近來，隨著電子病歷的日漸普及，大眾對病人隱私的關注也隨之增加。在現行的醫療資訊系統 (Healthcare Information System, HIS) 中，透過適當的權限控管機制以保障電子病歷隱私是相當普遍的作法。然而，此機制並沒有考慮到病人對於隱私資訊用途的偏好不同。因此，擴充現行醫療資訊系統的權限控管機制，以處理病人隱私偏好的需求相當迫切。 針對此議題，我們認為剖面導向程式設計 (Aspect-Oriented Programming) 技術可以成為其解決方案的重要一環。本研究試著實作一個剖面導向的管理框架，在無需大幅度改寫系統的前提之下，能夠和現有的醫療資訊系統整合，達到讓病人自訂及管理隱私偏好。該框架和現行系統的關係是鬆散耦合 (loosely coupled) 的，因此，能夠輕易地用來擴充現行的系統，以便達到支援病人自定隱私偏好的目的。 / Electronic health records are getting more and more popular these days, however, concerns for patients' privacy also increase greatly. Currently, it's not unusual for Healthcare Information System (HIS) to adopt a proper access control mechanism to protect patients' electronic health records. Nonetheless, this design did not consider the requirements of supporting patients’ preferences regarding the use of their privacy information. Hence, it is desirable to extend the original access control system to handle patients' privacy preferences. For this issue, we argue that Aspect-Oriented Programming (AOP) can be an important part of the solutions. This thesis presents an aspect-based preference management framework that collects and manages patients' preferences. It can be integrated with the existing HIS to support patients' privacy preferences without rewriting from scratch. The proposed mechanisms are loosely coupled with the underlying system. It is therefore easier to use it to improve existing systems to support patients’ privacy preferences.

AspectFun是一個語法近似Haskell語言的函數式剖面導向語言。本論文中探討AspectFun在模組化型態擴充以及泛型程式設計上可扮演的角色。研究首先比較剖面與Haskell語言的type class在處理型態擴充需求議題的可行性，型態擴充議題我們以著名的Expression Problem作為代表(程式語言機制如何確保程式在擴充資料與運算函數的過程中，不需要修改舊有的程式碼，並能確保程式的型態安全)。 我們接著會探討剖面如何以模組化方式實現泛型程式設計。泛型程式設計是指函數接收一額外的型態引數，且函數所執行的運算是依據此型態引數結構來進行的。型態引數是用來表示函數所處理的引數或其回傳值型態為何，但型態引數在函數定義中可能是明確定義的或者隱含的。在此研究中會展示以剖面實現的泛型程式設計更優於使用type class。此外，本研究為使AspectFun可以實現泛型程式設計方法，亦在AspectFun擴充了Existential types與多型互遞迴函數。 / AspectFun is an aspect-oriented functional language with a Haskell-like syntax. This thesis present an study on modular type extension and generic programming using AspectFun. First, we compare the feasibility of using aspects and Haskell's type classes to address the type extension requirements as stated in the famous expression problem (which calls for language mechanisms that can support type-safe program extension in both the dimensions of data types and associated operations, yet neither code duplication nor code rewriting is required.) Second, we investigate how to use aspects to support generic programming in amodular manner. Generic programming means a form of programming in which a function takes a type as argument, and its behavior depends upon the structure of this type. The type argument, which may be explicit or implicit, represents the type of values to which the function is applied, or which the function returns. We show that aspects can do better than type classes in supporting generic programming. In particular, we extend AspectFun with existential types and polymorphic mutual recursion to achieve such a result.

本論文針對防丟器的剖面進行追蹤分析。防丟器包含發射器及接收器，發射器會發射訊號，接收器會記錄RSSI (Receive Signal Strength Index)與發射點數，其中RSSI表示訊號的強度。在工程理論上，RSSI與距離具有函數關係；然而環境中的干擾及事件發生都會影響此函數關係，特別是事件發生會嚴重地改變此函數關係，因此論文主要目的在於區別事件是否發生。 　　所謂的剖面指的是變數之間的函數關係，而論文中的剖面追蹤是利用管制圖的概念，用管制圖來監控剖面的參數估計值。如果管制圖上的點子出界，則表示事件發生而導致失控。 　　本論文以腳踏車是否被偷為例，嘗試一些實驗後找出顯著影響的因子設計實驗，包含17種腳踏車未被偷之情境與18種腳踏車被偷情境；欲利用未被偷的實驗建立試驗管制圖，而以被偷之情境來追蹤，用以驗證管制圖之有效性。 　　論文中主要透過分析防丟器產生的RSSI與距離的剖面、距離與發射點數的剖面來探討事件是否發生。另外剖面追蹤其實是種事後追蹤的方法，為了能即時追蹤，本論文亦採用預測區間的方式，來追蹤事件是否發生。 　　本論文建議監控距離與發射點數的剖面，因該方法的表現最好，另外建議增加防丟器上能紀錄距離的功能，此方法會更加合適。 　　本論文提出的即時追蹤方式並沒有特別好，因此一個比較好的即時追蹤方法是未來值得研究的方向。 / The device of Babyfinder is designed to detect if an event occurs. The Babyfinder includes transceiver and receiver. The signal strength, Received Signal Strength Indicator (RSSI), generates once there are distances between transceiver and receiver. In wireless communication theory, the relationship between RSSI and distance should be expressed by the model that RSSI = a + b ln (distance) Nevertheless, some circumstance noises and user noises (or common causes), and/or events (special causes) may affect the variation of RSSI. Since the occurrence of events may change the functional relationship of RSSI and distance, to distinguish if the functional relationship is changed by the occurred events is the subject of this study. This study designs some events and noises experiments based on the real noise factors and special events. Two monitoring schemes are proposed to distinguish the occurred events and noise circumstance. One is the profile monitoring scheme, the other is the real time monitoring scheme. The two proposed approaches of profile monitoring scheme are considered to monitor the profile of RSSI and distance and that of distance and the number of transmitting points, respectively. The profile monitoring approach for distance and the number of transmitting points shows better performance. However, the profile monitoring is an after-event tracing approach. It cannot detect the occurred events in time. A better approach of real-time monitoring approach is worth to be proposed in the future study.

