A Fuzzy approach based on dynamic programming and metaheuristics for selecting safeguards for risk management for information systems

In this paper we focus on the selection of safeguards in a fuzzy risk analysis and management methodology for information systems (IS). Assets are connected by dependency relationships, and a failure of one asset may affect other assets. After computing impact and risk indicators associated with previously identified threats, we identify and apply safeguards to reduce risks in the IS by minimizing the transmission probabilities of failures throughout the asset network. However, as safeguards have associated costs, the aim is to select the safeguards that minimize costs while keeping the risk within acceptable levels. To do this, we propose a dynamic programming-based method that incorporates simulated annealing to tackle optimizations problems.

Implantación de un sistema de seguridad perimetral

Este proyecto está desarrollado sobre la seguridad de redes, y más concretamente en la seguridad perimetral. Para mostrar esto se hará una definición teórico-práctica de un sistema de seguridad perimetral. Para ello se ha desglosado el contenido en dos partes fundamentales, la primera incide en la base teórica relativa a la seguridad perimetral y los elementos más importantes que intervienen en ella, y la segunda parte, que es la implantación de un sistema de seguridad perimetral habitual en un entorno empresarial. En la primera parte se exponen los elementos más importantes de la seguridad perimetral, incidiendo en elementos como pueden ser cortafuegos, IDS/IPS, antivirus, proxies, radius, gestores de ancho de banda, etc. Sobre cada uno de ellos se explica su funcionamiento y posible configuración. La segunda parte y más extensa a la vez que práctica, comprende todo el diseño, implantación y gestión de un sistema de seguridad perimetral típico, es decir, el que sería de aplicación para la mayoría de las empresas actuales. En esta segunda parte se encontrarán primeramente las necesidades del cliente y situación actual en lo que a seguridad se refiere, con los cuales se diseñará la arquitectura de red. Para comenzar será necesario definir formalmente unos requisitos previos, para satisfacer estos requisitos se diseñará el mapa de red con los elementos específicos seleccionados. La elección de estos elementos se hará en base a un estudio de mercado para escoger las mejores soluciones de cada fabricante y que más se adecúen a los requisitos del cliente. Una vez ejecutada la implementación, se diseñará un plan de pruebas, realizando las pruebas de casos de uso de los diferentes elementos de seguridad para asegurar su correcto funcionamiento. El siguiente paso, una vez verificado que todos los elementos funcionan de forma correcta, será diseñar un plan de gestión de la plataforma, en el que se detallan las rutinas a seguir en cada elemento para conseguir que su funcionamiento sea óptimo y eficiente. A continuación se diseña una metodología de gestión, en las que se indican los procedimientos de actuación frente a determinadas incidencias de seguridad, como pueden ser fallos en elementos de red, detección de vulnerabilidades, detección de ataques, cambios en políticas de seguridad, etc. Finalmente se detallarán las conclusiones que se obtienen de la realización del presente proyecto. ABSTRACT. This project is based on network security, specifically on security perimeter. To show this, a theoretical and practical definition of a perimeter security system will be done. This content has been broken down into two main parts. The first part is about the theoretical basis on perimeter security and the most important elements that it involves, and the second part is the implementation of a common perimeter security system in a business environment. The first part presents the most important elements of perimeter security, focusing on elements such as firewalls, IDS / IPS, antivirus, proxies, radius, bandwidth managers, etc... The operation and possible configuration of each one will be explained. The second part is larger and more practical. It includes all the design, implementation and management of a typical perimeter security system which could be applied in most businesses nowadays. The current status as far as security is concerned, and the customer needs will be found in this second part. With this information the network architecture will be designed. In the first place, it would be necessary to define formally a prerequisite. To satisfy these requirements the network map will be designed with the specific elements selected. The selection of these elements will be based on a market research to choose the best solutions for each manufacturer and are most suited to customer requirements. After running the implementation, a test plan will be designed by testing each one of the different uses of all the security elements to ensure the correct operation. In the next phase, once the proper work of all the elements has been verified, a management plan platform will be designed. It will contain the details of the routines to follow in each item to make them work optimally and efficiently. Then, a management methodology will be designed, which provides the procedures for action against certain security issues, such as network elements failures, exploit detection, attack detection, security policy changes, etc.. Finally, the conclusions obtained from the implementation of this project will be detailed.

