bluuebunny/crossref_metadata_2025 huggingface dataset:
Prophylaxis for “virus” propagation and general computer security policy
Authors: Guinier Daniel
Published: June 2007

Viruses propagate
easily with
economic consequences
that are difficult to estimate. Appropriate means of prevention, detection and protection are needed to preserve integrity and availability of computer systems.
Prophylaxis effects
first have to be reasearched to provide data for choice of appropriate measures according to the general security policy. Several models for virus propagations borrowed from biology have been developed in the continuous case to indicate that segregation controls imposed by file value increase the population density of virus. This confirm previous experimental results obtained by F. Cohen on personal computers and mainframes.
Uniform virus prevention is highly recommended rather than segregation by file value which is basically the principle of most of centralized packages.
Also, security measures offered by most of the resource access security systems are not effective for virus infections which can
pass high security levels when they are introduced by trusted users.
It is suggested to apply a flexible
management prevention program
adapted to environment, men and virus changes in relation with a
normal use of information systems
which have to play their economic and strategic roles without losses.Two perspectives are suggested. The first makes reference to the
SRI's real-time Inrusion-Detection Expert System
(
IDES
) based on statistical tests for abnormality, considering deviations from an expected behavior. It works for individual as well as group users or remote hosts. The second proposes the use of
neural networks
as another technical solution actually available. It should work for such an anomaly
detection based on behavior segregation
rather than value.
The multiplication of very large integers using the discrete fast Fourier transform
Authors: Guinier Daniel
Published: June 2007

Year after year, there is an incredible increase in computation power
delivered by parallelism and new kinds of processors. The length of integers involved in the computations in public-key cryptosystems will probably be more than
one thousand bits within the next ten years
to warranty a good security level.
The proposal is to present a possible software solution
for 1024, 1279, 2048 and 4096-bit numbers which combine
software
and
general purpose hardware.
The algorithm implemented makes use of the Discrete fast Fourier Transform (
DFT
) and produces first results which can be compared to others like Karatsuba's or modular arithmetic.
Considering these results for cryptographic applications
using asymmetric systems for key exchanges one can take advantage of such a method for modular exponentiation but only for operations involving more than 1024 bits. While using a quad-transputer board equipped with the new T9000 family transputers, software modular exponentiation involving 1024-bit numbers should take under 0.5 s, 2048 bits under 2 s and 4096 bits less than 8 s which takes more time but insures the future of the
just necessary
security ! Expected results for this method show
possible software applications for highly secure key exchange protocols using general purpose new chips
(
INMOST9000 transputer or Intel 1860 when used in piped mode
).
Collaboration media
Authors: Hughes P. T. , Plant T. A. , Morris M. E. , Seel N. R.
Published: June 2007

The user-centred design of an experimental shared-window environment at BNR Europe Limited is discussed. This project is still on-going and we anticipate further valuable results from more experimental iterations with the evolving system this year.
Summary of the SIGOIS general membership survey October 1991
Authors: Comstock Nora , Yoes Cissy
Published: June 2007

One of the initiatives of the SIGOIS leadership is to become more responsive to our members. In order for us to plan on how we could become more effective, we issued a general membership survey in October 1991.The information from these surveys has been summarized and is currently being used as we develop new directions, and strengthen old ones, for our organization. This is a report on the summary information from the survey and a look at how we are trying to apply what we have learned.
Organizing software information
Authors: Jarke Matthias
Published: June 2007

When developing, implementing, and maintaining large-scale information systems, many facets of knowledge become relevant. Based on experiences in ESPRIT project DAIDA, we analyze these facets and sketch a comprehensive formal model of knowledge relevant to IS development and maintenance. Such a model can be used to structure development environments, to discuss and control software projects, and to support design decisions and their tool-assisted execution in CASE environments. Based on this model, we have implemented a knowledge-based and decision-oriented software information system called
ConceptBase
which provides efficient management of large bases of conceptual models and tools for exploratory analysis and (group) decision-making in IS engineering.
Modelling business rules in an office environment
Authors: Loucopoulos P. , Katsouli E.
Published: June 2007

Current approaches in the field of information systems methodologies deal primarily with the capture and specification of models which are concerned with the target computer-based system but often fail to adequately capture and explicitly specify the (organisational) business concepts, objects, rules, constraints and - generally - the corporate knowledge upon which any development of a new information system or the evolution of an existing one, must be based.This paper advocates an approach which explicitly recognises the role of organisational policy within an information system and visibly maintains this policy throughout the software development process, from requirements specifications through to an executable implementation.This paper introduces the philosophy and architecture of the TEMPORA paradigm and describes the conceptual models which render such an approach a feasible undertaking.
Application development through reuse
Authors: Fugini M. G. , Nierstrasz O. , Pernici B.
Published: June 2007

