Enhancing Security Requirements Engineering by Organisational Learning

More and more software projects today are security-related in one way or the other. Requirements engineers often fail to recognise indicators for security problems which is a major source of security problems in practice. Identifying security-relevant requirements is labour-intensive and errorprone. In order to facilitate the security requirements elicitation process, we present an approach supporting organisational learning on security requirements by establishing company-wide experience resources, and a socio-technical network to benefit from them. The approach is based on modelling the flow of requirements and related experiences. Based on those models, we enable people to exchange experiences about security-requirements while they write and discuss project requirements. At the same time, the approach enables participating stakeholders to learn while they write requirements. This can increase security awareness and facilitate learning on both individual and organisational levels. As a basis for our approach, we introduce heuristic assistant tools which support reuse of existing security-related experiences. In particular, they include Bayesian classifiers which issue a warning automatically when new requirements seem to be security-relevant. Our results indicate that this is feasible, in particular if the classifier is trained with domain specific data and documents from previous projects. We show how the ability to identify security-relevant requirements can be improved using this approach. We illustrate our approach by providing a step-by-step example of how we improved the security requirements engineering process at the European Telecommunications Standards Institute (ETSI) and report on experiences made in this application.

The doctrine of double effect

• The doctrine of double effect is an exception to the general rule that taking active steps that end life is unlawful. • The essence of the doctrine at common law is intention. • Hastening a patient’s death through palliative care will be lawful provided the primary intention is to relieve pain, and not cause death, even if that death is foreseen. • Some States have enacted legislative excuses that deal with the provision of palliative care. • These statutory excuses tend to be stricter than the common law as they impose other requirements in addition to having an appropriate intent, such as adherence to some level of recognised medical practice.

Integration of Saudi Arabia’s conservative Islamic culture in sustainable housing design

The cities of Saudi Arabia have perhaps the largest growth rates of cities in the Middle East, such that it has become a cause in shortage of housing for mid and low-income families, as is the case in other developing countries. Even when housing is found, it is not sustainable nor is it providing the cultural needs of those families. The aim of this paper is to integrate the unique conservative Islamic Saudi culture into the design of sustainable housing. This paper is part of a preliminary study of an on-going PhD thesis, which utilises a semistructured interview of a panel of nine experts in collecting the data. The interviews consisted of ten questions ranging from general questions such as stating their expertise and work position to more specific question such as listing the critical success factors and/or barriers for applying sustainability to housing in Saudi Arabia. Since the participants were selected according to their experience, the answers to the interview questions were satisfactory where the generation of the survey questions for the second stage in the PhD thesis took place after analysing the participant’s answers to the interview questions. This paper recommends design requirements for accommodating the conservative Islamic Saudi Culture in low cost sustainable houses. Such requirements include achieving privacy through the use of various types of traditional Saudi architectural elements, such as the method of decorative screening of windows, called Mashrabiya, and having an inner courtyard where the house looks inward rather than outward. Other requirements include educating firms on how to design sustainable housing, educating the public on the advantages of sustainable housing and implementing new laws that enforce the utilisation of sustainable methods to housing construction. This paper contributes towards the body of knowledge by proposing initial findings on how to integrate the conservative Islamic culture of Saudi Arabia into the design of a sustainable house specifically for mid and low-income families. This contribution can be implemented on developing countries in the region that are faced with housing shortage for mid and low-income families.

Double effect and palliative care excuses

• The doctrine of double effect is an exception to the general rule that taking active steps that end life is unlawful. • The essence of the doctrine at common law is intention. • Hastening a patient’s death through palliative care will be lawful provided the primary intention is to relieve pain, and not cause death, even if that death is foreseen. • Some States have enacted legislative excuses that deal with the provision of palliative care. • These statutory excuses tend to be stricter than the common law as they impose other requirements in addition to having an appropriate intent, such as adherence to some level of recognised medical practice.

The biology and ecology of native non-cichlids in the Victoria and Kyoga lake basins

An overview of the biology and ecology of some of the constantly less important commercial species is given below. These included Bagrus docmac, Clarias gariepinus, Protopterus aethiopicus, Labeo victorianus, Barbus spp, Mormyrids, Synodontis spp, and Schilbe intermedius. The stocks of most of these species declined due to over-exploitation and introduction of non-native fishes especially Nile perch. A few of these taxa still survive in the main lake and others in satellite lakes. The current status of these species in the Victoria lake basin is not known but the available information provided some information on some habitat and other requirements of some of these originally important species of the Victoria lake basin.