Sustainable Air Traffic Management System Development Methodology

As it is defined in ATM 2000+ Strategy (Eurocontrol 2001), the mission of the Air Traffic Management (ATM) System is: “For all the phases of a flight, the ATM system should facilitate a safe, efficient, and expedite traffic flow, through the provision of adaptable ATM services that can be dimensioned in relation to the requirements of all the users and areas of the European air space. The ATM services should comply with the demand, be compatible, operate under uniform principles, respect the environment and satisfy the national security requirements.” The objective of this paper is to present a methodology designed to evaluate the status of the ATM system in terms of the relationship between the offered capacity and traffic demand, identifying weakness areas and proposing solutions. The first part of the methodology relates to the characterization and evaluation of the current system, while a second part proposes an approach to analyze the possible development limit. As part of the work, general criteria are established to define the framework in which the analysis and diagnostic methodology presented is placed. They are: the use of Air Traffic Control (ATC) sectors as analysis unit, the presence of network effects, the tactical focus, the relative character of the analysis, objectivity and a high level assessment that allows assumptions on the human and Communications, Navigation and Surveillance (CNS) elements, considered as the typical high density air traffic resources. The steps followed by the methodology start with the definition of indicators and metrics, like the nominal criticality or the nominal efficiency of a sector; scenario characterization where the necessary data is collected; network effects analysis to study the relations among the constitutive elements of the ATC system; diagnostic by means of the “System Status Diagram”; analytical study of the ATC system development limit; and finally, formulation of conclusions and proposal for improvement. This methodology was employed by Aena (Spanish Airports Manager and Air Navigation Service Provider) and INECO (Spanish Transport Engineering Company) in the analysis of the Spanish ATM System in the frame of the Spanish airspace capacity sustainability program, although it could be applied elsewhere.

Improving the capacity of software acquisition management: An Alternative methodology

The acquisition of the information system technologies using the services of an external supplier could be the the best options to reduce the implementation and maintenance cost of software solutions, and allows a company to improve the efficient use of its resources. The focus of this paper is to outline a methodology structure for the software acquisition management. The methodology proposed in this paper is the result of the study and the convergence of the weakness and strengths of some models (CMMI, SA-CMM, ISO/IEC TR 15504, COBIT, and ITIL) that include the software acquisition process.

Methodology for the design of offshore wind farms

Although still in an early stage, offshore wind development is now characterized by a boom process. This leads to the necessity of applying an integral management model for the design of offshore wind facilities, being the purpose of the model to achieve technical, economical and environmental viability, all within a sustainable development framework. The foregoing led to the research project exposed in this paper, consisting of drawing up an offshore wind farms methodological proposal; this methodology has a global and/or general nature or point of view whilst searching for optimization of the overall process of operations leading to the design of this type of installations and establishing collated theoretical bases for the further development of management tools. This methodological proposal follows a classical engineering thought scheme: it begins with the alternatives study, and ends with the detailed design. With this in mind, the paper includes the following sections: introduction, methodology used for the research project, conditioning factors, methodological proposal for the design of offshore wind farms, checking the methodological proposal, and conclusions

Methodology for the metric restoration of the historical cartography applied to Francisco Coello's cartografic series of the Royal Site of Aranjuez

Hojas Kilométricas (Kilometric Sheets). Specifically, the study focuses on those sheets referring to the city centre and surrounding area of the Royal Site of Aranjuez, a town in the south of the Province of Madrid. The aim of this study is to restore the actual size and measurements of scanned images of the Hojas Kilométricas. This would allow us, among other things, to reestablish both the format and scale of the original plans. To achieve this goal it is necessary to rectify and then georeference these images, i.e. assign them a geographic reference system. This procedure is essential in the overlaying and comparison of the Hojas Kilométricas of the Royal Site with other historical cartography as well as other sources related to the same area from different time periods. Subsequent research would allow us, for example, to reconstruct the time-evolution of the urban area, to spot new construction and to pinpoint the locations of any altered or missing buildings or architectural features. In addition, this would allow us to develop and integrate databases for GIS models applicable to the management of our cultural heritage.

