Evaluation of the Pattern-based method for Secure Development (PbSD): a controlled experiment
Authors: J. Abramov, A. Sturm, P. Shoval, (2012).
Journal: Information & Software Technology. (in press)
Context: Security in general, and database protection from unauthorized access in particular, are crucial for... more
Context: Security in general, and database protection from unauthorized access in particular, are crucial for organizations. Although it has been long accepted that the important system requirements should be considered from the early stages of the development process, non-functional requirements such as security tend to get neglected or dealt with only at later stages of the development process.
Objective: We present an empirical study conducted to evaluate a Pattern-based method for Secure Development – PbSD – that aims to help developers, in particular database designers, to design database schemata that comply with the organizational security policies regarding authorization, from the early stages of development. The method provides a complete framework to guide, enforce and verify the correct implementation of security policies within a system design, and eventually generate a database schema from that design.
Method: The PbSD method was evaluated in comparison with a popular existing method that directly specifies the security requirements in SQL and Oracle’s VPD. The two methods were compared with respect to the quality of the created access control specifications, the time it takes to complete the specification, and the perceived quality of the methods.
Results: We found that the quality of the access control specifications using the PbSD method for secure development were better with respect to privileges granted in the table, column and row granularity levels. Moreover, subjects who used the PbSD method completed the specification task in less time compared to subjects who used SQL. Finally, the subjects perceived the PbSD method clearer and more easy to use.
Conclusion: The pattern-based method for secure development can enhance the quality of security specification of databases, and decrease the software development time and cost. The results of the experiment may also indicate that the use of patterns in general has similar benefits; yet this requires further examinations.
A Study of In-depth Issues Surrounding Object Oriented Languages using Object Oriented Design Patterns
Clarence J M Tauro, N Ganesan, Krishna Priya R and Bhavya F. Article: A Study of In-depth Issues Surrounding Object Oriented Languages using Object Oriented Design Patterns. International Journal of Computer Applications 42(8):21-27, March 2012. Published by Foundation of Computer Science, New York, USA.
In this competitive world, all enterprises depend on the IT as their active support for various purposes. As a result... more
In this competitive world, all enterprises depend on the IT as their active support for various purposes. As a result the software projects are becoming larger and more complex. Hence the developers face challenge of developing the complex software's more quickly. The best solution to this is the concept of Reuse [1]. Through object oriented analysis pattern it is possible to solve the problems occurring in software development through its reusable capacity [1]. Good OO designs are reusable and stable nature, this provides the ability of this pattern to be used in Other applications which share the same knowledge[7]. Patterns show you how to build systems with good OO design qualities. The main aim of "object oriented analysis pattern" is to provide expert solution to recurring business problem and to produce more reliable conceptual design. In this paper, we formally give an overview on the state of Object-oriented modeling using patterns and classification of analysis pattern and development on analysis pattern and also the applications of analysis patterns
Design patterns reuse for real time embedded software development
Co-authored with Denis Ávila Montini, Daniela América da Silva, Felipe Rafael Motta Cardoso, Luiz Alberto Vieira Dias e Adilson Marques da Cunha, published at Information Technology: New Generations, 2009. ITNG '09. Sixth International Conference on
This article describes software reuse components using C
language on IBM-Rational Rose Real Time (RRRT)
language on IBM-Rational Rose Real Time (RRRT)
environment. In it a software development process
becomes refined by means of a design pattern reuse. Its
main contribution meets definition of a process for
construction of a Data Logger Platform. Use of design
pattern in an Integrated Computer Aided Software
Engineering Environment allows definition of an
industrial process aimed for future systematic reuse.
Direction lines from Rational Unified Process (RUP) had
recently helped undergraduate and graduate students
from the Brazilian Aeronautics Institute of Technology
(ITA) to create a fertile scene for practical applications of
design pattern concepts. A Computer Software
Component was constructed with attributes and generic
methods in order to make possible its reuse. As a result of
this process, members of ITA Software Engineering
Research Group had generated a quality report
previously improved to carry out classroom work, and
proposed a specific data management design pattern for
input and output.