Automated Acquisition of Evolving Informal Descriptions

The Listener is an automated system that unintrusively performs knowledge acquisition from informal input. The Listener develops a coherent internal representation of a description from an initial set of disorganized, imprecise, incomplete, ambiguous, and possibly inconsistent statements. The Listener can produce a summary document from its internal representation to facilitate communication, review, and validation. A special purpose Listener, called the Requirements Apprentice (RA), has been implemented in the software requirements acquisition domain. Unlike most other requirements analysis tools, which start from a formal description language, the focus of the RA is on the transition between informal and formal specifications.

A review of high magnetic moment thin films for microscale and nanotechnology applications

The creation of large magnetic fields is a necessary component in many technologies, ranging from magnetic resonance imaging, electric motors and generators, and magnetic hard disk drives in information storage. This is typically done by inserting a ferromagnetic pole piece with a large magnetisation density MS in a solenoid. In addition to large MS, it is usually required or desired that the ferromagnet is magnetically soft and has a Curie temperature well above the operating temperature of the device. A variety of ferromagnetic materials are currently in use, ranging from FeCo alloys in, for example, hard disk drives, to rare earth metals operating at cryogenic temperatures in superconducting solenoids. These latter can exceed the limit on MS for transition metal alloys given by the Slater-Pauling curve. This article reviews different materials and concepts in use or proposed for technological applications that require a large MS, with an emphasis on nanoscale material systems, such as thin and ultra-thin films. Attention is also paid to other requirements or properties, such as the Curie temperature and magnetic softness. In a final summary, we evaluate the actual applicability of the discussed materials for use as pole tips in electromagnets, in particular, in nanoscale magnetic hard disk drive read-write heads; the technological advancement of the latter has been a very strong driving force in the development of the field of nanomagnetism.

Materials and concepts for CO2 lean ironmaking by pyroelectrolysis

The main purpose of this PhD thesis was to provide convincing demonstration for a breakthrough concept of pyroelectrolysis at laboratory scale. One attempted to identify fundamental objections and/or the most critical constraints, to propose workable concepts for the overall process and for feasible electrodes, and to establish the main requirements on a clearer basis. The main effort was dedicated to studying suitable anode materials to be developed for large scale industrial units with molten silicate electrolyte. This concept relies on consumable anodes based on iron oxides, and a liquid Fe cathode, separated from the refractory materials by a freeze lining (solid) layer. In addition, one assessed an alternative concept of pyroelectrolysis with electron blocking membranes, and developed a prototype at small laboratory scale. The main composition of the molten electrolyte was based on a magnesium aluminosilicate composition, with minimum liquidus temperature, and with different additions of iron oxide. One studied the dynamics of devitrification of these melts, crystallization of iron oxides or other phases, and Fe2+/Fe3+ redox changes under laser zone melting, at different pulling rates. These studies were intended to provide guidelines for dissolution of raw materials (iron oxides) in the molten electrolyte, to assess compatibility with magnetite based consumable anodes, and to account for thermal gradients or insufficient thermal management in large scale cells. Several laboratory scale prototype cells were used to demonstrate the concept of pyroelectrolysis with electron blocking, and to identify the most critical issues and challenges. Operation with and without electron blocking provided useful information on transport properties of the molten electrolyte (i.e., ionic and electronic conductivities), their expected dependence on anodic and cathodic overpotentials, limitations in faradaic efficiency, and onset of side electrochemical reactions. The concept of consumable anodes was based on magnetite and derived spinel compositions, for their expected redox stability at high temperatures, even under oxidising conditions. Spinel compositions were designed for prospective gains in refractoriness and redox stability in wider ranges of conditions (T, pO2 and anodic overpotentials), without excessive penalty for electrical conductivity, thermomechanical stability or other requirements. Composition changes were also mainly based on components of the molten aluminosilicate melt, to avoid undue contamination and to minimize the dissolution rate of consumable anodes. Additional changes in composition were intended for prospective pyroelectrolysis of Fe alloys, with additions of different elements (Cr, Mn, Ni, Ti).