This paper presents the architecture and basic features of the ITHACA Application Development Environment based on a Software Information System for enhancing reusability of both software components and artifacts about development of these components. Object-oriented techniques are used in the Environment at all levels of the development of an application: requirement specification, scripting, implementation through class refinement and tailoring. In the Environment, it is tracked how the various products of the development phases were produced by providing tools for the Application Engineer who is responsible for abstracting application skeletons and development information and storing these as Application Frames into a Software Information Base. In particular, the paper describes the Requirement Collection And Specification Tool (RECAST) and the Visual Scripting Tool (Vista) of the ITHACA Development Environment.
Applying domain and design knowledge to requirements engineering
Authors: Johnson W. Lewis , Feather Martin S. , Harris David R.
Published: June 2007

This paper describes efforts to develop a transformation-based software environment which supports the acquisition and validation of software requirements specifications. These requirements may be stated informally at first, and then gradually formalized and elaborated. Support is provided for groups of requirements analysis working together, focusing on different analysis tasks and areas of concern. The environment assists in the validation of formalized requirements by translating them into natural language and graphical diagrams, and testing them against a running simulation of the system to be built. Requirements defined in terms of domain concepts are transformed into constraints on system components. The advantages of this approach are that specifications can be traced back to requirements and domain concepts, which in turn have been precisely defined.
Security services in the OSI reference model
Authors: Wright Marie A.
Published: June 2007

As open systems interconnection (OSI) technology establishes global standards for data communications, security is becoming an increasingly important issue for open systems and computer networks. This paper provides an overview of the OSI Reference Model, and discusses the placement of security services in this model.
Using fuzzy logic to represent security policies in the multipolicy paradigm
Authors: Hosmer Hilary H.
Published: June 2007

Fuzzy logic is a promising way to represent non-traditional policies, like privacy, integrity and availability. Its vagueness and use of continuous data fit better with many non-military enterprise policy requirements. The theoretical foundation needed for development and assurance of computer systems has been worked out in an extensive literature, but more attention needs to be paid to its use in trusted systems. It is appropriate to use fuzzy logic for implementing aspects of the Multipolicy Paradigm.
Towards a semantics of desires (abstract)
Authors: Kiss George , Reichgelt Han
Published: June 2007

Research in Distributed Artificial Intelligence (DAI) often considers the problem of how best to utilize multiple automated agents to accomplish a given task. A canonical problem, the Pursuit Problem (1), has been suggested as a useful tool for evaluating alternative approaches to the distribution of knowledge and control among intelligent, cooperative problem-solvers. Work on the Pursuit Problem has been carried out by several researchers; for example, Stephens and Merx (16, 171 compare alternative approaches to solving the problem.In [5], a game theoretic model was proposed for DAI in which each agent works for his own selfish goals. In this paper, we suggest a method for solving the Pursuit Problem using game theoretic techniques, by incorporating the global goal of a group of agents into their local interests. Although applied to the Pursuit Problem, the technique has wider applicability throughout DAI. We present the results of a simulation of the game theory model for the Pursuit Problem, and compare results to those of Stephens and Merx's models.
Toward an architecture for adaptive, rational, mobile agents (abstract)
Authors: Ferguson Innes A.
Published: June 2007

It is becoming widely accepted that neither purely reactive nor purely deliberative control techniques are capable of producing the range of behaviours required of intelligent agents in dynamic, unpredictable, multiagent worlds. We present a new architecture for controlling autonomous, mobile agents - building on previous work addressing reactive and deliberative control methods. The proposed multi-layered control architecture allows a resource-bounded, goal-directed agent to react promptly to unexpected changes in its environment; at the same time it enables the agent to reason predictively about potential conflicts by constructing and projecting theories which hypothesies other agents' intentions.The line of research adopted is very much a pragmatic one. A single, common architecture has been implemented which, being heavily parameterised, allows an experimenter to study functionally- and behaviourally-diverse agent configurations. A principal aim of this research is to understand the role different functional capabilities play in constraining an agent's behaviour under varying environmental conditions. To this end, an experimental testbed comprising a simulated multi-agent world has also been constructed. Some preliminary experience with the new control architecture is described.
Reducing consumer anxiety about EFTS security
Authors: Richards Martin , Guynes Jan
Published: June 2007

