Most of the existing information security management studies focus on information security of large organizations preventing security threats. However, a security management perspective of a small and medium-sized (SME) company is relatively different. Small and medium sized companies are at a greater risk because they cannot afford expensive tools. They lack process improvement capabilities and effort that can be spent on security management is limited. Due to limited budget, they cannot invest heavily in the IT service infrastructure and IT manpower. They become easy targets for cyber criminals and they can be easily victimized as they lack the resources compared to larger companies. Malicious internet content also becomes one of the major security concerns. Therefore, this study aims to answer the research problem: How small and mediumsized organizations perform IT security management. The main contribution of the paper is to capture information security management challenges from an SME's viewpoint and provide solutions to tackle these challenges. This paper aims to improve information security management of SMEs. From IT Service management perspective, the case study research approach was utilized in the study.
{"title":"IT Service Management from a Perspective of Small and Medium Sized Companies","authors":"Mehdi Panjwani, M. Jäntti, Juuso Sormunen","doi":"10.1109/QUATIC.2016.053","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.053","url":null,"abstract":"Most of the existing information security management studies focus on information security of large organizations preventing security threats. However, a security management perspective of a small and medium-sized (SME) company is relatively different. Small and medium sized companies are at a greater risk because they cannot afford expensive tools. They lack process improvement capabilities and effort that can be spent on security management is limited. Due to limited budget, they cannot invest heavily in the IT service infrastructure and IT manpower. They become easy targets for cyber criminals and they can be easily victimized as they lack the resources compared to larger companies. Malicious internet content also becomes one of the major security concerns. Therefore, this study aims to answer the research problem: How small and mediumsized organizations perform IT security management. The main contribution of the paper is to capture information security management challenges from an SME's viewpoint and provide solutions to tackle these challenges. This paper aims to improve information security management of SMEs. From IT Service management perspective, the case study research approach was utilized in the study.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130795412","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Foreword of the Thematic Track Quality Aspects in Model-Driven Engineering.
模型驱动工程中的主题轨道质量问题前言。
{"title":"Foreword to the Thematic Track: Quality Aspects in Model-Driven Engineering","authors":"M. Mernik, Jordi Cabot","doi":"10.1109/QUATIC.2016.024","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.024","url":null,"abstract":"Foreword of the Thematic Track Quality Aspects in Model-Driven Engineering.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127049203","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Antonello Calabrò, F. Lonetti, E. Marchetti, G. Spagnolo
Currently, Business Process Model and Notation (BPMN) has becoming one of the main languages for creating a description of processes and developing executable frameworks for the management of the process itself. In this context, one important aspect of process management is the possibility of process analysis and optimization, which many times relies on real data collected during the process execution itself. This paper goes in this direction and presents a framework for performance analysis and optimization of the business process expressed in BPMN. It focuses on the collection and evaluation of time based and cost based parameters ad relies on an adaptable and flexible event based monitoring infrastructure. In particular, it implements some business process path coverage metrics useful for evidencing business process criticalities and possible improvements of the business process execution. A first validation on a case study is also presented.
{"title":"Enhancing Business Process Performance Analysis through Coverage-Based Monitoring","authors":"Antonello Calabrò, F. Lonetti, E. Marchetti, G. Spagnolo","doi":"10.1109/QUATIC.2016.015","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.015","url":null,"abstract":"Currently, Business Process Model and Notation (BPMN) has becoming one of the main languages for creating a description of processes and developing executable frameworks for the management of the process itself. In this context, one important aspect of process management is the possibility of process analysis and optimization, which many times relies on real data collected during the process execution itself. This paper goes in this direction and presents a framework for performance analysis and optimization of the business process expressed in BPMN. It focuses on the collection and evaluation of time based and cost based parameters ad relies on an adaptable and flexible event based monitoring infrastructure. In particular, it implements some business process path coverage metrics useful for evidencing business process criticalities and possible improvements of the business process execution. A first validation on a case study is also presented.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128881897","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
This paper deals with a method for QoE evaluationfor the services transmitting large amount of data perceived by the end user in relatively short time periods, e.g. streaming video in mobile operator network. Surprising factor of the new method relies on QoE/MOS evaluation, which is based on the smallest building unit which is a frame for a video session and evaluating throughput, packet delay and loss rate. Through the mentionedframe rate (the smallest building unit perceived by the end user), a certain number (for instance five used in this invention) MOS bins and a MOS matrix are created, to estimate subjective perceiving of the provided sessions from quality point of view by the end user.
