This paper proposes a formal framework aimed at specifying and verifying computer systems security behavior. In this approach, systems and their interactions are modeled through processes with a new dedicated calculus inspired from the ambient calculus. We demonstrate how, given a network security policy implementation, our dedicated calculus allows to verify that the specification offers or not sufficient protection from a malicious intruder.
{"title":"Formal Modeling for Security Behavior Analysis of Computer Systems","authors":"K. Adi, L. Hamza, L. Pene","doi":"10.1109/MCETECH.2008.20","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.20","url":null,"abstract":"This paper proposes a formal framework aimed at specifying and verifying computer systems security behavior. In this approach, systems and their interactions are modeled through processes with a new dedicated calculus inspired from the ambient calculus. We demonstrate how, given a network security policy implementation, our dedicated calculus allows to verify that the specification offers or not sufficient protection from a malicious intruder.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133890197","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Web services QoS management frameworks proposed in the literature deal essentially with issues such as QoS specification, QoS-based discovery and selection, and QoS monitoring of Web services. However, only few works have considered the issue of load distribution in a Web services context. In this paper, we investigate three models that might be used to achieve load distribution in a Web services environment. We focus on load distribution at the operation level by considering the assignment of methods execution to appropriate Web services according to some selection policies. The experiments we have conducted using the broker-oriented model have shown that better results are obtained using the random policy for Web service selection.
{"title":"Practical Load Distribution Models for Web Services Based environments","authors":"E. Badidi, M. Serhani, L. Esmahi, M. Elkoutbi","doi":"10.1109/MCETECH.2008.21","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.21","url":null,"abstract":"Web services QoS management frameworks proposed in the literature deal essentially with issues such as QoS specification, QoS-based discovery and selection, and QoS monitoring of Web services. However, only few works have considered the issue of load distribution in a Web services context. In this paper, we investigate three models that might be used to achieve load distribution in a Web services environment. We focus on load distribution at the operation level by considering the assignment of methods execution to appropriate Web services according to some selection policies. The experiments we have conducted using the broker-oriented model have shown that better results are obtained using the random policy for Web service selection.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128769427","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Use Case Maps (UCMs) have already been used to describe business processes and workflows at a high level of abstraction. The semantics of UCMs, however, require further clarification and enhancement. An initial assessment based on 27 workflow and communication patterns (a) highlighted some of the semantic variation points of UCMs, (b) introduced small extensions to the UCM language in order to more precisely define scenarios, high-level business processes, and workflows, and (c) compared UCMs with other business process and workflow languages. This short paper summarizes the continuation of the assessment with a larger set of workflow patterns recently made available. The assessment concludes that the UCM notation including the proposed extensions is a competitive language to describe high-level business processes and workflows, while providing additional benefits over the other languages.
{"title":"Assessing the Applicability of Use Case Maps for Business Process and Workflow Description","authors":"G. Mussbacher, Daniel Amyot","doi":"10.1109/MCETECH.2008.18","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.18","url":null,"abstract":"Use Case Maps (UCMs) have already been used to describe business processes and workflows at a high level of abstraction. The semantics of UCMs, however, require further clarification and enhancement. An initial assessment based on 27 workflow and communication patterns (a) highlighted some of the semantic variation points of UCMs, (b) introduced small extensions to the UCM language in order to more precisely define scenarios, high-level business processes, and workflows, and (c) compared UCMs with other business process and workflow languages. This short paper summarizes the continuation of the assessment with a larger set of workflow patterns recently made available. The assessment concludes that the UCM notation including the proposed extensions is a competitive language to describe high-level business processes and workflows, while providing additional benefits over the other languages.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129769167","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Although it is commonly agreed that e-government systems enhance governance, there is a lack of empirical evidence to build upon this hypothesis which, legitimately, creates reluctance among key decision makers to adopt e-government, especially in local governmental agencies in developing countries, In the context of the e-Fez project and in a close collaboration with the municipality of the Moroccan city of Fez, we developed a pilot e-government system that facilitates citizens' access to governmental information and services. In the course of the e-Fez project and other similar projects, we set up a methodology that emphasizes good governance at each step of an e-government project and enables us to continuously assess the outcomes of the resulting e-gov systems on governance. The ultimate goal is to reduce the reluctance of decision makers and to contribute in the dissemination of e-technology in developing countries through a scientific and proven methodology that systematically links egovernment outcomes to good governance attributes.
