Requirements for Security Enhancements to Legacy Software with RUP

ABSTRACT

This article describes how to adapt a specific part of the Rational Unified Process (RUP) framework for the purpose of conducting requirements gathering for software projects aimed at adding security features to legacy software. The RUP seems particularly fitting for this purpose because it aggregates numerous software engineering terms into a common body of knowledge and strives to give them clear and unambiguous semantics. Furthermore, the RUP allows project coordinators to pick and choose only the process elements best suited to meet the particular needs of a project.

The article should prove useful to project managers, process engineers, and software architects responsible for teaching old software new security functions. It should also prove useful to organizations that have already carried out basic software security projects such as those that fix buffer overflows, teach the software to perform better data validation, replace unsafe string handling functions, and recompile code with safe exception handling. This article covers only a small and very specific part of the RUP. It interprets the RUP in ways guided by the author's experience and specializes the Requirements discipline for use in projects tasked with adding new security features to legacy software.     

Designing a Special Library's Intranet for an Engineering Audience

ABSTRACT

Designing a successful library Web site for an engineering audience means researching how engineers find and use information. It also requires the special librarian to conduct usability tests to determine what is and isn't working on the site. The special librarian is more than simply a librarian, he or she must be able to take the research and the test results and either build the Web site or make sure the site is built by a team. The librarian must be able to play several roles: researcher, tester, project leader, and Web manager. The more successful the librarian is at involving users in site design, the more used and usable the site will be. This article describes one librarian's experience with designing a special library Intranet. It also includes an extensive bibliography of related articles.     

The pataphysics of creativity: developing a tool for creative search

We introduce the idea of a new kind of web search tool that uses the literary and philosophical idea of pataphysics as a conceptual framework in order to return creative results. Pataphysics, the science of exceptions and imaginary solutions, can be directly linked to creativity and is therefore very suitable to guide the transformation from relevant into creative search results. To enable pataphysical algorithms within our system we propose the need for a new type of system architecture. We discuss a component-based software architecture that would allow the flexible integration of the new algorithms at any stage or location and the need for an index suitable to handle patadata, data which have been transformed pataphysically. This tool aims to generate surprising, novel and provocative search results rather than relevant ones, in order to inspire a more creative interaction that has applications in both creative work and learning contexts.     

功果桥水电站主要工程地质问题及对策

功果桥水电站工程枢纽区地质条件较为复杂,地层呈单斜构造,横河展布,岩层陡倾上游偏右岸;岩体风化、卸荷作用强烈,陡倾角结构面发育,缓倾结构面轻度发育;地下洞室深埋于微风化～新鲜岩体中,围岩为陡倾层状岩体。针对工程开挖中存在的主要工程地质问题,提出相应的处理措施,为工程的顺利进行奠定了坚实的基础。     

盖下坝水电站坝址区岩溶发育情况初步分析

盖下坝水电站工程为高山峡谷型电站,坝址区及附近岩石为碳酸盐岩,属中等坚硬易溶岩.岩溶发育是影响本工程库水外渗的重大工程地质问题之一.从施工开挖揭示的各种溶蚀现象中分析岩溶发育特征及其规律,为防渗设计提供依据.     

农业灌排工程运行管理费用财政补助初探

节约用水、降低农民水费支出、保障灌排工程良性运行是农业水价改革的三大主要目标。在降低农户水费支出的情况下,如何通过发挥水价经济杠杆作用促进节约用水,如何保障灌排工程良性运行的费用,是迫切需要解决的难题。农业灌排工程运行管理费用财政补助可以在一定程度上解决灌排工程运行费用。而实现节约用水,就需要进一步研究农业灌排工程运行管理费用的补助方式。针对上述目标,根据大量调研,总结了农业灌排工程运行管理费用财政补助应注意的一些问题,针对国有骨干工程和田间工程分别提出了工程运行管理费用的补助形式。     

三峡水库地质灾害防治措施分析与建议

自1992年以来,国家投入巨资对三峡库区地质灾害进行了治理,已有1 000余处地质灾害得到妥善防治。而在确保治理效果的基础上,采取针对性强、技术经济指标优的防治措施是十分必要的。结合防治工程所采取工程措施,进行了技术与经济指标的总结分析,并据此提出防治措施建议,即应针对不同的灾害类型,采取相应的治理措施,以期达到效果好、见效快、投资省的目的。     

宜春市状元洲抬水工程设计浅析

以江西省宜春市状元洲抬水工程为实例,探讨了橡胶坝及升卧式闸门在抬水工程中的设计及应用.     

国内电力设计院EPC总承包工程的采购管理

国内电力设计院为适应经济形式的变化,开展了设计采购施工（EPC）总承包业务,为向工程公司的转型积累经验、奠定基础。采购是EPC总承包工程执行过程中极其重要的环节,对如何完善采购工作进行了探讨并提出了一些建议,希望能对电力设计院在进行设备材料采购时提供帮助。     

论工程水利和生态水利的内涵及其关系

介绍了工程水利和生态水利的内涵,并对工程水利的双重效应和工程水利与生态水利的相互关系进行了阐述。通过植被建设能有效地控制工程水利建设对生态环境的破坏,满足人们对水的各种不同需求的同时,还应满足水域生态系统的完整性,恢复与建设洁净的水环境,实现人与自然的和谐。