Eliciting Security Requirements and Tracing them to Design: An Integration of Common Criteria, Heuristics, and UMLsec

Building secure systems is difficult for many reasons. This paper deals with two of the main challenges: (i) the lack of security expertise in development teams, and (ii) the inadequacy of existing methodologies to support developers who are not security experts. The security standard ISO 14508 (Common Criteria) together with secure design techniques such as UMLsec can provide the security expertise, knowledge, and guidelines that are needed. However, security expertise and guidelines are not stated explicitly in the Common Criteria. They are rather phrased in security domain terminology and difficult to understand for developers. This means that some general security and secure design expertise are required to fully take advantage of the Common Criteria and UMLsec. In addition, there is the problem of tracing security requirements and objectives into solution design,which is needed for proof of requirements fulfilment. This paper describes a security requirements engineering methodology called SecReq. SecReq combines three techniques: the Common Criteria, the heuristic requirements editorHeRA, andUMLsec. SecReqmakes systematic use of the security engineering knowledge contained in the Common Criteria and UMLsec, as well as security-related heuristics in the HeRA tool. The integrated SecReq method supports early detection of security-related issues (HeRA), their systematic refinement guided by the Common Criteria, and the ability to trace security requirements into UML design models. A feedback loop helps reusing experiencewithin SecReq and turns the approach into an iterative process for the secure system life-cycle, also in the presence of system evolution.

How do analysts deal with bad news? Going-concern opinions and analyst behaviour

Tese dout., University of Edinburg, 2008

Annual investment plan fiscal year 2014-2015

The South Carolina Retirement System Investment Commission publishes an annual plan for the investment objectives and mission of the Retirement System for the fiscal year.

Annual investment plan fiscal year 2015-2016

The South Carolina Retirement System Investment Commission publishes an annual plan for the investment objectives and mission of the Retirement System for the fiscal year.

Understanding what drives the purchase decision in pension and investment products

The aims of this paper are to first seek an understanding of consumer decision-making when purchasing pension and investment products, and second to ascertain how this decision-making affects the consumer's choice of distribution route. The study employed both focus groups and postal questionnaire survey methods based on the framework of a classical decision-making model that investigated problem recognition, information search, evaluation tools used and post-purchase. The findings show that the decision-making process experience differed to a lesser or greater degree depending on the distribution route. The majority of respondents had recognised the need to make a purchase decision long before seeking information. Younger respondents on all incomes believed that they must make some pension provision for themselves as opposed to relying on the government's retirement provision. Many changed channels for information searches, but tended to settle with the Independent Financial Adviser (IFA). The two main evaluation tools for pension and investment were found to be the ‘charges’ and ‘historic fund performance’. The vast majority of respondents reiterated their worry that the outcomes would not be known until retirement. In terms of analysis by the level of ‘financial literacy’, respondents who scored in the upper quartile were more inclined to be on a higher income, less inclined to evaluate on charges and more proactive in discussing the investment strategy of their pension fund. Respondents who scored in the lower quartile had opposite results. One of the implications of these findings is that the younger respondents’ recognition of pension savings favours the government's intention to reverse the existing balance of pension distribution. The other main implication is that the findings will be of help to managers in appreciating the dominance of the IFA channel by providing an explanation of why consumers choose this route, and, additionally, can assist direct marketing managers in identifying customers who will be more likely to use multichannel or single-channel shoppers. It can also help the marketing manager increase the usage of different channels by addressing the factors driving the purchase decision and distribution choice.

The causal relationship between private and public investment in Zimbabwe

Aims: The study examines the relationship between private and public investment in Zimbabwe utilizing yearly time series data for the period 1967 to 2004. Study Design: Time Series Study. Place and Duration of Study: Zimbabwe, May 2011 to July 2011. Methodology: Emphasis is placed on the direction of causality and the long run and short run effect of the two types of investment on each other. The paper constructs empirical models for both private and public investment, based on the flexible accelerator theory. Private investment is found to be cointegrated with public investment. A cointergration and VEC models are employed to assess the long and short run relationship existing between public and private investment. Conclusion: The relationship between private and public investment is found to be insignificant and the direction of causality found to be unidirectional. The results support the notion that private investment precedes public investment.

Public Interests, Private Disputes: Investment Arbitration and the Public Good

This paper seeks to investigate the bases for resistance to arbitration in general -and investor arbitration in particular- focusing on the way in which arbitral tribunals deal with notions of public interest and the public good. The paper hypothesises that while courts have within their terms of reference the capacity to consider notions of public interest, arbitral tribunals do not. It is this core difference in the scope of decision making between the two bodies that could render privately organised dispute resolution unsuitable for disputes that have public aspects, like investor-state disputes. The paper discusses the meaning of public interest and the public good as found in the literature. It then proceeds to consider how tribunals in the investment field have dealt with these concepts. This leads to a conclusion urging not abandonment of arbitration as a component of dispute resolution, but caution. It is argued that unchecked growth in private dispute resolution can threaten perceptions of legitimacy and democratic accountability. The paper adopts a socio-legal methodology in considering the effect of legal mechanisms on social and political phenomena. It is also informed by a law and economics methodology in addressing impacts of dispute resolution mechanisms on economic efficiency. The contribution of the paper rests on theorising motivations for resistance to private dispute resolution, a topical issue in light of the TTIP debate.