Patterns for Event Notification
GARCIA MARTÍN, J. & MEDEROS MARTÍN, J. (1998): "Patterns for Event Notification". Europlop98. IIIrd European Conference on Pattern Languages of Programming and Computer (Bad Irsee, Germany, 1998). Workshop.
The Notifier: A Pattern Solution for Event Notification
MEDEROS, J.; GALVE-FRANCÉS, J. y GARCÍA MARTÍN, J. (1998): "The Notifier: A Pattern Solution for Event Notification". A. Toval y J. Nicolás (eds.): JIS'98, 3rd National Spanish Conference on Software Engineering. III Jornadas de Ingeniería del Software (Murcia, 1998). Universidad de Murcia. Murcia: 195-205. ISBN 84-95095-45-9
Multi-touch interaction principles for collaborative real-time music activities: towards a pattern language
by Anna Xambo
Xambó, Anna; Laney, Robin; Dobbyn, Chris and Jordà, Sergi (2011). In: International Computer Music Conference Proceedings, 31 July - 5 August 2011, Huddersfield.
In this paper we give an analysis of the literature on a set of problems that can arise when undertaking the... more In this paper we give an analysis of the literature on a set of problems that can arise when undertaking the interaction design of multi-touch applications for collaborative real-time music activities, which are designed for multi-touch technologies (e.g. smartphones, tablets, interactive tabletops, among others). Each problem is described, and a candidate design pattern (CDP) is suggested in the form of a short sentence and a diagram—an approach inspired by Christopher Alexander’s A Pattern Language. These solutions relate to the fundamental collaborative principles of democratic relationships, identities and collective interplay. We believe that this approach might disseminate forms of best design practice for collaborative music applications, in order to produce real-time musical systems which are collaborative and expressive.
49 views
Seen by:PROJECT ICARUS: STAKEHOLDER SCENARIOS FOR AN INTERSTELLAR EXPLORATION PROGRAM
ANDREAS M. HEIN, ANDREAS C. TZIOLAS AND RICHARD OSBORNE
JBIS, Vol. 64, pp.224-233, 2011
The Project Icarus Study Group’s objective is to design a mainly fusion-propelled interstellar probe. The starting... more The Project Icarus Study Group’s objective is to design a mainly fusion-propelled interstellar probe. The starting point are the results of the Daedalus study, which was conducted by the British Interplanetary Society during the 1970’s. As the Daedalus study already indicated, interstellar probes will be the result of a large scale, decade-long development program. To sustain a program over such long periods, the commitment of key stakeholders is vital. Although previous publications identified political and societal preconditions to an interstellar exploration program, there is a lack of more specific scientific and political stakeholder scenarios. This paper develops stakeholder scenarios which allow for a more detailed sustainability assessment of future programs. For this purpose, key stakeholder groups and their needs are identified and scientific and political scenarios derived. Political scenarios are based on patterns of past space programs but unprecedented scenarios are considered as well. Although it is very difficult to sustain an interstellar exploration program, there are scenarios in which this seems to be possible, e.g. the discovery of life within the solar system and on an exoplanet, a global technology development program, and dual-use of technologies for defence and security purposes. This is a submission of the Project Icarus Study Group.
97 views
Seen by:Precise Specification of Design Patterns and Tool Support in Their Application
by Amnon Eden
PhD Dissertation, Department of Computer Science, Tel Aviv University (2000)
Grasping the Dynamism of Urban Place: Contributions from the Work of Christopher Alexander, Bill Hillier, and Daniel Kemmis
by David Seamon
Originally published as chapter 7 in Tom Mels, editor, Reanimating Places: A Geography of Rhythms, London: Ashgate,2004 (pp. 123-45).
