检索结果-内蒙古大学图书馆

13th IEEE International Symposium on High Assurance systems engineering, HASE 2011

作者： Amin, Ayman Colman, Alan Grunske, Lars Centre for Computing and Engineering Software Systems Faculty of Information and Communication Technologies Swinburne University of Technology Hawthorn VIC 3122 Australia Department of Computer Science Software Engineering: AG AQUA University of Kaiserslautern Kaiserslautern67653 Germany

ISBN: (纸本)9780769546155

As modern software systems operate in a highly dynamic context, they have to adapt their behaviour in response to changes in their operational environment or/and requirements. Triggering adaptation depends on detecting quality of service (QoS) violations by comparing observed QoS values to predefined thresholds. These threshold-based adaptation approaches result in late adaptations as they wait until violations have occurred. This may lead to undesired consequences such as late response to critical events. In this paper we introduce a statistical approach CREQA - Control Charts for the Runtime Evaluation of QoS Attributes. This approach estimates at runtime capability of a system, and then it monitors and provides early detection of any changes in QoS values allowing timely intervention in order to prevent undesired consequences. We validated our approach using a series of experiments and response time datasets from real world web services. © 2011 IEEE.

关键词： Quality of service

来源：评论

学校读者我要写书评

暂无评论

SecDSVL: A Domain-Specific Visual Language To Support Enterprise Security Modelling

SecDSVL: A Domain-Specific Visual Language To Support Enterp...

引用

Australian software engineering Conference

作者： Mohamed Almorsy John Grundy Centre for Computing and Engineering Software and Systems Swinburne University of Technology

ISBN: (纸本)9781479931507

Enterprise security management requires capturing different security and IT systems' details, analyzing and enforcing these security details, and improving employed security to meet new risks. Adopting structured models greatly helps in simplifying and organizing security specification and enforcement processes. However, existing security models are generally limited to specific security details and do not deliver a comprehensive security model. They also often do not have user-friendly notations, being complicated extensions of existing modeling languages (such as UML). In this paper, we introduce a comprehensive Security Domain Specific Visual Language (SecDSVL), which enables capturing of key security details to support enterprise systems security management process. We discuss our SecDSVL, tool support and the model-based enterprise security management approach it supports, give a usage example, and present evaluation experiments of SecDSVL.

关键词： Component: Domain Specific Visual Language Visual modelling tools Model-based security management

来源：评论

学校读者我要写书评

暂无评论

Natural strategies for search

引用

Natural computing 2008年第3期8卷 547-570页

作者： Banks, Alec Vincent, Jonathan Phalp, Keith Software Systems Research Centre School of Design Engineering and Computing Bournemouth University Poole Dorset UK

In recent years a considerable amount of natural computing research has been undertaken to exploit the analogy between, say, searching a given problem space for an optimal solution and the natural process of foraging for food. Such analogies have led to useful solutions in areas such as optimisation, prominent examples being ant colony systems and particle swarm optimisation. However, these solutions often rely on well defined fitness landscapes that are not always be available in more general search scenarios. This paper surveys a wide variety of behaviours observed within the natural world, and aims to highlight general cooperative group behaviours, search strategies and communication methods that might be useful within a wider computing context, beyond optimisation, where information from the fitness landscape may be sparse, but new search paradigms could be developed that capitalise on research into biological systems that have developed over millennia within the natural world.

关键词：

来源：评论

学校读者我要写书评

暂无评论

A strategy for the production of verifiable code using the B method 2nd

引用

2nd International Symposium of Formal Methods Europe, FME 1994

作者： Storey, Andrew C. Haughton, Howard P. Centre of Systems Software Engineering School of Computing Information Systems and Mathematics South Bank University Borough Rd LondonSE1 OAA United Kingdom 77 Crowley Close Waddon Croydon United Kingdom

ISBN: (纸本)9783540585558

The purpose of this paper is to describe extensions to the B Method in order to facilitate the generation of provably correct SPARK Ada code. Two strategies are provided. Firstly, a process model for the B Method is stated that allows the semi-automatic production of refinements through the use of standard library machines. Secondly, transformation rules are given for the automatic generation of SPARK Ada code from these refinements. Finally, an overview is given of how the semantics of Abstract Machine Notation and SPARK Ada can be used in order to verify these transformation rules. © 1994, Springer Verlag. All rights reserved.