Electronic Funds Transfer Systems (EFTS) are facing a crisis that must soon be overcome. In order to achieve the maximum cost benefits of EFTS, it is necessary that automated banking transactions be accepted on a widespread basis. General acceptance has not yet occured because of problems with EFTS perceived by consumers and bankers. The potential for loss through any number of new exposures is too great in the minds of many. This attitude must change before widespread acceptance of EFTS is to be accomplished.
Handling shared resources in a temporal data base management system
Authors: Dean Thomas L.
Published: June 2007

An important component of planning involves keeping track of what various agents intend to do and recognizing situations in which certain planned-for activities are likely to interfere with one another. In planning situations involving several agents participating in a cooperative endeavor, this process can be automated to a high degree thereby facilitating coordination between agents. The more difficult aspects of planning, how to choose what activities to perform and what to do when those choices lead to problems, are left to the agents themselves. This paper demonstrates how the use of an interactive temporal data base management system can direct the inter-agent communication necessary to coordinate the use of shared resources and deal with complex scheduling problems. It is argued that much of the paper work normally associated with routine office transactions can be eliminated through the use of this temporal data base.
Language constructs for programming by example
Authors: Rubin Robert V.
Published: June 2007

Systems for programming by example permit the specification of algorithms through the use of
demonstrations
that manipulate
examples
. This paper analyzes systems for programming by example from a language point of view. Examples are analyzed as data abstractions, and demonstrations as abstractions for evaluation and control. Criteria are introduced for evaluating both the computational power and the expressiveness of the abstractions. The analysis demonstrates the existence of several previously unconsidered approaches to the more difficult problems associated with programming by example.
Why users cannot “get what they want”
Authors: Paul Ray J.
Published: June 2007

The notion that users can 'get what they want' has caused a planning blight in information systems development, with the resultant plethora of information slums that require extensive and expensive maintenance. This paper will outline why the concept of 'user requirements' has led to a variety of false paradigms for information systems development, with the consequent creation of dead systems that are supposed to work in a living organisation. It is postulated that what is required is an architecture for information systems that is designed for breathing, for adapting to inevitable and unknown change. Such an architecture has less to do with 'what is wanted', and more to do with the creation of a living space within the information system that enables the system to live.
Knowledge-based security control for on-line database transaction processing systems
Authors: Murthy V. K. , Krishnamurthy E. V.
Published: June 2007

This paper considers the interrelationships between knowledge-based security, concurrency and recoverability in online database transaction processing systems (OLTP). We describe how OLTP can permit the users to carry out the desired actions, and concurrently activate scrutinizing transactions that identify the users with respect to their biometrical or other characteristics stored in a secure knowledge database. A finite state machine model is used to design protocols for recovery, under security breaches. It is shown that the best way to achieve concurrency and recovery in OLTP is through shadowing and strict-scheduling in conjunction with certification locking or timestamping. We must, however, bear in mind that security and concurrency have conflicting requirements and at best we can achieve a compromise between them.
Flexible architectures for CSCW system support
Authors: Bentley Richard
Published: June 2007

Despite the widespread attention CSCW has received from researchers and product developers there have been very few examples of successful cooperative applications. This lack of success can be attributed in part to the lack of principles we have for CSCW system development. Identification of such principles requires a better understanding of the core functionality required to support group work. My own belief is that tools which allow developers to experiment with different strategies to support cooperation, such as alternative approaches to information sharing and presentation, update propagation, synchronisation and so on, would contribute significantly to this understanding. As such I advocate an approach to the development of cooperative systems based on prototyping, and I see this as complementary to other work focusing on discovering and articulating social interaction in order to better inform cooperative system development.Cooperative applications place novel requirements on supporting architectures, over and above those of more traditional multi-user systems. One such requirement is the need for a high degree of flexibility, necessary to support different end-users, engaged in different tasks and often adopting different methods of working. This requirement for flexibility is emphasised if we consider toolkits and environments intended to support experimentation with different strategies for managing and promoting cooperative interaction.In this brief exposition I will attempt to support my position which is based on the need for experimental prototyping of cooperative systems, and justify the claim that this prototyping requires more flexible software architectures. My thinking in this area to date has been shaped largely by experiences gained in developing the MEAD multi-user interface prototyping environment at Lancaster University. Although the MEAD system proved useful for prototyping user interfaces to support the cooperative work of air traffic controllers, it is limited in the range of cooperative interaction which can be supported. In this respect I believe MEAD is similar to most other platforms supporting development of cooperative systems.
Collaboration in the small vs. collaboration in the large
Authors: Johnson Philip M.
Published: June 2007

