapeutic proteins are known in scientific literature, many of these materials were found to be carcinogenic. Mr. Hu’s research, titled Novel Thermogelling Dispersions of Polymer Nanoparticles for Controlled Drug Delivery, focused on an alternative FDA-approved material to mimic the behavior of these previous delivery systems, effectively avoiding prior toxicity issues.

“While all of the projects were very impressive today, Mr. Hu’s research was successful on many levels,” said Dr. Christopher Bielawski, Associate Professor in the Department of Chemistry and Biochemistry at The University of Texas at Austin. “This research project established a key proof of concept in the laboratory and the materials presented are poised for examination in living systems. Mr. Hu’s work is very advanced and comparable to that of a second or third year graduate student; with minimal tweaks, this research project stands an excellent chance at being published in a top-tier scientific journal and will likely make quite a splash in many scientific communities.”

Mr. Hu is a senior who aspires to one day lead a research team at a university or facility, such as the National Cancer Institute. Currently, he is the Vice President of the Junior Engineering Technical Society, and is organizing a science demonstration team in order to promote interest in math and science among elementary and middle school students. Mr. Hu is also a member of his school’s Research Organization.

Both of Mr. Hu’s parents are physicists, spurring his interest in science at a young age. In addition to his academic pursuits, Mr. Hu plays piano and violin, as well as basketball and table tennis in his free time. His mentor for this research project was Professor Liping Tang of the Department of Bioengineering at The University of Texas at Arlington.

Team Winners

Sean Karson, a senior at Trinity Prepatory High School in Winter Park, Florida; Dan Liu, a junior at the Liberal Arts and Science Academy High School in Austin, Texas; and Kevin Chen, a junior at William P. Clements High School in Sugar Land, Texas, won the team category and will share a $6,000 college scholarship for their mathematics project entitled Relating Missing and Decycling Edges in Directed Graphs. The team’s mathematics project has the potential to increase efficiency in real world networks by establishing an upper bound on the minimum number of connections that must be removed to destroy all cyclic pathways in systems like the World Wide Web and transcontinental trade routes.

“The team’s work was truly impressive in that it focused on a topic in pure mathematics,” said Dr. Haskell Rosenthal, John T. Stuart III Centennial Professor Emeritus in Mathematics at The University of Texas at Austin. “With new and delicate techniques, they have advanced the infrastructure and knowledge of graph theory by providing better bounds, which is of fundamental importance to the mathematics community. Their depth of knowledge was remarkable, and their work was on the same level of that of a Ph.D.”

Mr. Karson is a senior who has received Excellence Awards for Honors Computer Programming C++, Graphics I, Honors Chemistry, Honors Precalculus, AP JAVA and AP Chemistry. He has also received the Rensselaer Polytechnic Institute Math & Science Award, and is recognized as a National Merit Semifinalist. Mr. Karson is Captain of the Quiz Bowl Team, President of Mu Alpha Theta, a member of the Spanish Honor Society and the National Honor Society and volunteers for the Center of Math, Arts and Science Achievement. He has also received the Varsity Baseball Coach’s Award and the Most Valuable Defensive Player Award, and has been the starting third baseman on the Varsity Baseball Team since his sophomore year. Mr. Karson has also leveraged his love of puzzles to create a club called Rubik’s Revenge, aimed to teach middle school students how to solve Rubik’s Cubes.

Mr. Liu is a junior who aspires to one day become a computer or electronics engineer or programmer. He is currently Vice President of the InvenTeams Club, Co-Director of his school’s Math Team, and a member of the Liberal Arts and Science Academy’s (LASA) National Honor Society Chapter. Mr. Liu is also a part of the LASA Camerata Orchestra and Science Olympiad Team. He is a part of the Circle C Swim Team, and also plays badminton and ping-pong.

Mr. Chen is a junior and is a member of his school’s Mu Alpha Theta, Junior Engineering Technical Society and Computer Science Team.  He is also an active volunteer at a local middle school Math Club. Mr. Chen’s dad is a computer engineer and has taught mathematics and physics in the past, playing a large role in sparking his interest in math when he was young. His mother is also very encouraging and supportive of his passion for math and science, helping to foster his current academic interests. He enjoys practicing piano, playing tennis and programming games in his free time.

