bluuebunny/crossref_metadata_2025 huggingface dataset:
Globalization and E-Commerce
Authors: Sagi John , Carayanis Elias , Dasgupta Subhasish , Thomas Gary
Published: April 2011

Many authors argue that information and communications technology (ICT) in this New Economy is causing a globalized, unified society. Others take the opposite stand, viewing local factors such as national culture as very important to the success of information technology (IT). Research indicates that related factors such as gender may also play important roles in the use and acceptance of IT. This chapter uniquely examined these by using electronic commerce as the common technology. Business students from the U.S., Greece, and England expressed opinions on the important issues of National Control, Privacy Cost, Property Rights, and Consumer Preferences. Using Analysis of Variance (ANOVA), sufficient evidence was found to conclude that there are statistically significant differences in attitude about e-commerce among cultural groups, but not with gender groups. This research found support for several studies indicating the importance of culture on attitudes about technology, and postulated that common attitudes about Privacy Cost and Consumerism may be among indicators of a “technology veneer”.
Collaborative Software Requirements Engineering Exercises in a Distributed Virtual Team Environment
Authors: Edwards H. Keith , Sridhar Varadharajan
Published: April 2011

Round-the-clock work cycle, low cost of software development, and access to specialized skills have prompted many companies in the USA, Canada, and Europe to outsource some or part of their software development work to off-shore centers in countries such as India. While design, development, and testing phases that are traditionally off-shored require less interaction between clients and the off-shore consultants, phases such as requirements engineering require close co-ordination and interaction. The clients and consultants in such off-shored projects often work in a virtual team environment. In this research, our endeavor is to understand the complex issues in such a virtual project environment during the requirements definition phase of the software development cycle. In particular, we conducted an exploratory research study, involving 24 virtual teams based in Canada and India, working collaboratively on defining business requirements for software projects, over a period of 5 weeks. The study indicates that trust between the teams and well-defined task structure positively influence the performance, satisfaction, and learning level of such distributed virtual teams.
An Investigation of Revenue Streams on New Zealand Online Content Providers
Authors: Vasisht Prateek , Gutierrez Jairo A.
Published: April 2011

This chapter describes an empirical investigation into the revenue streams of online content providers in New Zealand. It extends previous academic literature by taking a broader scope and a unique geographic focus (New Zealand). Framed according to a proposed integrated classification of revenue streams and supporting features, which identifies six revenue streams and four supporting features, the study investigates the satisfaction levels of content providers with the revenue stream(s) they use, the issues faced in generating revenue and whether the supporting features support the revenue generating capacity of content sites. After applying certain eligibility criteria, 36 sites comprised the target population of which 11 were represented. Web site examinations coupled with a mixture of face-to-face and e-mail interviews with senior managers comprised the data collection instruments. Respondents used all six revenue streams to monetize their online content. A profile of revenue stream usage, satisfaction levels with revenue stream performance, the issues surrounding revenue generation and the contributions of supporting features are presented.
IS Change Agents in Practice in a US-Chinese Joint Venture
Authors: Dologite Dorothy G. , Mockler Robert J. , Bai Quinghua , Viszhanyo Peter F.
Published: April 2011

This chapter presents a case study that documents how information systems (IS) principals in China strategically shifted to different change agent roles to accommodate various IS implementation contingencies in the organization. The case concerns a US-Chinese joint venture, located in China. The change agent models hypothesized by Markus and Benjamin (l996) serve as a lens to interpret the case. Based on observations of how these roles emerged in different phases of implementing packaged software, a meta-category called “adaptor” is offered to visualize what the data revealed and to contribute to this emerging research area. Implications for practitioners and researchers are addressed.
A Rigorous Framework for Model-Driven Development
Authors: Favre Liliana
Published: April 2011

The model-driven architecture (MDA) is an approach to model-centric software development. The concepts of models, metamodels, and model transformations are at the core of MDA. Model-driven development (MDD) distinguishes different kinds of models: the computation-independent model (CIM), the platform-independent model (PIM), and the platform-specific model (PSM). Model transformation is the process of converting one model into another model of the same system, preserving some kind of equivalence relation between them. One of the key concepts behind MDD is that models generated during software developments are represented using common metamodeling techniques. In this chapter, we analyze an integration of MDA metamodeling techniques with knowledge developed by the community of formal methods. We describe a rigorous framework that comprises the NEREUS metamodeling notation (open to many other formal languages), a system of transformation rules to bridge the gap between UML/OCL and NEREUS, the definition of MDA-based reusable components, and model/metamodeling transformations. In particular, we show how to integrate NEREUS withalgebraic languages using the Common Algebraic Specification Language (CASL). NEREUS focuses on interoperability of formal languages in MDD.
Exploring the Concept of Method Rationale
Authors: Aerfalk Pär J. , Fitzgerald Brian
Published: April 2011