For the past several years, the Collaborative Software Development Laboratory (CSDL) at the University of Hawaii has been pursuing research along two general fronts: the development of computer systems to support group activities (collaborative software), as well as research on the process of developing software in a group setting (collaborative development). Our research projects include:• Egret, a client-server system for implementing domain-specific, collaborative, hypertext systems [1, 6, 7, 9];• CSRS, an Egret-based system for software review and quality improvement [2, 10, 11, 12, 8, 6, 7, 9];• AEN, an Egret-based system for collaborative authoring and learning [3];• CLARE, an Egret-based system collaborative learning and review [4, 13, 14, 15].• ICS-WWW, a WWW-based system for exploring community building through electronic means [5].From these experiences, we have be gun to recognize two fundamentally different styles of collaboration and collaborative system, which we term collaboration-in-t he-large and collaboration-in-the-small. Collaboration in the large, embodied by such systems as WWW, scales to thousands or millions of individuals. Such domain-independent scale requires a kind of collaborative "open world assumption": users do not know the answers to such elementary questions as: Who are the other users? What is the set of artifacts in the system? What has changed sinceyesterday? What is interesting to me? Is the information repository structurally consistent? What is user X doing right now?In contrast, the systems b uilt by our lab exploit the possibiliti es of domain-specific, collaboration-in-the- small where a "closed world assumption" holds. In our systems, in contrast to WWW, all of the preceeding questions have answers, at least relative to the domain of discourse embodied in the system. The cost of collaboration in the small is its lack of scalability both technically and socially: it is unlikely that groups of more than 50 or 100 could work together effectively in our systems, or that our system could provide adequate responsiveness to larger groups.
Extending the scope of PAC-Amodeus to cooperative systems
Authors: Salber Daniel , Nigay Laurence , Coutaz Joëlle
Published: June 2007

Software tools for tile construction of interactive systems such as user interface toolkits, application skeletons, and user interface generators, alleviate the activity of programming but do not eliminate software architecture modelling. For example, the "callback" mechanism made popular by X-Window, does not enforce the distinction between domain-specific concepts and presentation-specific issues. Without a framework for prescribing the appropriate usage of callbacks, the software designer may develop an interactive system that cannot be maintained nor modified. Cooperative systems, which draw upon a wide variety of tools, techniques, and constraints, make architecture modelling even more crucial.In order to reason about software modelling for cooperative systems, we first need to clarify the nature of the problem space. The role of a problem space is to identify the set of concepts relevant to a particular domain of interest and to organize these concepts into a framework suitable for rising the appropriate questions, for clarifying the scope of the solution space, or for characterizing a particular design solution. The litterature reveals a wide variety of issues related to CSCW but these concepts are not organized in a way that supports software architecture modelling. We claim that one goal of the workshop is to define a problem space useful for reasoning about software architecture and use this framework as foundations for comparing, devising, and assessing current and future architecture models.In section 2, we present a draft proposal of the problem space for the software design of cooperative systems. In section 3, we describe PAC-Amodeus, our own conceptual architecture model, and show how it can support the issues made explicit in our problem space.
Bridging information technology and business—some modelling aspects
Authors: Teufel Stephanie , Teufel Bernd
Published: June 2007

Business strategies of today's companies are influenced by the permanent change of the relevant environment. This change, which has to be handled by the companies, is mainly driven by factors such as increased market dynamics, higher customer requirements, new technologies, broader competition boundaries and new innovative products and processes. This results in the fact that information, and especially its processing by means of information technology (IT), becomes a critical success factor. Therefore, the challenge of strategic management is to find efficient methods to bring business and information technology together. The
Strategic Alignment Model
supporting strategic management and the
Customer Supplier Protocol
supporting the design of business processes are introduced in this paper.
Developing and deploying a corporate-wide digital signature capability
Authors: Coe Diane E. , Smith Frank J.
Published: June 2007

Some time ago, MITRE's Information Systems Architect produced a document identifying the architectural goals of The MITRE Corporation in terms of its information systems. In this document, the author described an electronic workplace where paper is virtually eliminated. Information is generated electronically, signed electronically, and routed for review, approval, and action all without ever appearing in printed form. In moving toward this goal architecture, MITRE has developed a digital signature capability that will be deployed throughout the Corporation during the third quarter of 1995. This digital signature capability, an integral component of the electronic workplace, will significantly reduce both the time and the money currently spent on generating and processing paper forms.
Issues 94—public key—trials and tribulations
Authors: Rubinovitz Harvey H.
Published: June 2007