The team’s mentor was Dr. Jian Shen, Professor of Mathematics at Texas State University in San Marcos, Texas.

Regional Finalists
Regional Finalists each received a $1,000 scholarship.

Regional Finalists in the individual category were:
–  Sai Achi, Texas Academy of Mathematics and Science, Denton, TX
–  Somak Das, Texas Academy of Mathematics and Science, Denton, TX
–  Prianka Ghoshal, Westlake High School, Austin, TX

–  Sahil Khetpal, Texas Academy of Mathematics and Science, Denton, TX

Regional Finalists in the team category were:
–  Fayen Bastani and Jonathan Lin, Jasper High School, Plano, TX
–  Sumit Gogia and Patrick Kim, The Science Academy of South Texas,
Mercedes, TX; and Vincent Yu, Sha Tin College, Sha Tin, Hong Kong
–  Sunil Pai, The Kinkaid School, Houston TX; and Aneesh Sampath, Ward
Melville High School, East Setauket, NY

–  Tianjiao (Tom) Zhang and Liang Gu, Bellaire High School, Bellaire, TX

The Siemens Competition

The Siemens Competition was launched in 1998 to recognize America’s best and brightest math and science students. In another record-setting year, 2,151 students registered to enter the Siemens Competition in Math, Science and Technology in 2009 – more than ever before – for a total of 1,348 project submissions – a 14% increase in project submissions over 2008 figures and more than a 12% increase in the number of registrations.

Entries are judged at the regional level by esteemed scientists at six leading research universities which host the regional competitions: California Institute of Technology; Carnegie Mellon University; Georgia Institute of Technology; Massachusetts Institute of Technology; University of Notre Dame; and The University of Texas at Austin.

Winners of the regional events are invited to compete at the National Finals at New York University in New York City, December 3 – December 7, 2009. Visit www.siemens-foundation.org on December 7, 2009 at 9:30 am EST to view a live webcast of the National Finalist Award Presentation. You can also log into and follow the Siemens Foundation on Twitter (http://twitter.com/SFoundation) for the latest information and announcements throughout this year’s competition.

About the Siemens Foundation

The Siemens Foundation provides more than $7 million annually in support of educational initiatives in the areas of science, technology, engineering and math in the United States. Its signature programs, the Siemens Competition in Math, Science & Technology and Siemens Awards for Advanced Placement, reward exceptional achievement in science, math and technology. The newest program, The Siemens We Can Change the World Challenge, encourages K-12 students to develop innovative green solutions for environmental issues. By supporting outstanding students today, and recognizing the teachers and schools that inspire their excellence, the Foundation helps nurture tomorrow’s scientists and engineers. The Foundation’s mission is based on the culture of innovation, research and educational support that is the hallmark of Siemens’ U.S. companies and its parent company, Siemens AG.

For further information, visit www.siemens-foundation.org.

The College Board

The College Board is a not-for-profit membership association whose mission is to connect students to college success and opportunity. Founded in 1900, the College Board is composed of more than 5,700 schools, colleges, universities and other educational organizations. Each year, the College Board serves seven million students and their parents, 23,000 high schools, and 3,800 colleges through major programs and services in college readiness, college admission, guidance, assessment, financial aid, enrollment, and teaching and learning. Among its best-known programs are the SAT®, the PSAT/NMSQT® and the Advanced Placement Program® (AP®). The College Board is committed to the principles of excellence and equity, and that commitment is embodied in all of its programs, services, activities and concerns.

For further information, visit www.collegeboard.com.

Read the rest »

Social Engineering

The goal of my paper will be to explore the topic of Social Engineering in all its facets.  But what really is social engineering?  Is it a term that can be applied in any field other than Information Technology?  Your Dictionary references Webster’s Dictionary, which defines social engineering as thus (Your Dictionary, 2006):

A deceptive process in which crackers “engineer” or design a social situation to trick others into allowing them access to an otherwise closed network, or into believing a reality that does not exist.

