Challenges in scaling agile software development in offshoring environment

Corporate decision to scale Agile Software development methodologies in offshoring environment has been obstructed due to possible challenges in scaling agile as agile methodologies are regarded to be suitable for small project and co-located team only. Although model such as Agile Scaling Model (ASM) has been developed for scaling Agile with different factors, inabilities of companies to figure out challenges and addressing them lead to failure of project rather than gaining the benefits of using agile methodologies. This failure can be avoided, when scaling agile in IT offshoring environment, by determining key challenges associated in scaling agile in IT offshoring environment and then preparing strategies for addressing those key challenges. These key challenges in scaling agile with IT offshoring environment can be determined by studying issues related with Offshoring and Agile individually and also considering the positive impact of agile methodology in offshoring environment. Then, possible strategies to tackle these key challenges are developed according to the nature of individual challenges and utilizing the benefits of different agile methodologies to address individual situation. Thus, in this thesis, we proposed strategy of using hybrid agile method, which is increasing trend due to adaptive nature of Agile. Determination of the key challenges and possible strategies for tackling those challenges are supported with the survey conducted in the researched organization.

Ride Comfort of Automatic Elevator Doors

Ride comfort of elevators is one of the quality criteria valued by customers. The objective of this master’s thesis was to develop a process to measure the ride comfort of automatic elevator doors. The door’s operational noise was chosen as a focus area and other kinds of noise for example caused by pressure differences in the elevator shaft were excluded. The thesis includes a theory part and an empirical part. In the first part theories of quality management, measuring of quality and acoustics are presented. In the empirical part the developed ride comfort measuring process is presented, different operational noise sources are analyzed and an example is presented of how this measuring process can be used to guide product development. To measure ride comfort a process was developed where a two-room silent room was used as a measuring environment and EVA-625 device was used in the actual measuring of door noise. A-weighted decibels were used to scale noise pressure levels and the door movement was monitored with an accelerometer. This enabled the connection between the noise and noise sources which in turn helped to find potential ride comfort improvement ideas. The noise isolation class was also measured with the Ivie-measuring system. Measuring of door ride comfort gives feedback to product development and to managing current product portfolio. Measuring enables the continuous improvement of elevator door ride comfort. The measuring results can also be used to back up marketing arguments for doors.

Tuotekehityksen suorituskyvyn tehostaminen metalliteollisuusyrityksessä

Tuotekehityksen rooli yrityksen oleellisena menestystekijänä korostuu entistä enemmän alati kovenevassa kilpailussa. Tuotekehityksen tulee toimia entistä tehokkaammin turvatakseen yrityksen menestyminen. Tämän tutkimuksen tavoitteena oli selvittää ja tuoda esiin niitä oleellisia tekijöitä, jotka vaikuttavat metalliteollisuudessa toimivan yrityksen tuotekehityksen suorituskykyyn ja sen tehostamiseen. Tutkimuksen avulla pyrittiin lisäämään informaatiota tuotekehitys- ja yritysjohdon päätöksenteon tueksi. Lisäksi tutkimus antaa tietoa tuotekehityksen suorituskyvyn mittausjärjestelmän suunnittelusta, käyttöönotosta, käytöstä sekä käytetyistä mittausjärjestelmistä ja mittareista. Tuotekehityksen suorituskykyä tarkasteltiin useammasta näkökulmasta. Empiiristä aineistoa koottiin kirjallisuuskatsauksen ja yrityksessä toteutetun kyselyn avulla. Yrityskyselyssä käytettiin neliportaista Likert-skaalaa. Kyselyn tuloksia arvioitiin keskiarvojen ja -hajontojen perusteella. Tutkimuksen tuloksena selvisi, että suorituskyvyn mittauksella ja mittausjärjestelmän avulla voidaan tehostaa tuotekehityksen suorituskykyä. Niitä tärkeitä osa-alueita, joihin tehostamistoimenpiteet tulee kohdistaa, ovat asiakas, henkilöstö, strategia, talous ja mittaamiseen liittyvät tekijät. Yrityksissä piilevänä olevan aineettoman pääoman arvoa ja sen tarjoamaa menestyspotentiaalia ei ole aina tiedostettu.