This document was written based on the introductory talk presented at the special workshop, "Issue 94 - Public Key - Trials and Tribulations" in conjunction with the Tenth Annual Computer Security Applications Conference held in December 1994. This document serves to set the stage for the papers which follow and to provide a catalyst to discussions at the conference. Applications which utilize public key technology to enhance security are just starting to emerge. Some applications are starting to use digital signatures to insure authenticity, integrity, and nonrepudiation between sender and receiver. There are applications which allow users to sign forms of Electronic Data Interchange (EDI) transactions digitally. A number of approaches to secure electronic mail such as privacy-enhanced E-mail (PEM) implementations, Pretty Good Privacy (PGP), and Message Security Protocol (MSP) have been defined. The focus of the workshop was to discuss the implementation, deployment, and management experiences of various applications utilizing Public Key systems. These topics are discussed briefly in this paper and are discussed in more detail in the additional papers which were presented at the special workshop.
Toward Nebraska's statewide electronic library
Authors: Giesecke Joan , Busch Nancy
Published: June 2007

The National Science Foundation (NSF) planning grant for $100,000 administered by the University of Nebraska and the Nebraska Library Commission, addresses two key barriers to the implementation of an electronic library in Nebraska: compatibility of network systems, and training for end users. Moreover the project is designed to identify and prioritize content that should be available through the network to support education, economic development, and life-long learning goals for Nebraskans. The grant period is November, 1994 through October, 1995.
Constraints on the design of information systems
Authors: Hickey Thomas B.
Published: June 2007

Note on Environment: The sort of systems discussed here are primarily central databases accessed through a client-server architecture offering information obtained primarily from scientific societies and commercial publishers.
Ask and ye shall receive
Authors: Greening Tony
Published: June 2007

Hacker folklore abounds with awe-inspiring tales of gaunt, caffeine-sustained teenagers tirelessly picking global electronic locks from afar in a quest for knowledge or recognition. Sometimes it is difficult to remind ourselves that the reality is a lot less enchanting. Certainly, although hackers are known to proclaim an enthusiasm for artfully finding and breaching loopholes (in both code and law), it would appear that most just want to get access to accounts by the most expedient means possible. Even if you do not share this perception, it is a good level at which to pitch your security policy. To use an analogy, security policies which seek to prevent an intruder from gaining access to a house by hang-gliding onto the roof and abseiling down the chimney should also consider that the front door ought not to be open.
Industrial strength hypermedia
Authors: Nelson Peter R. , Poltrock Steven E. , Schuler Douglas
Published: June 2007

In a paper entitled "Industrial Strength Hypermedia: Requirements for a Large Engineering Enterprise" published in the Proceedings of Hypertext '91 [Malc91], K. C. Malcolm and two of the authors (Steve Poltrock and Doug Schuler) presented their vision for the use of hypermedia to manage large-scale engineering information. Since that time, engineers and scientists within the Boeing Company have been working to refine and implement that vision in conjunction with vendors of hypermedia and information management technology. This paper presents some of the results of that work, including a short description of the systems engineering environment within Boeing, a scenario which depicts some of the uses and benefits of hypermedia in this environment, and Boeing's requirements for hypermedia technology to support the creation, management, access, and use of richly interrelated systems engineering information. The purpose of this paper is to present an updated vision of the need of large industrial companies for robust, scaleable, secure and flexible information management based on hypermedia technology and to encourage researchers and developers to address that need.
Database security in a client/server environment
Authors: Guynes Carl Stephen , Golladay Robert M. , Huff Richard A.
Published: June 2007

Important database security issues arise from the increasing number of users having various levels of access to both central and distributed databases. This article addresses some of the security issues and security measures necessary for database access controls to be effective in a client/server environment. This paper also examines the problems associated with enforcing stated DBMS access controls, and how the data administration team can work with top management to ensure that the current database security strategy is consistent with the goals of the organization. Although early security techniques utilized an approach of simply limiting access to corporate data, today's demands for data availability have created a new subset of related security issues.
Emerging security issues involving the presence of microphones and video cameras in the computing environment
Authors: Nitzberg Sam
Published: June 2007

Microphones and video cameras are becoming more common accessories in the modern computing environment. As their popularity has been increasing, little has been said regarding any new security problems which may be created by their presence. My intention is to examine security problems that their presence may contribute to, and assess their severity, as well as possible remedies.
Silence and secrecy: a historical sketch of the NSA
Authors: Wright Marie A.
Published: June 2007

