Engineering access control for distributed enterprise applications

Access control (AC) is a necessary defense against a large variety of security attacks on the resources of distributed enterprise applications. However, to be effective, AC in some application domains has to be fine-grain, support the use of application-specific factors in authorization decisions, as well as consistently and reliably enforce organization-wide authorization policies across enterprise applications. Because the existing middleware technologies do not provide a complete solution, application developers resort to embedding AC functionality in application systems. This coupling of AC functionality with application logic causes significant problems including tremendously difficult, costly and error prone development, integration, and overall ownership of application software. The way AC for application systems is engineered needs to be changed. ^ In this dissertation, we propose an architectural approach for engineering AC mechanisms to address the above problems. First, we develop a framework for implementing the role-based access control (RBAC) model using AC mechanisms provided by CORBA Security. For those application domains where the granularity of CORBA controls and the expressiveness of RBAC model suffice, our framework addresses the stated problem. ^ In the second and main part of our approach, we propose an architecture for an authorization service, RAD, to address the problem of controlling access to distributed application resources, when the granularity and support for complex policies by middleware AC mechanisms are inadequate. Applying this architecture, we developed a CORBA-based application authorization service (CAAS). Using CAAS, we studied the main properties of the architecture and showed how they can be substantiated by employing CORBA and Java technologies. Our approach enables a wide-ranging solution for controlling the resources of distributed enterprise applications. ^

Framework for enterprise systems engineering

This research aimed at developing a research framework for the emerging field of enterprise systems engineering (ESE). The framework consists of an ESE definition, an ESE classification scheme, and an ESE process. This study views an enterprise as a system that creates value for its customers. Thus, developing the framework made use of system theory and IDEF methodologies. This study defined ESE as an engineering discipline that develops and applies systems theory and engineering techniques to specification, analysis, design, and implementation of an enterprise for its life cycle. The proposed ESE classification scheme breaks down an enterprise system into four elements. They are work, resources, decision, and information. Each enterprise element is specified with four system facets: strategy, competency, capacity, and structure. Each element-facet combination is subject to the engineering process of specification, analysis, design, and implementation, to achieve its pre-specified performance with respect to cost, time, quality, and benefit to the enterprise. This framework is intended for identifying research voids in the ESE discipline. It also helps to apply engineering and systems tools to this emerging field. It harnesses the relationships among various enterprise aspects and bridges the gap between engineering and management practices in an enterprise. The proposed ESE process is generic. It consists of a hierarchy of engineering activities presented in an IDEF0 model. Each activity is defined with its input, output, constraints, and mechanisms. The output of an ESE effort can be a partial or whole enterprise system design for its physical, managerial, and/or informational layers. The proposed ESE process is applicable to a new enterprise system design or an engineering change in an existing system. The long-term goal of this study aims at development of a scientific foundation for ESE research and development.

A capability maturity model to assess supply chain performance

In an overcapacity world, where the customers can choose from many similar products to satisfy their needs, enterprises are looking for new approaches and tools that can help them not only to maintain, but also to increase their competitive edge. Innovation, flexibility, quality, and service excellence are required to, at the very least, survive the on-going transition that industry is experiencing from mass production to mass customization. In order to help these enterprises, this research develops a Supply Chain Capability Maturity Model named S(CM)2. The Supply Chain Capability Maturity Model is intended to model, analyze, and improve the supply chain management operations of an enterprise. The Supply Chain Capability Maturity Model provides a clear roadmap for enterprise improvement, covering multiple views and abstraction levels of the supply chain, and provides tools to aid the firm in making improvements. The principal research tool applied is the Delphi method, which systematically gathered the knowledge and experience of eighty eight experts in Mexico. The model is validated using a case study and interviews with experts in supply chain management. The resulting contribution is a holistic model of the supply chain integrating multiple perspectives, and providing a systematic procedure for the improvement of a company’s supply chain operations.

Hydro-physical characterization of media used in agricultural systems to develop the best management practices for operation of an environmentally sustainable agricultural enterprise

Florida is the second leading horticulture state in the United States with a total annual industry sale of over $12 Billion. Due to its competitive nature, agricultural plant production represents an extremely intensive practice with large amounts of water and fertilizer usage. Agrochemical and water management are vital for efficient functioning of any agricultural enterprise, and the subsequent nutrient loading from such agricultural practices has been a concern for environmentalists. A thorough understanding of the agrochemical and the soil amendments used in these agricultural systems is of special interest as contamination of soils can cause surface and groundwater pollution leading to ecosystem toxicity. The presence of fragile ecosystems such as the Everglades, Biscayne Bay and Big Cypress near enterprises that use such agricultural systems makes the whole issue even more imminent. Although significant research has been conducted with soils and soil mix, there is no acceptable method for determining the hydraulic properties of mixtures that have been subjected to organic and inorganic soil amendments. Hydro-physical characterization of such mixtures can facilitate the understanding of water retention and permeation characteristics of the commonly used mix which can further allow modeling of soil water interactions. The objective of this study was to characterize some of the locally and commercially available plant growth mixtures for their hydro-physical properties and develop mathematical models to correlate these acquired basic properties to the hydraulic conductivity of the mixture. The objective was also to model the response patterns of soil amendments present in those mixtures to different water and fertilizer use scenarios using the characterized hydro-physical properties with the help of Everglades-Agro-Hydrology Model. The presence of organic amendments helps the mixtures retain more water while the inorganic amendments tend to adsorb more nutrients due to their high surface area. The results of these types of characterization can provide a scientific basis for understanding the non-point source water pollution from horticulture production systems and assist in the development of the best management practices for the operation of environmentally sustainable agricultural enterprise

