Comments on ISO 14102: the standard for CASE-tool evaluation

In this paper, we comment on the ISO standard for evaluation and selection of CASE-tools (ISO 14102), focusing on the important task of establishing a relevant set of requirements for any specific use of the standard. We review the literature related to CASE-tool evaluation and illuminate our findings by comparing CASE-tool requirements developed for a company with the suggested set of characteristics in the standard.

We identify two weaknesses in the standard. Firstly, we note a lack of method support for evaluation framework development. Secondly, we note a number of weaknesses in the way decision frameworks are treated. The paper concludes with recommendations for improvement, as submitted to ITS/AG7.     

ISO9000标准下的干部档案管理模式

随着高职教育的蓬勃发展,现行的高校干部人事档案管理模式不适应干部竞聘时效性的现状日益凸显,因此必须进行突破,甚至可以说是彻底的改革,文章探讨了ISO9000标准下,高职院校干部人事档案管理的新模式。     

Improving the ISO/IEC 11770 standard for key management techniques

We provide the first systematic analysis of the ISO/IEC 11770 standard for key management techniques (2009, 2009), which describes a set of key establishment, key agreement, and key transport protocols. We analyse the claimed security properties, as well as additional modern requirements on key management protocols, for over 30 protocols and their variants. Our formal, tool-supported analysis of the protocols uncovers several incorrect claims in the standard. We provide concrete suggestions for improving the standard.     

解析国际电磁兼容标准-ISO7637-3

主要介绍了ISO 7637-3道路车辆除电源线外的导线通过容性和感性耦合的电瞬态发射测试方法与步骤,以评价车载电子电气设备对耦合到非电源电路的电瞬态的抗扰度。并详细阐述了电容耦合(CCC)、直接电容耦合(DCC)和电感耦合(ICC)三种方法的瞬态试验脉冲的应用。     

Critical view of the application of the ISO standard for quality assurance

Abstract. The aim of this paper is to initiate a debate on quality assurance and the application of the ISO 9001 in the system development field. It is claimed that unquestioning application of ISO 9001 can be a backwards step in the practice and research of system development. Five aspects of quality are identified in order to design and evaluate the quality of information systems: technical quality, use quality, aesthetic quality, symbolic quality and organizational quality. We find that the standard solely emphasizes technical quality. The standard promotes the ideal of linear, phase-oriented system development, based on a fixed requirement specification and a document-driven process. This is in contrast to most research findings, which criticize one-sided adaptation of phase orientation in system development.     

Enterprise modeling using the foundation concepts of the RM-ODP ISO/ITU standard

Enterprise architecture (EA) projects require analyzing and designing across the whole enterprise and its environment. Enterprise architects, therefore, frequently develop enterprise models that span from the markets in which the organization operates down to the implementation of the IT systems that support its operations. In this paper, we present SEAM for EA: a method for defining an enterprise model in which all the systems are systematically represented with the same modeling ontology. We base our modeling ontology on the foundation modeling concepts defined in Part 2 of ISO/ITU Standard “Reference Model of Open Distributed Processing” (RM-ODP). This work has two contributions to enterprise architecture: the SEAM for EA method itself and the use of Part 2 of the RM-ODP standard as a modeling ontology.

A network user interface: Incorporating human factors guidelines into the ISO standard for open systems interconnection

The introduction of standards will hopefully ensure that users can access particular computer resources through a communications network for their own purposes without major problems. The International Standards Organisation (ISO) has developed a seven-layer reference model which is to be used for the purpose of incorporating standards relating to the interconnection of open systems (OSI). It is important that the human factors requirements are considered in relation to this model if the aim of generality of use is to be achieved. This paper considers some of the major human factors requirements and describes an approach to translating them into design standards which can be implemented. The approach starts from a consideration of user activity and develops into a language interface which could reside in layers of the reference model.     