Research and development of III-V semiconductor surfaces for improved device interfaces

This thesis is devoted to understanding and improving technologically important III-V compound semiconductor (e.g. GaAs, InAs, and InSb) surfaces and interfaces for devices. The surfaces and interfaces of crystalline III-V materials have a crucial role in the operation of field-effect-transistors (FET) and highefficiency solar-cells, for instance. However, the surfaces are also the most defective part of the semiconductor material and it is essential to decrease the amount of harmful surface or interface defects for the next-generation III-V semiconductor device applications. Any improvement in the crystal ordering at the semiconductor surface reduces the amount of defects and increases the material homogeneity. This is becoming more and more important when the semiconductor device structures decrease to atomic-scale dimensions. Toward that target, the effects of different adsorbates (i.e., Sn, In, and O) on the III-V surface structures and properties have been investigated in this work. Furthermore, novel thin-films have been synthesized, which show beneficial properties regarding the passivation of the reactive III-V surfaces. The work comprises ultra-high-vacuum (UHV) environment for the controlled fabrication of atomically ordered III-V(100) surfaces. The surface sensitive experimental methods [low energy electron diffraction (LEED), scanning tunneling microscopy/spectroscopy (STM/STS), and synchrotron radiation photoelectron spectroscopy (SRPES)] and computational density-functionaltheory (DFT) calculations are utilized for elucidating the atomic and electronic properties of the crucial III-V surfaces. The basic research results are also transferred to actual device tests by fabricating metal-oxide-semiconductor capacitors and utilizing the interface sensitive measurement techniques [capacitance voltage (CV) profiling, and photoluminescence (PL) spectroscopy] for the characterization. This part of the thesis includes the instrumentation of home-made UHV-compatible atomic-layer-deposition (ALD) reactor for growing good quality insulator layers. The results of this thesis elucidate the atomic structures of technologically promising Sn- and In-stabilized III-V compound semiconductor surfaces. It is shown that the Sn adsorbate induces an atomic structure with (1×2)/(1×4) surface symmetry which is characterized by Sn-group III dimers. Furthermore, the stability of peculiar ζa structure is demonstrated for the GaAs(100)-In surface. The beneficial effects of these surface structures regarding the crucial III-V oxide interface are demonstrated. Namely, it is found that it is possible to passivate the III-V surface by a careful atomic-scale engineering of the III-V surface prior to the gate-dielectric deposition. The thin (1×2)/(1×4)-Sn layer is found to catalyze the removal of harmful amorphous III-V oxides. Also, novel crystalline III-V-oxide structures are synthesized and it is shown that these structures improve the device characteristics. The finding of crystalline oxide structures is exploited by solving the atomic structure of InSb(100)(1×2) and elucidating the electronic structure of oxidized InSb(100) for the first time.

Development of a process for the direct synthesis of hydrogen peroxide in a novel microstructured reactor