{"title":"A Method of MOS Evaluation for Video Based Services","authors":"M. Kollar, A. Zieba","doi":"10.1109/QUATIC.2016.054","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.054","url":null,"abstract":"This paper deals with a method for QoE evaluationfor the services transmitting large amount of data perceived by the end user in relatively short time periods, e.g. streaming video in mobile operator network. Surprising factor of the new method relies on QoE/MOS evaluation, which is based on the smallest building unit which is a frame for a video session and evaluating throughput, packet delay and loss rate. Through the mentionedframe rate (the smallest building unit perceived by the end user), a certain number (for instance five used in this invention) MOS bins and a MOS matrix are created, to estimate subjective perceiving of the provided sessions from quality point of view by the end user.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"57 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127967479","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
This paper describes a set of experiences collected into product development programs managing Business Agile transformation to deliver solutions to meet customer needs in worldwide market. In particular, we focus on all those activities capable of enabling the achievement of the product quality, in its meaning to deliver reliable products to the customer and thus able to generate value. We will focus on practices that have led to better flow efficiency, as operational strategy in contrast to resource efficiency[1].
{"title":"Being Business Agile Focusing on Flow Efficiency: Tale of a Practitioner's Approach","authors":"G. Lombardi","doi":"10.1109/QUATIC.2016.030","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.030","url":null,"abstract":"This paper describes a set of experiences collected into product development programs managing Business Agile transformation to deliver solutions to meet customer needs in worldwide market. In particular, we focus on all those activities capable of enabling the achievement of the product quality, in its meaning to deliver reliable products to the customer and thus able to generate value. We will focus on practices that have led to better flow efficiency, as operational strategy in contrast to resource efficiency[1].","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130389861","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
This paper proposes a mapping between two product quality and software processes models used in the industry, the CERTICS Brazilian national model and the CMMI-DEV international model. The focus of this mapping is in the Technological Development Competence Area of CERTICS, which directs the response to the key question on whether "the software is the result of technological development in the country". The results of mapping are presented step by step, as well as the mapping review, which had the cooperation of one expert in CERTICS and CMMI-DEV models. Thus, this paper aims to correlate the structures of the two models in order to facilitate and reduce the implementation time and costs, and to stimulate the execution of multi-model implementations in software development enterprises.
{"title":"CERTICS - A Harmonization with CMMI-DEV Practices for Implementation of Technological Development Competence Area","authors":"F. Garcia, S. Oliveira, Clenio F. Salviano","doi":"10.1109/QUATIC.2016.032","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.032","url":null,"abstract":"This paper proposes a mapping between two product quality and software processes models used in the industry, the CERTICS Brazilian national model and the CMMI-DEV international model. The focus of this mapping is in the Technological Development Competence Area of CERTICS, which directs the response to the key question on whether \"the software is the result of technological development in the country\". The results of mapping are presented step by step, as well as the mapping review, which had the cooperation of one expert in CERTICS and CMMI-DEV models. Thus, this paper aims to correlate the structures of the two models in order to facilitate and reduce the implementation time and costs, and to stimulate the execution of multi-model implementations in software development enterprises.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"85 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124935632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
This paper outlines the details of nine case studies involving the pilot usage of the new ISO/IEC 29110 Lifecycle Profiles for Very Small Entities standards and guides, which were specifically designed to address the standardization needs of Very Small Entities. The purpose of this paper is to disseminate the early success stories from pilot trials of this new and emerging standard. The lessons learnt from these case studies should assist the adoption of this new standard in an industrial setting.