Framework for Enterprise Systems Engineering

This research aimed at developing a research framework for the emerging field of enterprise systems engineering (ESE). The framework consists of an ESE definition, an ESE classification scheme, and an ESE process. This study views an enterprise as a system that creates value for its customers. Thus, developing the framework made use of system theory and IDEF methodologies. This study defined ESE as an engineering discipline that develops and applies systems theory and engineering techniques to specification, analysis, design, and implementation of an enterprise for its life cycle. The proposed ESE classification scheme breaks down an enterprise system into four elements. They are work, resources, decision, and information. Each enterprise element is specified with four system facets: strategy, competency, capacity, and structure. Each element-facet combination is subject to the engineering process of specification, analysis, design, and implementation, to achieve its pre-specified performance with respect to cost, time, quality, and benefit to the enterprise. This framework is intended for identifying research voids in the ESE discipline. It also helps to apply engineering and systems tools to this emerging field. It harnesses the relationships among various enterprise aspects and bridges the gap between engineering and management practices in an enterprise. The proposed ESE process is generic. It consists of a hierarchy of engineering activities presented in an IDEF0 model. Each activity is defined with its input, output, constraints, and mechanisms. The output of an ESE effort can be a partial or whole enterprise system design for its physical, managerial, and/or informational layers. The proposed ESE process is applicable to a new enterprise system design or an engineering change in an existing system. The long-term goal of this study aims at development of a scientific foundation for ESE research and development.

Engineering access control for distributed enterprise applications

Access control (AC) is a necessary defense against a large variety of security attacks on the resources of distributed enterprise applications. However, to be effective, AC in some application domains has to be fine-grain, support the use of application-specific factors in authorization decisions, as well as consistently and reliably enforce organization-wide authorization policies across enterprise applications. Because the existing middleware technologies do not provide a complete solution, application developers resort to embedding AC functionality in application systems. This coupling of AC functionality with application logic causes significant problems including tremendously difficult, costly and error prone development, integration, and overall ownership of application software. The way AC for application systems is engineered needs to be changed. In this dissertation, we propose an architectural approach for engineering AC mechanisms to address the above problems. First, we develop a framework for implementing the role-based access control (RBAC) model using AC mechanisms provided by CORBA Security. For those application domains where the granularity of CORBA controls and the expressiveness of RBAC model suffice, our framework addresses the stated problem. In the second and main part of our approach, we propose an architecture for an authorization service, RAD, to address the problem of controlling access to distributed application resources, when the granularity and support for complex policies by middleware AC mechanisms are inadequate. Applying this architecture, we developed a CORBA-based application authorization service (CAAS). Using CAAS, we studied the main properties of the architecture and showed how they can be substantiated by employing CORBA and Java technologies. Our approach enables a wide-ranging solution for controlling the resources of distributed enterprise applications.

A Capability Maturity Model to Assess Supply Chain Performance

In an overcapacity world, where the customers can choose from many similar products to satisfy their needs, enterprises are looking for new approaches and tools that can help them not only to maintain, but also to increase their competitive edge. Innovation, flexibility, quality, and service excellence are required to, at the very least, survive the on-going transition that industry is experiencing from mass production to mass customization. In order to help these enterprises, this research develops a Supply Chain Capability Maturity Model named S(CM)2. The Supply Chain Capability Maturity Model is intended to model, analyze, and improve the supply chain management operations of an enterprise. The Supply Chain Capability Maturity Model provides a clear roadmap for enterprise improvement, covering multiple views and abstraction levels of the supply chain, and provides tools to aid the firm in making improvements. The principal research tool applied is the Delphi method, which systematically gathered the knowledge and experience of eighty eight experts in Mexico. The model is validated using a case study and interviews with experts in supply chain management. The resulting contribution is a holistic model of the supply chain integrating multiple perspectives, and providing a systematic procedure for the improvement of a company’s supply chain operations.

Hydro-Physical Characterization of Media Used in Agricultural Systems to Develop the Best Management Practices for operation of an Environmentally Sustainable Agricultural Enterprise

Florida is the second leading horticulture state in the United States with a total annual industry sale of over $12 Billion. Due to its competitive nature, agricultural plant production represents an extremely intensive practice with large amounts of water and fertilizer usage. Agrochemical and water management are vital for efficient functioning of any agricultural enterprise, and the subsequent nutrient loading from such agricultural practices has been a concern for environmentalists. A thorough understanding of the agrochemical and the soil amendments used in these agricultural systems is of special interest as contamination of soils can cause surface and groundwater pollution leading to ecosystem toxicity. The presence of fragile ecosystems such as the Everglades, Biscayne Bay and Big Cypress near enterprises that use such agricultural systems makes the whole issue even more imminent. Although significant research has been conducted with soils and soil mix, there is no acceptable method for determining the hydraulic properties of mixtures that have been subjected to organic and inorganic soil amendments. Hydro-physical characterization of such mixtures can facilitate the understanding of water retention and permeation characteristics of the commonly used mix which can further allow modeling of soil water interactions. The objective of this study was to characterize some of the locally and commercially available plant growth mixtures for their hydro-physical properties and develop mathematical models to correlate these acquired basic properties to the hydraulic conductivity of the mixture. The objective was also to model the response patterns of soil amendments present in those mixtures to different water and fertilizer use scenarios using the characterized hydro-physical properties with the help of Everglades-Agro-Hydrology Model. The presence of organic amendments helps the mixtures retain more water while the inorganic amendments tend to adsorb more nutrients due to their high surface area. The results of these types of characterization can provide a scientific basis for understanding the non-point source water pollution from horticulture production systems and assist in the development of the best management practices for the operation of environmentally sustainable agricultural enterprise