Research and Development Workstation Environment: the new class of Current Research Information Systems

Against the backdrop of the development of modern technologies in the field of scientific research the new class of Current Research Information Systems (CRIS) and related intelligent information technologies has arisen. It was called - Research and Development Workstation Environment (RDWE) - the comprehensive problem-oriented information systems for scientific research and development lifecycle support. The given paper describes design and development fundamentals of the RDWE class systems. The RDWE class system's generalized information model is represented in the article as a three-tuple composite web service that include: a set of atomic web services, each of them can be designed and developed as a microservice or a desktop application, that allows them to be used as an independent software separately; a set of functions, the functional filling-up of the Research and Development Workstation Environment; a subset of atomic web services that are required to implement function of composite web service. In accordance with the fundamental information model of the RDWE class the system for supporting research in the field of ontology engineering - the automated building of applied ontology in an arbitrary domain area, scientific and technical creativity - the automated preparation of application documents for patenting inventions in Ukraine was developed. It was called - Personal Research Information System. A distinctive feature of such systems is the possibility of their problematic orientation to various types of scientific activities by combining on a variety of functional services and adding new ones within the cloud integrated environment. The main results of our work are focused on enhancing the effectiveness of the scientist's research and development lifecycle in the arbitrary domain area.Comment: In English, 13 pages, 1 figure, 1 table, added references in Russian. Published. Prepared for special issue (UkrPROG 2018 conference) of the scientific journal "Problems of programming" (Founder: National Academy of Sciences of Ukraine, Institute of Software Systems of NAS Ukraine

Do not trust me: Using malicious IdPs for analyzing and attacking Single Sign-On

Single Sign-On (SSO) systems simplify login procedures by using an an Identity Provider (IdP) to issue authentication tokens which can be consumed by Service Providers (SPs). Traditionally, IdPs are modeled as trusted third parties. This is reasonable for SSO systems like Kerberos, MS Passport and SAML, where each SP explicitely specifies which IdP he trusts. However, in open systems like OpenID and OpenID Connect, each user may set up his own IdP, and a discovery phase is added to the protocol flow. Thus it is easy for an attacker to set up its own IdP. In this paper we use a novel approach for analyzing SSO authentication schemes by introducing a malicious IdP. With this approach we evaluate one of the most popular and widely deployed SSO protocols - OpenID. We found four novel attack classes on OpenID, which were not covered by previous research, and show their applicability to real-life implementations. As a result, we were able to compromise 11 out of 16 existing OpenID implementations like Sourceforge, Drupal and ownCloud. We automated discovery of these attacks in a open source tool OpenID Attacker, which additionally allows fine-granular testing of all parameters in OpenID implementations. Our research helps to better understand the message flow in the OpenID protocol, trust assumptions in the different components of the system, and implementation issues in OpenID components. It is applicable to other SSO systems like OpenID Connect and SAML. All OpenID implementations have been informed about their vulnerabilities and we supported them in fixing the issues

