Comparing attack trees and misuse cases in an industrial setting

The last decade has seen an increasing focus on addressing security already during the earliest stages of system development, such as requirements determination. Attack trees and misuse cases are established techniques for representing security threats along with their potential mitigations. Previous work has compared attack trees and misuse cases in two experiments with students. The present paper instead presents an experiment where industrial practitioners perform the experimental tasks in their workplace. The industrial experiment confirms a central finding from the student experiments: that attack trees tend to help identifying more threats than misuse cases. It also presents a new result: that misuse cases tend to encourage identification of threats associated with earlier development stages than attack trees. The two techniques should therefore be considered complementary and should be used together in practical requirements work.     

如何办理电线电缆和插头的VDE认证

随着我国参加WTO组织,进一步对外开放,许多企业的产品纷纷走出国门,远销到世界各地,或与国内其它企业的出口产品配套,产品间接出口。为了出口,很多企业急需办理相关国家的产品认证。据此,笔者将自己多年的认证经验和教训总结一下,供有关人员参考。     

国内外纸质文献加固技术研究

纸张脆化问题既缩短了纸质文献的保存寿命,又限制了纸质文献的使用、研究与传承,对脆化纸质文献进行加固处理迫在眉睫。现有纸质文献加固技术使用的材料可以分为天然材料、合成材料以及复合材料三大类。本文从这三方面对纸质文献加固技术的研究进展进行了介绍,并综合考虑我国文献保护的实际情况,提出了开展纸质文献加固工作应遵循的原则和未来的研究方向,旨在为脆化纸质文献加固处理提供借鉴。     

基于签名的近似垃圾邮件检测算法

针对垃圾邮件短小、一定时间内在网络上重复、大量地散发的特点,提出了基于签名的近似垃圾邮件检测算法（ASD）。该算法以句为基本单位,求取邮件所含的全部句子的摘要,垃圾邮件的近似检测转变为两个摘要集近似度的比较。通过与近似文本查询算法DSC、DSC-SS、I-Match的比较,ASD算法在近似垃圾邮件查询中,表现出样本集的存储空间大小适中、运算时问短、鲁棒性高、高准确率、高召回率的特征。     

软件文档质量的度量方法研究

软件文档的质量一直是软件开发人员,尤其是软件评测人员关注的问题.目前软件文档的质量存在着较多的问题,但是却没有相应的方法来判断文档的质量好坏程度.基于这种状况,提出了度量软件文档质量的一种方法.提出了使用质量度量模型和综合评判模型来度量软件文档质量.通过这个方法的应用,可以进行比较客观的判断文档的质量,同时得出被度量的软件文档存在不足的方面.长期的应用这种方法,可以对软件文档的编写质量进行循序渐进的改进,从而得到让使用人员满意的软件文档.     

中文PDF文档数字水印算法

针对文本文档的真实性、完整性和版权保护问题,通过分析PDF文档和PostScript页面描述文件工作机制原理,提出一种专门针对中文PDF文档的数字水印算法.将根据原始文档字符特征码而生成的水印信息嵌入到文档字符间距中,从而实现了对文档内容的保护.实验结果表明,利用该算法使得中文PDF文档具有了良好的防篡改性.     

Data and process requirements for product recall coordination

When an organisation becomes aware that one of its products may pose a safety risk to customers, it must take appropriate action as soon as possible or it can be held liable. The ability to automatically trace potentially dangerous goods through the supply chain would thus help organisations fulfil their legal obligations in a timely and effective manner. Furthermore, product recall legislation requires manufacturers to separately notify various government agencies, the health department and the public about recall incidents. This duplication of effort and paperwork can introduce errors and data inconsistencies. In this paper, we examine traceability and notification requirements in the product recall domain from two perspectives: the activities carried out during the manufacturing and recall processes and the data collected during the enactment of these processes. We then propose a workflow-based coordination framework to support these data and process requirements.     

Comments on solid state hydrogen storage systems design for fuel cell vehicles

In recent years, significant research and development efforts were spent on hydrogen storage technologies with the goal of realizing a breakthrough for fuel cell vehicle applications. This article scrutinizes design targets and material screening criteria for solid state hydrogen storage. Adopting an automotive engineering point of view, four important, but often neglected, issues are discussed: 1) volumetric storage capacity, 2) heat transfer for desorption, 3) recharging at low temperatures and 4) cold start of the vehicle. The article shall help to understand the requirements and support the research community when screening new materials.     

广电声像档案管理的现状与对策

通过对声像档案管理现状的分析,剖析了声像档案管理存在的主要问题,并针对性地提出7个方面的措施以加强声像档案管理,并加大开发利用的力度,使声像档案更好地为社会各项事业服务。     

Tools for consistency management between design products

Consistency between different design documents is most important, as these documents are usually elaborated by different persons. Consistency means that structures within different documents “match” each other and also the values of corresponding attributes. Interactive and incremental tools for building up and maintaining consistency - so-called integrators - install fine-grained relations (semantic links) between objects of these documents. Such integrators have been investigated for some time in different application domains (Nagl, 1996).This paper deals with two extensions of integrators ( [K?rtgen, 2009a] and [K?rtgen, 2009b]). Both are devoted to speed up the (re-)integration process. The first extension makes use of the still valuable information of links damaged due to changes of documents. The second reuses consistent documents of past projects, to find out big and suitable related parts of design documents or of corresponding underlying knowledge. This paper is written for a chemical engineer and, therefore, emphasizes the tool functionality side.