Systems development methods are used to express and communicate knowledge about systems and software development processes, that is, methods encapsulate knowledge. Since methods encapsulate knowledge, they also encapsulate rationale. Rationale can, in this context, be understood as the reasons and arguments for particular method prescriptions. In this chapter, we show how the combination of two different aspects of method rationale can be used to shed some light on the communication and apprehension of methods in systems development, particularly in the context of tailoring of methods to suit particular development situations. This is done by clarifying how method rationale is present at three different levels of method existence. By mapping existing research on methods onto this model, we conclude the chapter by pointing at some research areas that deserve attention and where method rationale could be used as an important analytic tool.
Externalisation and Adaptation of Mult-Agent System Behavior
Authors: Xiao Liang , Greer Des
Published: April 2011

This chapter proposes the adaptive agent model (AAM) for agent-oriented system development. In AAM, requirements can be transformed into externalised business rules. These rules represent agent behaviours, and collaboration between agents using the rules can be modelled using extended UML diagrams. Specifically, a UML structural model and a behavioural model are employed. XML is used to further specify the rules. The XML-based rules are subsequently translated by the agents. The UML diagrams and XML specification can both be edited at any time, the newly specified behaviours being available to the agent system immediately. An illustrative example is used to show how AAM is deployed, demonstrating adaptation of inter-agent collaboration, intra-agent behaviours, and agent ontologies. With AAM, there is no need to recode and regenerate the agent system when change occurs. Rather, the system model is easily configured by users and agents will always get up-to-date rules to execute at run-time.
Clustering Similar Schema Elements Across Heterogeneous Databases
Authors: Zhao Huimin , Ram Sudha
Published: April 2011

Interschema relationship identification (IRI), that is, determining the relationships among schema elements in heterogeneous data sources, is an important first step in integrating the data sources. This chapter proposes a cluster analysis-based approach to semi-automating the IRI process, which is typically very time-consuming and requires extensive human interaction. We apply multiple clustering techniques, including K-means, hierarchical clustering, and self-organizing map (SOM) neural network, to identify similar schema elements from heterogeneous data sources, based on multiple types of features, such as naming similarity, document similarity, schema specification, data patterns, and usage patterns. We describe an SOM prototype we have developed that provides users with a visualization tool for displaying clustering results and for incremental evaluation of potentially similar elements. We also report on some empirical results demonstrating the utility of the proposed approach.
An Efficient Concurrency Control Algorithm for High-Dimensional Index Structures
Authors: Song Seok Il , Yoo Jae Soo
Published: April 2011

This chapter introduces a concurrency control algorithm based on link-technique for high-dimensional index structures. In high-dimensional index structures, search operations are generally more frequent than insert or delete operations and need to access many more nodes than those in other index structures, such as B+-tree, B-tree, hashing techniques, and so on, due to the properties of queries. This chapter proposed an algorithm that minimizes the delay of search operations in all cases. The proposed algorithm also supports concurrency control on reinsert operations for the high-dimensional index structures employing reinsert operations to improve their performance. The authors hope that this chapter will give helpful information for studying multidimensional index structures and their concurrency control problems to researchers.
Modeling Fuzzy Information in the IFO and Relational Data Model
Authors: Ma Z. M.
Published: April 2011

Computer applications in non-traditional areas have put requirements on conceptual data modeling. Some conceptual data models, being the tool of design databases, have been proposed. However, information in real-world applications is often vague or ambiguous. Currently, less research has been done in modeling imprecision and uncertainty in conceptual data models and the design of databases with imprecision and uncertainty. In this chapter, a different level of fuzziness based on fuzzy set and possibility distribution theory will be introduced into the IFO data model and the corresponding graphical representations will be given. The IFO data model is then extended to a fuzzy IFO data model, denoted IF2O. In particular, we provide the approach to mapping an IF2O model to a fuzzy relational database schema.
MAMADAS
Authors: Jiao Yu , Hurson Ali R.
Published: April 2011

