AUTOMATING PERIODIC ROLE-CHECKS A TOOL-BASED APPROACH

The use of roles in Identity Management has proven to be a solution for reorganising and securing the access structures of organisations. One critical challenge companies face after they implemented roles is the maintenance of the role system itself. This includes sophisticated duties like periodically verifying the valid roles. We argue that due to the high complexity, periodic rolechecks need to be automated. However, as a result of lacking theoretical foundation, no approaches to leverage the level automation have been published so far. In this work we develop a catalogue of use cases that affect the role definitions within an organisation. We propose checkROLE, a tool for automated role-checking on basis of the defined use case catalogue

A toolset for the development of mixed-criticality partitioned systems

The development of mixed-criticality virtualized multi-core systems poses new challenges that are being subject of active research work. There is an additional complexity: it is now required to identify a set of partitions, and allocate applications to partitions. In this job, a number of issues have to be considered, such as the criticality level of the application, security and dependability requirements, time requirements granularity, etc. MultiPARTES [11] toolset relies on Model Driven Engineering (MDE), which is a suitable approach in this setting, as it helps to bridge the gap between design issues and partitioning concerns. MDE is changing the way systems are developed nowadays, reducing development time. In general, modelling approaches have shown their benefits when applied to embedded systems. These benefits have been achieved by fostering reuse with an intensive use of abstractions, or automating the generation of boiler-plate code

Aggregating Heterogeneous Computing Resources

The project's core objective is to develop a sophisticated web portal that acts as a comprehensive platform for optimizing resource allocation and improving system administration tasks. Key goals include streamlining resource management processes, enhancing resource utilization, monitoring hardware performance, and boosting system reliability. The envisioned web portal is designed to merge data from multiple sources into a unified interface, granting administrators a real-time overview of the diverse computing nodes within the openlab network. Automation will play a significant role, enabling the portal to gather data from internal lists and deployment tools, potentially utilizing scripts and databases for comprehensive machine information. This consolidated data could be harnessed to generate valuable reports and notifications about user expirations, thereby aiding administrators in effective resource management. Moreover, the web portal will offer manual functionalities, allowing administrators to manually add or remove non-managed machines, include extra users, and engage directly with specific machine users via broadcast emails. This flexibility contributes to the network's adaptability to changing project needs and resource demands. The significance of this project stems from its potential to enhance the efficiency and effectiveness of system administrators. By centralizing resource management through the portal, administrators can align resources with project requirements, minimize wastage, optimize workload distribution, and ultimately bolster system stability. These enhancements, in turn, foster a more resilient and dependable computing environment, pivotal for the successful execution of projects within the intricate openlab network

Working Notes from the 1992 AAAI Workshop on Automating Software Design. Theme: Domain Specific Software Design

The goal of this workshop is to identify different architectural approaches to building domain-specific software design systems and to explore issues unique to domain-specific (vs. general-purpose) software design. Some general issues that cut across the particular software design domain include: (1) knowledge representation, acquisition, and maintenance; (2) specialized software design techniques; and (3) user interaction and user interface

Cyber insurance of information systems: Security and privacy cyber insurance contracts for ICT and helathcare organizations

Nowadays, more-and-more aspects of our daily activities are digitalized. Data and assets in the cyber-space, both for individuals and organizations, must be safeguarded. Thus, the insurance sector must face the challenge of digital transformation in the 5G era with the right set of tools. In this paper, we present CyberSure-an insurance framework for information systems. CyberSure investigates the interplay between certification, risk management, and insurance of cyber processes. It promotes continuous monitoring as the new building block for cyber insurance in order to overcome the current obstacles of identifying in real-time contractual violations by the insured party and receiving early warning notifications prior the violation. Lightweight monitoring modules capture the status of the operating components and send data to the CyberSure backend system which performs the core decision making. Therefore, an insured system is certified dynamically, with the risk and insurance perspectives being evaluated at runtime as the system operation evolves. As new data become available, the risk management and the insurance policies are adjusted and fine-tuned. When an incident occurs, the insurance company possesses adequate information to assess the situation fast, estimate accurately the level of a potential loss, and decrease the required period for compensating the insured customer. The framework is applied in the ICT and healthcare domains, assessing the system of medium-size organizations. GDPR implications are also considered with the overall setting being effective and scalable

