This paper presents a high-level access control model of the seL4 microkernel. We extend an earlier formalisation by Elkaduwe et al with non-determinism, explicit sharing of capability storage, and a delete-operation for entities. We formally prove that this new model can enforce system-global security policies as well as authority confinement. By treating sharing explicitly in the abstract acc...

The object capability model is a de-facto industry standard widely adopted for the implementation of secure software. We call capability policies the policies enforced by programs using object capabilities. Such policies tend to restrict the objects and the circumstances which may access services. In this paper we argue that capability policies should be made explicit and written separately fro...

PURPOSE: Natural health products (natural health products) such as herbs, vitamins and homeopathic medicines are widely available in Canadian pharmacies. The purpose of this paper was to conduct a systematic analysis of Canadian pharmacy policies and guidelines to explore pharmacists' professional responsibilities with respect to natural health products. METHODS: Legislation, codes of ethics, ...

We consider negotiations selecting one-dimensional policies. Individuals have single-peaked preferences, and they are impatient. Decisions arise from a bargaining game with random proposers and (super) majority approval, ranging from the simple majority up to unanimity. The existence and uniqueness of stationary subgame perfect equilibrium is established, and its explicit characterization provi...

Execution parallelism in agent-Based Simulation (ABS) allows to deal with complex/large-scale models. This raises the need for runtime environments able to fully exploit hardware parallelism, while jointly offering ABS-suited programming abstractions. In this paper, we target last-generation Parallel Discrete Event Simulation (PDES) platforms for multicore systems. We discuss a programming mode...

The ever-increasing demand on health care services results in a growing demand for appropriate methods of measuring and valuing the benefits of health care interventions (cost-effectiveness) in order to formulate policies. In Hong Kong, there is little explicit information to guide policymaking on which treatments to offer and what priority to allocate to differing sectors of the health care sy...

We focus on a class of models used for representing the dynamics between a discrete set of probabilistic events in a continuous-time setting. The proposed framework offers tractable learning and inference procedures and provides compact state representations for processes which exhibit variable delays between events. The approach is applied to a heart sound labeling task that exhibits long-rang...

Artifact flow represents an important aspect of teaching/learning processes, especially in CSCL situations in which complex relationships may be found. However, explicit modeling of CSCL processes with artifact flow may increase the cognitive load and associated effort of the teachers-designers and therefore decrease the efficiency of the design process. The empirical study, reported in this pa...

Research on the effect of implicit and explicit instruction on developing learners’ explicit knowledge by the use of measures of explicit knowledge abounds in the literature. However, measuring learners’ implicit knowledge employing fine-grained measures has rarely been the concern of researchers in the field. Therefore, the present study is an attempt to scrutinize the effectiveness of implici...