Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140720
A. Sirageldin, A. Selamat, R. Ibrahim
As ongoing war between the malware developer and defense mechanism planners there is a great challenge in providing an effective defense mechanism against evasion technique used by malware authors. The present paper provides a framework for malware detection based on the analysis of graphs introduced from instructions of the executable objects. The graph is constructed through the graph extractor, and then we used the simulated annealing algorithm to approximate the graph similarity measure. The threshold value plays a great role to relate the support vector machine to confirm the real class of the file, benign or malicious.
{"title":"Graph-based simulated annealing and support vector machine in Malware detection","authors":"A. Sirageldin, A. Selamat, R. Ibrahim","doi":"10.1109/MYSEC.2011.6140720","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140720","url":null,"abstract":"As ongoing war between the malware developer and defense mechanism planners there is a great challenge in providing an effective defense mechanism against evasion technique used by malware authors. The present paper provides a framework for malware detection based on the analysis of graphs introduced from instructions of the executable objects. The graph is constructed through the graph extractor, and then we used the simulated annealing algorithm to approximate the graph similarity measure. The threshold value plays a great role to relate the support vector machine to confirm the real class of the file, benign or malicious.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"43 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122731415","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140655
S. Salehi, A. Selamat
Spam detection is a significant problem which considered by many researchers by various developed strategies. Among many others, simple artificial immune system is one of those being proposed. There is a deficiency in number of optimization methods in simple artificial immune system (SAIS). This problem can be solved and eliminated using other optimization methods besides mutation. In this research, SAIS was hybridized by particle swarm optimization (PSO) for optimizing the performance of SAIS for spam filtering. PSO was used with mutation to reinforce the immune system's searches to find the best class in exemplar for classification. Achieved results represent the Hybrid SAIS and PSO is superior to that of a SAIS.
{"title":"Hybrid simple artificial immune system (SAIS) and particle swarm optimization (PSO) for spam detection","authors":"S. Salehi, A. Selamat","doi":"10.1109/MYSEC.2011.6140655","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140655","url":null,"abstract":"Spam detection is a significant problem which considered by many researchers by various developed strategies. Among many others, simple artificial immune system is one of those being proposed. There is a deficiency in number of optimization methods in simple artificial immune system (SAIS). This problem can be solved and eliminated using other optimization methods besides mutation. In this research, SAIS was hybridized by particle swarm optimization (PSO) for optimizing the performance of SAIS for spam filtering. PSO was used with mutation to reinforce the immune system's searches to find the best class in exemplar for classification. Achieved results represent the Hybrid SAIS and PSO is superior to that of a SAIS.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129445086","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140684
M. Praba, D. Mala
Component based software development system is composed of many components and it uses the reusable components as the building blocks for constructing the complex software system. The major challenges in CBS are testing component dependency that is; it is a tricky task to test each and every component for each possible input data which will lead to exhaustive testing. To reduce the cost, the industries are following some stopping criteria and release the product to the customer side. These stopping criteria will at times lead to skipping up of some of the components from rigorous testing. This will lead to hazardous side effects such as loss in terms of revenue, human life and resources. This insight leads to the need to identify critical components which have the higher dependability measure in terms of functionality and receives higher priority in testing with rigorous test procedures. Hence, this paper proposes a novel method for identifying the critical components from the Software under Test (SUT) and prioritizes them for testing with at most care based on various dependency metrics and measures among the components with the help of Component Execution Sequence Graph (CESG).