An example of integration between en economic and an hydrologic model in the framework of water resource management problems

Growing scarcity, increasing demand and bad management of water resources are causing weighty competition for water and consequently managers are facing more and more pressure in an attempt to satisfy users? requirement. In many regions agriculture is one of the most important users at river basin scale since it concentrates high volumes of water consumption during relatively short periods (irrigation season), with a significant economic, social and environmental impact. The interdisciplinary characteristics of related water resources problems require, as established in the Water Framework Directive 2000/60/EC, an integrated and participative approach to water management and assigns an essential role to economic analysis as a decision support tool. For this reason, a methodology is developed to analyse the economic and environmental implications of water resource management under different scenarios, with a focus on the agricultural sector. This research integrates both economic and hydrologic components in modelling, defining scenarios of water resource management with the goal of preventing critical situations, such as droughts. The model follows the Positive Mathematical Programming (PMP) approach, an innovative methodology successfully used for agricultural policy analysis in the last decade and also applied in several analyses regarding water use in agriculture. This approach has, among others, the very important capability of perfectly calibrating the baseline scenario using a very limited database. However one important disadvantage is its limited capacity to simulate activities non-observed during the reference period but which could be adopted if the scenario changed. To overcome this problem the classical methodology is extended in order to simulate a more realistic farmers? response to new agricultural policies or modified water availability. In this way an economic model has been developed to reproduce the farmers? behaviour within two irrigation districts in the Tiber High Valley. This economic model is then integrated with SIMBAT, an hydrologic model developed for the Tiber basin which allows to simulate the balance between the water volumes available at the Montedoglio dam and the water volumes required by the various irrigation users.

Methodology to assess economic and environmental impacts of nitrogen in fertirrigation systems.

To determine the risk of nitrate pollution in agricultural systems have identified several indexes and efficiencies that may lead an effective N fertilizer management for obtain the maximum yield with minimum environmental impact and health

Grapevine Yield and Leaf Area Estimation Using Supervised Classification Methodology on RGB Images Taken under Field Conditions

The aim of this research was to implement a methodology through the generation of a supervised classifier based on the Mahalanobis distance to characterize the grapevine canopy and assess leaf area and yield using RGB images. The method automatically processes sets of images, and calculates the areas (number of pixels) corresponding to seven different classes (Grapes, Wood, Background, and four classes of Leaf, of increasing leaf age). Each one is initialized by the user, who selects a set of representative pixels for every class in order to induce the clustering around them. The proposed methodology was evaluated with 70 grapevine (V. vinifera L. cv. Tempranillo) images, acquired in a commercial vineyard located in La Rioja (Spain), after several defoliation and de-fruiting events on 10 vines, with a conventional RGB camera and no artificial illumination. The segmentation results showed a performance of 92% for leaves and 98% for clusters, and allowed to assess the grapevine’s leaf area and yield with R2 values of 0.81 (p < 0.001) and 0.73 (p = 0.002), respectively. This methodology, which operates with a simple image acquisition setup and guarantees the right number and kind of pixel classes, has shown to be suitable and robust enough to provide valuable information for vineyard management.

El análisis de la dirección integrada de proyectos (project & construction management) en el marco europeo: propuesta de regulación en España y su inclusión en la ley de la ordenación de la edificación

