Measuring software security from the design of software

The vast majority of our contemporary society owns a mobile phone, which has resulted in a dramatic rise in the amount of networked computers in recent years. Security issues in the computers have followed the same trend and nearly everyone is now affected by such issues. How could the situation be improved? For software engineers, an obvious answer is to build computer software with security in mind. A problem with building software with security is how to define secure software or how to measure security. This thesis divides the problem into three research questions. First, how can we measure the security of software? Second, what types of tools are available for measuring security? And finally, what do these tools reveal about the security of software? Measuring tools of these kind are commonly called metrics. This thesis is focused on the perspective of software engineers in the software design phase. Focus on the design phase means that code level semantics or programming language specifics are not discussed in this work. Organizational policy, management issues or software development process are also out of the scope. The first two research problems were studied using a literature review while the third was studied using a case study research. The target of the case study was a Java based email server called Apache James, which had details from its changelog and security issues available and the source code was accessible. The research revealed that there is a consensus in the terminology on software security. Security verification activities are commonly divided into evaluation and assurance. The focus of this work was in assurance, which means to verify one’s own work. There are 34 metrics available for security measurements, of which five are evaluation metrics and 29 are assurance metrics. We found, however, that the general quality of these metrics was not good. Only three metrics in the design category passed the inspection criteria and could be used in the case study. The metrics claim to give quantitative information on the security of the software, but in practice they were limited to evaluating different versions of the same software. Apart from being relative, the metrics were unable to detect security issues or point out problems in the design. Furthermore, interpreting the metrics’ results was difficult. In conclusion, the general state of the software security metrics leaves a lot to be desired. The metrics studied had both theoretical and practical issues, and are not suitable for daily engineering workflows. The metrics studied provided a basis for further research, since they pointed out areas where the security metrics were necessary to improve whether verification of security from the design was desired.

Measuring Shared Value: How to Unlock Value by Linking Social and Business Results

Competitividad y valor compartido

Breeding parameters of great cormorants (Phalacrocorax carbo carbo) at mixed species colonies on Prince Edward Island, Canada

Breeding parameters of Great Cormorants (PkaZac/iOCOfiCLX CCUibo dCUtbo) and Double-crested Cormorants (P. CLU/uXuA CMJhLtllb) were examined at two mixed species colonies at Cape Tryon and Durell Point, Prince Edward Island from 1976 to 1978. Differential access to nests at the two colony sites resulted in more complete demographic data for P. CCUibo than for P. CLUJiituA. In 1911j P. CCtfibo was present at both colonies by 21 March, whereas P. auAAJtuA did not return until 1 April and 16 April at Cape Tryon and Durell Point, respectively. Differences in the arrival chronology by individuals of each species and differences in the time of nest site occupation according to age, are suggested as factors influencing the nest site distribution of P. CXUtbo and P. aiVtituA at Cape Tryon. Forty-eight P. dOJtbo chicks banded at the Durell Point colony between 19 74 and 19 76 returned there to nest as two- to four-year olds in 19 77 and 19 78. Unmarked individuals with clutch-starts in April were likely greater than four years old as all marked two to four-year olds (with one possible exception) in 19 77 and 1978 had clutch-starts in May and June. Seasonal variation in the breeding success of P. dOJibo individuals was examined at Durell Point in 1977. Mean clutch-size, hatching success and fledging success exhibited a seasonal decline. Four- and 5-egg clutches represented the majority (75%) of all P. CCUibo clutches at Durell Point in 1977 and had the highest reproductive success (0.48 and 0.43 chicks fledged per egg laid respectively). Smaller clutches produced small broods with significantly higher chick mortality while larger clutches suffered high egg loss prior to clutch completion.

Measuring curriculum integration in the junior grades: the design of an instrument