Microreactors have proven to be versatile tools for process intensification. Over recent decades, they have increasingly been used for product and process development in chemical industries. Enhanced heat and mass transfer in the reactors due to the extremely high surfacearea- to-volume ratio and interfacial area allow chemical processes to be operated at extreme conditions. Safety is improved by the small holdup volume of the reactors and effective control of pressure and temperature. Hydrogen peroxide is a powerful green oxidant that is used in a wide range of industries. Reduction and auto-oxidation of anthraquinones is currently the main process for hydrogen peroxide production. Direct synthesis is a green alternative and has potential for on-site production. However, there are two limitations: safety concerns because of the explosive gas mixture produced and low selectivity of the process. The aim of this thesis was to develop a process for direct synthesis of hydrogen peroxide utilizing microreactor technology. Experimental and numerical approaches were applied for development of the microreactor. Development of a novel microreactor was commenced by studying the hydrodynamics and mass transfer in prototype microreactor plates. The prototypes were designed and fabricated with the assistance of CFD modeling to optimize the shape and size of the microstructure. Empirical correlations for the mass transfer coefficient were derived. The pressure drop in micro T-mixers was investigated experimentally and numerically. Correlations describing the friction factor for different flow regimes were developed and predicted values were in good agreement with experimental results. Experimental studies were conducted to develop a highly active and selective catalyst with a proper form for the microreactor. Pd catalysts supported on activated carbon cloths were prepared by different treatments during the catalyst preparation. A variety of characterization methods were used for catalyst investigation. The surface chemistry of the support and the oxidation state of the metallic phase in the catalyst play important roles in catalyst activity and selectivity for the direct synthesis. The direct synthesis of hydrogen peroxide was investigated in a bench-scale continuous process using the novel microreactor developed. The microreactor was fabricated based on the hydrodynamic and mass transfer studies and provided a high interfacial area and high mass transfer coefficient. The catalysts were prepared under optimum treatment conditions. The direct synthesis was conducted at various conditions. The thesis represents a step towards a commercially viable direct synthesis. The focus is on the two main challenges: mitigating the safety problem by utilization of microprocess technology and improving the selectivity by catalyst development.

Conceptualizing and measuring human anxiety on the Internet

Since the 1990’s, the Internet has played a central role in our daily lives. The Internet is an integral part of our personal, business, family, research, entertainment, academic and social life. However, there are social implications in using the Internet that are dependent on categories such as gender, age, ethnicity and cultural attributes. This social aspect can play a detrimental role in the expression of human anxiety on the Internet. An anxiety is a complex phenomenon that requires further elaboration. Thus, the aim of this thesis is to investigate human anxiety, or specifically, whether Internet anxiety can be conceptualized and measured. This thesis utilizes literature, qualitative and quantitative research methodologies, and a triangulation validation approach to conceptualize and measure the Internet anxiety phenomenon. In particular, the aim is to explore anxiety levels of Internet participants to develop and validate an Internet anxiety scale based on earlier research on Internet anxiety. The results of the dissertation present a two phase study. In Phase I, a smaller set of studies were conducted with a limited sample size. In Phase II, the research topic was investigated using 385 participants. Based on a number of studies or experiments, the state-of-the-art discovered in this thesis is creation, design, and validation of two scales, the Self-Assessment Scale (SAS) and a Modified Internet Anxiety Scale (MIAS) for measuring users’ anxieties on the Internet. The result of this dissertation is a conceptualization and measurement of various types of Internet anxiety and measurement of affective feelings of users on the Internet. As a proof-of-concept of measuring Internet anxiety, this thesis describes the author’s implementation of three sets of tools: MyAnxiety, introducing Internet anxieties types; Intelligentia, for collecting Internet anxieties types; and MyIAControl tool, implemented as a browser plug-in, for measuring affective feelings of users on the Internet. Conclusions drawn from the results show that these empirically validated scales and tools might be useful for researchers and practitioners in understanding and measuring the Internet anxiety phenomenon further.

Decentralized management of organic household wastes in the Kathmandu Valley using small-scale composting reactors

The sustainable management of municipal solid waste in the Kathmandu Valley has always been a challenging task. Solid waste generation has gone rapidly high in the Kathmandu Valley over the last decade due to booming population and rapid urbaniza-tion. Finding appropriate landfill sites for the disposal of solid wastes generated from the households of the Kathmandu Valley has always been a major problem for Nepalese government. 65 % of total generated wastes from the households of Nepal consist of organic materials. As large fractions of generated household wastes are organic in na-ture, composting can be considered as one of the best sustainable ways to recycle organ-ic wastes generated from the households of Nepal. Model Community Society Development (MCDS), a non-governmental organization of Nepal carried out its small-scale project in five households of the Kathmandu Valley by installing composting reactors. This thesis is based on this small-scale project and has used secondary data provided by MCDS Nepal for carrying out the study. Proper man-agement of organic wastes can be done at household levels through the use of compost-ing reactors. The end product compost can be used as soil conditioners for agricultural purposes such as organic farming, roof-top farming and gardening. The overall average organic waste generation in the Kathmandu Valley is found to be 0,23 kg/person/day and the total amount of organic household wastes generated in the Kathmandu Valley is around 210 Gg/yr. Produced composts from five composting reac-tors contain high amount of moistures but have sufficient amount of nutrients required for the fertility of land and plant growth. Installation of five composting reactors in five households have prevented 2,74 Mg of organic wastes going into the landfills, thus re-ducing 107 kg of methane emissions which is equivalent to 2,7 Mg of carbondioxide.