In this chapter, I examine how the ideas of three current researchers—architect Christopher Alexander, architectural... more In this chapter, I examine how the ideas of three current researchers—architect Christopher Alexander, architectural theorist Bill Hillier, and political philosopher Daniel Kemmis—provide important new insights for understanding the urban lifeworld and for making more vibrant places. I argue that these thinkers’ conceptions of place, though considerably different in some ways, can be drawn together to offer a powerful understanding of how physical-spatial and human worlds might mutually sustain each other by bringing human beings together informally and thereby generating a sense of togetherness, particularly in cities. In turn, this possibility of spontaneous geographical gathering can support a liveliness of place and one kind of implicit environmental belonging.
606 views
Seen by: and 33 moreHein, A. et al.: “Laser Sail Propulsion for Interstellar Flight: Novel Concepts”
Andreas M. Hein, Christian Bühler, Daniel Pütz, Mikhail Pak, Philipp Reiss
IAA 7th Realistic Advanced Scientific Space Missions 11th- 15th July 2011, Aosta, Italy, 2011
Laser sail propulsion is considered as one of the most promising methods for interstellar flight. It uses a powerful... more Laser sail propulsion is considered as one of the most promising methods for interstellar flight. It uses a powerful laser system positioned within the solar system and a spacecraft with a large ultra thin laser sail, which is propelled by the photon pressure of the laser. Robert Forward proposed a staged-sail concept, in principle making a deceleration at the target star system and even a roundtrip possible. However, Forwards concept has two significant drawbacks. First, the required laser power levels are extremely high and second, the pointing requirements for an eventual deceleration at the target star system are prohibitive. This paper presents approaches how novel concepts for overcoming these two drawbacks can be created. This is either done by categorizing existing concepts from the literature in order to find optimal combinations or by the adoption of existing concepts to a new context. We use TRIZ, which provides a set of tools that are well-fitted to solve this type of problem. Furthermore, patterns are used to instantiate the rather abstract TRIZ principles by adding context information. As a result, attractive possibilities to remedy the laser sail propulsion concept are identified, e.g. the use of the gravitational lens of Jupiter, the fractionated spacecraft concept and the separation of cargo and crew. Our aim is to investigate these concepts in further detail in the future.
118 views
Seen by:Hein, A., Osborne, R.: “Project Icarus: Stakeholder Analysis and Prediction of Technological Maturity of Key Technologies for the Development of the Icarus Interstellar Probe”
International Astronautical Congress 2010, Prague, Czech Republic
The Project Icarus Study Group reassesses the original Daedalus concept of a fusion-propelled interstellar probe. The... more The Project Icarus Study Group reassesses the original Daedalus concept of a fusion-propelled interstellar probe. The Daedalus study was conducted by the British Interplanetary Society during the 1970's. Interstellar probes are the result of large scale development projects and require a high level of continuous investment over several decades. In order to maintain this level of investment, the long-term commitment of important stakeholders is vital. An additional challenge is the proposed use of technology, which is not yet existent or has to be extrapolated into the future. For a fusion-propelled interstellar probe this paper addresses the question of long-term sustainability by conducting a stakeholder analysis and how to assess the maturity of technologies to be used. For this purpose, we first identify science and politics as the most relevant stakeholder groups and derive scenarios in which Icarus might become feasible by using “policy patterns” as a method to instantiate scenarios. Scenarios derived from the merging of different patterns indicate that various contexts exist in which an interstellar probe might be developed. Regarding the assessment of technology maturity, the use of expert/literature surveys and computational models shall give us the possibility to make credible statements about the near-term availability of a technology. This is a submission of the Project Icarus Study Group.