Multidimensional zero-correlation attacks on lightweight block cipher HIGHT: Improved cryptanalysis of an ISO standard

HIGHT is a block cipher designed in Korea with the involvement of Korea Information Security Agency. It was proposed at CHES 2006 for usage in lightweight applications such as sensor networks and RFID tags. Lately, it has been adopted as ISO standard. Though there is a great deal of cryptanalytic results on HIGHT, its security evaluation against the recent zero-correlation linear attacks is still lacking. At the same time, the Feistel-type structure of HIGHT suggests that it might be susceptible to this type of cryptanalysis. In this paper, we aim to bridge this gap.We identify zero-correlation linear approximations over 16 rounds of HIGHT. Based upon those, we attack 27-round HIGHT (round 4 to round 30) with improved time complexity and practical memory requirements. This attack of ours is the best result on HIGHT to date in the classical single-key setting. We also provide the first attack on 26-round HIGHT (round 4 to round 29) with the full whitening key.     

Methodological utilities for organizing cooperative work process according to ISO 9001 standard recommendations

Research for improving the product development process becomes crucial in new work organizations. Today, projects involve more and more activities and work groups which must be efficiently coordinated. In this paper, a method for structuring cooperative activities in order to improve its global performance is proposed. This global and methodological approach can be used to specify collaborative frameworks like Web technology environments. The study is based on the recommendations of ISO 9001 standard. Classical methods decompose a project into several work groups which are then scheduled. This first decomposition level is supplemented with a more detailed structuring level in order to control the size of the working teams. The steps of the process being defined and planned, the responsibilities inside the working groups are specified. Finally, the method proposes to identify the couples of actors who generate the best interface for the effectiveness of the cooperative work. Received: February 2005/Accepted: January 2006     

Do human factors experts accept the ISO 9241 Part 10—Dialogue Principle—standard?

This paper presents the results of an international questionnaire survey that was developed to analyse how the potential addressees of the ISO 9241 part 10 standard—human factor (HF) experts engaged in the design, evaluation, purchase, and application of software systems—accept the first committee draft of this standard. It reports how HF experts from nine countries evaluated the First Committee Draft of ISO 9241 Part 10. Inquiries were made about whether the standard provides a framework for the design and evaluation of dialogue systems, or whether the subject of the standard is mature enough to be published as an international recommendation. Results indicate a widespread approval among 90 HF experts of the form and content of ISO 9241 Part 10.     

The diffusion of anticipatory standards with particular reference to the ISO/IEC information resource dictionary system framework standard

In the late 1980s, traditional standards development organisations (SDOs) were moving toward creating anticipatory standards as a way of coping with the fast growth in new technology in the computing industry. The development of anticipatory standards (standards developed ahead of the technology) was seen as a possible way for the formal standards bodies to keep abreast of these rapid changes. By creating standards ahead of the technology, the standards would act as “change agents” and guide the market. Anticipatory standards were seen as one way of addressing the problem of arriving at suboptimal de facto standards. If the industry can be guided before the technology develops, this will encourage the use of optimal products. This paper considers the diffusion pattern of the ISO/IEC Information Resource Dictionary System (IRDS) Framework standard that fits into the category of an anticipatory standard. Comparisons are made between the diffusion patterns of the ISO/IEC IRDS standard and the ISO/IEC Open Standards Interconnection (OSI) Reference Model as they were both anticipatory in nature, both framework/reference standards, both originated at approximately the same time and were both developed in traditional standards development organisations.     

Atom: the standard in syndication

Early syndication and publishing protocols faced various problems related to interoperability, scalability, and extensibility. The Atom format and protocol builds on earlier efforts to establish an open, extensible, interoperable, and clearly specified framework for Web-logging applications. Atom has already been deployed on a wide variety of platforms. By closely examining previous syndication formats and protocols, the Atompub working group has been able to "pave the footpaths",load g391-a5003-a8-b 7 and design a standard built around well-known and proven usage patterns.     

Tearing down the wall: Integrating ISO and internet Management

Today, despite protocol wars fought with the fervor and rhetoric usually reserved for politics or religion, many network management platform products support both SNMP and CMIP. Increasingly, the challenge is not to pick a single best management protocol, but rather to find some way of gluing together a diverse set of networked devices which speak a hodge-podge of standard and proprietary management protocols. In this heterogeneous environment, end-to-end management requires an integrated, unified view of the managed network, despite differences in management protocol and information structure. Integrated management can be facilitated by the development of proxy mechanisms and Management Information Base (MIB) translation procedures. Key to achieving timely, effective integrated management is to preserve and leverage from existing commercial investment in both ISO/CCITT and Internet-based management technologies through deployment of common methods and tools which support integration.