The National Security Agency (NSA) is a silent government organization whose powerful role in controlling the design and use of non-military cryptographic algorithms has generated controversy and criticism. Because so little is known about this secretive agency, this article outlines the history of the NSA. From the rise of the American Black Chamber during the 1920s, through the growth of the Army's Signal Intelligence Service and the Navy's Radio Intelligence Division during World War II, to the establishment of the NSA in 1952, there is a recurring theme of silence and secrecy.
Remembering past, present and future—articulating dimensions of “organizational memory” for organizational learning
Authors: Kuutti Kari , Bannon Liam
Published: June 2007

The need for some form of "organizational memory" (OM) has become increasingly recognized by many organizations in the current complex and turbulent business environment. This renewed interest in a topic that has had a chequered career is not due solely to the attentions of the CSCW community, but can be found throughout organisations and in the writings of those researchers studying them. Usually, the concept is described in terms of the "storage" metaphor borrowed from the cognitive science field, where human and computer memories are viewed as similar, thus leading to the view that "storing" and "recalling" are symmetrical operations which do not involve any situational complexities.This, however, is not a very accurate picture of how people actually "remember" in organizations, as the very nature of the memory and even the memory act itself is affected by the changing conditions existing both for the person and in the work environment over time. Thus, in Bannon & Kuutti (1996) we deconstructed the idea of "organizational memory" by reformulating the notion of memory implicit if not explicit in most current views, i.e. the notion of memory as a passive store, arguing instead for an active, constructive view of "remembering" that has a long, if forgotten history within psychology. We also emphasised the need for empirical studies of "memories in use" and common information spaces, and suggested expanding the domain of discourse to include sociological as well as psychological perspectives on concepts such as memory, learning, remembering, talking, etc. in the context of organizations.While we believe that the paper served a useful purpose in directing attention towards a more fruitful line of enquiry about OM, it was mainly a critical review and as such did not elaborate on possible alternative formulations of the concept that would instantiate this shift if perspective from storage to remembering support. This paper moves one step in this direction by outlining a framework within which remembering can be situated, providing some indication of the structure that a support tool for this activity should possess. The framework is constructed by linking two concepts: the modality of remembering and the structure of activity.
Social learning and innovations in multimedia-based CSCW
Authors: Procter Rob , Williams Robin , Cashin Les
Published: June 2007

In earlier work, we have drawn attention to the importance of 'social learning' (or innofusion) in the workplace for the successful uptake of CSCW applications, and contrasted this with the continuing emphasis placed by the CSCW community upon methodologies for design (Procter and Williams, 1996). The workplace experience highlights real constraints in the way that systems are developed and used, and in particular, the conflicts of interest which surround the design and use of IT systems at work. For example, powerful players may not favour CSCW tools or approaches; equally CSCW tools may be resisted because they transform existing power and control relationships. Such issues must be addressed if the potential of CSCW is to be realised.CSCW has raised new concerns regarding end-user requirements, and offers a richer model of these inputs to design, including knowledge of the social context of IT applications. However, its proposals for addressing these remain solidly within conventional supply-driven concepts of how new technologies emerge. The preoccupation of CSCW practitioners with improving
design
, has perhaps caused them to overlook user-led innovation processes in the workplace as organisation members struggle to apply artefacts to their particular purposes and contexts. These processes are particularly significant in the burgeoning range of 'multimedia' based products -- such as Desk Top Video-Conferencing -- which are the focus of this paper. We explore the pluralistic and dynamic model of technological change that is emerging here and examine some of the problems it throws up for the management of innovation
Signing tax returns with a digital pen
Authors: Wright Benjamin
Published: June 2007

Until now, when a taxpayer files a tax return with the Internal Revenue Service electronically, it has been required that she sign a separate paper form, form 8453, as an authentication of the return. The paper 8453 form, which summarizes key parts of the tax return, then must be mailed to the IRS. The reason for the paper is that there was no electronic authentication device as effective and convenient for taxpayers as the ink signature.
Security management for administration and control of corporate-wide, diverse systems
Authors: Schimpf Gerhard
Published: June 2007

The importance of high level management of complex information systems, extending over several heterogeneous and geographically distributed computing platforms, is rapidly increasing. The design of a comprehensive and enterprise-wide security strategy, including the efficient administration of large user groups while maintaining the access rights of tens of thousands of users, is next to impossible without support from sophisticated and powerful software toolsets. In this paper we highlight some applications of the software product Security Administration Manager (SAM). With SAM, the staff responsible for security administration has at its disposal an object-oriented tool to monitor the security management of a complex IS-environment.
Strategies found to be effective in the control of computer crime in the Forbes 500 Corporations
Authors: O'Donoghue Joseph
Published: June 2007