{"title":"Proposition of a Method for the Development and Deployment of e-Government Systems that Emphasize Good Governance","authors":"D. Kettani, B. Moulin, A. el Mahdi","doi":"10.1109/MCETECH.2008.35","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.35","url":null,"abstract":"Although it is commonly agreed that e-government systems enhance governance, there is a lack of empirical evidence to build upon this hypothesis which, legitimately, creates reluctance among key decision makers to adopt e-government, especially in local governmental agencies in developing countries, In the context of the e-Fez project and in a close collaboration with the municipality of the Moroccan city of Fez, we developed a pilot e-government system that facilitates citizens' access to governmental information and services. In the course of the e-Fez project and other similar projects, we set up a methodology that emphasizes good governance at each step of an e-government project and enables us to continuously assess the outcomes of the resulting e-gov systems on governance. The ultimate goal is to reduce the reluctance of decision makers and to contribute in the dissemination of e-technology in developing countries through a scientific and proven methodology that systematically links egovernment outcomes to good governance attributes.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125364465","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
An "automated recommender system" plays an essential role in e-commerce applications. Such systems try to recommend items (movies, music, books, news, etc.) which the user should be interested in. The spectrum of proposed recommendation algorithms are based on information including content of the items, ratings of the users, and demographic information about the users. These systems hold the promise of delivering high quality recommendations. However, the incredible growth of users and applications bring some key challenges for recommender systems. One of the concerns in current recommenders is that the quality of recommendations is strongly dependant on the neighborhood size and quality. In this paper, we propose a new peer-to-peer architecture based on prior selection of the neighbors. We investigate the evolution of different recommendation techniques performance, coverage and quality of prediction. Also, we identify which recommendation method would be the most efficient with this new peer-to-peer architecture.
{"title":"Recommendation Quality Evolution Based on Neighbors Discrimination","authors":"Z. Zaier, R. Godin, L. Faucher","doi":"10.1109/MCETECH.2008.28","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.28","url":null,"abstract":"An \"automated recommender system\" plays an essential role in e-commerce applications. Such systems try to recommend items (movies, music, books, news, etc.) which the user should be interested in. The spectrum of proposed recommendation algorithms are based on information including content of the items, ratings of the users, and demographic information about the users. These systems hold the promise of delivering high quality recommendations. However, the incredible growth of users and applications bring some key challenges for recommender systems. One of the concerns in current recommenders is that the quality of recommendations is strongly dependant on the neighborhood size and quality. In this paper, we propose a new peer-to-peer architecture based on prior selection of the neighbors. We investigate the evolution of different recommendation techniques performance, coverage and quality of prediction. Also, we identify which recommendation method would be the most efficient with this new peer-to-peer architecture.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125514619","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Workflows are ubiquitous in enterprise applications from manufacturing industry to healthcare industry. A human workflow is a dynamic set of tasks performed by human participants to reach a shared goal. Commitments among participants can be used to model the workflow and coordinate their execution of it. These commitments can be captured by role-based orchestrations in a Microsoft workflow implementation with Microsoft BizTalk server (BizTalk). BizTalk provides tools and methodologies to compose these orchestrations that can be executed as business processes and monitored by Business Activity Monitoring (BAM) dashboards. In this paper, we present methodologies to develop a human workflow by using role-based BizTalk orchestrations to capture commitments extracted from a process- centric workflow definition. In addition, we discuss the life- cycle management of a human workflow with an emphasis on process design and monitoring.
