A Design Methodology for Computer Security Testing

The field of "computer security" is often considered something in between Art and Science. This is partly due to the lack of widely agreed and standardized methodologies to evaluate the degree of the security of a system. This dissertation intends to contribute to this area by investigating the most common security testing strategies applied nowadays and by proposing an enhanced methodology that may be effectively applied to different threat scenarios with the same degree of effectiveness. Security testing methodologies are the first step towards standardized security evaluation processes and understanding of how the security threats evolve over time. This dissertation analyzes some of the most used identifying differences and commonalities, useful to compare them and assess their quality. The dissertation then proposes a new enhanced methodology built by keeping the best of every analyzed methodology. The designed methodology is tested over different systems with very effective results, which is the main evidence that it could really be applied in practical cases. Most of the dissertation discusses and proves how the presented testing methodology could be applied to such different systems and even to evade security measures by inverting goals and scopes. Real cases are often hard to find in methodology' documents, in contrary this dissertation wants to show real and practical cases offering technical details about how to apply it. Electronic voting systems are the first field test considered, and Pvote and Scantegrity are the two tested electronic voting systems. The usability and effectiveness of the designed methodology for electronic voting systems is proved thanks to this field cases analysis. Furthermore reputation and anti virus engines have also be analyzed with similar results. The dissertation concludes by presenting some general guidelines to build a coordination-based approach of electronic voting systems to improve the security without decreasing the system modularity.

Science of retracted science: a citation analysis of the arts and humanities domain

In the scholarly publishing domain, a retraction is raised when a specific publication is considered erroneous by the venue in which it appeared after it was published. The aim of this work is uncovering new insights and learn new important information to help us understand the retraction phenomenon in the arts and humanities domain. Our investigation is based on a methodology defined using quantitative and qualitative measures derived from previous studies in the transdisciplinary research field of “science of science” (SciSci). The designed methodology takes into account a general case of retraction and applies a citation analysis based on five phases. Citations to retracted publications (before and after their retraction) are gathered and characterized with a set of attributes, including general metadata and information extracted from citing entities’ full text. The annotated characteristics are further considered for a statistical and a textual analysis (i.e., a topic modeling analysis). The contribution of this thesis is grounded by addressing the following research questions: (RQ1) How did scholarly research cite retracted humanities publications before and after their retraction? (RQ2) Did all the humanities areas behave similarly concerning the retraction phenomenon? (RQ3) What are the main differences and similarities in the retraction dynamics between the humanities domain and the STEM disciplines? RQ1 and RQ2 are addressed by tuning and applying the methodology on the analysis of the retracted publications in the humanities domain. RQ3 is addressed on two levels, i.e., considering and comparing: (L1) the outcomes of the past studies on the retraction in STEM, and (L2) the results obtained from an analysis of a retraction case in STEM using the defined methodology.

Collective actions for environmental monitoring and conservation: citizen science, informal environmental education, and participatory approach

This PhD was driven by an interest for inclusive and participatory approaches. The methodology that bridges science and society is known as 'citizen science' and is experiencing a huge upsurge worldwide, in the scientific and humanities fields. In this thesis, I have focused on three topics: i) assessing the reliability of data collected by volunteers; ii) evaluating the impact of environmental education activities in tourist facilities; and iii) monitoring marine biodiversity through citizen science. In addition to these topics, during my research stay abroad, I developed a questionnaire to investigate people's perceptions of natural areas to promote the implementation of co-management. The results showed that volunteers are not only able to collect sufficiently reliable data, but that during their participation in this type of project, they can also increase their knowledge of marine biology and ecology and their awareness of the impact of human behaviour on the environment. The short-term analysis has shown that volunteers are able to retain what they have learned. In the long term, knowledge is usually forgotten, but awareness is retained. Increased awareness could lead to a change in behaviour and in this case a more environmentally friendly attitude. This aspect could be of interest for the development of environmental education projects in tourism facilities to reduce the impact of tourism on the environment while adding a valuable service to the tourism offer. We also found that nature experiences in childhood are important to connect to nature in adulthood. The results also suggest that membership or volunteering in an environmental education association could be a predictor of people's interest in more participatory approaches to nature management. In most cases, the COVID -19 pandemic had not changed participants' perceptions of the natural environment.