This study \Alas initiated in response to the Junior Division Review (1985) publ ished by the Ministry of Education for the Province of Ontario. Curriculum integration is an element used within the educational paradigm designed by the Ontario Ministry of Education. It is a term frequent1y verbal ized b>' educators in this province, but because of 1 imi ted resource support regarding this methodology, it was open to broad interpretation resulting in an extreme v ar i at i on i nit simp 1 eme n tat i on • I n de ed, the Min i s try intimated that it was not occurring to any significant degree across the province. The objective of this thes is was· to define integration in the junior classroom and de-:.ign a meas.ur·ement in-:.tr-ument which would in turn high 1 i gh t indicators of curriculum integration. The :.tudy made a prel iminary, field-based survey of educa tiona 1 professionals in order to generate a relevant description of integrated curr-iculum programm i ng as def i ned in the j un i or classroom. The description was a compilation of views expressed by a random selection of teachers, consultants, supervisory officers and principals. The survey revea 1 ed a much more comprehens i ve vi et·<,l of the attributes of integrated programming than tradition would dictate and resulted in a functional definition tha t was broader than past prac t ices. Based on the information generated by this survey, an instrument ou t 1 in i ng program cr iter i a of was devised. an integrated junior cla~·sroom Th i s measuremen t i nstrumen t , designed for all levels of educators, was named uThe Han~.son I nstrumen t for the Measuremen t of Program Integrat ion in the Jun i or Cl assroom". It refl ected five categories intrinsic to the me thodol ogy of integration: Teacher Behaviour, Student Behaviour, Classroom Layout, Cl as~·r oom Environment and Progr amm i ng. Each category and the items therein were successfully tested in val idi ty and rel iabi 1 i ty checKs. Interestingly, the individual class was found to be the major variable programming in in the measuremen t the j un i or d i vis i on • of The integrated instrument demonstrated potential not onl)' a~· an initial measure of the degree of integrated curriculum, but as a guide to strategies to implement such a methodology.

Simultaneous extraction of order parameters and orientational distribution fuctions from 31[superscript]P NMR spectra of magnetically partially oriented phospholipid bilayers

Order parameter profiles extracted from the NMR spectra of model membranes are a valuable source of information about their structure and molecular motions. To al1alyze powder spectra the de-Pake-ing (numerical deconvolution) ~echnique can be used, but it assumes a random (spherical) dist.ribution of orientations in the sample. Multilamellar vesicles are known to deform and orient in the strong magnetic fields of NMR magnets, producing non-spherical orientation distributions. A recently developed technique for simultaneously extracting the anisotropies of the system as well as the orientation distributions is applied to the analysis of partially magnetically oriented 31p NMR spectra of phospholipids. A mixture of synthetic lipids, POPE and POPG, is analyzed to measure distortion of multilamellar vesicles in a magnetic field. In the analysis three models describing the shape of the distorted vesicles are examined. Ellipsoids of rotation with a semiaxis ratio of about 1.14 are found to provide a good approximation of the shape of the distorted vesicles. This is in reasonable agreement with published experimental work. All three models yield clearly non-spherical orientational distributions, as well as a precise measure of the anisotropy of the chemical shift. Noise in the experimental data prevented the analysis from concluding which of the three models is the best approximation. A discretization scheme for finding stability in the algorithm is outlined

Investigating the potential of thecamoebians (testate amoebae) as bio-indicators of impact of oil sands mining operations on freshwater environments in Northeastern Alberta, Canada

Thecamoebian (testate amoeba) species diversity and assemblages in reclamation wetlands and lakes in northeastern Alberta respond to chemical and physical parameters associated with oil sands extraction. Ecosystems more impacted by OSPM (oil sands process-affected material) contain sparse, low-diversity populations dominated by centropyxid taxa and Arcella vulgaris. More abundant and diverse thecamoebian populations rich in difflugiid species characterize environments with lower OSPM concentrations. These shelled protists respond quickly to environmental change, allowing year-to-year variations in OSPM impact to be recorded. Their fossil record thus provides corporations with interests in the Athabasca Oil Sands with a potential means of measuring the progression of highlyimpacted aquatic environments to more natural wetlands. Development of this metric required investigation of controls on their fossil assemblage (e.g. seasonal variability, fossilization potential) and their biogeographic distribution, not only in the constructed lakes and wetlands on the oil sands leases, but also in natural environments across Alberta.

Enabling and Measuring Complexity in Evolving Designs using Generative Representations for Artificial Architecture

As the complexity of evolutionary design problems grow, so too must the quality of solutions scale to that complexity. In this research, we develop a genetic programming system with individuals encoded as tree-based generative representations to address scalability. This system is capable of multi-objective evaluation using a ranked sum scoring strategy. We examine Hornby's features and measures of modularity, reuse and hierarchy in evolutionary design problems. Experiments are carried out, using the system to generate three-dimensional forms, and analyses of feature characteristics such as modularity, reuse and hierarchy were performed. This work expands on that of Hornby's, by examining a new and more difficult problem domain. The results from these experiments show that individuals encoded with those three features performed best overall. It is also seen, that the measures of complexity conform to the results of Hornby. Moving forward with only this best performing encoding, the system was applied to the generation of three-dimensional external building architecture. One objective considered was passive solar performance, in which the system was challenged with generating forms that optimize exposure to the Sun. The results from these and other experiments satisfied the requirements. The system was shown to scale well to the architectural problems studied.

Metaphorical Interpretation: Measuring and Facilitating Growth.