Quality of radiotherapy care by development of e-feedback knowledge

The aim of this three phase study was to develop quality of radiotherapy care by the e-Feedback knowledge of radiotherapy -intervention (e-Re-Know). In Phase I, the purpose was to describe the quality of radiotherapy care and its deficits experienced by cancer patients. Based on the deficits in patient education in Phase II, the purpose was to describe cancer patients’ e-knowledge expectations in radiotherapy. In Phase III, the purpose was to develop and evaluate the outcomes of the e-Re-Know among breast cancer patients. The ultimate aim was to develop radiotherapy care to support patients’ empowerment with patient e-education. In Phase I (2004-2005), the descriptive design was used, and 134 radiotherapy patients evaluated their experiences by Good Nursing Care Scale for Patients (GNCS-P) in the middle of RT period. In Phase II (2006-2008), the descriptive longitudinal design was used and 100 radiotherapy patients’ e-knowledge expectations of RT were evaluated using open-ended questionnaire developed for this study before commencing first RT, in the middle of the treatment, and concluding RT period. In Phase III, firstly (2009-2010), the e-Re-Know intervention, i.e. knowledge test and feedback, was developed in terms of empowering knowledge and implemented with e-feedback approach based on literature and expert reviews. Secondly (2011-2014), the randomized controlled study was used to evaluate the e-Re-Know. Breast cancer patients randomized to either the intervention group (n=65) receiving the e-Re-Know by e-mail before commencing first RT and standard education or the control group (n=63) receiving standard education. The data were collected before commencing first RT, concluding last RT and 3 months after last RT using RT Knowledge Test, Spielberger’s State Trait Inventory (STAI) and Functional Assessment of Cancer Therapy - Breast (FACT-B) –instruments. Data were analyzed using statistical methods and content analysis. The study showed radiotherapy patients experienced quality of care high. However, there were deficits in patient education. Furthermore, radiotherapy patients’ multidimensional e-knowledge expectations through Internet covered mainly bio-physiological and functional knowledge. Thus, the e-Re-Know was developed and evaluated. The study showed when breast cancer patients’ carried out the e-Re-Know their knowledge of side effects self-care was significantly increased and quality of life (QOL) significantly improved in line with decrease in anxiety from time before radiotherapy period to three months after. In addition, the e-Re-Know has potential to have positive effects on anxiety and QOL, regardless of patient characteristics or knowledge level. The results support the theory of empowering patient education suggesting that empowerment can be supported by confirming patients’ understanding of own knowledge level. In summary, the e-Feedback knowledge of radiotherapy (e-Re-Know) intervention can be recommended in development of quality of radiotherapy care experienced by breast cancer patients. Further research is needed to assess and develop patient-centred quality of care by patient education among cancer patients.