This report on corporate computer crime is based on confidential data supplied by 184 major United States corporations. All of the participating corporations are members of the 1985 "Forbes 500" list of the largest United States firms, as prepared by the editors of Forbes magazine. In determining membership the editors follow four basic measures: 1) revenues, 2) net profits, 3) total assets, and 4) stock market value. A ranking among the top 500 United States corporations in any single measure will place a corporation on the collective list. The list, thus constructed, includes a total of 785 major United States corporations.
Conan and the Jargonauts
Authors: Neugent Bill
Published: June 2007

Sticks and stones might break our bones, but words will bring our vengeance.
Security issues on the internet
Authors: Guynes Carl Stephen , Vedder Richard G. , Vanecek Michael T.
Published: June 2007

The Internet is a collection of networks originally paid for by the U.S. Department of Defense. Its purpose was to provide a communications infrastructure more resilient to attack than the public communications channels in the event of war. When research became a priority in the 1960s and 1970s, money was given to the National Science Foundation, which became the de facto administrator of the network. The NSF ran the primary arteries of the Internet until the late 1980s. A substantial amount of funding was later added by the U.S. Congress when it decided to include the federal supercomputing facilities in the Internet. As universities tied into the network, they would pay to link a particular network, such as the Bitnet, with the Internet. [2]
From eavesdropping to security on the cellular telephone system GSM
Authors: Guinier Daniel
Published: June 2007

Nowadays,
mobile cellular communications concern multi-millions of people
, many enterprises and national interests. Because of the few illegal interceptions, by habit or by belief, the majority of users have an angelic confidence in the privacy of their conversations. Nevertheless, a doubt subsists when the news unveils the existence of unfair, excessive or uncontrolled interceptions. Meanwhile, legislation is evolving and the technology is capable of protecting personal and sensitive information.
What are the judicial and investigative tools for legal surveillance, that are apt to guarantee the ordinary citizen or an enterprise against assault? What is behind the mobile GSM telephone on this subject?
Specifying the security properties of communications systems
Authors: Witt Michael , Lewis Nina
Published: June 2007

The purpose of this paper is to stimulate discussion of techniques for specifying the security related services offered at a protocol layer interface. While some "strawman" specifications are presented, the main intent is to convince the reader that this is an interesting area for further investigation.
Association for Computing Machinery special interest group on security, audit & control report on viability
Authors: Gerberick Dahl A.
Published: June 2007

This organization is known as the ACM Special Interest Group on Security, Audit and Control. This organization also goes by the name ACM SIGSAC.The scope of ACM SIGSAC's speciality is the control of access to computing resources; user and resource authentication; risk analysis; testing and certification of computer systems; transaction logging; data reduction; data encryption; control over program development and operation; and architectural foundations for secure systems.
Top management's view of computer related fraud
Authors: Richards Thomas C. , Knotts Rose
Published: June 2007

Computer security professionals recognize that the ultimate responsibility for implementation and maintenance of computer security systems intrinsically resides with management. Regardless of the conspicuousness of the security problems of a computerized system or how nominal the cost of implementing a security system, the threat will go unchallenged if management is not convinced that a problem warrants the expenditure of funds to reduce the risks associated with computer fraud [4]. The continuing enigma of computer related fraud and its prevention are rapidly emerging as essential concerns for all levels of management.
Response to the proposal for a “C-Virus” database
Authors: Swimmer Morton G.
Published: June 2007

Dr. Daniel Guinier presented a proposal for a computer virus database in the Fall 1989 edition of
SIGSAC (Volume 7, Number 3).
In this article a form of virus classification is presented that has been used some success for nearly two years. Furthermore, future developements in the field of virus classification are outlined.
Perimeter security for telecommunication with external entities
Authors: Rubin Hanan , Paliotta Allan R.
Published: June 2007

WE LIVE IN AN "Information Age." A new infrastructure, a pervasive network of electronic processing and telecommunication, is impinging on the millions of business, governmental, educational and personal enterprises in the world and the interactions among them.
Professional codes of conduct and computer ethics education
Authors: Martin C. Dianne , Martin David H.
Published: June 2007

