Abstract. Research on marketing and deception has identified principles of persuasion that influence human decisions. However, this research is scattered: it focuses on specific contexts and produces different taxonomies. In regard to frauds and scams, three taxonomies are often referred in the literature: Cialdini's principles of influence, Gragg's psychological triggers, and Stajano et al. principles of scams. It is unclear whether these relate but clearly some of their principles seem overlapping whereas others look complementary. We propose a way to connect those principles and present a merged and reviewed list for them. Then, we analyse various phishing emails and show that our principles are used therein in specific combinations. Our analysis of phishing is based on peer review and further research is needed to make it automatic, but the approach we follow, together with principles we propose, can be applied more consistently and more comprehensively than the original taxonomies.

Access control models describe frameworks that dictate how subjects (e.g. users) access resources. In the Role-Based Access Control (RBAC) model access to resources is based on the role the user holds within the organization. RBAC is a rigid model where access control decisions have only two output options: Grant or Deny. Break The Glass (BTG) policies on the other hand are flexible and allow users to break or override the access controls in a controlled and justifiable manner. The main objective of this paper is to integrate BTG within the NIST/ANSI RBAC model in a transparent and secure way so that it can be adopted generically in any domain where unanticipated or emergency situations may occur. The new proposed model, called BTG-RBAC, provides a third decision option BTG, which grants authorized users permission to break the glass rather than be denied access. This can easily be implemented in any application without major changes to either the application code or the RBAC authorization infrastructure, apart from the decision engine. Finally, in order to validate the model, we discuss how the BTG-RBAC model is being introduced within a Portuguese healthcare institution where the legislation requires that genetic information must be accessed by a restricted group of healthcare professionals. These professionals, advised by the ethical committee, have required and asked for the implementation of the BTG concept in order to comply with the said legislation.

An isolate, designated strain FS-1T, was recovered from a ripe fig. Phylogenetic analysis of the 16S rRNA genes and DNA-DNA reassociation values showed that the organism represented a novel species of the genus Leuconostoc closely related to Lactobacillus fructosus. The novel isolate could be distinguished from the type strain of Lactobacillus fructosus by the fatty acid composition and several phenotypic and growth characteristics. In strain FS-1T, 18:1 delta9 (18:1omega9c) was present in relatively large amounts whilst, in Lactobacillus fructosus, this fatty acid was a minor component. Strain FS-1T and Lactobacillus fructosus produced acid in API 50CHL microtubes from glucose, fructose and mannitol within 48 h, whereas only strain FS-1T also fermented trehalose, gluconate, turanose and sucrose after 48 h. Other differences in acid production from carbohydrates also distinguished strain FS-1T from Lactobacillus fructosus. Both organisms were heterofermentative with fructose as a substrate and fermented glucose only in the presence of fructose, as determined by nuclear magnetic resonance studies. Strain FS-1T was catalase-positive. On the basis of the phylogenetic analysis, DNA-DNA reassociation values, physiological and biochemical characteristics and fatty acid composition, the name Leuconostoc ficulneum is proposed for the novel species represented by strain FS-1T, and it is proposed that Lactobacillus fructosus be reclassified in the genus Leuconostoc as Leuconostoc fructosum comb. nov.

The Electronic Medical Record (EMR) integrates heterogeneous information within a Healthcare Institution stressing the need for security and access control. The Biostatistics and Medical Informatics Department from Porto Faculty of Medicine has recently implemented a Virtual EMR (VEMR) in order to integrate patient information and clinical reports within a university hospital. With more than 500 medical doctors using the system on a daily basis, an access control policy and model were implemented. However, the healthcare environment has unanticipated situations (i.e. emergency situations) where access to information is essential. Most traditional policies do not allow for overriding. A policy that allows for "Break-The-Glass (BTG)" was implemented in order to override access control whilst providing for non-repudiation mechanisms for its usage. The policy was easily integrated within the model confirming its modularity and the fact that user intervention in defining security procedures is crucial to its successful implementation and use.

Intestinal ganglioneuromatosis is a rare disorder of the enteric nervous system. It is often associated with neurofibromatosis type 1 and multiple endocrine neoplasia type 2b but, more rarely, it can present in a sporadic and isolated form. A 66-year-old man presented with a 14-year history of iron deficiency anaemia, with no visible bleeding, requiring occasional blood transfusions. Haematological causes of anaemia were thoroughly excluded, and conventional endoscopic and radiological examinations showed no lesions. Capsule enteroscopy identified an ulcerated stenosis in the small bowel, but the biopsies taken at balloon enteroscopy were inconclusive. The patient underwent a laparotomy, which revealed a stiff and ulcerated stenosis in the ileum. Histological analysis demonstrated the presence of diffuse intestinal ganglioneuromatosis. Three years after surgery, the patient is asymptomatic, with normal haemoglobin levels. This case demonstrates an isolated form of intestinal ganglioneuromatosis, with an atypical presentation, difficult to diagnose despite an exhaustive evaluation.