{"title":"Critical component analyzer — A novel test prioritization framework for component based real time systems","authors":"M. Praba, D. Mala","doi":"10.1109/MYSEC.2011.6140684","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140684","url":null,"abstract":"Component based software development system is composed of many components and it uses the reusable components as the building blocks for constructing the complex software system. The major challenges in CBS are testing component dependency that is; it is a tricky task to test each and every component for each possible input data which will lead to exhaustive testing. To reduce the cost, the industries are following some stopping criteria and release the product to the customer side. These stopping criteria will at times lead to skipping up of some of the components from rigorous testing. This will lead to hazardous side effects such as loss in terms of revenue, human life and resources. This insight leads to the need to identify critical components which have the higher dependability measure in terms of functionality and receives higher priority in testing with rigorous test procedures. Hence, this paper proposes a novel method for identifying the critical components from the Software under Test (SUT) and prioritizes them for testing with at most care based on various dependency metrics and measures among the components with the help of Component Execution Sequence Graph (CESG).","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130548052","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140703
R. Alias, N. M. M. Noor, Md. Yazid Mohd. Saman, M. Abdullah, A. Selamat
A model is proposed for selecting the optimal result of contractor selection under multi criteria environment. Fuzzy comparing judgment is used to tackling the vagueness and uncertainty in choosing significant preferences by decision maker regarding to the subjective opinion. Finally, the model was tested in tender evaluation processes for awarding the most beneficial contractor to perform the construction project.
{"title":"Contractor selection using fuzzy comparison judgement","authors":"R. Alias, N. M. M. Noor, Md. Yazid Mohd. Saman, M. Abdullah, A. Selamat","doi":"10.1109/MYSEC.2011.6140703","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140703","url":null,"abstract":"A model is proposed for selecting the optimal result of contractor selection under multi criteria environment. Fuzzy comparing judgment is used to tackling the vagueness and uncertainty in choosing significant preferences by decision maker regarding to the subjective opinion. Finally, the model was tested in tender evaluation processes for awarding the most beneficial contractor to perform the construction project.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130791271","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140638
S. Ibrahim, Raja Zurina Raja Mohamed Ali
Currently, a number of specific international standards are made available within software engineering discipline to support Software Process Improvement (SPI) such as Capability Maturity Model Integration (CMMI), ISO/IEC 15504, ISO/IEC 90003 and ISO/IEC 12207. Some suggest on integrating and harmonizing these standards to reduce risks and enhance practicality, however there is no official initiative being made to date to implement this reality. Integrated Software Process Assessment (iSPA) is a proposed initiative being developed on the premise to harmonize and integrate a number of existing software process assessments and practices including improvement standards, models and benchmarks. A survey was conducted on thirty software practitioners to measure the strength and weaknesses of their organization's current software process. The survey also attempts to evaluate the acceptance and needs of implementation of a customized SPI model for Malaysia's SME.
{"title":"Study on acceptance of customised Software Process Improvement (SPI) model for Malaysia's SME","authors":"S. Ibrahim, Raja Zurina Raja Mohamed Ali","doi":"10.1109/MYSEC.2011.6140638","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140638","url":null,"abstract":"Currently, a number of specific international standards are made available within software engineering discipline to support Software Process Improvement (SPI) such as Capability Maturity Model Integration (CMMI), ISO/IEC 15504, ISO/IEC 90003 and ISO/IEC 12207. Some suggest on integrating and harmonizing these standards to reduce risks and enhance practicality, however there is no official initiative being made to date to implement this reality. Integrated Software Process Assessment (iSPA) is a proposed initiative being developed on the premise to harmonize and integrate a number of existing software process assessments and practices including improvement standards, models and benchmarks. A survey was conducted on thirty software practitioners to measure the strength and weaknesses of their organization's current software process. The survey also attempts to evaluate the acceptance and needs of implementation of a customized SPI model for Malaysia's SME.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126762633","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140666
Surapa Ratanaprutthakul, S. Grobosch
Microcontrollers are widely used in the embedded system industry. The reliability of these systems is of great importance. Therefore, verification and validation need to be concerned in the software development process. Model checking is a method to verify and analyze software with regard to its requirements. One of the model checking tools is the explicit-state model checker [mc]square. This paper describes a case study that was conducted using [mc]square and a microcontroller system used to control combustion engines. This system is called Piezo Controlled Carburetor (PCC). The aim of the case study was to improve the quality of the software by introducing model checking into the development process. Moreover we show the development of verification queries and their results used with the PCC embedded software can be much safer and more reliable.