Teaching Object-Oriented Software Design within the Context of Software Frameworks
published in Proceedings of the 41st Annual IEEE Frontiers in Education Conference (FIE 2011), October 13-16, 2011
Object-oriented software design and programming is an essential part of a computer science curriculum. We have... more Object-oriented software design and programming is an essential part of a computer science curriculum. We have observed that novice software developers, such as fresh college graduates who have been taught object-oriented design, are able to apply good design principles in theory. However, this rarely extends into their professional practice, when they are asked to design software intended to run inside a software framework. In fact, we observe that even advanced software developers abandon good design practices when developing software while using a framework, and focus on simply “making it work.” This paper presents and discusses a methodology developed for designing software in the context of frameworks to overcome these issues. We show how design patterns can serve as the bridge between the paradigms imposed by the framework and the ideal, unconstrained design of the system. We also suggest an evaluation method for observing the results of using this methodology when used by the students.
KREA-FUN: Systematic Creativity for Enjoyable Software Applications
This paper is about how to enhance software applications with engaging interaction. A methodology is presented that... more This paper is about how to enhance software applications with engaging interaction. A methodology is presented that provides a structured way to elicit how to turn boring tasks into enjoyable challenges, giving users the possibility to grow or compete, or empowering users to perform sophisticated tasks and as a consequence gain social appreciation. The paper is addressed to practitioners who want to know more about how to make applications more appealing and to researchers, who want to see theories from emotion, motivation and organizational growths successfully put into interactive applications.
Network motifs in computational graphs: a case study in software architecture
Sergi Valverde and Ricard V. Solé
Physical Review E 72, 26107 (2005)
Complex networks in both nature and technology have been shown to display characteristic, small subgraphs so-called... more Complex networks in both nature and technology have been shown to display characteristic, small subgraphs so-called motifs which appear to be related to their underlying functionality. All these networks share a common trait: they manipulate information at different scales in order to perform some kind of computation. Here we analyze a large set of software class diagrams and show that several highly frequent network motifs appear to be a consequence of network heterogeneity and size, thus suggesting a somewhat less relevant role of functionality. However, by using a simple model of network growth by duplication and rewiring, it is shown the rules of graph evolution seem to be largely responsible for the observed motif distribution.
Patterns in Authoring of Adaptive Educational Hypermedia: A Taxonomy of Learning Styles
by Elizabeth FitzGerald (née Brown)
Full citation:
Brown, E.,Cristea, A., Stewart, C. and T. Brailsford (2005) Patterns in Authoring of Adaptive Educational Hypermedia: A Taxonomy of Learning Styles. Journal of Educational Technology & Society 8 (3), 77-90.
This paper describes the use of adaptation patterns in the task of formulating standards for adaptive educational... more This paper describes the use of adaptation patterns in the task of formulating standards for adaptive educational hypermedia (AEH) systems that is currently under investigation by the EU ADAPT project. Within this project, design dimensions for high granularity patterns have been established. In this paper we focus on detailing lower granularity adaptive patterns based upon learning styles. Several patterns from existing AEH system case studies are identified and classified according to an extended learning style "onion" model. This model forms the basis of a learning style taxonomy, introduced here, whose components determine adaptation patterns for AEH. These patterns are of importance both for authoring, as well as for interfacing between adaptive hypermedia systems. From an authoring point of view, these patterns may be used to establish a fine-grain approach to instructional strategies that can be implemented in AEH systems, as a response to a particular learning style. The implementation of this adaptation pattern taxonomy is discussed, both generally and in detail.
Object Model Wrapper
by Walt Davis
How to deploy an object-oriented business model that has no distribution, persistence, and other technologies (a model that is nothing more than technologically dependent upon the language itself and some of the API's that support the building of a rich object model) in a way that the missing qualities it needs to become a fully functional enterprise business application are added without violating the models implementation.
The key to understanding and properly building an enterprise application is the business processes and entities of the... more The key to understanding and properly building an enterprise application is the business processes and entities of the organization. So we focus on modeling that which will drive the application and its development; the business model. The business model becomes the blue print to what the application is all about and is reflected throughout the application. So we focus on the model independent of technologies that usually influence its accuracy and quality.
