221,157 research outputs found

    The approaches to quantify web application security scanners quality: A review

    Get PDF
    The web application security scanner is a computer program that assessed web application security with penetration testing technique. The benefit of automated web application penetration testing is huge, which web application security scanner not only reduced the time, cost, and resource required for web application penetration testing but also eliminate test engineer reliance on human knowledge. Nevertheless, web application security scanners are possessing weaknesses of low test coverage, and the scanners are generating inaccurate test results. Consequently, experimentations are frequently held to quantitatively quantify web application security scanner's quality to investigate the web application security scanner's strengths and limitations. However, there is a discovery that neither a standard methodology nor criterion is available for quantifying the web application security scanner's quality. Hence, in this paper systematic review is conducted and analysed the methodology and criterion used for quantifying web application security scanners' quality. In this survey, the experiment methodologies and criterions that had been used to quantify web application security scanner's quality is classified and review using the preferred reporting items for systematic reviews and meta-analyses (PRISMA) protocol. The objectives are to provide practitioners with the understanding of methodologies and criterions that available for measuring web application security scanners' test coverage, attack coverage, and vulnerability detection rate, while provides the critical hint for development of the next testing framework, model, methodology, or criterions, to measure web application security scanner quality

    A Global Systematic Review of Improving Crop Model Estimations by Assimilating Remote Sensing Data: Implications for Small-Scale Agricultural Systems

    Get PDF
    There is a growing effort to use access to remote sensing data (RS) in conjunction with crop model simulation capability to improve the accuracy of crop growth and yield estimates. This is critical for sustainable agricultural management and food security, especially in farming communities with limited resources and data. Therefore, the objective of this study was to provide a systematic review of research on data assimilation and summarize how its application varies by country, crop, and farming systems. In addition, we highlight the implications of using process-based crop models (PBCMs) and data assimilation in small-scale farming systems. Using a strict search term, we searched the Scopus and Web of Science databases and found 497 potential publications. After screening for relevance using predefined inclusion and exclusion criteria, 123 publications were included in the final review. Our results show increasing global interest in RS data assimilation approaches; however, 81% of the studies were from countries with relatively high levels of agricultural production, technology, and innovation. There is increasing development of crop models, availability of RS data sources, and characterization of crop parameters assimilated into PBCMs. Most studies used recalibration or updating methods to mainly incorporate remotely sensed leaf area index from MODIS or Landsat into the WOrld FOod STudies (WOFOST) model to improve yield estimates for staple crops in large-scale and irrigated farming systems. However, these methods cannot compensate for the uncertainties in RS data and crop models. We concluded that further research on data assimilation using newly available high-resolution RS datasets, such as Sentinel-2, should be conducted to significantly improve simulations of rare crops and small-scale rainfed farming systems. This is critical for informing local crop management decisions to improve policy and food security assessments

    A framework and tool to manage Cloud Computing service quality

    Get PDF
    Cloud Computing has generated considerable interest in both companies specialized in Information and Communication Technology and business context in general. The Sourcing Capability Maturity Model for service (e-SCM) is a capability model for offshore outsourcing services between clients and providers that offers appropriate strategies to enhance Cloud Computing implementation. It intends to achieve the required quality of service and develop an effective working relationship between clients and providers. Moreover, quality evaluation framework is a framework to control the quality of any product and/or process. It offers a tool support that can generate software artifacts to manage any type of product and service efficiently and effectively. Thus, the aim of this paper was to make this framework and tool support available to manage Cloud Computing service quality between clients and providers by means of e-SCM.Ministerio de Ciencia e Innovación TIN2013-46928-C3-3-RJunta de Andalucía TIC-578
    corecore