Creating a global information-sharing environment in the presence of autonomy and heterogeneity of data sources is a difficult task. When adding mobility and wireless media to this mix, the constraints on bandwidth, connectivity, and resources worsen the problem. Our past research in global information-sharing systems resulted in the design, implementation, and prototype of a search engine, the summary-schemas model, which supports imprecise global accesses to the data sources while preserving local autonomy. We extended the scope of our search engine by incorporating mobile agent technology to alleviate many problems associated with wireless communication. We designed and prototyped a mobile agent-based secure mobile data access system (MAMDAS) framework for information retrieval in large, distributed, and heterogeneous databases. In order to address the mounting concerns for information security, we also proposed a security architecture for MAMDAS. As shown by our experimental study, MAMDAS demonstrates good performance, scalability, portability, and robustness.
Indexing Regional Objects in High-Dimensional Spaces
Authors: Yu Byunggu , Orlandic Ratko
Published: April 2011

Many spatial access methods, such as the R-tree, have been designed to support spatial search operators (e.g., overlap, containment, and enclosure) over both points and regional objects in multi-dimensional spaces. Unfortunately, contemporary spatial access methods are limited by many problems that significantly degrade the query performance in high-dimensional spaces. This chapter reviews the problems of contemporary spatial access methods in spaces with many dimensions and presents an efficient approach to building advanced spatial access methods that effectively attack these problems. It also discusses the importance of high-dimensional spatial access methods for the emerging database applications, such as location-based services.
Semantic Analytics in Intelligence
Authors: Aleman-Meza Boanerges , Sheth Amit P. , Palaniswami Devanand , Eavenson Matthew , Arpinar I. Budak
Published: April 2011

We describe an ontological approach for determining the relevance of documents based on the underlying concept of exploiting complex semantic relationships among real-world entities. This research builds upon semantic metadata extraction and annotation, practical domain-specific ontology creation, main-memory query processing, and the notion of semantic association. A prototype application illustrates the approach by supporting the identification of insider threats for document access. In this scenario, we describe how investigative assignments performed by intelligence analysts are captured into a context of investigation by including concepts andrelationships from the ontology. A relevance measure for documents is computed using semantic analytics techniques. Additionally, a graph-based visualization component allows exploration of potential document access beyond the ‘need to know’. We also discuss how a commercial product using Semantic Web technology, Semagix Freedom, is used for metadata extraction when designing and populating an ontology from heterogeneous sources.
Semantic Integration in Multidatabase Systems
Authors: Wang Te-Wei , Murphy Kenneth E.
Published: April 2011

This chapter reviews briefly the semantic integration issues in multidatabase development and provides a standardized representation for classifying semantic conflicts. We begin by summarizing the methods and issues in multidatabase design. From the perspective of database integration, we identify that semantic conflict is the main issue. We explore the idea further by examining semantic conflicts and propose taxonomy to classify semantic conflicts in different groups. This taxonomy is then evaluated by two different methods. Finally, we conclude by discussing the limits of database integration and how this challenge may be addressed.
Intelligent Analysis of Software Maintenance Data
Authors: Reformat Marek , Musilek Petr , Igbide Efe
Published: April 2011

Amount of software engineering data gathered by software companies amplifies importance of tools and techniques dedicated to processing and analysis of data. More and more methods are being developed to extract knowledge from data and build data models. In such cases, selection of the most suitable data processing methods and quality of extracted knowledge is of great importance. Software maintenance is one of the most time and effort-consuming tasks among all phases of a software life cycle. Maintenance managers and personnel look for methods and tools supporting analysis of software maintenance data in order to gain knowledge needed to prepare better plans and schedules of software maintenance activities. Software engineering data models should provide quantitative as well as qualitative outputs. It is desirable to build these models based on a well-delineated logic structure. Such models would enhance maintainers’ understanding of factors which influence maintenance efforts. This chapter focuses on defect-related activities that are the core of corrective maintenance. Two aspects of these activities are considered: a number of software components that have to be examined during a defect removing process, and time needed to remove a single defect. Analysis of the available datasets leads to development of data models, extraction of IF-THEN rules from these models, and construction of ensemble-based prediction systems that are built based on these data models. The data models are developed using well-known tools such as See5/C5.0 and 4cRuleBuilder, and a new multi-level evolutionary-based algorithm. Single data models are put together into ensemble prediction systems that use elements of evidence theory for the purpose of inference about a degree of belief in the final prediction.
Improving Credibility of Machine Learner Models in Software Engineering
Authors: Boetticher Gary D.
Published: April 2011

Given a choice, software project managers frequently prefer traditional methods of making decisions rather than relying on empirical software engineering (empirical/machine learning- based models). One reason for this choice is the perceived lack of credibility associated with these models. To promote better empirical software engineering, a series of experiments are conducted on various NASA datasets to demonstrate the importance of assessing the ease/difficulty of a modeling situation. Each dataset is divided into three groups, a training set, and “nice/nasty” neighbor test sets. Using a nearest neighbor approach, “nice neighbors” align closest to same class training instances. “Nasty neighbors” align to the opposite class training instances. The “nice”, “nasty” experiments average 94% and 20%accuracy, respectively. Another set of experiments show how a ten-fold cross-validation is not sufficient in characterizing a dataset. Finally, a set of metric equations is proposed for improving the credibility assessment of empirical/machine learning models.
ILP Applications to Software Engineering
Authors: Gunetti Daniele
Published: April 2011

