Early evaluation of security functionality in software projects - some experience on using the common criteria in a quality management process

This paper documents the experiences of assurance evaluation during the early stage of a large software development project. This project researches, contracts and integrates privacy-respecting software to business environments. While assurance evaluation with ISO 15408 Common Criteria (CC) within the certification schemes is done after a system has been completed, our approach executes evaluation during the early phases of the software life cycle. The promise is to increase quality and to reduce testing and fault removal costs for later phases of the development process. First results from the still-ongoing project suggests that the Common Criteria can define a framework for assurance evaluation in ongoing development projects.Dieses Papier dokumentiert den Versuch, mittels der Common Criteria nach ISO 15408 bereits während der Erstellung eines Softwaresystems dessen Sicherheitseigenschaften zu überprüfen. Dies geschieht im Gegensatz zur üblichen Post-Entwicklungs-Evaluation

Notifying Civilians in Time - Disaster Warning Systems Based on a Multilaterally Secure, Economic, and Mobile Infastructure

The spread of mobile communication equipment offers new opportunities for disaster management referring to civilians. At the same time, location based services are regarded as privacy invading, and are regulated in many countries by specific legislation. We analyze the requirements of a LBS-based disaster management scenario that enables the timely notification of civilians. In addition, we propose a solution for building a privacy-friendly, multilaterally secure disaster management infrastructure based on robust mobile phone infrastructures with high reachability of citizens. We will also point out additional features based on mobile networks. Traditionally, disaster management is a government domain. We will propose another option to implement and run disaster management. We analyze in how far an early warning system could be profitable for the insurance sector. Our comments will sketch that it is possible to reach a large number of persons, avoid insurance damage, and save costs in disaster warning systems. This work was supported by the IST PRIME project; however, it represents the view of the authors only

Teaching case: Leading the change - ERP implementation at Keda

Recently, several disasters have affected the tourism industry. In order to mitigate the effects of disasters, increasing the level of preparedness is essential. However, despite the devastating effect disasters can have on tourism, few tourism organizations have properly developed disaster strategies as an integral part of their business plans. Emergency management systems that utilize mobile communication infrastructures can provide prompt information delivery to save human lives. Several supra-national initiatives and research projects are working on possibilities to facilitate mobile communication networks for emergency management systems. However, the success of such systems depends on users being familiar with the service, which is difficult to achieve, if the system is solely used for emergency management. Therefore, we propose a system design that allows the integration of mobile value-adding services. We also present exemplary services, which offer value to tourists and create business opportunities for the tourism industry. The central component of our proposed system design is a service platform, which communicates with mobile network operators and provides basic services for service providers from the tourism industry and the emergency manager via service interfaces

SUSTAINABLE GROWTH FOR THE PACIFIC-ASIA TOURISM INDUSTRY: ADDRESSING NATURAL DISASTERS AND BUSINESS OPPORTUNITIES WITH MOBILE ICT

The macroeconomic relevance of the tourism industry in the Asia-Pacific region is well recognized for years. While this industry has enjoyed a significant average growth rate over the last years, it is facing the negative impacts of potential natural disasters such as tsunamis and volcano eruptions. Besides posing a risk to the health of locals and tourists, such events can cause massive negative long-term effects on the countries\u27 economic growth. In this paper, we present an ICT system design on the basis of mobile communication infrastructures, which provide disaster management capabilities in order to attenuate the impact of unforeseen disasters. In addition, it provides functionalities that enable novel value-adding services. Our approach addresses both challenges and business opportunities the Asia Pacific tourism industry is facing today and aims at contributing to sustainable growth in this vital sector