Software watermarking resilient to debugging attacks

In 2006, Gaurav Gupta and Josef Pieprzyk presented an attack on the branch-based software watermarking scheme proposed by Ginger Myles and Hongxia Jin in 2005. The software watermarking model is based on replacing jump instructions or unconditional branch statements (UBS) by calls to a fingerprint branch function (FBF) that computes the correct target address of the UBS as a function of the generated fingerprint and integrity check. If the program is tampered with, the fingerprint and/or integrity checks change and the target address is not computed correctly. Gupta and Pieprzyk's attack uses debugger capabilities such as register and address lookup and breakpoints to minimize the requirement to manually inspect the software. Using these resources, the FBF and calls to the same is identified, correct displacement values are generated and calls to FBF are replaced by the original UBS transferring control of the attack to the correct target instruction. In this paper, we propose a watermarking model that provides security against such debugging attacks. Two primary measures taken are shifting the stack pointer modification operation from the FBF to the individual UBSs, and coding the stack pointer modification in the same language as that of the rest of the code rather than assembly language to avoid conspicuous contents. The manual component complexity increases from O(1) in the previous scheme to O(n) in our proposed scheme.

Drawing out critical thinking : testing the methodological value of drawing collaboratively

Early childhood research has long established that drawing is a central, and important activity for young children. Less common are investigations into the drawing activity of adults involved in early childhood. A team of adult early childhood researchers, with differing exposures and familiarities with drawing, experimented with intergenerational collaborative drawing with colleagues, students, family members and others, to explore the effectiveness of drawing as a research process and as an arts-based methodology. This testing prompted critical thinking into how drawing might facilitate research that involves young children, to operate in more communicable ways, and how research-focused drawings might occur in reference to a research project.

An investigation approach to test protection intelligent electronic devices (IEDs) in IEC 61850 based substation automation systems (SAS) at station level

This thesis has developed a new approach to trace virtual protection signals in Electrical substation networks. The main goal of the research was to analyse the contents of the virtual signals transferred, using third party software. In doing so, a comprehensive test was done on a distance protection relay, using non-conventional test equipment.

Seat Comfort. M4-M6.

Hardness is defined as the resistance and load bearing capability of an item. Seat hardness is an important factor in seat comfort as it impacts on a number of variables including seat postural stability, postural control, pressure comfort as a result of tissue deformation, and occupant vibration. The development of the test rig further on described in this report will enable Futuris Automotive to develop their current comfort testing procedures and thus increase the comfort of their automotive seats. The test rig consists of a buttock indenter, which produces a controlled application of a load to a seat cushion with measured displacement via a linear indenter. In parallel with the physical property presented, an analytic (software) finite element tool was developed to simulate seat pressure in an ANSYS Workbench V13 environment. This report also details the procedure required for Futuris to accurately and precisely measure cushion hardness which will enhance their comfort testing procedures, product development and target settings. The report is divided into three main sections: 1 Test equipment specification (M4) - A detailed description of the process used to build the seat cushion indenter and a description of the indenter mechanical structure and electrical functionality (chapter 2). 2 Analytic tool specification (M5) – A detailed description of the CAE seat and indenter software tool, developed as a finite element model (FEM) under ANSYS Workbench V13 to simulate indentation of a physical seat cushion similar to the hardware tool (chapter 3). 3 Product Development and Comfort Design Procedure (M6) - The cushion hardness testing procedure to be used with the physical indenter. This milestone is partially incomplete, as it covers a description of the test procedure to be applied, however not the operating system (control software) required to operate the physical property (chapter 4). Although outside the scope of this project, this report also details the testing procedures required to measure overall seatback hardness.

Testing the effects of the Japanese vehicle emission-control law on the international palladium futures market

This paper tested the effects of the 2005 vehicle emission-control law issued in Japan on the market linkages between the U.S. and Japanese palladium futures markets, To determine these effects, we applied a cointegration test both with and without break points in the time series and found that the market linkages between the two countries changed after the break in October 2005. Our results show that the 2005 long-term regulation of vehicle emissions enacted in Japan influenced the international palladium futures market.

Total factor productivity growth and convergence in the petroleum industry : empirical analysis testing for convexity

While economic theory acknowledges that some features of technology (e.g., indivisibilities, economies of scale and specialization) can fundamentally violate the traditional convexity assumption, almost all empirical studies accept the convexity property on faith. In this contribution, we apply two alternative flexible production technologies to measure total factor productivity growth and test the significance of the convexity axiom using a nonparametric test of closeness between unknown distributions. Based on unique field level data on the petroleum industry, the empirical results reveal significant differences, indicating that this production technology is most likely non-convex. Furthermore, we also show the impact of convexity on answers to traditional convergence questions in the productivity growth literature.

Testing the international linkage in the platinum-group metal futures markets

This study tests whether an international market exists in the platinum-group metal (PGM) futures markets. For this purpose, we tested the law of one price (LOP) and the causality between the U.S. and Japanese platinum and palladium futures markets. We also performed the test when structural breaks are considered. Long-run price relationships were found in both platinum and palladium markets but the LOP only sustained in the palladium market. The causality test revealed that it is the U.S. market that leads the price to transmit information between the U.S. and Japanese markets. Structural breaks had large impacts on the test results, suggesting that incorporating breaks is important when investigating the international price linkage in the PGM futures markets.