{"title":"Human Workflows via Document-Driven Process Choreography","authors":"Jiangbo Dang, C. Toklu, K. Hampel, U. Enke","doi":"10.1109/MCETECH.2008.15","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.15","url":null,"abstract":"Workflows are ubiquitous in enterprise applications from manufacturing industry to healthcare industry. A human workflow is a dynamic set of tasks performed by human participants to reach a shared goal. Commitments among participants can be used to model the workflow and coordinate their execution of it. These commitments can be captured by role-based orchestrations in a Microsoft workflow implementation with Microsoft BizTalk server (BizTalk). BizTalk provides tools and methodologies to compose these orchestrations that can be executed as business processes and monitored by Business Activity Monitoring (BAM) dashboards. In this paper, we present methodologies to develop a human workflow by using role-based BizTalk orchestrations to capture commitments extracted from a process- centric workflow definition. In addition, we discuss the life- cycle management of a human workflow with an emphasis on process design and monitoring.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"282 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115841709","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
This paper reports on the implementation of IT Governance in a not-for-profit healthcare organization. The motivation behind such an undertaking was partly the need to run the IT Division as a business aligned to the strategic goals of the organization, and partly to be able to demonstrate the professional accountability of the IT decision-making investment process. Certainly, top management's support for the roll out of IT Governance was related to the latter motive. In this case study the organizational gains in focusing on best value for the investment dollar, accountable time-frames and cost- controls, were real. As such, the move enhanced the professional status of the IT Department. However, the organizational structure imposed by IT Governance provided such transparency that the IT Department additionally achieved more widespread participation and buy in from the wider business.
{"title":"Issues for IT Governance in a Large Not-for-Profit Organization: A Case Study","authors":"C. Wilkin, Jon Riddett","doi":"10.1109/MCETECH.2008.24","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.24","url":null,"abstract":"This paper reports on the implementation of IT Governance in a not-for-profit healthcare organization. The motivation behind such an undertaking was partly the need to run the IT Division as a business aligned to the strategic goals of the organization, and partly to be able to demonstrate the professional accountability of the IT decision-making investment process. Certainly, top management's support for the roll out of IT Governance was related to the latter motive. In this case study the organizational gains in focusing on best value for the investment dollar, accountable time-frames and cost- controls, were real. As such, the move enhanced the professional status of the IT Department. However, the organizational structure imposed by IT Governance provided such transparency that the IT Department additionally achieved more widespread participation and buy in from the wider business.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121347488","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Public-private partnerships (PPP) are used by governments as a means to finance infrastructure services such as roads, bridges or hospitals. In e-government, public services are provided and delivered to citizens and businesses through the Internet. The end user should be able to measure a difference in terms of service quality and comfort, or necessary effort, delay, and cost, between acquiring the service over the net vs. using traditional channels. This paper presents a case implementation of PPP in e-government in Geneva, Switzerland. In this scheme, a private third party is introduced aside the public administration and the end-user in order to maximize the added value to the user. In comparison to the traditional client-server model of Internet transaction, several new problems are encountered at the organizational, process and technical levels. The paper describes the solutions and underlying architectures.
{"title":"Public-Private Partnership in e-Government: A Case Implementation","authors":"Alain Sandoz, Jean-René Eudes, R. Prevot","doi":"10.1109/MCETECH.2008.14","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.14","url":null,"abstract":"Public-private partnerships (PPP) are used by governments as a means to finance infrastructure services such as roads, bridges or hospitals. In e-government, public services are provided and delivered to citizens and businesses through the Internet. The end user should be able to measure a difference in terms of service quality and comfort, or necessary effort, delay, and cost, between acquiring the service over the net vs. using traditional channels. This paper presents a case implementation of PPP in e-government in Geneva, Switzerland. In this scheme, a private third party is introduced aside the public administration and the end-user in order to maximize the added value to the user. In comparison to the traditional client-server model of Internet transaction, several new problems are encountered at the organizational, process and technical levels. The paper describes the solutions and underlying architectures.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121435545","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
In a Service-Oriented Architecture (SOA), services publish descriptions to permit their composition into larger services. There are however serious gaps in the semantics of such service descriptions and these hinder the adoption of SOAs in mission-critical applications. This paper identifies some of these lacunae and proposes a foundation for resolving one of them - service failure. The technique of crash-only failure is proposed as a useful first step and we illustrate how it is particularly applicable to web services in a SOA.