El presente trabajo de Tesis Doctoral surge de la Figura de la Dirección Integrada de Proyecto en Edificación (“Project & Construction Management”) y su analisis de la situación regulatoria en la legislación española. El primer planteamiento fue pensar en la situación actual de esta figura en el contexto internacional, para analizar su repercusión en el sector de la edificación, lo cual me llevo a cabo las siguientes preguntas que he reuelto en esta investigación. ¿ Como surge el ¨Project & Construction Management”? ¿ Cuales son sus actividades, funciones y cometidos? ¿ Existe el ¨Project & Construction Management” en otros países? ¿Hay regulación del ¨Project & Construction Management” en esos paises? ¿Cómo es la regulación del ¨Project & Construction Management”? ¿Existe demanda del ¨Project & Construction Management” en España? ¿Cómo es esa demanda en España, y como se puede cuantificar? ¿Existe regulación del ¨Project & Construction Management” en España? ¿ Como debería ser la regulación del ¨Project & Construction Management” en España? Todas las preguntas anteriores las he ido respondiendo con el presente trabajo, llegando a una serie de respuestas, que están reflejadas en el desarrollo del presente trabajo y que resumo: - EL ¨Project & Construction Management” surge a principios del siglo XX en USA, desarrollándose como una disciplina con metodología propia y extendiéndose por otros países. - EL ¨Project & Construction Management” es una disciplina, basada en una metodología propia con herramientas y técnicas para organizar cualquier 14 proyecto de cualquier tipo, pero en este caso un proyecto de edificación, para lo cual he definido con todo detalle esta figura. - El origen del ¨Project & Construction Management” es anglosajón, concretamente en USA, extendiendose luego al Reino Unido, a Europa (Francia y Alemania), a Asia, a América del Sur y a Oceanía. - En todos los paises estudiados (Estados Unidos, Reino Unido, Francia y Alemania) existe una regulación sobre el ¨Project & Construction Management” que me ha servido de base comparativa para introducirla en España. - Hay muchas empresas en España (Nacionales e Internacionales) que ejercen su actividad dentro de este sector, por lo que para realizar un estudio más profundo, hice una muestra de las 30 empresas más significativas, prepare un cuestionario, dividido en 5 apartados: Organizativo, Sectorial, Cualitativo, Cuantitativo y Profesional para obtener una radiogradía de la situación real del sector, y así valorar cual es la importancia de este agente. - Estudié las posibles regulaciones del ¨Project & Construction Management” en España y no encontré ninguna. - El lugar idóneo para que se regule al ¨Project & Construction Management” es la Ley de Ordenación de la Edificación (LOE), ya que la jurisprudencia (sentencias de los tribunales de justicia españoles) le ha asimilado con los agentes de la LOE y se ha basado para absolver o condenar en la Ley de Ordenación de la Edificación. Por lo que el Objetivo fundamental de esta tesis ha sido regular la figura del ¨Project & Construction Management”, traducirla al Castellano, definirla y realizar una estructura de Agente de la Edificación, según la LOE, para poder introducirla dentro de la Legislación Española, con el objeto de mejorar la calidad de la edificación, proteger al usuario, estableciendo responsabilidades y garantías y proteger al ¨Project & Construction Management” de las responsabilidades solidarias. ABSTRACT This Doctoral Thesis figure emerges from the Integrated Building Project ("Project & Construction Management") and his analysis of the regulatory situation in the Spanish legislation. The first approach was to think of the current situation of this figure in the international context, to analyze its impact on the building sector, which I conducted the following questions that I have met in this research. - How did the “Project & Construction Management "? - What are your activities, functions and duties? - Is there a “Project & Construction Management "in other countries? - Is there regulation “Project & Construction Management "in these countries? - How is regulation of ¨ Project & Construction Management "? - Is there demand “Project & Construction Management "in Spain? - How is that demand in Spain, and as you can quantify? - Is there regulation “Project & Construction Management "in Spain? - How should regulation ¨Project & Construction Management "in Spain? All the above questions have been answered with this study, leading to a series of responses, which are reflected in the development of this study and are summarized: - The ¨ Project & Construction Management "comes early twentieth century in the USA, developed as a discipline with its own methodology and extending other countries. - The ¨ Project & Construction Management "is a discipline based on a metodology own tools and techniques to organize any project of any kind, but in this case a building project, for which I have defined in detail this figure. - The origin of ¨Project & Construction Management "is Anglo-Saxon, particularly in USA, then spreading to the UK, Europe (France and Germany), Asia, South America and Oceania. - In all countries studied (USA, UK, France and Germany) there is a regulation on ¨Project & Construction Management "has helped me to introduce comparative base in Spain. - There are many companies in Spain (National and International) who perform work within this sector, so for further study, I made a sample of the 30 most important companies, prepare a questionnaire, divided into five sections: Organizational , Sector, Qualitative, Quantitative and Professional radiography for a real situation of the sector, and thus assess which is the importance of this agent. - Study the possible regulations ¨Project & Construction Management "in Spain and found none. - The place to be regulated to ¨Project & Construction Management "is the Law of Construction Planning (LOE), as the case law (judgments of the courts Spanish) has assimilated LOE agents and has been based to absolve or condemn Law Construction Planning. So the objective of this thesis has been regular figure ¨ Project & Construction Management ", translated to spanish, define and perform an Agent structure of the Building, as the LOE, to enter into Spanish law, in order to improve the quality of the building, protecting the user, establishing responsibilities and guarantees and protect the ¨ Project & Construction Management "solidarity responsibilities.