Though inductive logic programming (ILP for short) should mean the “induction of logic programs”, most research and applications of this area are only loosely related to logic programming. In fact, the automatic synthesis of “true” logic programs is a difficult task, since it cannot be done without a lot of information on the sought programs, and without the ability to describe in a simple way well-restricted searching spaces. In this chapter, we argue that, if such knowledge is available, inductive logic programming can be used as a valid tool for software engineering, and we propose an integrated framework for the development, maintenance, reuse, testing, and debugging of logic programs.
A Genetic Algorithm-Based QoS Analysis Tool for Reconfigurable Service-Oriented Systems
Authors: Yen I-Ling , Gao Tong
Published: April 2011

Reconfigurability is an important requirement in many application systems. Many approaches have been proposed to achieve static/dynamic reconfigurability. Service-oriented architecture offers a certain degree of reconfigurability due to its support in dynamic composition. When system requirements change, new composition of services can be determined to satisfy the new requirements. However, analysis, especially QoS based analysis, is generally required to make appropriate service selections and service configurations. In this chapter, we discuss the development of QoS-based composition analysis techniques and propose a QoS specification model. The specification model facilitates QoS-based specification of the properties of the Web services and the requirements of the application systems. The composition analysis techniques can be used to analyze QoS tradeoffs and determine the best selections and configurations of the Web services. We develop a composition analysis framework and use the genetic algorithm in the framework for composition decision making. The framework currently supports SOA performance analysis. The details of the genetic algorithm for the framework and the performance analysis techniques are discussed in this chapter.
Fuzzy Logic Classifiers and Models in Quantitative Software Engineering
Authors: Pedrycz Witold , Succi Giancarlo
Published: April 2011

The learning abilities and high transparency are the two important and highly desirable features of any model of software quality. The transparency and user-centricity of quantitative models of software engineering are of paramount relevancy as they help us gain a better and more comprehensive insight into the revealed relationships characteristic to software quality and software processes. In this study, we are concerned with logic-driven architectures of logic models based on fuzzy multiplexers (fMUXs). Those constructs exhibit a clear and modular topology whose interpretation gives rise to a collection of straightforward logic expressions. The design of the logic models is based on the genetic optimization and genetic algorithms, in particular. Through the prudent usage of this optimization framework, we address the issues of structural and parametric optimization of the logic models. Experimental studies exploit software data that relates software metrics (measures) to the number of modifications made to software modules.
A Practical Software Quality Classification Model Using Genetic Programming
Authors: Liu Yi , Khoshgoftaar Taghi M.
Published: April 2011

A software quality estimation model is an important tool for a given software quality assurance initiative. Software quality classification models can be used to indicate which program modules are fault-prone (FP) and not fault-prone (NFP). Such models assume that enough resources are available for quality improvement of all the modules predicted as FP. In conjunction with a software quality classification model, a quality-based ranking of program modules has practical benefits since priority can be given to modules that are more FP. However, such a ranking cannot be achieved by traditional classification techniques. We present a novel software quality classification model based on multi-objective optimization with genetic programming (GP). More specifically, the GP-based model provides both a classification (FP or NFP) and a quality-based ranking for the program modules. The quality factor used to rank the modules is typically the number of faults or defects associated with a module. Genetic programming is ideally suited for optimizing multiple criteria simultaneously. In our study, three performance criteria are used to evolve a GP-based software quality model: classification performance, module ranking, and size of the GP tree. The third criterion addresses a commonly observed phenomena in GP,that is, bloating. The proposed model is investigated with case studies of software measurement data obtained from two industrial software systems.
BM_Virtual Enterprise as an Agile/Virtual Enterprise Model
Authors: Cunha Maria Manuela , Putnik Goran D.
Published: April 2011