关键词： Semantics

来源：评论

学校读者我要写书评

暂无评论

Understand system's relative effectiveness using adapted confusion matrix

引用

2nd International Conference on Design, User Experience, and Usability: Design Philosophy, Methods, and Tools, DUXU 2013, Held as Part of 15th International Conference on Human-Computer Interaction, HCI International 2013

作者： Jiang, Nan Liu, Haibin Software Systems Research Centre School of Design Engineering and Computing Bournemouth University United Kingdom National Center for Biotechnology Information National Library of Medicine National Institutes of Health United States

ISBN: (纸本)9783642392283

The effectiveness of a system refers to the accuracy and completeness with which users achieve specified goals. These two aspects are interpreted as errors and completion in the context of usability testing. However, a holistic view of effectiveness is not straight forward to establish in a comparative test because the two measures focus on different aspects of user outputs. In this paper, we propose a predictive method to measure a system's relative effectiveness based on its own performance prediction. We achieve it by using an adapted confusion matrix to establish a correlation model between the two measures. A real-world use case is provided to demonstrate the usefulness of our method in a comparative study of the two websites. © 2013 Springer-Verlag Berlin Heidelberg.

关键词： Image resolution

来源：评论

学校读者我要写书评

暂无评论

Measurement for software quality

Measurement for software quality

引用

IEE Colloquium on Proof of Designed Reliability (Digest No. 1994/239)

作者： R. Whitty Centre for Systems and Software Engineering School of Computing South Bank University USA

The author takes an uncontentious view of quality as being 'fitness for purpose', more specifically, conformance to user requirements. Quality can be measured by number of reported nonconformances per hour of use (of course 'shelfware', that is, software that is never used, exhibits no failures). Quality in many installed engineering systems is likely to exhibit a 'bathtub' failure curve during its lifetime. Despite the apparent kinship with physical engineering systems, software systems demand a different treatment because repairs to a software system alter its specification. Here, the author presents various efforts aimed at standardising the measurement of software quality.

关键词：

来源：评论

学校读者我要写书评

暂无评论

TOSSMA: A Tenant-Oriented SaaS Security Management Architecture

TOSSMA: A Tenant-Oriented SaaS Security Management Architect...

引用

IEEE International Conference on Cloud computing, CLOUD

作者： Mohamed Almorsy John Grundy Amani S. Ibrahim Centre for Computing & Engineering Software Systems Swinburne University of Technology Melbourne Australia

ISBN: (纸本)9781467328920

Multi-tenancy helps service providers to save costs, improve resource utilization, and reduce service customization and maintenance time by sharing of resources and services. On the other hand, supporting multi-tenancy adds more complexity to the shared application's required capabilities. Security is a key requirement that must be addressed when engineering new SaaS applications or when re-engineering existing applications to support multi-tenancy. Traditional security (re)engineering approaches do not fit with the multi-tenancy application model where tenants and their security requirements emerge after the system was first developed. Enabling, runtime, adaptable and tenant-oriented application security customization on single service instance is a key challenging security goal in multi-tenant application engineering. In this paper we introduce TOSSMA, a Tenant-Oriented SaaS Security Management Architecture. TOSSMA allows service providers to enable their tenants in defining, customizing and enforcing their security requirements without having to go back to application developers for maintenance or security customizations. TOSSMA supports security management for both new and existing systems. Service providers are not required to write security integration code to use a specific security platform or mechanism. In this paper, we describe details of our approach and architecture, our prototype implementation of TOSSMA, give a usage example of securing a multi-tenant SaaS, and discuss our evaluation experiments of TOSSMA.