OPEN SOURCE WEB TOOL FOR TRACKING IN A LOWCOST MOBILE MAPPING SYSTEM

During the last decade several Mobile Mapping Systems (MMSs), i.e. systems able to acquire efficiently three dimensional data using moving sensors (Guarnieri et al., 2008, Schwarz and El-Sheimy, 2004), have been developed. Research and commercial products have been implemented on terrestrial, aerial and marine platforms, and even on human-carried equipment, e.g. backpack (Lo et al., 2015, Nex and Remondino, 2014, Ellum and El-Sheimy, 2002, Leica Pegasus backpack, 2016, Masiero et al., 2017, Fissore et al., 2018).<br><br> Such systems are composed of an integrated array of time-synchronised navigation sensors and imaging sensors mounted on a mobile platform (Puente et al., 2013, Tao and Li, 2007). Usually the MMS implies integration of different types of sensors, such as GNSS, IMU, video camera and/or laser scanners that allow accurate and quick mapping (Li, 1997, Petrie, 2010, Tao, 2000). The typical requirement of high-accuracy 3D georeferenced reconstruction often makes such systems quite expensive. Indeed, at time of writing most of the terrestrial MMSs on the market have a cost usually greater than 50000, which might be expensive for certain applications (Ellum and El-Sheimy, 2002, Piras et al., 2008). In order to allow best performance sensors have to be properly calibrated (Dong et al., 2007, Ellum and El-Sheimy, 2002).<br><br> Sensors in MMSs are usually integrated and managed through a dedicated software, which is developed ad hoc for the devices mounted on the mobile platform and hence tailored for the specific used sensors. Despite the fact that commercial solutions are complete, very specific and particularly related to the typology of survey, their price is a factor that restricts the number of users and the possible interested sectors.<br><br> This paper describes a (relatively low cost) terrestrial Mobile Mapping System developed at the University of Padua (TESAF, Department of Land Environment Agriculture and Forestry) by the research team in CIRGEO, in order to test an alternative solution to other more expensive MMSs. The first objective of this paper is to report on the development of a prototype of MMS for the collection of geospatial data based on the assembly of low cost sensors managed through a web interface developed using open source libraries. The main goal is to provide a system accessible by any type of user, and flexible to any type of upgrade or introduction of new models of sensors or versions thereof. After a presentation of the hardware components used in our system, a more detailed description of the software developed for the management of the MMS will be provided, which is the part of the innovation of the project. According to the worldwide request for having big data available through the web from everywhere in the world (Pirotti et al., 2011), the proposed solution allows to retrieve data from a web interface Figure 4. Actually, this is part of a project for the development of a new web infrastructure in the University of Padua (but it will be available for external users as well), in order to ease collaboration between researchers from different areas.<br><br> Finally, strengths, weaknesses and future developments of the low cost MMS are discussed

KACST Arabic Text Classification Project: Overview and Preliminary Results

Electronically formatted Arabic free-texts can be found in abundance these days on the World Wide Web, often linked to commercial enterprises and/or government organizations. Vast tracts of knowledge and relations lie hidden within these texts, knowledge that can be exploited once the correct intelligent tools have been identified and applied. For example, text mining may help with text classification and categorization. Text classification aims to automatically assign text to a predefined category based on identifiable linguistic features. Such a process has different useful applications including, but not restricted to, E-Mail spam detection, web pages content filtering, and automatic message routing. In this paper an overview of King Abdulaziz City for Science and Technology (KACST) Arabic Text Classification Project will be illustrated along with some preliminary results. This project will contribute to the better understanding and elaboration of Arabic text classification techniques

Software como um Serviço: uma plataforma eficaz para oferta de sistemas holísticos de gestão da performance

This study main objective was to assess the viability of development of a Performance Management (PM) system, delivered in the form of Software as a Service (SaaS), specific for the hospitality industry and to evaluate the benefits of its use. Software deployed in the cloud, delivered and licensed as a service, is becoming increasingly common and accepted in a business context. Although, Business Intelligence (BI) solutions are not usually distributed in the SaaS model, there are some examples that this is changing. To achieve the study objective, design science research methodology was employed in the development of a prototype. This prototype was deployed in four hotels and its results evaluated. Evaluation of the prototype was focused both on the system technical characteristics and business benefits. Results shown that hotels were very satisfied with the system and that building a prototype and making it available in the form of SaaS is a good solution to assess BI systems contribution to improve management performance.O objetivo principal deste estudo é avaliar a viabilidade de desenvolvimento de um sistema de Gestão da Performance, entregue sob a forma de “Software como Serviço” (SaaS), específico para o setor hoteleiro, e também avaliar os benefícios de seu uso. O software implantado na cloud, entregue e licenciado como um serviço, é cada vez mais aceite num contexto de negócios. Todavia, não é comum que soluções de Business Intelligence (BI) sejam distribuídas neste modelo SaaS. No entanto, existem alguns exemplos de que isso se está a alterar. Para atingir o objetivo do estudo, foi utilizada Design Science Research como metodologia de pesquisa científica para desenvolvimento de um protótipo. Este protótipo foi implementado em quatro hotéis para que os seus resultados pudessem ser avaliados. A avaliação foi focada tanto nas características técnicas do sistema como nos benefícios para o negócio. Os resultados mostraram que os hotéis estavam muito satisfeitos com o sistema e que construir um protótipo e disponibilizá-lo sob a forma de SaaS é uma boa solução para avaliar a contribuição dos sistemas de BI para melhorar o desempenho da gestão.info:eu-repo/semantics/publishedVersio