Chapter III presents the BM_Virtual Enterprise (BM_VE) model, as an Agile/Virtual Enterprise, in total or partial conformance with the BM_Virtual Enterprise Architecture Reference Model (BM_VEARM) (i.e., as a dynamically reconfigurable network integrated over the global domain, satisfying the requirements for integrability, distributivity, agility and virtuality as the competitiveness factors). According to BM_VEARM, a virtual enterprise (VE) is “… an optimized enterprise, synthesized over a universal set of resources, with a real-time replaceable physical structure, and when the synthesis and control are performed in an abstract or virtual environment.” The importance of presenting the BM_VE is in the fact that VE, or Agile/Virtual Enterprise (A/VE), implementation and management is not possible without Market of Resources (MR), and similarly defined structures and/or organizations, as an external independent institution that would serve as an environment to support the VE dynamic integration, operation and reconfiguration, as well as “boost” to the networking (VE) dynamics, providing overcoming (i.e., minimizing) of the twofundamental networking disablers: (1) “transaction” (i.e., reconfigurability) costs, and (2) the VE partners’ knowledge and rights protection. Market of Resources is the third mechanism, or tool, that BM_VE, or any VE conceived as a dynamically reconfigurable enterprise network uses. It is an institution, or enterprise, operating as a meta-enterprise of the operating VE. BM_Virtual Enterprise uses three main mechanisms, or tools: Broker, Virtuality and Market of Resources. Broker is the agent of agility and virtuality. Virtuality as a tool is a specific organizational structure pattern that contributes to further improvement of agility/reconfiguration dynamics. The consequences of virtuality, as defined in BM_VE model (i.e., in BM_VEARM), are: (1) the hierarchical structure of VE, or A/VE, organization, (2) the Resource-centered Virtual Enterprise Definition (in a way the inverse definition of the “traditional” VE definitions), and (3) the virtualization process. The consequences of virtuality in BM_VE, following BM_VEARM, the Resource centered Virtual Enterprise Definition, and the process of virtualization, following BM_VE and BM_VEARM, directly implied by the (BM_VE) VE Extended Life Cycle, characterized by the “contractualization of the Market of Resources” environment, or a meta-enterprise for its (VE) implementation and management. BM_VE is a ubiquitous enterprise too. This is exactly because ubiquitousness is necessarily based on the Resource-centered Virtual Enterprise Definition. Market of Resources, and similarly defined environments, enable VE, or A/VE, to operate as a ubiquitous enterprise too. Ubiquitous enterprise, and VE as a ubiquitous enterprise, could be considered as the next generation (enterprise) organizations.
The Organizational Model for a Market of Resources
Authors: Cunha Maria Manuela , Putnik Goran D.
Published: April 2011

This chapter presents a complete specification of the Market of Resources, to allow a complete understanding of how is this environment able to support the implementation and management of Agile/Virtual Enterprises. The model of the Market of Resources includes three views: 1. The functional specification of the service provided, its processes structure and data structure using IDEF0 and IDEF1x modelling techniques; 2. The definition of a regulation regarding the operation and management procedures of the Market of Resources; and 3. A cost and effort model to allow a further analysis of the model performance.
Development o the Market of Resources
Authors: Cunha Maria Manuela , Putnik Goran D.
Published: April 2011

In earlier chapters we have presented the main information and communication technologies and applications that can be used to implement functionalities of the Market of Resources, namely Internet technology, Agent technology, Internet-based marketplaces, etc., and standards for integrability. Electronic Marketplaces aggregate a set of technologies able to respond to some of the requirements of the Market of Resources, which can be complemented with other technologies. This chapter introduces some technology that can support the development of the Market of Resources and discusses its utilisation, as well as presents a prototype developed to demonstrate the operation of some functions of the Market of Resources. This prototype is used later, in Chapter X, in the analytical simulation of the Market of Resources performance.
Security in GRID Computing
Authors: Garcia Eric
Published: April 2011

GRID computing implies sharing heterogeneous resources, located in different places belonging to different administrative domains over a heterogeneous network. There is a great similarity between GRID security and classical network security. Moreover, additional requirements specific to GRID environments exist. We present these security requirements and we detail various secured middleware systems. Finally, we give some examples of companies using such systems.
Security of Symbian Based Mobile Devices
Authors: Pulkkis Göran
Published: April 2011

Security issues of Symbian-based mobile computing devices such as PDAs and smart phones are surveyed. The evolution of Symbian OS architecture is outlined. Security threats and problems in mobile computing are analyzed. Theft/loss of the mobile device or removable memory cards exposes stored sensitive information. Wireless connection vulnerabilities are exploited for unauthorized access to mobile devices, to network, and to network service. Malicious software attacks in form of Trojan horses, viruses, and worms are also becoming more common The Symbian OS is open for external software and content which makes Symbian devices vulnerable for hostile applications. Embedded security features in Symbian OS are: a cryptographic software module, verification procedures for PKI signed software installation files, and support for the communication security protocols IPSec and TLS. The newest version 9.3 of Symbian also embeds a platform security structure with layered trusted computing, protection capabilities for installed software, and data caging for integrity and confidentiality of private data. Fundamental security requirements of a Symbian based mobile device such as physical protection, device access control, storage protection, network access control, network service access control, and network connection security are described in detail. Symbian security is also evaluated by discussing its weaknesses and by comparing it to other mobile operating systems. Current availability of add-on security software for Symbian based mobile devices is outlined in an appendix. In another appendix, measurement results on how add-on security software degrades network communication performance of a Symbian based mobile device are presented and analyzed as a case study.
Wireless Local Area Network Security
Authors: Germain Michéle , Ferrero Alexis , Karvo Jouni
Published: April 2011