Advancements in computer technology over the past twenty years have created ethical dilemmas and raised questions, some similar to other professions and some unique to the computer field. Therefore we think there is a need to reevaluate the application of ethical principles and establish new guidelines on ethical practices for the computer science profession. Because of the questions that have been raised, and in some instances sensational news accounts of computer irregularities, including fraud, there is a growing perception that self-regulation may be the only means by which the computer professional associations will prevent governments from stepping in and regulating the computer profession. This paper discusses the problem from two perspectives. First, the inadequacy of ethical codes of conduct developed by computer professionals is assessed in light of recent reports of computer abuse. Second, the relationship between the professional codes of conduct and computer ethics education is examined. Strategies for incorporating professional ethical codes into the core of computer education curriculum are proposed.
Report on the computer security foundations workshop VI
Authors: Gray James W.
Published: June 2007

The
Computer Security Foundations Workshop VI
was held during June 15-17, 1993 in Franconia, New Hampshire. This is an annual workshop with the purpose of "bring[ing] together researchers to explore fundamental issues in computer security" [13]. Every year since its inception, the workshop has been limited to forty participants, the majority of whom present papers or speak on panels. The setting is informal with plenty of time for technical discussion.
Password-based authentication
Authors: Nugent Bill
Published: June 2007

The people who invented computer passwords obviously never met Charlie Fox. During my high school years, I worked Saturdays and Summers at Hampton General Store, in the small New England village of Hampton, Connecticut. Charlie Fox was the postman. For many years, every day at 3:30 PM Charlie would come into the store, having finished his route. Every day he took down the phone book, looked up his home telephone number, and called his wife to ask for her grocery order. He was a pleasant and perfectly normal fellow, but one who just couldn't remember a phone number, even his own.
Report of WIPCIS working group on granularity and functions
Authors: Denning D. , Helsing C. , Karger P. , Meiser K. , Moulton R.
Published: June 2007

In addition to sharing direct work on the Clark-Wilson Model, this working group was askedto address thoseissuesrelating to the granularity of Transformation Procedures [TPs] and Constrained Data Items [CDIs]. Specifically, we were asked to provide guidelines as to the size of data objects that would provide appropriate separation of duties while not imposing an undue administrative burden. We were also asked to deal with the functions all TPs could be expected to perform.
The role of champions in successful applications
Authors: Cook Peter G.
Published: June 2007

A structure to understand the reasons for computer success or failure is reported. It is represented as a matrix, where rows relate to the elements of a successful application, and the column structure is derived from diffusion theory as it relates to technology transfer.The rows are the result of a number of years of implementation efforts and observation of the efforts of others. It asserts that to be successful, a computer application must have:A real needGood hardwareAdequate softwareA receptive environmentA championThe columns derive from diffusion theory, particularly the work of Everett Rogers. It categorizes user environments into four categories:InnovatorEarly adopterMajorityLate AdopterObservations are made about each of the cells of the resulting matrix.
A basic set of abstract object classes for representation of complex documents
Authors: Weinberg Randy S. , Bozonie Michael J.
Published: June 2007

To support the creation, editing, storage, retrieval, and transmission of electronic multimedia documents, a system must maintain and manage complex, nonhierarchical relationships among the documents and their constituent components. A basic set of high level object classes that can be used in a hybrid object oriented development environment to represent complex documents, their constituent parts, and interrelationships is presented. These object classes are intended to provide a stable base for development of a PC-based document management system.
Automatic filing and retrieval of official documents using global mail attributes and a viewdata system with symbolically named pages
Authors: Amadi A. O.
Published: June 2007

The filing and retrieval of messages in the office is a very important part of the office function. In this paper the global attributes of office message type, such as letter, memo, etc., the direction of flow of message, e.g. incoming, outgoing and internal, and the location of sender and subject matter are used to index official messages for filing in a hierarchical filing system. The filing is automatically done by an electronic mail system without user intervention. Retrieval of messages is done using a viewdata system.
The bookmark and the compass: orientation tools for hypertext users
Authors: Bernstein Mark
Published: June 2007

The power of hypertext stems chiefly from the complex networks of conceptual links which hypertext documents can render explicit. This paper describes an array of orientation tools which help readers to choose a course through a complex information network without undue confusion or discomfort, while retaining the excitement and spontaneity users often experience when exploring complex information environments.
Information density of office books
Authors: McCallum J. C.
Published: June 2007

A bookshelf containing 44 books was studied to determine the amount of information found per linear centimeter. The information density was measured for both textual information and pictorial information. The quantity of information found in pictorial form was found to be significantly larger than the textual information when both were represented in uncompressed form. But, when represented in compressed form, the textual and pictorial information were found to be roughly equal.