{"title":"Model checking and verification method of engine control units","authors":"Surapa Ratanaprutthakul, S. Grobosch","doi":"10.1109/MYSEC.2011.6140666","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140666","url":null,"abstract":"Microcontrollers are widely used in the embedded system industry. The reliability of these systems is of great importance. Therefore, verification and validation need to be concerned in the software development process. Model checking is a method to verify and analyze software with regard to its requirements. One of the model checking tools is the explicit-state model checker [mc]square. This paper describes a case study that was conducted using [mc]square and a microcontroller system used to control combustion engines. This system is called Piezo Controlled Carburetor (PCC). The aim of the case study was to improve the quality of the software by introducing model checking into the development process. Moreover we show the development of verification queries and their results used with the PCC embedded software can be much safer and more reliable.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"8 5","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"113967690","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140681
F. Selim, I. Bedir, H. E. Desuoki
This paper proposed an efficient method to predict and solve an abnormal conditions in all electrical cables, using Matlab GUI (Graphic User Interface) with thermal imaging (infrared (IR) camera). The use of traditional techniques (without IR camera) not easily to predict faults and give a complete diagonous about them. Using any type of thermal camera, which can detect the thermal state of abnormal conditions of cables by technical operator (thermographer) and send this thermal images to a novel software program (GUI) technique, which using cables data base able to : 1) obtain the thermal profile of the system; 2) process and analyze thermal data, and 3) apply a simulated artificial technique to determine the particular condition or fault corresponding to the thermal signature. The new performed report can contains: 1) problems that founds in the components and the system itself, 2) suggest remedy and perform any necessary corrective action in a suitable time, and 3) give the priority of these problems with respect to repair (maintenance) time.
{"title":"Power cable inspections using Matlab graphical user interface aided by thermal imaging","authors":"F. Selim, I. Bedir, H. E. Desuoki","doi":"10.1109/MYSEC.2011.6140681","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140681","url":null,"abstract":"This paper proposed an efficient method to predict and solve an abnormal conditions in all electrical cables, using Matlab GUI (Graphic User Interface) with thermal imaging (infrared (IR) camera). The use of traditional techniques (without IR camera) not easily to predict faults and give a complete diagonous about them. Using any type of thermal camera, which can detect the thermal state of abnormal conditions of cables by technical operator (thermographer) and send this thermal images to a novel software program (GUI) technique, which using cables data base able to : 1) obtain the thermal profile of the system; 2) process and analyze thermal data, and 3) apply a simulated artificial technique to determine the particular condition or fault corresponding to the thermal signature. The new performed report can contains: 1) problems that founds in the components and the system itself, 2) suggest remedy and perform any necessary corrective action in a suitable time, and 3) give the priority of these problems with respect to repair (maintenance) time.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"160 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121307566","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140686
Saidatul K. Said, R. R. Othman, K. Z. Zamli
In recent years, many new t-way interaction based strategies (where t indicates the interaction strength), particularly based on covering arrays, have been developed in the literature. In search of an optimal strategy that generates the most minimum number of tests, many of existing t-way strategies have not sufficiently dealt with test prioritization (i.e. in terms of maximizing new interaction coverage per test). Addressing this issue, this paper highlights a useful prioritization algorithm to reorganize the test cases in order to improve the rate of interaction coverage. This algorithm takes a pre-generated t-way test suite as input and automatically generates a priority ordered test suite as output. In order to demonstrate its applicability, this paper demonstrates the use of the algorithm to help prioritize the test suite generated by existing t-way strategy, MC-MIPOG.