Small farmers and sustainability: institutional barriers to investment and innovation in the Malaysian palm oil industry in Sabah

The Malaysian palm oil industry is well known for the social, environmental and sustainability challenges associated with its rapid growth over the past ten years. Technologies exist to reduce the conflict between national development aims of economic uplift for the rural poor, on the one hand, and ecological conservation, on the other hand, by raising yields and incomes from areas already under cultivation. But the uptake of these technologies has been slow, particularly in the smallholder sector. In this paper we explore the societal and institutional challenges that influence the investment and innovation decisions of micro and small enterprise (MSE) palm oil smallholders in Sabah, Malaysia. Based on interviews with 38 smallholders, we identify a number of factors that reduce the smallholders' propensity to invest in more sustainable practices. We discuss why more effective practices and innovations are not being adopted using the concepts of, firstly, institutional logics to explore the internal dynamics of smallholder production systems, including attitudes to sustainability and innovation; and, secondly, institutional context to explore the pressures the smallholders face, including problems of access to land, labour, capital, knowledge and technical resources. These factors include limited access to global market information, corruption and uncertainties of legal title, weak economic status and social exclusion. In discussing these factors we seek to contribute to wider theoretical debates about the factors that block innovation and investment in business improvements in marginal regions and in marginalised groups.

Risk criteria in occupational environments: critical overview and discussion

The current work can be seen as a starting point for the discussion of the problematic on risk acceptance criteria in occupational environments. Some obstacles to the quantitative acceptance criteria formulation and use were analyzed. A look to the long tradition of major hazards accidents was also performed. This work shows that organizations can have several difficulties in acceptance criteria formulation and that the use of pre-defined acceptance criteria in risk assessment methodologies can be inadequate in some cases. It is urgent to define guidelines that can help organizations in the formulation of risk acceptance criteria for occupational environments.

Defining risk acceptance criteria in occupational settings: A case study in the furniture industrial sector

The use of appropriate acceptance criteria in the risk assessment process for occupational accidents is an important issue but often overlooked in the literature, particularly when new risk assessment methods are proposed and discussed. In most cases, there is no information on how or by whom they were defined, or even how companies can adapt them to their own circumstances. Bearing this in mind, this study analysed the problem of the definition of risk acceptance criteria for occupational settings, defining the quantitative acceptance criteria for the specific case study of the Portuguese furniture industrial sector. The key steps to be considered in formulating acceptance criteria were analysed in the literature review. By applying the identified steps, the acceptance criteria for the furniture industrial sector were then defined. The Cumulative Distribution Function (CDF) for the injury statistics of the industrial sector was identified as the maximum tolerable risk level. The acceptable threshold was defined by adjusting the CDF to the Occupational, Safety & Health (OSH) practitioners’ risk acceptance judgement. Adjustments of acceptance criteria to the companies’ safety cultures were exemplified by adjusting the Burr distribution parameters. An example of a risk matrix was also used to demonstrate the integration of the defined acceptance criteria into a risk metric. This work has provided substantial contributions to the issue of acceptance criteria for occupational accidents, which may be useful in overcoming the practical difficulties faced by authorities, companies and experts.

Forest management: different criteria – equal sustainability

From the forest management perspective, many definitions have been proposed for the concept of forest sustainability. Despite this apparent diversity, most of them converge on the same aspects. In this work we developed a comparative approach of two distinct forest management methodologies used in Europe, more precisely in Slovenia and in Portugal. Although in each case study differences in vegetation, climate and pedological characteristics are evident, we were able to show some peculiar aspects of both the Slovenian and the Portuguese examples. This study also dealt with the evolution of the term sustainability in the last decades and how it played an important role for forest management options.

A Multiple Criteria Utility-based Approa h for the Unit Commitment with Wind Power and Pumped Storage Hydro

The integration of wind power in eletricity generation brings new challenges to unit commitment due to the random nature of wind speed. For this particular optimisation problem, wind uncertainty has been handled in practice by means of conservative stochastic scenario-based optimisation models, or through additional operating reserve settings. However, generation companies may have different attitudes towards operating costs, load curtailment, or waste of wind energy, when considering the risk caused by wind power variability. Therefore, alternative and possibly more adequate approaches should be explored. This work is divided in two main parts. Firstly we survey the main formulations presented in the literature for the integration of wind power in the unit commitment problem (UCP) and present an alternative model for the wind-thermal unit commitment. We make use of the utility theory concepts to develop a multi-criteria stochastic model. The objectives considered are the minimisation of costs, load curtailment and waste of wind energy. Those are represented by individual utility functions and aggregated in a single additive utility function. This last function is adequately linearised leading to a mixed-integer linear program (MILP) model that can be tackled by general-purpose solvers in order to find the most preferred solution. In the second part we discuss the integration of pumped-storage hydro (PSH) units in the UCP with large wind penetration. Those units can provide extra flexibility by using wind energy to pump and store water in the form of potential energy that can be generated after during peak load periods. PSH units are added to the first model, yielding a MILP model with wind-hydro-thermal coordination. Results showed that the proposed methodology is able to reflect the risk profiles of decision makers for both models. By including PSH units, the results are significantly improved.