Diagnostic framework and health check tool for engineering and technology projects

Purpose: Development of a practitioner oriented diagnostic framework and health check tool to support the robust assessment of engineering and technology projects. Design/methodology/approach: The research is based on a literature review that draws together insights on project assessment and critical success factors to establish an integrated systems view of projects. This is extended to allow a comprehensive diagnostic framework to be developed along with a high-level health check tool that can be readily deployed on projects. The utility of the diagnostic framework and health check tool are explored through three illustrative case studies, with two from Canada and one from the United Kingdom. Findings and Originality/value: The performance of engineering and technology projects can be viewed through a systems perspective and being a function of six contributing subsystems that are: process, technology, resources, impact, knowledge and culture. The diagnostic framework that is developed through this research integrates these sub-systems to provide a robust assessment methodology for projects, which is linked to existing best practice for project reviews, performance management and maturity models. The case studies provide managerial insights that are related to the diagnostic framework but crucially also position the approach in the context of industrial applications for construction engineering and technology management.Research limitations/implications: The case study approach includes two case studies from the construction and facilities development sector with the third case study from the research and technology sector. Further work is required to investigate the use of the diagnostic framework and health check tool in other sectors. Practical implications: The health check tool will be of practical benefit to new projects managers that require access to a robust and convenient project review methodology for assessing the status and health of a given portfolio of projects. The tool can also be used periodically and throughout the project lifecycle in order to track the performance of projects. Originality/value: This paper provides a unique view and supporting management framework to help project managers assess the status and health of projects. Value can be associated with an extension to the literature on diagnostic tools for engineering project management as well as the insights provided in the three international case studies, which explore the scope and applicability of the health check tool to be used in support of projects that have encountered difficulties and which require implementation of project recovery strategies.Peer Reviewe

Items classifications in purchasing for order process efficiency and a basis for automation: Case: Teleste Oyj

This thesis is made as a project for Teleste Oyj, an information technology manufacturer that resides in Turku, Finland. The purpose of this thesis is to study the procurement process of a case company, Teleste and find ways that both the inventory levels and purchasing efficiency could be improved The theoretical framework presents a view into the theoretical models of modern purchasing and inventory management principles that are used to create models for inventory management. How are key figures calculated in inventory and item classification methods are introduced. Automating business processes and the risks, requirements and benefits of automation finalize the theory framework. The empirical research is an implementation of an XYZ-analysis extension for Telestes current ABC -analysis. In this research a years’ worth of inventory requirements from six selected suppliers are analyzed to create an ABC-XYZ matrix that is refined to a set of inventory management rules. Based on the ABC-XYZ analysis results and basing on the created matrix of rules, a proposal for an automated process with system suggestions is presented in the final empirical chapter of the thesis. The automation system bases on the idea that low value items that have low amount of fluctuation in their production demand can be automated to reduce the purchasing workforces amount of tedious number work. The thesis concludes on the idea that Teleste has the capabilities to implement an automated system basing on their current system capability, but it requires building new processes and purchasing or building a new supplier system to fulfill the proposed workflow. The ABC-XYZ matrix, ABCD-123- matrix for Teleste, can be implemented as such as a tool for sourcing and purchasing teams to improve control of resources and understanding the nature of different item demand

An Experiment in Model Driven Architecture for e-Enterprise Systems

OMG's Model Driven Architecture demonstrates how a system's specification model can be used within the process of creating supporting software implementations. This article documents the findings of an experiment aimed at determining the extent to which this method of software engineering can be used within the domain of e-Enterprise systems