Using WLAN networks in enterprises has become a popular method for providing connectivity. We present the security threats of WLAN networks, and the basic mechanisms for protecting the network. We also give some advice on avoiding the threats.
Delegation Services
Authors: Agudo Isaac
Published: April 2011

Advanced applications for the Internet need to make use of the authorization service so that users can prove what they are allowed to do and show their privileges to perform different tasks. However, for a real scalable distributed authorization solution to work, the delegation service needs to be seriously considered. In this chapter, we first put into perspective the delegation implications, issues and concepts derived from authorization schemes proposed as solutions to the distributed authorization problem, indicating the delegation approaches that some of them take. Then, we analyze interesting federation solutions. Finally, we examine different formalisms specifically developed to support delegation services, focusing on a generalization of those approaches, the Weighted Delegation Graphs solution.
From DRM to Enterprise Rights and Policy Management
Authors: Morin Jean-Henry , Pawlak Michel
Published: April 2011

This chapter introduces digital rights management (DRM) in the perspective of digital policy management (DPM) focusing on the enterprise and corporate sector. DRM has become a domain in full expansion with many stakes which are by far not only technological. They also touch legal aspects as well as business and economic. Information is a strategic resource and as such requires a responsible approach of its management, almost to the extent of being patrimonial. Digital rights and policy management is now well established mainly in two distinct sectors sharing the same fundamental underlying technical principles: on the one hand, the entertainment and media industry, and on the other hand, the enterprise sector. This chapter mainly focuses on the latter, introducing DRM concepts, standards, and the underlying technologies from its origins to its most recent developments in order to assess the challenges and opportunities of enterprise digital policy management.
Phishing Attacks and Countermeasures
Authors: Hoanca Bogdan
Published: April 2011

The field of information security has realized many advances in the past few decades. Some of these innovations include new cryptographic techniques, network protocols, and hardware tokens. However, the weakest link in information security systems, human gullibility, remains extremely vulnerable. Even the strongest cryptographic algorithms are useless if a user is fooled into disclosing their authentication information. This chapter describes the threat of phishing in which attackers generally sent a fraudulent e-mail to their victims in an attempt to trick them into revealing private information. We start by defining the phishing threat and its impact on the financial industry. Next, we review different types of hardware and software attacks and their countermeasures. Finally, we discuss policies that can protect an organization against phishing attacks. An understanding of how phishers elicit confidential information along with technology and policy-based countermeasures will empower managers and end users to better protect their information systems.
Prevention and Handling of Malicious Code
Authors: Khelafa Halim
Published: April 2011

The purpose of this chapter is to provide a wide spectrum of end users with a complete reference on malicious code or malware. End users include researchers, students, as well as information technology and security professionals in their daily activities. A particular effort aims at educating users about malware, enhancing organization capabilities for preventing as well as handling malicious code incidents when they occur, and preparing them for tomorrow’s new types of malware, as well as the new types of safeguards they should consider. First, the author provides an overview of malicious code, its past, present, and future. Second , he presents methodologies , guidelines and recommendation on how an organization can enhance its prevention of malicious code, how it should respond to the occurrence of a malware incident, and how it should learn from such an incident to be better prepared in the future. Finally, the author addresses the issue of the current research as well as future trends of malicious code and the new and future means of malware prevention.
Security Risk Management Methodologies
Authors: Herrmann Francine , Khadraoui Djamel
Published: April 2011

This chapter provides a wide spectrum of existing security risk management methodologies. The chapter starts presenting the concept and the objectives of enterprise risk management. Some exiting security risk management methods are then presented by showing the way to enhance their applications to enterprise needs.
Dynamic Management of Security Constraints in Advanced Enterprises
Authors: Manjunath R.
Published: April 2011

Providing security for the content that gets exchanged between physically and geographically different locations is challenging. The cost and resources to be used to meet this challenge has to be linked to the degree of security demanded by the content. In this chapter, the security associated with the transfer of the content is quantified and treated as a quality of service parameter. The user is free to select the parameter depending up on the content being transferred. As dictated by the demanding situations, a minimum agreed security would be assured for the data at the expense of the appropriate resources over the network.
Failing the Disabled Community
Authors: Kreps David , Adam Alison
Published: April 2011

