Issues Affecting Security Design Pattern Engineering

Security Design Patterns present the tried and tested design decisions made by security engineers within a well documented format. Patterns allow for complex security concepts, and mechanisms, to be expressed such that non domain experts can make use of them. Our research is concerned with the development of pattern languages for advanced crypto-systems. From our experience developing pattern languages we have encountered several recurring issues within security design pattern engineering. These issues, if not addressed, will affect the adoption of security design patterns. This paper describes these issues and discusses how they could be addressed

Engineering simulations for cancer systems biology

Computer simulation can be used to inform in vivo and in vitro experimentation, enabling rapid, low-cost hypothesis generation and directing experimental design in order to test those hypotheses. In this way, in silico models become a scientific instrument for investigation, and so should be developed to high standards, be carefully calibrated and their findings presented in such that they may be reproduced. Here, we outline a framework that supports developing simulations as scientific instruments, and we select cancer systems biology as an exemplar domain, with a particular focus on cellular signalling models. We consider the challenges of lack of data, incomplete knowledge and modelling in the context of a rapidly changing knowledge base. Our framework comprises a process to clearly separate scientific and engineering concerns in model and simulation development, and an argumentation approach to documenting models for rigorous way of recording assumptions and knowledge gaps. We propose interactive, dynamic visualisation tools to enable the biological community to interact with cellular signalling models directly for experimental design. There is a mismatch in scale between these cellular models and tissue structures that are affected by tumours, and bridging this gap requires substantial computational resource. We present concurrent programming as a technology to link scales without losing important details through model simplification. We discuss the value of combining this technology, interactive visualisation, argumentation and model separation to support development of multi-scale models that represent biologically plausible cells arranged in biologically plausible structures that model cell behaviour, interactions and response to therapeutic interventions

Supporting knowledge exchange isn't easy: lessons learnt from a case study

A knowledge management system is introduced in a large insurance company. It is meant to become a virtual knowledge network for a group of insurance professionals. Despite the fact that the introduction was met with enthusiasm and user participation in the design was ensured, the system did not live up to the expectations. In this paper we investigate this failure by uncovering and analyzing the requirements engineering processes underlying the system's\ud conception, design and introduction. The demise of the system can be attributed to a lack of attention for the use context of the end users and a tendency in the development process to focus mostly on the technical solution instead of problem analysis

Human-Centered Approaches in Geovisualization Design: Investigating Multiple Methods Through a Long-Term Case Study

Working with three domain specialists we investigate human-centered approaches to geovisualization following an ISO13407 taxonomy covering context of use, requirements and early stages of design. Our case study, undertaken over three years, draws attention to repeating trends: that generic approaches fail to elicit adequate requirements for geovis application design; that the use of real data is key to understanding needs and possibilities; that trust and knowledge must be built and developed with collaborators. These processes take time but modified human-centred approaches can be effective. A scenario developed through contextual inquiry but supplemented with domain data and graphics is useful to geovis designers. Wireframe, paper and digital prototypes enable successful communication between specialist and geovis domains when incorporating real and interesting data, prompting exploratory behaviour and eliciting previously unconsidered requirements. Paper prototypes are particularly successful at eliciting suggestions, especially for novel visualization. Enabling specialists to explore their data freely with a digital prototype is as effective as using a structured task protocol and is easier to administer. Autoethnography has potential for framing the design process. We conclude that a common understanding of context of use, domain data and visualization possibilities are essential to successful geovis design and develop as this progresses. HC approaches can make a significant contribution here. However, modified approaches, applied with flexibility, are most promising. We advise early, collaborative engagement with data – through simple, transient visual artefacts supported by data sketches and existing designs – before moving to successively more sophisticated data wireframes and data prototypes

Coping with Poorly Understood Domains: the Example of Internet Trust

The notion of trust, as required for secure operations over the Internet, is important for ascertaining the source of received messages. How can we measure the degree of trust in authenticating the source? Knowledge in the domain is not established, so knowledge engineering becomes knowledge generation rather than mere acquisition. Special techniques are required, and special features of KBS software become more important than in conventional domains. This paper generalizes from experience with Internet trust to discuss some techniques and software features that are important for poorly understood domains

Towards reframing professional expert support

The paper addresses practical ways of reconfiguring professional expertise in development practice in moving away from the expert as a technocrat. Two projects associated with managing natural resource dilemmas suggest an alternative way of framing intervention involving professional experts providing a more appropriate collaborative learning space for development practice. The paper describes the heuristic devices generated by each project as helpful in bringing out dialectic tensions between practice and understanding, and between systems of interest and situations of interest (or situated problems). Firstly, SLIM (social learning for the integrated management and sustainable use of water at catchment scale) - a European Framework Programme 5 project - exemplifies social learning as a measure of sustainable development. The heuristic illustrates the dependence of sustainability on changes in practice and understanding amongst professionals and other stakeholders as part of concerted - rather than merely individual or even collective - action. Secondly, ECOSENSUS (Electronic/Ecological Collaborative Sensemaking Support System) - a Guyana focused intervention involving several UK universities in collaboration with the University of Guyana and Amerindian community representatives from the North Rupununi wetlands - builds on the SLIM heuristic in supporting the development of practice. Additionally, the ECOSENSUS heuristic provides conceptual space for the interaction between conceptual constructs of distributed stakeholders (that is, systems thinking) including those with professional expertise, and the actual context of intervention (the situated problem). Both SLIM and ECOSENSUS provide heuristics for process-orientated management enabling more meaningful and purposeful interaction between professional/ technical experts and other stakeholders, as an alternative to conventional project-orientated management intervention. An alternative framing may help to steer practice away from the apoliticised comforting linearity of professionalised systematic project management towards more constructive systemic endeavours involving multiple stakeholders