Berth Management in Container Terminals: Quality of Service

This paper empirically evaluates container terminal service attributes. The methodology proposed focuses on statistical control. Based on the concept of service segmentation, the authors employed control charts to classify container terminal services. The purpose of control charts is to allow simple detection of events that are indicative of actual process change. This simple decision can be difficult where the process characteristic is continuously varying, the control chart provides statistically objective criteria of change. When change is detected and considered good its cause should be identified and possibly become the new way of working, where the change is bad then its cause should be identified and eliminated. Both theoretical and practical implications of the research findings are discussed in this paper.

Berth management in container terminals: quality of service

This paper empirically evaluates container terminal service attributes. The methodology proposed focuses on statistical control. Based on the concept of service segmentation, we employed control charts to classify container terminal services. The purpose of control charts is to allow simple detection of events that are indicative of actual process change. This simple decision can be difficult where the process characteristic is continuously varying; the control chart provides statistically objective criteria of change. When change is detected and considered good its cause should be identified and possibly become the new way of working, where the change is bad then its cause should be identified and eliminated. This paper is organized as follows: Section 1 is the introduction, Section 2 provides a brief note on other studies that inspired this research, section 3 focuses on the methodology used, and develops the results obtained and finally conclusions are shown in Section 4. Theoretical and practical implications of the research findings are discussed.

Methodological Proposal for Teamwork Evaluation in the field of training Project Management.

Teamwork, is one of the abilities that today is highly valued in the professional arena with a great importance for various personal and interpersonal skills associated with it. In this context, the Technical University of Madrid, is developing a coordinated educational innovation project, which main objective is to develop methodological and assessment tools for the acquisition of personal skills necessary to improve the employability of graduates and their skills for project management. Within this context, this paper proposes a methodology composed of various activities and indicators, as well as specific assessment instruments linked to the teamwork competence. Through a series of systematic steps it was allowed the design of an instrument and construction of a scale for measuring the competence of teamwork. The practical application of the methodology has been carried out in Projects lectures from different Schools of Engineering at the Technical University of Madrid, which results are presented in this document as a pilot experience. Results show the various aspects and methods that teachers should consider in evaluating the competence of the work, including analysis of the quality of results, through reliability and construct validity. On the other hand, show the advantages of applying this methodology in the field of project management teaching.

Diagnosing Causes of Water Scarcity in Complex Water Resources Systems and Identifying Risk Management Actions

From the water management perspective, water scarcity is an unacceptable risk of facing water shortages to serve water demands in the near future. Water scarcity may be temporary and related to drought conditions or other accidental situation, or may be permanent and due to deeper causes such as excessive demand growth, lack of infrastructure for water storage or transport, or constraints in water management. Diagnosing the causes of water scarcity in complex water resources systems is a precondition to adopt effective drought risk management actions. In this paper we present four indices which have been developed to evaluate water scarcity. We propose a methodology for interpretation of index values that can lead to conclusions about the reliability and vulnerability of systems to water scarcity, as well as to diagnose their possible causes and to propose solutions. The described methodology was applied to the Ebro river basin, identifying existing and expected problems and possible solutions. System diagnostics, based exclusively on the analysis of index values, were compared with the known reality as perceived by system managers, validating the conclusions in all cases

Evaluation of a Change Detection Methodology by Means of Binary Thresholding Algorithms and Informational Fusion Processes

Landcover is subject to continuous changes on a wide variety of temporal and spatial scales. Those changes produce significant effects in human and natural activities. Maintaining an updated spatial database with the occurred changes allows a better monitoring of the Earth?s resources and management of the environment. Change detection (CD) techniques using images from different sensors, such as satellite imagery, aerial photographs, etc., have proven to be suitable and secure data sources from which updated information can be extracted efficiently, so that changes can also be inventoried and monitored. In this paper, a multisource CD methodology for multiresolution datasets is applied. First, different change indices are processed, then different thresholding algorithms for change/no_change are applied to these indices in order to better estimate the statistical parameters of these categories, finally the indices are integrated into a change detection multisource fusion process, which allows generating a single CD result from several combination of indices. This methodology has been applied to datasets with different spectral and spatial resolution properties. Then, the obtained results are evaluated by means of a quality control analysis, as well as with complementary graphical representations. The suggested methodology has also been proved efficiently for identifying the change detection index with the higher contribution.