Spontaneous Focusing on Numerosity in the Development of Early Mathematical Skills

The aim of the present set of longitudinal studies was to explore 3-7-year-old children.s Spontaneous FOcusing on Numerosity (SFON) and its relation to early mathematical development. The specific goals were to capture in method and theory the distinct process by which children focus on numerosity as a part of their activities involving exact number recognition, and individual differences in this process that may be informative in the development of more complex number skills. Over the course of conducting the five studies, fifteen novel tasks were progressively developed for the SFON assessments. In the tasks, confounding effects of insufficient number recognition, verbal comprehension, other procedural skills as well as working memory capacity were aimed to be controlled. Furthermore, how children.s individual differences in SFON are related to their development of number sequence, subitizing-based enumeration, object counting and basic arithmetic skills was explored. The effect of social interaction on SFON was tested. Study I captured the first phase of the 3-year longitudinal study with 39 children. It was investigated whether there were differences in 3-year-old children.s tendency to focus on numerosity, and whether these differences were related to the children.s development of cardinality recognition skills from the age of 3 to 4 years. It was found that the two groups of children formed on the basis of their amount of SFON tendency at the age of 3 years differed in their development of recognising and producing small numbers. The children whose SFON tendency was very predominant developed faster in cardinality related skills from the age of 3 to 4 years than the children whose SFON tendency was not as predominant. Thus, children.s development in cardinality recognition skills is related to their SFON tendency. Studies II and III were conducted to investigate, firstly, children.s individual differences in SFON, and, secondly, whether children.s SFON is related to their counting development. Altogether nine tasks were designed for the assessments of spontaneous and guided focusing on numerosity. The longitudinal data of 39 children in Study II from the age of 3.5 to 6 years showed individual differences in SFON at the ages of 4, 5 and 6 years, as well as stability in children.s SFON across tasks used at different ages. The counting skills were assessed at the ages of 3.5, 5 and 6 years. Path analyses indicated a reciprocal tendency in the relationship between SFON and counting development. In Study III, these results on the individual differences in SFON tendency, the stability of SFON across different tasks and the relationship of SFON and mathematical skills were confirmed by a larger-scale cross-sectional study of 183 on average 6.5-year-old children (range 6;0-7;0 years). The significant amount of unique variance that SFON accounted for number sequence elaboration, object counting and basic arithmetic skills stayed statistically significant (partial correlations varying from .27 to .37) when the effects of non-verbal IQ and verbal comprehension were controlled. In addition, to confirm that the SFON tasks assess SFON tendency independently from enumeration skills, guided focusing tasks were used for children who had failed in SFON tasks. It was explored whether these children were able to proceed in similar tasks to SFON tasks once they were guided to focus on number. The results showed that these children.s poor performance in the SFON tasks was not caused by their deficiency in executing the tasks but on lacking focusing on numerosity. The longitudinal Study IV of 39 children aimed at increasing the knowledge of associations between children.s long-term SFON tendency, subitizing-based enumeration and verbal counting skills. Children were tested twice at the age of 4-5 years on their SFON, and once at the age of 5 on their subitizing-based enumeration, number sequence production, as well as on their skills for counting of objects. Results showed considerable stability in SFON tendency measured at different ages, and that there is a positive direct association between SFON and number sequence production. The association between SFON and object counting skills was significantly mediated by subitizing-based enumeration. These results indicate that the associations between the child.s SFON and sub-skills of verbal counting may differ on the basis of how significant a role understanding the cardinal meanings of number words plays in learning these skills. The specific goal of Study V was to investigate whether it is possible to enhance 3-year old children.s SFON tendency, and thus start children.s deliberate practice in early mathematical skills. Participants were 3-year-old children in Finnish day care. The SFON scores and cardinality-related skills of the experimental group of 17 children were compared to the corresponding results of the 17 children in the control group. The results show an experimental effect on SFON tendency and subsequent development in cardinality-related skills during the 6-month period from pretest to delayed posttest in the children with some initial SFON tendency in the experimental group. Social interaction has an effect on children.s SFON tendency. The results of the five studies assert that within a child.s existing mathematical competence, it is possible to distinguish a separate process, which refers to the child.s tendency to spontaneously focus on numerosity. Moreover, there are significant individual differences in children.s SFON at the age of 3-7 years. Moderate stability was found in this tendency across different tasks assessed both at the same and at different ages. Furthermore, SFON tendency is related to the development of early mathematical skills. Educational implications of the findings emphasise, first, the importance of regarding focusing on numerosity as a separate, essential process in the assessments of young children.s mathematical skills. Second, the substantial individual differences in SFON tendency during the childhood years suggest that uncovering and modeling this kind of mathematically meaningful perceiving of the surroundings and tasks could be an efficient tool for promoting young children.s mathematical development, and thus prevent later failures in learning mathematical skills. It is proposed to consider focusing on numerosity as one potential sub-process of activities involving exact number recognition in future studies.