{"title":"Implementing Process Improvement in Very Small Enterprises with ISO/IEC 29110: A Multiple Case Study Analysis","authors":"Claude Y. Laporte, Rory V. O'Connor","doi":"10.1109/QUATIC.2016.033","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.033","url":null,"abstract":"This paper outlines the details of nine case studies involving the pilot usage of the new ISO/IEC 29110 Lifecycle Profiles for Very Small Entities standards and guides, which were specifically designed to address the standardization needs of Very Small Entities. The purpose of this paper is to disseminate the early success stories from pilot trials of this new and emerging standard. The lessons learnt from these case studies should assist the adoption of this new standard in an industrial setting.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121995384","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Foreword of the Thematic Track Quality Aspects in Big Data Systems.
《大数据系统中的专题跟踪质量方面》前言。
{"title":"Foreword to the Thematic Track: Quality Aspects in Big Data Systems","authors":"M. Y. Santos","doi":"10.1109/QUATIC.2016.045","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.045","url":null,"abstract":"Foreword of the Thematic Track Quality Aspects in Big Data Systems.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130565201","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Software development has become a fundamental process on any business or organization. As a consequence, together with other emergent technologies, new development platforms (IDEs) are being created, mainly in the cloud (e.g., Eclipse Orion, Cloud9, Codio), requiring different approaches on the way software development can be studied. Empirical studies on software development most often are based on data taken from software configuration management repositories, source code management systems and issue tracking tools, but not from the IDEs themselves, because they do not record data publically regarding developers’ activities. We aim to bring forward new insights on the software development process by analyzing how developers use their IDE. Based upon process mining techniques such as process discovery and conformance checking, this missing perspective will hopefully allow the discovery of coding patterns, the search for programmer behaviors and the detection of deviations from prescribed processes. Finally, we expect to provide advice for individual software process enhancement.
{"title":"Software Development Process Mining: Discovery, Conformance Checking and Enhancement","authors":"João Caldeira, Fernando Brito e Abreu","doi":"10.1109/QUATIC.2016.061","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.061","url":null,"abstract":"Software development has become a fundamental process on any business or organization. As a consequence, together with other emergent technologies, new development platforms (IDEs) are being created, mainly in the cloud (e.g., Eclipse Orion, Cloud9, Codio), requiring different approaches on the way software development can be studied. Empirical studies on software development most often are based on data taken from software configuration management repositories, source code management systems and issue tracking tools, but not from the IDEs themselves, because they do not record data publically regarding developers’ activities. We aim to bring forward new insights on the software development process by analyzing how developers use their IDE. Based upon process mining techniques such as process discovery and conformance checking, this missing perspective will hopefully allow the discovery of coding patterns, the search for programmer behaviors and the detection of deviations from prescribed processes. Finally, we expect to provide advice for individual software process enhancement.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117030441","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
While the importance of service quality has become widely recognized, its conceptualization and measurement remain understudied. Efforts have been limited to the implementation of SERVQUAL and asking simple questions from customers when service interactions are completed. IT service quality is a complex multi-faceted construct that depends on the value that the IT service brings to the business of both the IT service provider and its customers, yet rigorous measurement of IT service value is still not conducted in most service organizations.
{"title":"Foreword of the Thematic Track Quality Aspects in Service Management","authors":"N. Kryvinska, M. Silva","doi":"10.1109/QUATIC.2016.052","DOIUrl":"https://doi.org/10.1109/QUATIC.2016.052","url":null,"abstract":"While the importance of service quality has become widely recognized, its conceptualization and measurement remain understudied. Efforts have been limited to the implementation of SERVQUAL and asking simple questions from customers when service interactions are completed. IT service quality is a complex multi-faceted construct that depends on the value that the IT service brings to the business of both the IT service provider and its customers, yet rigorous measurement of IT service value is still not conducted in most service organizations.","PeriodicalId":157671,"journal":{"name":"2016 10th International Conference on the Quality of Information and Communications Technology (QUATIC)","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124092100","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
京公网安备 11010802042870号
京ICP备2023020795号-1
扫码关注我们
求助内容：
应助结果提醒方式：