The focus of this chapter is Web accessibility for disabled people, given that much of the Web remains inaccessible or difficult to access. The topic of disabled people’s Web access is introduced through a consideration of disability discrimination legislation and a description of how the law applies to Web accessibility. There is a tension between the active burdens the legislation demands and the relative passivity of approaches towards disability discrimination that still prevail. This is exacerbated by the widespread acquiescence to automatic software checking. The history of the development of the World Wide Web in terms of accessibility is briefly described. This reveals the familiar tension between a ”free market” approach and regulation that does not readily support social inclusion through accessibility. A table of detailed points showing where automatic tools cannot perform an adequate check against the W3C standards is presented followed by a narrative expanding our claim for the poverty of automatic approaches.
Bonded Design
Authors: Large Andrew , Nesset Valerie , Beheshti Jamshid , Bowler Leanne
Published: April 2011

This chapter presents a new methodology, called bonded design (BD), for designing information technologies. It is especially suited to work with children, where designers and children collaborate in an intergenerational team to develop a low-tech prototype, over a number of design sessions, using techniques such as group discussions, critical evaluation of existing technologies, brainstorming, and prototyping. BD is compared with other user-focused design methods, and its unique features identified. Two case studies are presented in which designers worked with elementary school students, within the BD framework, to design two Web portal prototypes intended for young students to find information for class projects. The successful evaluation (using focus groups and an operational study) of working portals developed from these prototypes validated BD as a means to design technologies for young students.
Interpreting the Female User
Authors: Sadowska Noemi Maria
Published: April 2011

This chapter presents an investigation into the commercial WWW portal, “BEME. com,” as an example of gendered Web design targeting female users. It argues that Web designers need to be aware of processes implicated in such gendered outcomes. Thus, an analysis of the BEME.com design process is used to identify threats and opportunities in designing for female online users in order to formulate appropriate design guidelines. The chapter outlines several underlying factors that illuminate these processes, and their social, cultural, and political origins. It is argued that the prevalence and accessibility of WWW makes it a powerful vehicle of change both within design practice and in terms of gender structures more widely. It is in this context that the author seeks to contribute to the existing research by offering a feminist critique of Web design, arguing that Web designers have an opportunity and a responsibility to affect and effect changes to a gendered status quo.
Web Site Design for People with Dementia
Authors: Savitch Nada , Zaphiris Panayiotis
Published: April 2011

This chapter describes the current thinking around designing Web sites for people with dementia. It is important that people with dementia are involved in the development of Web sites that are designed for them to use. The chapter offers advice for both researchers and practitioners who may not have thought about this user group. Symptoms of dementia are described, and the design needs of people with the condition are discussed. A list of design considerations for Web site designers covering simplified displays, avoiding distractions, consistent and familiar page design, contextual support, the use of colour, graphics, icons and sound, language and content, and navigation and menus is presented. Appropriate methodologies for working with people with dementia are also described.
Comparing Comprhension Speeds and Accuracy of Online Information in Students with and without Dyslexia
Authors: Kurniawan Sri , Conroy Gerard
Published: April 2011

This chapter describes some statistics of people with dyslexia. It continues with describing problems people with dyslexia experience with reading online material, and some technological aids available to help them. Three groups of university students participated in the user study of comprehension tasks using five online articles of varying complexity (as measured through Flesch-Kincaid readability grade). The study found that students with dyslexia are not slower in reading than students without dyslexia when the articles are presented in a dyslexia friendly colour scheme, but these students with dyslexia fare worse in answering correctly the questions related to the passages they read when the complexity increases.
What's Wrong with Agile Methods? Some Principles and Values to Encourage Quantification
Authors: Gilb T. , Brodie L.
Published: April 2011

Current agile methods could benefit from using a more quantified approach across the entire implementation process (that is, throughout development, production, and delivery). The main benefits of adopting such an approach include improved communication of the requirements, and better support for feedback and progress tracking. This chapter first discusses the benefits of quantification, then outlines a proposed approach (Planguage), and finally describes an example of its successful use (a case study of the “Confirmit” product within a Norwegian organization, “FIRM”).
Handling of Software Quality Defects in Agile Software Development
Authors: Rech J.
Published: April 2011