Les recours collectifs contre plusieurs défendeurs

Le recours collectif est un moyen de procédure qui permet à une personne d'agir en demande pour le compte des membres d'un groupe dont elle fait partie. Cette procédure peut être introduite contre plus qu'un seul défendeur. On distingue deux types de recours collectifs contre plusieurs défendeurs. Il y a d'abord les recours collectifs où tous les membres du groupe ont un recours personnel contre tous les défendeurs. Il y a aussi les recours collectifs où les membres du groupe font valoir une même cause d'action à l'encontre de plusieurs défendeurs qui auraient eu un comportement fautif similaire à l'égard de l'un ou l'autre des membres du groupe. La recevabilité de ce dernier type de recours collectifs a été remise en question. Le requérant n'aurait pas l'intérêt suffisant pour ester en justice contre les défendeurs qui ne lui ont pas causé préjudice. Il ne saurait non plus satisfaire aux exigences du Code de procédure civile concernant l'autorisation du recours collectif. Or, il appert des règles mises en place en matière de recours collectif que le requérant fait valoir non seulement ses propres droits personnels, mais aussi tous ceux des membres du groupe. Ainsi, on ne peut lui reprocher l'absence d'intérêt juridique ou de cause d'action dans la mesure où il y a, pour chacun des défendeurs, au moins un membre du groupe avec un intérêt suffisant ou une cause d'action à son encontre. Les autres exigences du Code de procédure civile ne font pas, en soi, obstacle à l'autorisation d'un recours collectif contre plusieurs défendeurs.

Le retour des réfugiés et des personnes déplacées dans le cadre de la consolidation de la paix : les cas de la Croatie et de la Bosnie-Herzégovine

Le travail appréhende la question du retour des réfugiés et des personnes déplacées en Croatie et en Bosnie-Herzégovine, dans le cadre des opérations de consolidation de la paix qui se sont déroulées dans la région. En effet, la réintégration des populations déplacées dans leur domicile d’origine a été présentée comme l’une des priorités par la communauté internationale, et comme la solution idéale afin d’encourager la réconciliation dans la région et, surtout, d’y restituer la diversité ethnique. Or, les bilans respectifs des deux anciennes républiques à l’égard du retour des minorités, présentent des différences significatives. Les facteurs internes auxquels se butaient les processus de retour dans les deux pays étaient sensiblement les mêmes. Dans ces conditions, la variable déterminante semble s’être trouvé au niveau de la nature des interventions internationales qui se sont déployées en Bosnie-Herzégovine et en Croatie. Dans l’ensemble, la Bosnie-Herzégovine a bénéficié, de la part des divers acteurs internationaux, d’une attention plus soutenue à cet égard que la Croatie. Cette situation s’est traduite par le fait que le premier pays s’est vu accordé davantage de ressources financières, logistiques et diplomatiques afin de propulser le retour des minorités ethniques. En outre, elle met en exergue l’inconsistence de la rhétorique internationale qui défend des principes associés à la défense des droits humains, du pluralisme et de la multiethnicité mais dont l’application concrète se heurte aux impératifs domestiques des pays impliqués et aux autres exigences relatives à la reconstruction post-conflit.

Impact of Sanitary Measures on Exports of Fishery Products from India: The Case of Kerala

This study provides an overview of fish and fishery products exports from India as a whole before focusing on the fish and fishery products sector in Kerala. The food safety and other technical requirements facing Indian exporters of fish and fishery products are then reviewed. The remainder of the study explores experiences with food safety controls, in particular across Kerala’s major export markets, examining the efforts made by the Indian government and the impact on the processing sector as a whole and the preprocessing sector in particular. Finally, the remaining challenges faced by the fish and fishery products sector in Kerala as well as India as a whole are assessed in the context of the manner in which both the government and exporters have responded to changes in food safety and other requirements in major export markets

The construction industry and its resources: a research agenda

The desirable coverage of the journal is considered including the need to focus on research which can lead to positive action. Criteria for establishing the desirability of research projects are proposed and these are then applied first, to four broad issues and, secondly, to the inputs and other requirements for a well functioning industry. Some conclusions are drawn as to the research most likely to enable action to be taken to improve the industry. It is found that certain other difficulties can sometimes be dealt with by experimentation with actual projects or, where there is consensus on desirable action, by bringing pressure to bear on those able to initiate change.