 

However, in a much broader sense, social engineering can indeed take place outside of a technical field or applied to describe a non-I.T. related situation, because in reality, the act essentially involves deceiving another individual into divulging information that should be kept secret.  The following definition better describes social engineering in this light (Social engineering (security), 2009):

Social engineering is the act of manipulating people into performing actions or divulging confidential information. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud or computer system access; in most cases the attacker never comes face-to-face with the victim.

 

 The goal of this paper aims to explore these many situations that others might not classify as an social engineering act to steal information, and in addition to that goal, explore similar objectives throughout: to create a conversation about social engineering by generating awareness, discuss the many different kinds of social engineering methods, cite examples of real world social engineering events & the people responsible, and finally, cover a list of best practices to avoid social engineering attacks.

 

        So now that we have established a “working definition” by which to base the foundation of this discussion on social engineering, the next logical step would be to mention a few of the well-known techniques employed in social engineering acts (Granger, 2001). 

A very widely recognized form of social engineering occurs over the phone, which gives all the anonymity in the world a person with malicious intent could ask for.  Those that are particularly vulnerable to this type of threat are help desks, customer service reps, and of course, the common victim: the innocent individual minding their own business at home, on the comfort of their couch.  But just because most of these attacks are known to occur over the phone, does not mean that you are safe when actually using the phone yourself.  What do I mean by this?  IT’s known as shoulder surfing (Dwyer, 2008), or when someone else gleans your PIN number or ATM number by simply standing over your shoulder at either a large airport or phone booth. 

Another great example of why social engineering isn’t just something to worry about at the workplace is how often thieves thrive on another technique known as Dumpster Diving, which involves hackers or anyone with malicious intent attaining information such as: calendars showing when employees might be out of town, policy manuals detailing how internal systems are protected, or even hard drives that can be restored & vital information discovered (Berg, 1995).

But my favorite form of social engineering has to be the form described as Quid Pro Quo.  (Wikipedia, 2009) Imagine, if you will, that the “attacker” attempts to randomly ring up someone claiming to be returning their technical support call; eventually, said attacker will find someone who is grateful to have been called back, who will have no problem following whatever instructions the attack doles out… which will most likely be either a series of malicious commands or the giving up of valuable information (such as a credit card number or name and password).

        While there are certainly many more techniques that could be discussed, I would like to focus the next section on elaborating on the techniques described above with specific, real world scenarios of social engineering taking place.  A very fascinating example of an attacker making the victim believe that he is of a higher authority is described by McAfee Avert Labs and SANS analyst Lennny Zeltser (Kumar, 2009):

Apparently, yellow fliers were placed on vehicles in a parking lot, and the fliers claimed that the vehicles were in violation of parking regulations. The fliers further stated that the owner could visit a certain website to get more information and pictures about the offense.

 

Now you can imagine the result of this very clever form of social engineering: said victim sees the fliers and once they reach home, attempt to visit the designated website – only to be told to download a toolbar or some other form of disguised malware, which in turn infects their PC with even more malware. 

Kevin Mitnick, who was once one of the most wanted hackers in the U.S. in the late twentieth century, wrote a book entitled The Art of Deception (Mitnick, Amazon, 2009).  In his book, he describes several examples of social engineering, and in one he describes how someone could wait for a snow storm to occur, and then calling the network center posing as a… you guessed it, snowed-in employee.  In other similar examples, Mitnick gives a smaller example of how someone could get a police officer to divulge when he might be out of town, and by scheduling a court date at that specific time; get out of the speeding ticket (Mitnick, Social Engineering Books, 2006).   

        A few of these examples of social engineering are really quite startling.  How can one hope to avoid falling into these tricks when many of them are so clever?  There are a few “best practices” that can be taught which will help falling into the social engineering traps.  Some may be ideal for teaching fellow employees and others might just be applicable to the individual, helping him or her to live a more secure life in regards to their important information’s safety. 