Roll-to-roll atomic layer deposition process for flexible electronics applications

Atomic Layer Deposition (ALD) is the technology of choice where very thin and highquality films are required. Its advantage is its ability to deposit dense and pinhole-free coatings in a controllable manner. It has already shown promising results in a range of applications, e.g. diffusion barrier coatings for OLED displays, surface passivation layers for solar panels. Spatial Atomic Layer Deposition (SALD) is a concept that allows a dramatic increase in ALD throughput. During the SALD process, the substrate moves between spatially separated zones filled with the respective precursor gases and reagents in such a manner that the exposure sequence replicates the conventional ALD cycle. The present work describes the development of a high-throughput ALD process. Preliminary process studies were made using an SALD reactor designed especially for this purpose. The basic properties of the ALD process were demonstrated using the wellstudied Al2O3 trimethyl aluminium (TMA)+H2O process. It was shown that the SALD reactor is able to deposit uniform films in true ALD mode. The ALD nature of the process was proven by demonstrating self-limiting behaviour and linear film growth. The process behaviour and properties of synthesized films were in good agreement with previous ALD studies. Issues related to anomalous deposition at low temperatures were addressed as well. The quality of the coatings was demonstrated by applying 20 nm of the Al2O3 on to polymer substrate and measuring its moisture barrier properties. The results of tests confirmed the superior properties of the coatings and their suitability for flexible electronics encapsulation. Successful results led to the development of a pilot scale roll-to-roll coating system. It was demonstrated that the system is able to deposit superior quality films with a water transmission rate of 5x10-6 g/m2day at a web speed of 0.25 m/min. That is equivalent to a production rate of 180 m2/day and can be potentially increased by using wider webs. State-of-art film quality, high production rates and repeatable results make SALD the technology of choice for manufacturing ultra-high barrier coatings for flexible electronics.

Development and characterization of thin printed films for gas sensing applications

The monitoring and control of hydrogen sulfide (H2S) level is of great interest for a wide range of application areas including food quality control, defense and antiterrorist applications and air quality monitoring e.g. in mines. H2S is a very poisonous and flammable gas. Exposure to low concentrations of H2S can result in eye irritation, a sore throat and cough, shortness of breath, and fluid retention in the lungs. These symptoms usually disappear in a few weeks. Long-term, low-level exposure may result in fatigue, loss of appetite, headache, irritability, poor memory, and dizziness. Higher concentrations of 700 - 800 ppm tend to be fatal. H2S has a characteristic smell of rotten egg. However, because of temporary paralysis of olfactory nerves, the smelling capability at concentrations higher than 100 ppm is severely compromised. In addition, volatile H2S is one of the main products during the spoilage of poultry meat in anaerobic conditions. Currently, no commercial H2S sensor is available which can operate under anaerobic conditions and can be easily integrated in the food packaging. This thesis presents a step-wise progress in the development of printed H2S gas sensors. Efforts were made in the formulation, characterization and optimization of functional printable inks and coating pastes based on composites of a polymer and a metal salt as well as a composite of a metal salt and an organic acid. Different processing techniques including inkjet printing, flexographic printing, screen printing and spray coating were utilized in the fabrication of H2S sensors. The dispersions were characterized by measuring turbidity, surface tension, viscosity and particle size. The sensing films were characterized using X-ray photoelectron spectroscopy, X-ray diffraction, atomic force microscopy and an electrical multimeter. Thin and thick printed or coated films were developed for gas sensing applications with the aim of monitoring the H2S concentrations in real life applications. Initially, a H2S gas sensor based on a composite of polyaniline and metal salt was developed. Both aqueous and solvent-based dispersions were developed and characterized. These dispersions were then utilized in the fabrication of roll-to-roll printed H2S gas sensors. However, the humidity background, long term instability and comparatively lower detection limit made these sensors less favourable for real practical applications. To overcome these problems, copper acetate based sensors were developed for H2S gas sensing. Stable inks with excellent printability were developed by tuning the surface tension, viscosity and particle size. This enabled the formation of inkjet-printed high quality copper acetate films with excellent sensitivity towards H2S. Furthermore, these sensors showed negligible humidity effects and improved selectivity, response time, lower limit of detection and coefficient of variation. The lower limit of detection of copper acetate based sensors was further improved to sub-ppm level by incorporation of catalytic gold nano-particles and subsequent plasma treatment of the sensing film. These sensors were further integrated in an inexpensive wirelessly readable RLC-circuit (where R is resistor, L is inductor and C is capacitor). The performance of these sensors towards biogenic H2S produced during the spoilage of poultry meat in the modified atmosphere package was also demonstrated in this thesis. This serves as a proof of concept that these sensors can be utilized in real life applications.