Abstract A total of 378 grade 9 students participated in this study to address the problem that although metaphorical literacy and thought are expected and necessary for success in junior and senior high school and beyond, metaphorical concepts and thought are not required to be explicitly taught to these students. The students were from 20 different classes from 4 levels: English language learners (ELL), school to work (SSTW), applied, and academic. All were from 7 secondary schools within a board in southern Ontario. Nine classes made up the control group and 11 classes made up the treatment group. All classes were given 3 pretests and the posttest. The treatment group was given Socratic lessons and direct instruction on metaphorical thought and expressions during 1 semester and in conjunction with their other classroom material. The pretest scores (TOLD, Peabody, preproverbs concrete, and preproverbs abstract) did not reveal any effect of gender, but the academic students had higher scores than the applied students. The SSTW student results are more variable: (a) for the TOLD test, SSTW scores were between those of the academic and applied students; (b) for Peabody scores, SSTW students’ scores are the same as academic and are greater than applied; (c) for preproverbs concrete and preproverbs abstract, the SSTW scores are not different from the applied scores. The postproverbs concrete and postproverbs abstract scores for the treatment groups also showed no effect of gender but revealed that all students who received the treatment did better on their post scores. The positive changes of the treatment group illustrate a measured movement from literal understanding to abstract understanding using direct Socratic instruction and proverbs as a medium.

Printed Blank by which John Brown Cullen solemnly declares that he is experienced in the art of measuring and culling timber

Printed blank by which John Brown Cullen solemnly declares that he is experienced in the art of measuring and culling timber. He states that he is entering into the service of Burton and Bro. of Barrie He will make out the specification of the timber in berths 192 and 198 and submit his findings to Burton and Brother, Oct. 22, 1877.

Map measuring 28 cm. x 24 cm. showing the Walter H. Dickson land

Map measuring 28 cm. x 24 cm. showing the Walter H. Dickson land along the road from Blenheim, n.d.

Asymmetric Smiles, Leverage Effects and Structural Parameters.

In this paper, we characterize the asymmetries of the smile through multiple leverage effects in a stochastic dynamic asset pricing framework. The dependence between price movements and future volatility is introduced through a set of latent state variables. These latent variables can capture not only the volatility risk and the interest rate risk which potentially affect option prices, but also any kind of correlation risk and jump risk. The standard financial leverage effect is produced by a cross-correlation effect between the state variables which enter into the stochastic volatility process of the stock price and the stock price process itself. However, we provide a more general framework where asymmetric implied volatility curves result from any source of instantaneous correlation between the state variables and either the return on the stock or the stochastic discount factor. In order to draw the shapes of the implied volatility curves generated by a model with latent variables, we specify an equilibrium-based stochastic discount factor with time non-separable preferences. When we calibrate this model to empirically reasonable values of the parameters, we are able to reproduce the various types of implied volatility curves inferred from option market data.

Statistical Inference for Computable General Equilibrium Models with Application to a Model of the Moroccan Economy

We study the problem of measuring the uncertainty of CGE (or RBC)-type model simulations associated with parameter uncertainty. We describe two approaches for building confidence sets on model endogenous variables. The first one uses a standard Wald-type statistic. The second approach assumes that a confidence set (sampling or Bayesian) is available for the free parameters, from which confidence sets are derived by a projection technique. The latter has two advantages: first, confidence set validity is not affected by model nonlinearities; second, we can easily build simultaneous confidence intervals for an unlimited number of variables. We study conditions under which these confidence sets take the form of intervals and show they can be implemented using standard methods for solving CGE models. We present an application to a CGE model of the Moroccan economy to study the effects of policy-induced increases of transfers from Moroccan expatriates.

Confidence Regions for Calibrated Parameters in Computable General Equilibrium Models

We consider the problem of accessing the uncertainty of calibrated parameters in computable general equilibrium (CGE) models through the construction of confidence sets (or intervals) for these parameters. We study two different setups under which this can be done.

Monte Carlo Tests with Nuisance Parameters: A General Approach to Finite-Sample Inference and Nonstandard Asymptotics

The technique of Monte Carlo (MC) tests [Dwass (1957), Barnard (1963)] provides an attractive method of building exact tests from statistics whose finite sample distribution is intractable but can be simulated (provided it does not involve nuisance parameters). We extend this method in two ways: first, by allowing for MC tests based on exchangeable possibly discrete test statistics; second, by generalizing the method to statistics whose null distributions involve nuisance parameters (maximized MC tests, MMC). Simplified asymptotically justified versions of the MMC method are also proposed and it is shown that they provide a simple way of improving standard asymptotics and dealing with nonstandard asymptotics (e.g., unit root asymptotics). Parametric bootstrap tests may be interpreted as a simplified version of the MMC method (without the general validity properties of the latter).