隨著網路應用的發達與普及，應用系統的安全防護非常重要，但是要將安全方防護方面的設計與製作做好，卻不容易。因為與安全相關的程式碼必須嵌入到應用系統的各個模組中去執行，具有橫跨（cross-cutting）的特性。在設計時，若不加以區分，仍然以一般的物件或是函式模組來將其模組化的話，往往造成系統中反覆出現類似的程式碼以及不同需求的程式碼夾雜不清的現象，當系統愈趨複雜時，這些問題就愈顯嚴重，結果導致系統不易維護且錯誤頻仍。 最近興起的剖面導向程式設計（Aspect-Oriented Programming）基於關注分離的原則（Separation of Concerns），針對像安全這類橫跨性的需求，倡議在原有的物件或函式模組外，另以剖面（aspect）作為這些橫跨性需求的模組單位，以大幅改善應用系統的模組性。近兩三年來，這方面的發展迅速，各種支援方面導向的程式語言與相關工具相繼推出，美國全錄公司柏拉圖實驗室發展的AspectJ語言就是一個具代表性的成果。本論文以剖面導向的原則，以AspectJ及JBossAOP為主要工具，針對Web應用程式在認證與存取控管方面的安全需求，設計與製作一套具重用性且可處理資料內容相關、細緻層級的存取控管框架。 / Access control is a system-wide concern that has both a generic nature and an application dependent characteristic. It is generic as many functions must be protected with restricted access, yet the rule to grant a request is highly dependent on the application state. Hence it is common to see the code for implementing access control scattered over the system and tangled with the functional code, making the system difficult to maintain. This thesis addresses this issue for Web applications by presenting a practical access control framework based on aspect-oriented programming (AOP). Our approach accommodates a wide range of access control requirements of different granularity. AOP supports the modular implementation of access control while still enables the code to get a hold of the application state. Moreover, framework technology offers a balanced view between reuse and customization. As a result, our framework is able to enforce fine-grained access control for Web applications in a highly adaptable manner.

本研究之目的在於探討：（1）管理才能測驗與360度回饋之有效性，以及360度回饋之遞增效度；（2）以管理才能測驗及360度回饋為基礎之「個人—工作契合」對學習反應（受訓滿意、受訓壓力）及學習成效（受訓表現、學科測驗、實務驗收、部隊見習、總成績）的預測效果。 本研究樣本為接受短期軍官養成教育之義務役預官，共358人進行管理才能測驗評量，其中實習幹部41人接受360度回饋之評量。研究結果顯示：（1）管理才能測驗能預測受訓滿意、受訓壓力、受訓表現及實務驗收等效標，而360度回饋能預測受訓表現、學科測驗、實務驗收、部隊見習、總成績等效標；（2）控制管理才能測驗的效果後，360度回饋對於學科測驗、實務驗收、部隊見習、總成績等學習成效效標具有遞增預測效度（△R2=.14~.23）；（3）管理才能測驗之差距契合|D|測驗對受訓滿意、受訓壓力、受訓表現、實務驗收及總成績等具有預測力，而相關契合Q測驗對受訓表現、部隊見習等具有預測力。然而，無論是差距契合|D|測驗或相關契合Q測驗，均未能比管理才能測驗具有更高的預測力；（4）360度回饋之差距契合|D|360對受訓表現、學科測驗、實務驗收、部隊見習及總成績等具有預測力，而相關契合Q360則對任何效標均不具預測力，且不論是差距契合|D|360或相關契合Q360，均未能比為360度回饋具有更高的預測力；（5）差距契合|D|測驗對受訓滿意、受訓表現等效標的預測力高於相關契合Q測驗；差距契合|D|360對總成績的預測力高於相關契合Q360。 最後，研究者並進一步提出本研究之限制、後續研究方向，以及實務應用之建議，以提供軍事及企業組織加以參考運用。

Despite the built-in garbage collector, Java programs can still suffer the memory leak problem resulted from the unhealthy programming style of retaining unwanted references. This paper presents an aspect-based tool for assisting programmers in locating such references to fix the problem. This tool, FindLeaks, utilizes an aspect to collect memory consumption statistics and object references created during a program’s execution and analyzes them for detecting memory leaks. The distinctive feature of FindLeaks is that it reports not only suspected classes of leaked objects but also where in the source the unwanted references were created. Besides, this paper also reports our experience with FindLeaks on three open source Java programs and how we enhanced it to lower its overhead.

現今的應用系統中常會有橫跨性(Cross-Cutting)的程式模組存在，這類程式模組包括：日誌記錄、授權認證、資料永存性等，而這種程式模組在系統中若沒有被區分抽離出來，常常會導致系統重複出現與主要功能需求無關的程式碼，除此之外，這些橫跨性需求的程式碼還會與主要功能需求程式碼糾結在一起，造成程式碼夾雜不清的現象。在工作流程(Workflow)的開發過程中也有著相同的問題。為了解決上述的問題，本研究以JBoss jBPM(Java Business Process Manage- ment)為基礎平台，將剖面導向程式設計(Aspect-Oriented Progra- mming)的觀念與技術運用在工作流程的領域中，使流程設計人員能夠利用AOP的方式來解決橫跨性需求的模組化問題，並且利用靜態織入方法，改善jBPM工作流程引擎進行剖面流程在織入時的效能。 / Cross-cutting concerns are those system design issues that cut across the various modules of an application and are typically foundational system services that we need to consider before diving into building an application. Most common among these are logging, authentication, authorization, and persistence. Cross-cutting concerns always cause program code to be scattered and tangled, and therefore make it harder to understand and maintain. Similar problem also occurs in the field of workflow. In our research, we apply the concept of aspect-oriented programming(AOP) to the field of workflow system, and implement a static weaver for jBPM. With static weaver, process designer can use the facilities of AOP, and the performance is also improved via static weaving .

近年來剖面資料的監控在統計製程控制中有很大範圍的應用。在這篇論文裡，我們針對監控無母數剖面資料提出一個實務上的操作方法。這個操作方法有下列這些重要的特色：(1)使用一個靈活且有計算效率的無母數模型B-spline來描述反應變數與解釋變數的關係；(2)一般迴歸模型中之殘差結構假設是不需要的；(3)允許剖面資料內之觀測值間具有相關性之結構。最後，我們利用一個無線偵測器的實際資料來評估所提出方法的效率。 / Profile monitoring has received increasingly attention in a wide range of applications in statistical process control (SPC). In this work, we propose a practical proposed guide which has the following important features: (i) a flexible and computationally efficient smoothing technique, called the B-spline, is employed to describe the relationship between the response variable and the explanatory variable(s); (ii) the usual structural assumptions on the residuals are not require; and (iii) the dependence structure for the within-profile observations is appropriately accommodated. Finally, a real data set from a wireless sensor is used to evaluate the efficiency of our proposed method.

存取控管(Access Control)是網路應用程式(Web Applications)安全防護中的核心課題。貫徹存取控管的程式碼往往必須嵌入到應用系統的各個模組中，具有橫跨(cross-cutting)的特性，卻也因此常常造成系統中反覆出現類似的程式碼以及不同需求的程式碼夾雜不清的現象。所以學界業界紛紛提出了許多可設定式(configurable)的存取控管機制來解決此一問題。但這些機制都著重在一般功能性(function-level)的存取控管，對於較細緻化(fine-grained)的資料存取(data-level)控管，並未提供設定式的控管方式，還是得透過程式化(programmatic)的方式處理，所以仍然有程式橫跨性的問題。 最近興起的剖面導向程式設計(Aspect-Oriented Programming)基於關注分離的原則(Separation of Concerns)，針對像安全橫跨性的需求，倡議在原有的物件或函式模組外，另以剖面作為這些橫跨性需求的模組單位，既可集中開發又可依規則將安全程式碼整合至系統的各個模組。因此本研究將以AOP技術來設計與製作一套可設定式的細緻化存取控管服務與工具。 / Security is attracting more and more concerns in the development of Web applications. However, it is not easy to derive a robust security implementation for Web applications. The principle difficulty in designing security such as access control into an application system is that it is a concern that permeates through all the different modules of a system. As a result, security concerns in an application are often implemented with scattered and tangled code, which is not only error-prone but also makes it difficult to verify its correctness and perform the needed maintenance. Aspect-Oriented Programming (AOP) is a relative new design method that allows a programmer to isolate some of the code that crosscuts his program modules into a separate module, and thus realizes the concept of Separation of Concerns. AOP offers significant advantages to programming over traditional OO techniques in implementing crosscutting concerns such as access control. In this thesis, we define an XML schema for specifying fine-grained access control rules for Web applications in a configuration file and devise an aspect-oriented implementation scheme. Specifically, we develop an aspect synthesis tool that generates concrete access control aspects automatically from access control rules. These aspects, after woven into the base application, will enforce proper access control in a highly modular manner. As a result, we get a configurable implementation of access control that is not only adaptive but also effective.