Development of Project Logistics in Engineering, Procurement and Construction Projects

The aim of this Master’s Thesis is to develop project logistics functions in large scale en-gineering, procurement and construction projects. The background of the research topic is compounded from two separate subjects; OPAL Program and case study of an actual EPC project. The purpose is to examine Project Logistics process in accordance with OPAL Program as well as logistics process in focus EPC project. Both entities are researched by using the case study research methodology. Logistics process of the focus EPC project is described as well as presented and in addi-tion, logistics related findings and observations are introduced. Significant findings and observations are found from logistics costs as well as shipment volume estimations in the early phase of the focus ECP project. A notable finding is also that because goods were transported as readily assembled as possible it caused expensive oversized cargo deliveries. From findings and observation of the focus EPC project it can be derived that logistics has to be involved in the early sales phase in order to receive more accurate logistics cost esti-mations for project deliveries. It is also noticed that in order to obtain savings in logistics costs, oversized deliveries must be avoided.

Measuring software security from the design of software

The vast majority of our contemporary society owns a mobile phone, which has resulted in a dramatic rise in the amount of networked computers in recent years. Security issues in the computers have followed the same trend and nearly everyone is now affected by such issues. How could the situation be improved? For software engineers, an obvious answer is to build computer software with security in mind. A problem with building software with security is how to define secure software or how to measure security. This thesis divides the problem into three research questions. First, how can we measure the security of software? Second, what types of tools are available for measuring security? And finally, what do these tools reveal about the security of software? Measuring tools of these kind are commonly called metrics. This thesis is focused on the perspective of software engineers in the software design phase. Focus on the design phase means that code level semantics or programming language specifics are not discussed in this work. Organizational policy, management issues or software development process are also out of the scope. The first two research problems were studied using a literature review while the third was studied using a case study research. The target of the case study was a Java based email server called Apache James, which had details from its changelog and security issues available and the source code was accessible. The research revealed that there is a consensus in the terminology on software security. Security verification activities are commonly divided into evaluation and assurance. The focus of this work was in assurance, which means to verify one’s own work. There are 34 metrics available for security measurements, of which five are evaluation metrics and 29 are assurance metrics. We found, however, that the general quality of these metrics was not good. Only three metrics in the design category passed the inspection criteria and could be used in the case study. The metrics claim to give quantitative information on the security of the software, but in practice they were limited to evaluating different versions of the same software. Apart from being relative, the metrics were unable to detect security issues or point out problems in the design. Furthermore, interpreting the metrics’ results was difficult. In conclusion, the general state of the software security metrics leaves a lot to be desired. The metrics studied had both theoretical and practical issues, and are not suitable for daily engineering workflows. The metrics studied provided a basis for further research, since they pointed out areas where the security metrics were necessary to improve whether verification of security from the design was desired.