        Some of the best techniques to teach employees, as identified by US-CERT (United States Computer Emergency Readiness Team), are as follows (McDowell, 2004): 

Be suspicious of any phone calls, visits, or email messages from individuals asking about employee or internal information.  Always ask any individual claiming to be of a legitimate organization to verify their claims; this is especially true if they could use your position as a gateway to attain privileged information (for example, you work at a help desk).  Almost never reveal sensitive information over the internet.  Never.  Before doing anything with any amount of sensitive information, consult a higher authority or person with full knowledge of your company’s security policy. Always shred any company documents before discarding them.  Even the slightest bit of information can give an attacker inside knowledge as to who works at the company, their operating hours, or phone numbers.

Richard Steinnon of the website CIO Update decries what is often touted as the “best defense against social engineering:” training.  He stipulates that if you determine a mandatory training in order to sharpen peoples’ awareness is needed in order to avoid social engineering attacks… then you already have a hole in your defenses.  Ultimately, the very best defense against a good social engineering attack is: enforce policy (Stiennon, 2009).

            In conclusion, I have covered a wide ranging of topics all of which involve a discussion centered on Social Engineering.  What began as an initial exploration into the definition of Social Engineering, the discussion then progressed into examples of the varying types of social techniques that attackers employ to trick others into divulging sensitive information. 

Many common examples of real world attacks were also covered and how devastating their implications can be to the victims; corporations or individuals are not safe against any sort of Social Engineering attack.  Chief among those who used to be considered the most dangerous of all, Kevin Mitnick, wrote a book describing in detail how wide-ranging Social Engineering attacks can be. 

And finally, I briefly covered some “best practices” to avoid such social attacks from occurring to you or future employees.  While it may seem obviously to a technically inclined individual, everyone can be a victim of these kinds of attacks when not following the most basic of policies.  Being intelligence with information essentially keeping it to yourself.  But rest assured that there are those out there who are constantly inventing new and dangerous ways in which to trick innocent people into giving away important information.  And it’s only with constant diligence and a re-affirmation to confidentiality can we hope to avoid the trap known as Social Engineering.

 

 

Works Cited

Berg, A. (1995, November 11). Social Engineering. Retrieved April 19, 2009, from Packet Storm Security : http://www.packetstormsecurity.org/docs/social-engineering/soc_eng2.html

Dwyer, J. (2008, January 12). Picking Pockets? Nah, Surfing Shoulders. Retrieved April 19, 2009, from New York Times: http://www.nytimes.com/2008/01/12/nyregion/12about.html

*Granger, S. (2001, December 18). A True Story. Retrieved April 19, 2009, from Security Focus: http://www.securityfocus.com/infocus/1527*

Kumar, L. (2009, February 4). Real World Social Engineering. Retrieved April 19, 2009, from McAfee Avert Labs Blog: http://www.avertlabs.com/research/blog/index.php/2009/02/04/real-world-social-engineering-to-spread-malware-online/

*Major, S. D. (2009). Social Engineering: Hacking the Wetware! Information Security Journal: A Global Perspective , 40-46. *

McDowell, M. (2004). Tips. Retrieved April 19, 2009, from US-CERT.GOV: http://www.us-cert.gov/cas/tips/ST04-014.html

Mitnick, K. (2009). Amazon. Retrieved April 19, 2009, from Amazon: http://www.amazon.com/Art-Deception-Controlling-Element-Security/dp/0471237124

Mitnick, K. (2006). Social Engineering Books. Retrieved April 19, 2009, from Social Engineering: http://www.social-engineering.eu/books/artofdeception/

Social engineering (security). (2009, April 16). Retrieved April 19, 2009, from Wikipedia: http://en.wikipedia.org/wiki/Social_engineering_(security)

Stiennon, R. (2009, October 19). The Best Defense Against Social Engineering. Retrieved April 19, 2009, from CIO Update: http://www.cioupdate.com/trends/article.php/3638951/The-Best-Defense-Against-Social-Engineering

Wikipedia. (2009, April 16). Retrieved April 19, 2009, from http://en.wikipedia.org/wiki/Social_engineering_(security)

Your Dictionary. (2006). Retrieved April 19, 2009, from http://www.yourdictionary.com/hacker/social-engineering



By: James Banicar

About the Author:



Read the rest »


Most Popular Search Terms for All Articles: