Systematic Security Analysis for Service-Oriented Software Architectures

It has been reported in the literature that about twenty new software vulnerabilities are reported weekly. This situation has increased the security awareness in the software community. Nowadays, software services are expected not only to satisfy functional requirements but also to resist malicious attacks. As demand for more trustworthy systems is increasing, the software industry is adjusting itself to security standards and practices by increasing security assessment and testing effort. Even though there is a consensus that better software engineering is to improve software quality in the early stage of software development, so far, various approaches that have been proposed to analyze and quantitatively measure the software security target, primarily show the finished software products in their operational life. There are few achievements on how to reduce or effectively mitigate the security risks faced by software products during the development process. In this chapter, the authors introduce a novel model-driven perspective on secure software engineering, which integrates seamlessly software security analysis with traditional software development activities. A systematic security engineering process that starts in the early stages of the software development process and spans the entire software lifecycle is presented. Fundamental software security concepts and analysis techniques are also introduced, and several illustrative examples are presented, with focus on security requirements and risk analysis.

Changes in nucleolar size and nucleolar vacuolation at early stages of fiber development and final fiber dimensions were determined for cotton of different species: Gossypium hirsutum L. cv. B49, Gossypium barbadense L. cv. Menoufi and Gossypium arboreum L. cv. Virnar. Size of the nucleolus in combination with its vacuolation at an early stage of development was found to be clearly associated with the final result of fiber development.

Expression of lipoxygenase isoenzymes in developing barley grains

Information security is currently considered to be a crucial aspect of systems development. However it has traditionally been considered during the final stages of development, once the main components of the system have been developed and therefore provides solutions which are inappropriate for security integration. Software engineering has traditionally been separated from security engineering, and security issues have not usually been included in software engineering processes, activities, techniques, models, and so on. Furthermore, security engineering has not been aligned with information systems, and has focused rather on the definition of protocols, cryptographic algorithms, access control policies, etc. However, the scientific community is beginning to realize the importance of aligning software engineering and security engineering in order to develop more secure systems. Security in software engineering is a branch of research in which many contributions dealing with security integration from the early development stages have recently appeared. This chapter discusses some of the most interesting contributions in this area, and also provides a summary of our contributions through the development of various research lines dealing with different strategies to integrate security into information systems development as early in the development stages as is possible.

Cloud computing has emerged as a fast-growing technology in the past few years. It provides a great flexibility for storing, sharing and delivering data over the Internet without investing on new technology or resources. In spite of the development and wide array of cloud usage, security perspective of cloud computing still remains its infancy. Security challenges faced by cloud environment becomes more complicated when we include various stakeholders' perspectives. In a cloud environment, security perspectives and requirements are usually designed by software engineers or security experts. Sometimes clients' requirements are either ignored or given a very high importance. In order to implement cloud security by providing equal importance to client organizations, software engineers and security experts, we propose a new methodology in this paper. We use Microsoft's STRIDE-DREAD model to assess threats existing in the cloud environment and also to measure its consequences. Our aim is to rank the threats based on the nature of its severity, and also giving a significant importance for clients' requirements on security perspective. Our methodology would act as a guiding tool for security experts and software engineers to proceed with securing process especially for a private or a hybrid cloud. Once threats are ranked, we provide a link to a well-known security pattern classification. Although we have some security pattern classification schemes in the literature, we need a methodology to select a particular category of patterns. In this paper, we provide a novel methodology to select a set of security patterns for securing a cloud software. This methodology could aid a security expert or a software professional to assess the current vulnerability condition and prioritize by also including client's security requirements in a cloud environment.

Predicted effects of anthropogenic climate change on estuarine and coastal organisms are complex, and early life history stages of calcified ectotherms are amongst the most sensitive groups. Despite the importance of understanding their vulnerability, we lack information on the effects of multiple stressors on the embryonic development of estuarine and burrowing organisms, mainly mangrove-associated species. Here, we determined the combined effects of elevated temperature and decreased pH on the embryonic development of the estuarine fiddler crab Leptuca thayeri. Initially, the microhabitat (burrow) of ovigerous (egg-bearing) females was measured for temperature, pH, and salinity, which provided control values in our laboratory experiment. Embryos at the early stage of development were subjected to cross-factored treatments of predicted temperature and pH and evaluated for development rate, survivorship, and volume until their later embryonic stage. Embryo development was faster at early and later stages of development, and survivorship was lower under elevated temperature. Embryos under reduced pH showed advanced embryonic stages at their late development stage. Higher egg volume was observed in a warmer and acidified environment, and lower volume in warmer and non-acidified conditions, indicating that embryo development is synergistically affected by warming and acidification. More than 70% of embryos developed until late stages under the multiple-stressors treatment, giving insights on the effects of a warm and acidified environment on burrowing estuarine organisms and their early stages of development.

This paper explores the funding issues at the early stages of development of small biotechnology and software firms in the UK. The paper reviews theory and evidence on firms in these two sectors and presents empirical evidence for the UK derived from an extensive on-line questionnaire survey. The sample consists of 41 small biotechnology firms and 42 software firms representing a sub-sample of a larger sample of 133 high technology small firms (HTSFs) or technology-based small firms (TBSFs). As a subgroup of Small and Medium-sized Enterprises (SMEs), HTSFs face a number of obstacles to their business development. Finance is believed to be one of the main problems particularly at the early stages of their development. HTSFs encounter financing problems mainly because of their embryonic nature, young age, lack of collateral, lack of business skills, lack of market presence, high technical area and other factors. The main findings from this study suggest that entrepreneurs in the biotechnology sector reported higher academic qualifications than the other group. The founders of software firms are younger than the biotechnology firms. Firms in both groups have grown in terms of full-time employees. In terms of funding problems, software firms reports more funding problems than the biotechnology firms. Software firms are fastest growing firms and goes through the early stages of development quickly than the biotechnology group. With regards to the sources of funding the evidence shows that biotechnology small firms mainly use venture capital finance whilst the main source of funding for the software firms is personal savings and bank finance. However, biotechnology small firms report difficulties in securing equity finance. Software firms seem to be constraining their growth by the demand side financial constraints. The two groups of HTSFs in this study suggest that high technology small firms may have particular needs for finance and that these may change as they develop through early stages of business development. The paper present evidence on these issues and suggest differences in the experience of biotechnology and software firms in terms of financing.

Gametogenesis and embryogenesis are dynamic developmental stages marked by extensive modifications in the organization of the genome and nuclear architecture. In the literature it is conveyed that only B-type lamins are required in these early stages of development and that A-type lamins are not present or required until differentiation of specific cell types associated with specialized tissue is initiated. To assess the presence of nuclear structures that are putatively involved in genome regulation, we investigated the distribution of lamin proteins throughout the early stages of porcine embryonic development, using testes tissue sections, oocytes and in-vitro fertilized (IVF) porcine embryos and employing anti-lamin antibodies. We have shown that anti-lamin A staining is present at the one-cell, two-cell, four-cell, and six- to eight-cell stages of early porcine embryo development, but diminishes at the morulae and blastocyst stages. Large intranuclear anti-lamin A foci are prominent in the early preimplantation stages. Both anti-lamin A/C and anti-lamin B staining were clearly present in all embryonic stages. Immature porcine oocytes revealed lamin rings using the monoclonal anti-lamin A/C antibody and many immature oocytes exhibited a pale rim staining pattern with anti-lamin A antibody. A-type lamins were not observed in sperm precursor cells. Thus, we have shown that A-type lamins and B-type lamins are present at the nuclear envelope in very early porcine embryos and that lamin A is also found in large intranuclear aggregates in two-cell to eight-cell embryos but is lacking from later embryonic stages.

Herbaspirillum seropedicae is a plant growth-promoting bacteria isolated from diverse plant species. In this work, the main objective was to investigate the efficiency of H. seropedicae strain SmR1 in colonizing and increasing maize growth (DKB 390 variety) in the early stages of development under greenhouse conditions. Inoculation with H. seropedicae resulted in 19.43 % (regarding High and Low N controls) and 10.51% (regarding Low N control) in mean of increase of root biomass, for 1st and 2nd greenhouse experiments, respectively, mainly in the initial stages of plant development, at 21 days after emergence (DAE). Quantification of H. seropedicae in roots and leaves was performed by quantitative PCR. H. seropedicae was detected only in maize inoculated roots by qPCR, and a slight decrease in DNA copy number g-1 of fresh root weight was observed from 7 to 21 DAE, suggesting that there was initial effective colonization on maize plants. H. seropedicae strain SmR1 efficiently increased maize root biomass exhibiting its potential to be used as inoculant in agricultures systems.

During the "The National Forum on the Future of the Defense Health Information System," a track focusing on "Systems Architecture and Software Engineering" included eight presenters. These presenters identified three key areas of interest in this field, which include the need for open enterprise architecture and a federated database design, net centrality based on service-oriented architecture, and the need for focus on software usability and reusability. The eight panelists provided recommendations related to the suitability of service-oriented architecture and the enabling technologies of grid computing and Web 2.0 for building health services research centers and federated data warehouses to facilitate large-scale collaborative health care and research. Finally, they discussed the need to leverage industry best practices for software engineering to facilitate rapid software development, testing, and deployment.

As e-commerce transaction is evolving, security is becoming a paramount issue since a great deal of credit cards, fund transfer, web shopping and public retirements are involved. Therefore, an appropriate development process is necessary for such security critical application. Also, handling security issues at early stage of software development is paramount to avoiding vulnerabilities from scaling through production environment unnoticed. This paper proposes a comprehensive security requirements and security design within the development phase of an e-commerce application as a security control to identify security flaws at early stage of web application development which might prevent re-architecture when discovered at a later stage.

Software has become the core of organizations in different domains because the capacity of their products, systems, and services have an increasing dependence on software. This fact highlights the research challenges to be covered by computer science, especially in the software engineering (SE) area. On the one way, SE is in charge of covering all the aspects related to the software development process from the early stages of software development until its maintenance and therefore is closely related to the software quality. On the other hand, SE is in charge of providing engineers able to provide technological-base solutions to solve industrial problems. This chapter provides a research work path focused on helping software development organizations to change to a continuous software improvement culture impacting both their software development process highlighting the human factor training needs. Results show that the implementation of best practices could be easily implemented if adequate support is provided.

Early-life experiences and neuromodulatory mechanisms shape discontinuous behavioral plasticity across developmental stages and modify the spectrum of long-term individuality patterns within isogenic populations.

Effects of gamma ray irradiation on growing rice plants—I: Irradiations at four main developmental stages

Search-based software engineering (SBSE) consists of the application of metaheuristic search techniques—such as genetic algorithms, simulated annealing, hill climbing, and tabu search—to software engineering problems. This idea is based on the observation that some software engineering activities can be thought of as optimization problems, and on the fact that techniques providing exact solutions are, very often, unable to adequately scale to large, real-world software engineering problems. Define fitness functions to guide an automated search for solutions, rather than attempting to construct solutions from scratch by hand. SBSE moves the engineer up the abstraction chain, from the tedious and expensive role of detailed solution construction, to the potentially more productive and more cost-effective area of fitness function design. This approach has been repeatedly demonstrated to have successful applications across the software engineering life cycle from requirements and project planning to maintenance and testing. This special issue focuses on applications of search SBSE to the maintenance phase of the life cycle. After software testing 2, software maintenance is the most widely studied application area for SBSE research. Work on SBSE applications to problems in software maintenance can be traced back to the pioneering work of the Mancoridis et al. 3, which led to the development of the Bunch tool for software re-modularization 4. In the past five years there has been a significant increase in SBSE applications to software maintenance and evolution. Search-based techniques have been applied to post-development code improvement problems, such as object-oriented refactoring 5, 6, and imperative language slicing and transformation 7. Other applications are related to software engineering economics and project management problems, such as release planning 8-12, effort, and cost estimation 13-16, and project staffing and planning 17-20. Last, but not the least, SBSE has been applied to deal with service-oriented architectures, for example for services QoS-aware composition 21, service-level agreement negotiation 22, and testing 23. A complete overview of SBSE with a discussion of future research trends can be found in the recent International Conference on Software Engineering (ICSE) ‘Future of Software Engineering’ paper 24. This issue of the Journal of Software Maintenance and Evolution: Research and Practice features three outstanding papers, dealing with different aspects of software maintenance and evolution: release planning and staffing, re-factoring, and component substitution. The paper ‘Optimized Staffing for Product Releases—Focused Search and its Application at Chartwell Technologies’ by Puneet Kapur, An Ngo-The, Günther Ruhe, and Andrew Smith presents an approach for optimizing the staffing for product releases. The problem they solve can be viewed as part of the more general release planning problem, which assigns features to releases such that technical, resource, risk, and budget constraints are met. In particular, the genetic search-based approach the authors propose aims at assigning human resources to software development tasks, taking them from a pool of developers having different levels of skills. The applicability of the proposed approach is demonstrated with an industrial case study. The paper ‘Search-Based Refactoring: an Empirical Study’ by Mark O'Keffe and Mel Ó Cinnéide presents an approach to automatically re-factor, using search-based techniques, object-oriented systems that undergo repeated addition of functionality. Such addition can, very often, deteriorate the quality of the system's underlying design. Their re-factoring is guided by the QMOOD quality model 25, and the paper compares different optimization techniques, such as Genetic Algorithms, Simulated Annealing, and Multiple Ascent Hill-Climbing. The results of experiments carried out on five software systems suggest that the latter technique outperforms the others. The paper ‘Search-based Many-to-one Component Substitution’ by Nicolas Desnos, Marianne Huchard, Guy Tremblay, Christelle Urtado, and Sylvain Vauttier presents a search-based approach that allows the replacement of an obsolete component with a composition of multiple components. When a component becomes obsolete, the approach searches for a minimal assembly of other components, exposing their functionality by means of ports that preserves the behavior of the original component. The proposed approach has been evaluated on a set of randomly generated components. We hope that readers will enjoy this special issue and find the selected papers insightful and inspiring. We would like to thank all the authors who presented papers for this special issue: there were many good quality papers, but unfortunately we could accept only three of them. Last, but not the least, we would like to thank the reviewers who provided timely, detailed and constructive feedbacks to the authors. Without their precious help this special issue would not have been possible.