关键词： Authentication Runtime Authorization Service oriented architecture Databases Computer architecture

来源：评论

学校读者我要写书评

暂无评论

Supporting Virtualization-Aware Security Solutions Using a Systematic Approach to Overcome the Semantic Gap

Supporting Virtualization-Aware Security Solutions Using a S...

引用

IEEE International Conference on Cloud computing, CLOUD

作者： Amani S. Ibrahim James Hamlyn-Harris John Grundy Mohamed Almorsy Centre for Computing and Engineering Software Systems Swinburne University of Technology Melbourne Australia

ISBN: (纸本)9781467328920

A prerequisite to implementing virtualization-aware security solutions is to solve the "semantic gap" problem. Current approaches require a deep knowledge of the kernel data to manually solve the semantic gap. However, kernel data is very complex; an Operating System (OS) kernel contains thousands of data structures that have direct and indirect (pointer) relations between each other with no explicit integrity constraints. This complexity makes it impractical to use manual methods. In this paper, we present a new solution to systematically and efficiently solve the semantic gap for any OS, without any prior knowledge of the OS. We present: (i) KDD, a tool that systematically builds a precise kernel data definition for any C-based OS such as Windows and Linux. KDD generates this definition by performing points-to analysis on the kernel's source code to disambiguate the pointer relations. (ii) SVA, a security appliance that solves the semantic gap based on the generated definition, to systematically and externally map the virtual machines' physical memory and extract the runtime dynamic objects. We have implemented prototypes for KDD and SVA, and have performed different experiments to prove their effectiveness.

关键词： Kernel Security Semantics Data structures Context Runtime Algorithm design and analysis

来源：评论

学校读者我要写书评

暂无评论

Automated software architecture security risk analysis using formalized signatures 13

Automated software architecture security risk analysis using...

引用

International Conference on software engineering (ICSE)

作者： Mohamed Almorsy John Grundy Amani S. Ibrahim Centre for Computing and Engineering Software Systems Swinburne University of Technology Melbourne Australia

ISBN: (纸本)9781467330763

Reviewing software system architecture to pinpoint potential security flaws before proceeding with system development is a critical milestone in secure software development lifecycles. This includes identifying possible attacks or threat scenarios that target the system and may result in breaching of system security. Additionally we may also assess the strength of the system and its security architecture using well-known security metrics such as system attack surface, Compartmentalization, least-privilege, etc. However, existing efforts are limited to specific, predefined security properties or scenarios that are checked either manually or using limited toolsets. We introduce a new approach to support architecture security analysis using security scenarios and metrics. Our approach is based on formalizing attack scenarios and security metrics signature specification using the Object Constraint Language (OCL). Using formal signatures we analyse a target system to locate signature matches (for attack scenarios), or to take measurements (for security metrics). New scenarios and metrics can be incorporated and calculated provided that a formal signature can be specified. Our approach supports defining security metrics and scenarios at architecture, design, and code levels. We have developed a prototype software system architecture security analysis tool. To the best of our knowledge this is the first extensible architecture security risk analysis tool that supports both metric-based and scenario-based architecture security analysis. We have validated our approach by using it to capture and evaluate signatures from the NIST security principals and attack scenarios defined in the CAPEC database.

关键词： Security Measurement Computer architecture Unified modeling language software software architecture Risk analysis

来源：评论

学校读者我要写书评

暂无评论

Fire tracking with collective intelligence using dynamic priority maps

Fire tracking with collective intelligence using dynamic pri...

引用

Congress on Evolutionary Computation

作者： David J. Howden Centre for Computing and Engineering Software Systems Swinburne University of Technology Melbourne Australia

ISBN: (纸本)9781479904532

This paper describes a swarm control algorithm based on distributed pheromone maps to effectively track a moving fire front. The algorithm uses a single heuristic to maintain persistent surveillance to detect new fires, while concurrently allowing for tracking of known fires. Control of the swarm is fully distributed and self-contained; requiring no external communication infrastructure and being resilient to individual hardware failures.

关键词： Peer-to-peer computing Surveillance Robots Heuristic algorithms Fuels Cameras Fires

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：