Threat modeling a factory environment using Microsoft Security Development Lifecycle methodology

The number of security violations is increasing and a security breach could have irreversible impacts to business. There are several ways to improve organization security, but some of them may be difficult to comprehend. This thesis demystifies threat modeling as part of secure system development. Threat modeling enables developers to reveal previously undetected security issues from computer systems. It offers a structured approach for organizations to find and address threats against vulnerabilities. When implemented correctly threat modeling will reduce the amount of defects and malicious attempts against the target environment. In this thesis Microsoft Security Development Lifecycle (SDL) is introduced as an effective methodology for reducing defects in the target system. SDL is traditionally meant to be used in software development, principles can be however partially adapted to IT-infrastructure development. Microsoft threat modeling methodology is an important part of SDL and it is utilized in this thesis to find threats from the Acme Corporation’s factory environment. Acme Corporation is used as a pseudonym for a company providing high-technology consumer electronics. Target for threat modeling is the IT-infrastructure of factory’s manufacturing execution system. Microsoft threat modeling methodology utilizes STRIDE –mnemonic and data flow diagrams to find threats. Threat modeling in this thesis returned results that were important for the organization. Acme Corporation now has more comprehensive understanding concerning IT-infrastructure of the manufacturing execution system. On top of vulnerability related results threat modeling provided coherent views of the target system. Subject matter experts from different areas can now agree upon functions and dependencies of the target system. Threat modeling was recognized as a useful activity for improving security.

A software engineering approach to distributed systems for composite modeling

The goal of this thesis is to define and validate a software engineering approach for the development of a distributed system for the modeling of composite materials, based on the analysis of various existing software development methods. We reviewed the main features of: (1) software engineering methodologies; (2) distributed system characteristics and their effect on software development; (3) composite materials modeling activities and the requirements for the software development. Using the design science as a research methodology, the distributed system for creating models of composite materials is created and evaluated. Empirical experiments which we conducted showed good convergence of modeled and real processes. During the study, we paid attention to the matter of complexity and importance of distributed system and a deep understanding of modern software engineering methods and tools.

Catalogus librorum & instrumentorum chirurgicorum b. m. viri Josephi Pippingsköld, m. d. profess. chirurg. [et] art. obstetr. ad Imp. Acad. Aboëns. nec non imp. coll. med. assessoris, sub hasta d. Oct. XXX & sqq. a. MDCCCXVI

Julkaisuvuosi nimekkeestä.

Dynamic modeling and simulation of the airflow cleaning device

The objective of the work is to study the flow behavior and to support the design of air cleaner by dynamic simulation.In a paper printing industry, it is necessary to monitor the quality of paper when the paper is being produced. During the production, the quality of the paper can be monitored by camera. Therefore, it is necessary to keep the camera lens clean as wood particles may fall from the paper and lie on the camera lens. In this work, the behavior of the air flow and effect of the airflow on the particles at different inlet angles are simulated. Geometries of a different inlet angles of single-channel and double-channel case were constructed using ANSYS CFD Software. All the simulations were performed in ANSYS Fluent. The simulation results of single-channel and double-channel case revealed significant differences in the behavior of the flow and the particle velocity. The main conclusion from this work are in following. 1) For the single channel case the best angle was 0 degree because in that case, the air flow can keep 60% of the particles away from the lens which would otherwise stay on lens. 2) For the double channel case, the best solution was found when the angle of the first inlet was 0 degree and the angle of second inlet was 45 degree . In that case, the airflow can keep 91% of particles away from the lens which would otherwise stay on lens.

Business models for Finnish biobanks

This study concentrates on developing a suitable business model for Finnish biobanks, with particular emphasis on value creation to stakeholders. The sub-objective of this thesis are to map the commercial possibilities of biobanks and potential barriers for business development. The study approaches the subject from the biobanks’ as well as the stakeholders’ point of view, integrating their hopes and needs considering current and future co-operation into the findings. In 2013 the Biobank Act came into effect, after which six biobanks have been established and several other pending biobank projects are in process. There is relatively little research in regard to the commercial opportunities of this newcomer of the biomedical industry, and particularly in the Finnish markets. Therefore, the aim of this study is to partially fill the research gap of the commercial potential of biobanks and particularly outline the problematic elements in developing business. The theoretical framework consists of a few select theories, which depict business modeling and value creation of organizations. The theories are combined to form a synthesis, which best adapts to biobanks, and acts as a backbone for interviews. The empirical part of the study was conducted mainly by seven face-to-face interviews, and complemented by two phone interviews and an e-mail questionnaire with four responses. The findings consist mainly of the participants’ reflections on the potential products and services enabled by consumer genomics, as well as perceptions on different obstacles for biobanks’ business development. The nature of the study is tentative, as biobanks are relatively new organizations in Finland, and their operation models and activities are still molding. The aim is to bring to surface the hopes and concerns of biobanks’ representatives, as well as the representatives of stakeholders, in order to transparently discuss the current situation and suggestions for further development. The study concludes that in principle, the interviewees’ agree on the need for development in order not to waste the potential of biobanks; regardless, the participants emphasize different aspects and subsequently lean on differing methods.

La estructura económica del (sub)desarrollo y el equilibrio general o ¿qué ocurrió con la teoría del desarrollo y con las estructuras económicas?

Formerly the concept of economic development involved transforming the productive structures in order to employ the population in higher productivity activities, so that welfare improved. Development implied that economic systems followed development paths (not always in equilibrium) in order to reach more desirable welfare results: Equilibrium was not the main target. More recently, economic strategies emphasize reaching growth within equilibrium paths, thus, preserving economic structures. The latter vision yields incompatible results with the former. This paper revises some issues concerning structural change versus equilibrium targets as a means to reach development.

Industrialization in Sub-Saharan Africa and import substitution policy

This article aims to contribute to the understanding of the process of import substitution in Sub-Saharan Africa. The process of industrialization in Sub-Saharan Africa occurred in two phases: a first step, even very early during the colonial regime began around the 1920s and ended in the late forties; a second phase of industrialization began in the late fifties and gained momentum in the sixties, when import substitution was implemented more widely. Although these countries were the last to embark on the strategy of import substitution, they followed the same steps of Latin American countries, and as the structural domestic and external constraints were too strong, the failure of the policy of import substitution arrived early and the negative impact on these economies had a greater magnitude.

Business modeling in turbulent environments

This study presents an agile tool set for the business modeling in companies, entering the turbulent environment. The study’s aim is to explore business modeling techniques and their tooling by utilizing a case study of a Finnish media monitoring company, expanding to the Russian market. This work proposes a tailored “two-approach” of business modeling development that analyzes both the past and future conditions of two key factors of business modeling for companies – internal and external environments. The study explores a case company by investigating the benefits and disadvantages of firm’s present business modeling tools, developing a new tooling and applying it to the case company. Among primary data utilization, such as interviews with media monitoring industry analysts and representatives of the competing companies, and academic experts, study leans up on the comprehensive analysis of Russian media monitoring niche and its players. This study benefits the business modeling research area and combines traditional analysis tools, such as market, PESTLE and competitor analyses, in a systemic manner, with the business modeling techniques. This transformation proceeds through applying of the integrated scenario, heat map and critical design issues’ analyses in the societal, industrial and competitive context of turbulent environments. The practical outcome of this approach is the development of agile business modeling tool set, customizable by company’s requirements.

leges Visigothorum, libris duodecim : nonnulla sub finem desiderantur ; praemittuntur praefatio et Regum Visigothorum breve chronicon.

DD. de Bethune, in monasterio sancti Remigii Remensis quondam asservatus