{"title":"Prioritizing interaction test suite for t-way testing","authors":"Saidatul K. Said, R. R. Othman, K. Z. Zamli","doi":"10.1109/MYSEC.2011.6140686","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140686","url":null,"abstract":"In recent years, many new t-way interaction based strategies (where t indicates the interaction strength), particularly based on covering arrays, have been developed in the literature. In search of an optimal strategy that generates the most minimum number of tests, many of existing t-way strategies have not sufficiently dealt with test prioritization (i.e. in terms of maximizing new interaction coverage per test). Addressing this issue, this paper highlights a useful prioritization algorithm to reorganize the test cases in order to improve the rate of interaction coverage. This algorithm takes a pre-generated t-way test suite as input and automatically generates a priority ordered test suite as output. In order to demonstrate its applicability, this paper demonstrates the use of the algorithm to help prioritize the test suite generated by existing t-way strategy, MC-MIPOG.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129384263","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140710
Tamer Madi, Z. Dahalin, Fauziah Baharom
Agile approach has become a popular process, in the software industry. Values such as quickness, flexibility and responsiveness are the main reason behind this fame. These values are fundamental as they define the culture of the software company where a set of practices can be followed based on them. According to Agile practitioners, knowing the most important values is the key to follow the best set of practices. Thus, the objective of this paper is to obtain a description of key agile values through the content analysis of the comments of agile manifesto signatories. The results have shown that the values associated with people are the most important, while the values associated with process come in the second level of importance.
{"title":"Content analysis on agile values: A perception from software practitioners","authors":"Tamer Madi, Z. Dahalin, Fauziah Baharom","doi":"10.1109/MYSEC.2011.6140710","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140710","url":null,"abstract":"Agile approach has become a popular process, in the software industry. Values such as quickness, flexibility and responsiveness are the main reason behind this fame. These values are fundamental as they define the culture of the software company where a set of practices can be followed based on them. According to Agile practitioners, knowing the most important values is the key to follow the best set of practices. Thus, the objective of this paper is to obtain a description of key agile values through the content analysis of the comments of agile manifesto signatories. The results have shown that the values associated with people are the most important, while the values associated with process come in the second level of importance.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"98 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127630378","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2011-12-01DOI: 10.1109/MYSEC.2011.6140648
Khairul Anwar Sedek, S. Sulaiman, M. A. Omar
One of the roles of e-government portals is to provide a one-stop service to users. In order to fulfill this role, it requires collaboration with other government agencies and businesses to provide an effective one-stop center for users to access and perform various services. Current e-government portals are mostly lack of interoperability whereby users still need to access government services from various portals or websites. Interoperability is a technical requirement to achieve government services collaboration and integration. There are many challenges and approaches to achieve better interoperability in e-government portals. Architecture-based and model-based approaches are essential research areas that can improve interoperability starting from the planning stages. Architecture provides overall overview of e-government components and relationship between components. This paper systematically reviews current architecture-based approaches to find a suitable approach and its requirements to produce a better architecture for e-government portal based on the lessons learned from the previous works.
{"title":"A systematic literature review of interoperable architecture for e-government portals","authors":"Khairul Anwar Sedek, S. Sulaiman, M. A. Omar","doi":"10.1109/MYSEC.2011.6140648","DOIUrl":"https://doi.org/10.1109/MYSEC.2011.6140648","url":null,"abstract":"One of the roles of e-government portals is to provide a one-stop service to users. In order to fulfill this role, it requires collaboration with other government agencies and businesses to provide an effective one-stop center for users to access and perform various services. Current e-government portals are mostly lack of interoperability whereby users still need to access government services from various portals or websites. Interoperability is a technical requirement to achieve government services collaboration and integration. There are many challenges and approaches to achieve better interoperability in e-government portals. Architecture-based and model-based approaches are essential research areas that can improve interoperability starting from the planning stages. Architecture provides overall overview of e-government components and relationship between components. This paper systematically reviews current architecture-based approaches to find a suitable approach and its requirements to produce a better architecture for e-government portal based on the lessons learned from the previous works.","PeriodicalId":137714,"journal":{"name":"2011 Malaysian Conference in Software Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125917146","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}