Web mediated market interactions and enterprise software

With increased consolidation and a few large vendors dominating the market, how can software vendors distinguish themselves in order to maintain profitability and gain market share? Increasingly customers are becoming more proactive in selecting a vendor and a product, drawing upon various publications, market surveys, mailing lists, and, of course, other users. In particular, though, a company's Web site is the obvious place to begin information gathering. In sum, it may seem that the days of the uninformed customer prepared to be "sold to" are potentially all but gone.

Reflections on issues of power in packaged software selection

The adoption of packaged software is becoming increasingly common in a variety of organizations and much of the packaged software literature presents this as a straightforward, linear process based on rationalistic evaluation. This paper applies the framework of power relations developed by Markus and Bjørn-­‐Anderson (1987) to a longitudinal study concerning the adoption of a customer relationship management package in a small organization. This is used to highlight both overt and covert power issues within the selection and procurement of the product and illustrate the interplay of power between senior management, IT managers, IT vendors and consultants, and end-­‐users. The paper contributes to the growing body of literature on packaged software and also to our understanding of how power is deeply embedded within the surrounding processes.

IT consultants, salesmanship and the challenges of packaged software selection in SMEs

Purpose – This paper seeks to analyse the process of packaged software selection in a small organization, focussing particularly on the role of IT consultants as intermediaries in the process. Design/methodology/approach – This is based upon a longitudinal, qualitative field study concerning the adoption of a customer relationship management package in an SME management consultancy. Findings – The authors illustrate how the process of “salesmanship”, an activity directed by the vendor/consultant and focussed on the interests of senior management, marginalises user needs and ultimately secures the procurement of the software package. Research limitations/implications – Despite the best intentions the authors lose something of the rich detail of the lived experience of technology in presenting the case study as a linear narrative. Specifically, the authors have been unable to do justice to the complexity of the multifarious ways in which individual perceptions of the project were influenced and shaped by the opinions of others. Practical implications – Practitioners, particularly those from within SMEs, should be made aware of the ways in which external parties may have a vested interest in steering projects in a particular direction, which may not necessarily align with their own interests. Originality/value – This study highlights in detail the role of consultants and vendors in software selection processes, an area which has received minimal attention to date. Prior work in this area emphasises the necessary conditions for, and positive outcomes of, appointing external parties in an SME context, with only limited attention being paid to the potential problems such engagements may bring.

The social shaping of packaged software selection

As organisations increasingly engage in the selection, purchase, and adoption of packaged software products, how these activities are carried out in practice becomes increasingly relevant for researchers and practitioners. Our focus in this paper is to propose a framework for understanding the packaged software selection process. The functionalist literature on this area of study suggests a number of generic recommendations, which are based on rational assumptions about the process and view the decision making that takes place as producing the “best technology solution.’” To explore this, we conducted a longitudinal, in-depth study of packaged software selection in a small organisation. For interpretation of the case, we draw upon the Social Construction of Technology, a theoretical framework arguing that technology is socially constituted and regarding the process of development as contradictory and uncertain. We offer a number of contributions. First, we further our understanding of packaged software selection with the critique that we offer of the functionalist literature, drawing insights from the emerging critical/constructivist literature and expanding our domain of interest to encompass the wider environment. Second, we weave this together with our experiences in the field, drawing on social constructivism for theoretical support, to develop a framework of packaged software selection that shows how various actors shape the process.

CRM packaged software : a study of organisational experiences

Customer Relationship Management (CRM) packaged software has become a key contributor to attempts at aligning business and IT strategies in recent years. Throughout the 1990s there was, in many organisations strategies, a shift from the need to manage transactions and toward relationship management. Where Enterprise Resource Planning packages dominated the management of transactions era, CRM packages lead in regard to relationships. At present, balanced views of CRM packages are scantly presented instead relying on vendor rhetoric. This paper uses case study research to analyse some of the issues associated with CRM packages. These issues include the limitations of CRM packages, the need for a relationship orientation and the problems of a dominant management perspective of CRM. It is suggested that these issues could be more readily accommodated by organisational detachment from beliefs in IT as utopia, consideration of prior IS theory and practice and a more informed approach to CRM package selection.

Potential pitfalls in packaged software adoption

The common reasons for those in organizations adopting large config- urable packaged software products are compelling. Problems with the existing software situation, the supposed predictability and perceived business benefits of packaged software, and various social influences, can lead to packages being preferred to custom approaches. Yet, for every reason, there is a potential associated problem that must be understood before an informed adoption decision can be made...

Achieving enterprise integration through software customization : part I-evidence from the field

Achieving business and IT integration is strategic goal for many organisations – it has almost become the ‘Holy Grail’ of organisational success. In this environment Enterprise Resource Planning (ERP) packages have become the defacto option for addressing this issue. Integration has come to mean adopting ERP, through configuration and without customization, but this all or nothing approach has proved difficult for many organisations. In part 1 of a 2 part update we provide evidence from the field that suggests that whilst costly, if managed appropriately, customization can have value in aiding organisational integration efforts. In part 2, we discuss in more detail the benefits and pitfalls involved in enacting a non-standard based integration strategy.

Achieving enterprise integration through software customization : part II-enacting the strategy

In part 1 of this update, we put forward the argument that integration in ERP based environments can be achieved in ways other than adopting a software configuration only approach. We drew on evidence from two large ERP implementations to show how, despite the cost implications, some customization, if carefully managed, could prove helpful. In this, the final part of the update, we discuss the benefits, and potential pitfalls, involved in enacting a non-standard based integration strategy. This requires attention to a) broadening the integration definition; b) bringing legacy practices forward and c) developing a customization based integration strategy.