“In the public interest”: The privacy implications of international business-to-business sharing of cyber-threat intelligence

This article reports on preliminary findings and recommendations of a cross-discipline project to accelerate international business-to-business automated sharing of cyber-threat intelligence, particularly IP addresses. The article outlines the project and its objectives and the importance of determining whether IP addresses can be lawfully shared as cyber threat intelligence.The goal of the project is to enhance cyber-threat intelligence sharing throughout the cyber ecosystem. The findings and recommendations from this project enable businesses to navigate the international legal environment and develop their policy and procedures to enable timely, effective and legal sharing of cyber-threat information. The project is the first of its kind in the world. It is unique in both focus and scope. Unlike the cyber-threat information sharing reviews and initiatives being developed at country and regional levels, the focus of this project and this article is on business-to-business sharing. The scope of this project in terms of the 34 jurisdictions reviewed as to their data protection requirements is more comprehensive than any similar study to date.This article focuses on the sharing of IP addresses as cyber threat intelligence in the context of the new European Union (EU) data protection initiatives agreed in December 2015 and formally adopted by the European Council and Parliament in April 2016. The new EU General Data Protection Regulation (GDPR) applies to EU member countries, a major focus of the international cyber threat sharing project. The research also reveals that EU data protection requirements, particularly the currently applicable law of the Data Protection Directive 95/46/EC (1995 Directive) (the rules of which the GDPR will replace in practice in 2018), generally form the basis of current data protection requirements in countries outside Europe. It is expected that this influence will continue and that the GDPR will shape the development of data protection internationally.In this article, the authors examine whether static and dynamic IP addresses are “personal data” as defined in the GDPR and its predecessor the 1995 Directive that is currently the model for data protection in many jurisdictions outside Europe. The authors then consider whether sharing of that data by a business without the consent of the data subject, can be justified in the public interest so as to override individual rights under Articles 7 and 8(1) of the Charter of Fundamental Rights of the European Union, which underpin EU data protection. The analysis shows that the sharing of cyber threat intelligence is in the public interest so as to override the rights of a data subject, as long as it is carried out in ways that are strictly necessary in order to achieve security objectives. The article concludes by summarizing the project findings to date, and how they inform international sharing of cyber-threat intelligence within the private sector.     

Site‐, Technique‐, and Time‐Related Aspects of the Postmortem Redistribution of Diazepam,Methadone, Morphine,and their Metabolites: Interest of Popliteal Vein Blood Sampling

Sampling site, technique, and time influence postmortem drug concentrations. In 57 cases, we studied drug concentration differences as follows: subclavian vein‐dissection/clamping versus blind stick, femoral vein‐dissection/clamping versus blind stick, right cardiac chamber, and popliteal vein‐dissection and clamping only. Cases were distributed in group #1 (all cases with both techniques), group #2 (dissection/clamping), and group #3 (blind stick). Sampled drugs were diazepam, methadone, morphine, and their metabolites. To assess PMR, mean concentrations and ratios were calculated for each group. Time‐dependent variations of blood concentrations and ratios were also assessed. Results indicate that site, method, and time may influence postmortem distribution interpretation in different ways. Popliteal blood seems less subject to PMR. In conclusion, our study is the first to evaluate concurrently three main aspects of PMR and confirms that the popliteal vein may represent a site that is more resistant to the changes seen as a result of PMR.     

Performance characteristics of the Cozart RapiScan Oral Fluid Drug Testing System for opiates in comparison to ELISA and GC/MS following controlled codeine administration

Oral fluid is an interesting alternative matrix for drug testing in many environments, including law enforcement, workplace drug testing, and drug treatment facilities. Performance characteristics of the FDA-cleared, qualitative, Cozart RapiScan Opiate Oral Fluid Drug Testing System (Opiate Cozart RapiScan System or Opiate CRS) were compared to the semi-quantitative Cozart Microplate EIA Opiate Oral Fluid Kit (Opiate ELISA) and to gas chromatography/mass spectrometry (GC/MS). The following oral fluid opiate cutoffs were evaluated: the GC/MS limit of quantification (LOQ) of 2.5 mg/l; 15 microg/l currently used for oral fluid testing in the United Kingdom (UK); 30 microg/l (Opiate CRS cutoff); and 40 microg/l, the proposed Substance Abuse and Mental Health Services Administration (SAMHSA) cutoff. Subjects provided informed consent to participate in this IRB-approved research and resided on the closed research ward throughout the study. Three oral codeine doses of 60 mg/70 kg were administered over a 7-day period. After a 3-week break, subjects received three doses of 120 mg/70 kg within 7 days. Oral fluid specimens (N = 1273) were analyzed for codeine (COD), norcodeine (NCOD), morphine (MOR) and normorphine (NMOR) by GC/MS with an LOQ of 2.5 microg/l for all analytes. MOR and NMOR were not detected in any sample; 26.5% of the specimens were positive for COD and 13.7% for NCOD. Opiate CRS uses a preset, qualitative cutoff of 10 microg/l; this is equivalent to 30 microg/l in undiluted oral fluid as the oral fluid collection process involves a 1:3 dilution with buffer. Sensitivity, specificity, and efficiency of Opiate CRS compared to Opiate ELISA were 98.6, 98.1, and 98.2% at a 30 microg/l cutoff and 99.0, 96.2, and 96.6% at a 40 microg/l cutoff. Compared to the much lower GC/MS LOQ of 2.5 microg/l, sensitivity, specificity and efficiency were 66.8, 99.3 and 90.7%. Increasing the GC/MS cutoff to the current UK level yielded performance characteristics of 81.5% (sensitivity), 99.3% (specificity), and 95.4% (efficiency). Using a GC/MS cutoff identical to the preset Opiate CRS cutoff yielded sensitivity, specificity, and efficiency of 88.5, 99.2, and 97.5%, respectively. At the proposed SAMSHA confirmation cutoff of 40 microg/l, sensitivity increased with little change in specificity and efficiency (91.3% sensitivity, 98.9% specificity, and 97.5% efficiency). Oral fluid is a suitable matrix for detecting drugs of abuse. Opiate CRS, with a 30 microg/l cutoff, is sufficiently sensitive, specific and efficient for oral fluid opiate analysis, performing similarly to Opiate ELISA at the same cutoff, and having performance characteristics >91% when compared to GC/MS at the proposed SAMHSA cutoff.     

An enterprise-development strategy for Zambia

Although Zambia's deteriorating macro-economic situation has created a difficult environment for business, it also creates opportunities for the emergence of small and micro enterprises. Recent government policy reforms affecting these firms are discussed, along with existing programmes for credit, training, technical assistance, and common-site facilities/business incubators. The current programmes are limited in scope relative to the potential demand, and qualitative improvements are needed. Time-phased options for assisting small and micro enterprises are discussed.     

Aromatic content in medium range distillate products--Part I: an examination of various liquids

Classification of ignitable liquids in accordance with voluntary consensus-based standards published by ASTM International has become increasingly specific, relying upon both the chemical composition and the boiling point range of submitted ignitable liquids. This classification system includes among others, specific classes for distillates and dearomatized distillates. In this study, a variety of medium-range ignitable liquids were analyzed by gas chromatography-mass spectrometry. Several methods of data analysis were utilized to examine the relative aliphatic and aromatic contents in these liquids. Results show that commercially available products in the medium range exhibit a broad range of compositions with respect to the relative proportion of aliphatic and aromatic compounds and that some liquids may not be easily classified. This study demonstrates the importance of examining the proportion of aliphatics:aromatics for classifying such liquids and suggests guidelines for differentiating medium range distillates, dearomatized distillates, and blended products.