{"title":"Failure Semantics in a SOA Environment","authors":"C. Hobbs, H. Becha, Daniel Amyot","doi":"10.1109/MCETECH.2008.31","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.31","url":null,"abstract":"In a Service-Oriented Architecture (SOA), services publish descriptions to permit their composition into larger services. There are however serious gaps in the semantics of such service descriptions and these hinder the adoption of SOAs in mission-critical applications. This paper identifies some of these lacunae and proposes a foundation for resolving one of them - service failure. The technique of crash-only failure is proposed as a useful first step and we illustrate how it is particularly applicable to web services in a SOA.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124977134","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
E-learning systems have made considerable progress within the last few years. Nonetheless, the issue of learner privacy has been practically ignored. Existing E-learning standards offer some provisions for privacy and the security of E-learning systems offers some privacy protection, but remains unsatisfactory on several levels. On the other hand, privacy preserving solutions that are appropriate and used in E-commerce environments are inadequate and unsuitable to the context of E-learning. Indeed, while in most E-commerce applications different transactions between the client and the system are pretty much independent, in E-learning the interactions between the learner and system are intertwined into a developing process that depends heavily on the path the leaner is following. In this paper, we introduce the anonymous credentials for E- learning systems (ACES), a set of protocols to preserve learner's privacy in E-learning environments. In particular, the ACES allows learners to provide anonymous credentials throughout the learning process, such as when they need to prove that they possess the necessary requirements to register for a course, and/or to prove that they are the legitimate owners of an anonymous transcript or an anonymous degree. Although the concept of anonymous credentials is not novel, ACES takes into account the specificities of E-learning. Moreover, in order to prevent the misuse of privacy, ACES prevents the possibility of sharing credentials between learners.
{"title":"Anonymous Credentials for Privacy-Preserving E-learning","authors":"E. Aimeur, H. Hage, F. Onana","doi":"10.1109/MCETECH.2008.26","DOIUrl":"https://doi.org/10.1109/MCETECH.2008.26","url":null,"abstract":"E-learning systems have made considerable progress within the last few years. Nonetheless, the issue of learner privacy has been practically ignored. Existing E-learning standards offer some provisions for privacy and the security of E-learning systems offers some privacy protection, but remains unsatisfactory on several levels. On the other hand, privacy preserving solutions that are appropriate and used in E-commerce environments are inadequate and unsuitable to the context of E-learning. Indeed, while in most E-commerce applications different transactions between the client and the system are pretty much independent, in E-learning the interactions between the learner and system are intertwined into a developing process that depends heavily on the path the leaner is following. In this paper, we introduce the anonymous credentials for E- learning systems (ACES), a set of protocols to preserve learner's privacy in E-learning environments. In particular, the ACES allows learners to provide anonymous credentials throughout the learning process, such as when they need to prove that they possess the necessary requirements to register for a course, and/or to prove that they are the legitimate owners of an anonymous transcript or an anonymous degree. Although the concept of anonymous credentials is not novel, ACES takes into account the specificities of E-learning. Moreover, in order to prevent the misuse of privacy, ACES prevents the possibility of sharing credentials between learners.","PeriodicalId":299458,"journal":{"name":"2008 International MCETECH Conference on e-Technologies (mcetech 2008)","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2008-01-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128626210","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
京公网安备 11010802042870号
京ICP备2023020795号-1
扫码关注我们
求助内容：
应助结果提醒方式：