Software quality assurance is concerned with the efficient and effective development of large, reliable, and high-quality software systems. In agile software development and maintenance, refactoring is an important phase for the continuous improvement of a software system by removing quality defects like code smells. As time is a crucial factor in agile development, not all quality defects can be removed in one refactoring phase (especially in one iteration). Documentation of quality defects that are found during automated or manual discovery activities (e.g., pair programming) is necessary to avoid wasting time by rediscovering them in later phases. Unfortunately, the documentation and handling of existing quality defects and refactoring activities is a common problem in software maintenance. To recall the rationales why changes were carried out, information has to be extracted from either proprietary documentations or software versioning systems. In this chapter, we describe a process for the recurring and sustainable discovery, handling, and treatment of quality defects in software systems. An annotation language is presented that is used to store information about quality defects found in source code and that represents the defect and treatment history of a part of a software system. The process and annotation language can not only be used to support quality defect discovery processes, but is also applicable in testing and inspection processes.
Agile Quality Assurance Techniques for GUI-Based Applications
Authors: Memon A. , Xie Q.
Published: April 2011

This chapter motivates the need for new agile model-based testing mechanisms that can keep pace with agile software development/evolution. A new concentric loop-based technique, which effectively utilizes resources during iterative development, is presented. The tightest loop is called crash testing, which operates on each code check-in of the software. The second loop is called smoke testing, which operates on each day’s build. The third and outermost loop is called the “comprehensive testing” loop, which is executed after a major version of the software is available. Because rapid testing of software with a graphical-user interface (GUI) front-end is extremely complex, and GUI development lends itself well to agile processes, the GUI domain is used throughout the chapter as an example. The GUI model used to realize the concentric-loop technique is described in detail.
Test-Driven Development
Authors: Mark S.
Published: April 2011

This chapter describes the practice of test-driven development (TDD) and its impact on the overall culture of quality in an organization based on the author’s experience introducing TDD into four existing development projects in an industrial setting. The basic concepts of TDD are explored from an industry practitioner’s perspective before elaborating on the benefits and challenges of adopting TDD within a development organization. The author observed that TDD was well-received by team members, and believes that other teams will have this same experience if they are prepared to evaluate their own experiences and address the challenges.
Patterns for Designing Agent-Based e-Business Systems
Authors: Weiss Michael
Published: April 2011

Agents are rapidly emerging as a new paradigm for developing software applications. They are being used in an increasing variety of applications, ranging from relatively small systems such as assistants to large, open, mission-critical systems like electronic marketplaces. One of the most promising areas of applications for agent technology is e-business. In this chapter, we describe a group of architectural patterns for agent-based e-business systems. These patterns relate to front-end e-business activities that involve interaction with the user, and delegation of user tasks to agents. Patterns capture well-proven, common solutions, and guide developers through the process of designing systems. This chapter should be of interest to designers of e-business systems using agent technology. The description of the patterns is followed by the case study of an online auction system to which the patterns have been applied.
The Evolution of Comparison-Shopping Agents
Authors: Wan Yun
Published: April 2011

Comparison-shopping agents became the important link in the B2C ecommerce domain since late 90s. Since its emergence in 1995, the evolution of comparison-shopping agents experienced a few ups and downs. This chapter covers key events and issues of comparison-shopping agent evolution in three intertwined threads: the emergence of representative agents, the evolution of comparison-shopping agent technology, and the evolution of their business models.
A study of intelligent shopping support
Authors: Lin Wen-Shan
Published: April 2011

The Internet and World Wide Web are becoming more and more dynamic in terms of their contents and usage. Agent-based shopping support (ASS) aims at keeping up with this dynamic environment by mimicking shoppers’ purchasing behavior in the electronic commerce transaction process in the sense of matching the profiles of web sites and shoppers. Evolutionary agent-based shopping supports are emerging as intelligent shopping support. This chapter contains the earliest attempt to gather and investigate the nature of current research. The idea of applying concepts of product characteristics from the matrix of Internet marketing strategies is introduced for solving problems of natural language information search. The process of focus-group research methodology is applied in acquiring the essential knowledge for examining shopper’s knowledge of search. An architecture of ASS in the case of outbound group package tour in Taiwan is presented. This work demonstrates the process of knowledge acquirement to tackle the problem of ineffective online information search by a customer-centric method.
Agent-¬based matching of demands and supplies in business transaction formation
Authors: Lin Raymund J. , Chou Seng-Cho T.
Published: April 2011

The theme of this chapter includes topics of matching, auction and negotiation. We have shown that the knowledge of game theory is very important when designing an agent-based matching or negotiation system. The problem of bounded rationality in multi¬-agent systems is also discussed; we put forward the mechanism design and heuristic methods as solutions. A real negotiation scenario is presented to demonstrate our proposed solutions. In addition, we discuss the future trends of the agent technology in e¬commerce system.