Índice de governança corporativa : variação das empresas brasileiras em função das expectativas de mercado

Os conceitos de Governança Corporativa não são novos, mas a gravidade de impactos financeiros gerados por escândalos corporativos estimula as empresas a adotarem melhores níveis de governança. Investidores profissionais se dispõem a pagar um ágio para investir em empresas com altos padrões de governança e que garantam um ambiente corporativo favorável ao retorno do seu investimento. A liquidez na qual o mundo viveu nos últimos anos propiciou um volume cada vez maior de recursos; não apenas para o Brasil, mas para grande parte dos mercados emergentes; para os mercados de capitais locais e em investimentos diretos. Esse capital, em grande parte externo, necessita de transparência, regulamentação e outros requerimentos de modo a reduzir os riscos relacionados às empresas alvo. Com base nas expectativas de mercado de indicadores macroeconômicos disponibilizadas pelo Sistema de Expectativas de Mercado do Banco Central do Brasil e nas informações fornecidas pela Bovespa e seus índices de mercado Ibovespa e IGC, este trabalho buscou uma associação entre variações nestas expectativas e valorização ou desvalorização da média de capitalização bursátil e índice de bolsa - Ibovespa e IGC. Observou-se que tanto o Ibovespa quanto o IGC e a média de capitalização bursátil da Bovespa e Ibovespa estão sujeitos as mesmas influências de variáveis macroeconômicas nacionais, mas em magnitudes diferentes. Entretanto, fez-se como exceção a média de capitalização bursátil do IGC, que sofreu influência de expectativas macroeconômicas diferentes dos demais. 6

Grau de evidenciação da contabilidade de hedge nos maiores bancos brasileiros e europeus

Ao se reportar resultados voláteis e, sem a devida evidenciação contábil (disclosure), pode-se transmitir uma imagem negativa aos investidores e levantar dúvidas em relação aos resultados futuros, a transparência e a capacidade de gerenciamento do risco por parte dos gestores das instituições financeiras. Nas últimas décadas, a utilização da contabilidade de hedge para a gestão do risco e resultado tem estado em evidência nos grandes bancos do Brasil e do exterior. Isto ocorre pois é onde se dá a convergência das demonstrações financeiras tanto em 2005 na Europa quanto em 2010 no Brasil para o novo padrão contábil internacional (IFRS) aplicado pelo IASB. Este padrão tem exigido dos bancos grandes esforços para estar em conformidade com as novas regras estabelecidas. Nesta mesma lógica, enquanto a contabilidade de hedge nos bancos assume um papel de destaque na gestão dos riscos e resultados; a divulgação precisa e concisa das demonstrações financeiras fornece aos acionistas, investidores e demais usuários importantes informações sobre o desempenho e a condução do negócio. Isto proporciona ao mercado uma melhor condição de avaliar os riscos envolvidos e de estimar os resultados futuros para a tomada de decisão de investimento. Dentro deste contexto, foi avaliado a qualidade e o grau de evidenciação das demonstrações contábeis dos principais bancos brasileiros e europeus aos requisitos do IFRS 7, IFRS 9 e outros mais de elaboração do próprio autor. Todos esses requisitos referem-se à divulgação de informações qualitativas e quantitativas pertinentes a contabilidade de hedge. Portanto, estão associados a estratégias de gestão de risco e resultado. A avaliação do grau de evidenciação das demonstrações financeiras ao IFRS 7 e IFRS 9 foi feita através de um estudo exploratório onde se analisou as notas explicativas em IFRS dos dez maiores bancos no Brasil e na Europa pelo critério “tamanho dos ativos”. Os resultados obtidos neste estudo indicam que 59,6% das instituições analisadas cumprem as exigências do IFRS7. Outra descoberta é que o índice de cumprimento dos bancos brasileiros é maior que os bancos europeus; 68,3% vs. 50,8%. Em relação ao IFRS 9 o percentual é de apenas 23% o que é explicado pelo fato da norma ainda não estar em vigor em ambas as regiões onde poucas instituições tem se antecipado de forma voluntária para atendê-la. A avaliação da qualidade das notas explicativas referente ao hedge contábil foi feita de maneira discricionária através da observação das informações prestadas para atender aos requisitos do IFRS 7 e 9 e dos demais requisitos adicionados pelo autor. Os resultados obtidos indicam que as notas carecem de maior detalhamento dos instrumentos de hedge utilizados, bem como os objetivos de cada hedge, para dar maior transparência ao usuário da informação sobre os riscos protegidos nos respectivos balanços. O crescimento do volume de informações prestadas nas notas explicativas dos grandes bancos brasileiros e europeus após a adoção do IFRS não configurou um aumento proporcional do conteúdo informacional, prevalecendo, ainda, a forma sobre a essência. Este movimento abre espaço para discussões futuras com os agentes de mercado sobre o tamanho e o conteúdo informacional adequado nas notas explicativas, com o intuito de buscar um equilíbrio entre o custo e o benefício da divulgação da informação sob a ótica da relevância e da materialidade.