Today’s smart phones are used for wider range of activities. This extended range of functionalities has also seen the infiltration of new security threats. Android has been the favorite target of cyber criminals. The malicious parties are using highly stealthy techniques to perform the targeted operations, which are hard to detect by the conventional signature and behaviour based approaches. Additionally, the limited resources of mobile device are inadequate to perform the extensive malware detection tasks. Impulsively emerging Android malware merit a robust and effective malware detection solution. In this thesis, we present the PIndroid ― a novel Permissions and Intents based framework for identifying Android malware apps. To the best of author’s knowledge, PIndroid is the first solution that uses a combination of permissions and intents supplemented with ensemble methods for malware detection. It overcomes the drawbacks of some of the existing malware detection methods. Our goal is to provide mobile users with an effective malware detection and prevention solution keeping in view the limited resources of mobile devices and versatility of malware behavior. Our detection engine classifies the apps against certain distinguishing combinations of permissions and intents. We conducted a comparative study of different machine learning algorithms against several performance measures to demonstrate their relative advantages. The proposed approach, when applied to 1,745 real world applications, provides more than 99% accuracy (which is best reported to date). Empirical results suggest that the proposed framework is effective in detection of malware apps including the obfuscated ones. In this thesis, we also present AndroPIn—an Android based malware detection algorithm using Permissions and Intents. It is designed with the methodology proposed in PInDroid. AndroPIn overcomes the limitation of stealthy techniques used by malware by exploiting the usage pattern of permissions and intents. These features, which play a major role in sharing user data and device resources cannot be obfuscated or altered. These vital features are well suited for resource constrained smartphones. Experimental evaluation on a corpus of real-world malware and benign apps demonstrate that the proposed algorithm can effectively detect malicious apps and is resilient to common obfuscations methods. Besides PInDroid and AndroPIn, this thesis consists of three additional studies, which supplement the proposed methodology. First study investigates if there is any correlation between permissions and intents which can be exploited to detect malware apps. For this, the statistical significance test is applied to investigate the correlation between permissions and intents. We found statistical evidence of a strong correlation between permissions and intents which could be exploited to detect malware applications. The second study is conducted to investigate if the performance of classifiers can further be improved with ensemble learning methods. We applied different ensemble methods such as bagging, boosting and stacking. The experiments with ensemble methods yielded much improved results. The third study is related to investigating if the permissions and intents based system can be used to detect the ever challenging colluding apps. Application collusion is an emerging threat to Android based devices. We discuss the current state of research on app collusion and open challenges to the detection of colluding apps. We compare existing approaches and present an integrated approach that can be used to detect the malicious app collusion.

Maintaining a fair balance between individuals’ interests and the public interest is arguably believed to be the most effective approach in serving the ultimate objective of copyright: to promote social, economic and cultural development for the benefit of both rightsholders and the public at large. Through this balanced approach, creativity can be maximised and thrive better than by tilting towards one or the other. In copyright law, such balance is reflected by the way in which the short-term grant of exclusive rights respects the long-term public interest represented by limitations and exceptions to copyright. Despite an unclear and non-uniform definition and scope, the importance of the public interest has been implicitly and explicitly recognised through disparate forms of safeguards in different jurisdictions. However, the last few decades have seen a rapid development of information technologies which, in turn, has contributed to an unparalleled legislative drive at international level towards overprotecting the interests of rightsholders. This has then left the public interest under-protected and now constitutes an imbalance of copyright. This thesis therefore examines legislative intervention into the international copyright regime in an attempt to ensure that the public interest is uniformly and mandatorily safeguarded at international level. In particular, it strives to establish an overarching public interest defence capable of protecting certain aspects of public values embedded in copyright works. In achieving this, the thesis examines the scope of the defence, what it should entail, and what aspects are to be taken into account in the course of formulating and giving effect to the defence. The substantive chapters investigate the public policy grounds, the right to freedom of expression and the international three-step test, i.e. the roles they play in shaping the latitude and operations of the defence, respectively. Finally, the thesis also evaluates different ways in which the defence can be incorporated into the international copyright regime in order to effectively counterbalance the rightsholder-centric tendency and restore the balance of copyright.

This thesis addresses the problem of sharing and transferring knowledge within knowledge-intensive organisations from a user modelling perspective with the purpose of improving individual and group performance. It explores the idea of creating organisational environments from which any of the users involved can benefit by being aware of each other such that sharing expertise between those who are knowledge providers and those who are knowledge seekers can be maximised. In order to encourage individuals to share such valuable expertise, it also explores the idea of keeping a balance between ensuring the availability of information and the increase in user workloads due to the need to handle unwanted information. In an attempt to demonstrate the ideas mentioned above, this research examines the application of user modelling techniques to the development of communication-based task learning systems based on e-mail communication. The design rationale for using e-mail is that personally held expertise is often explicated through e-mail exchanges since it provides a good source for extracting user knowledge. The provision of an automatic message categorisation system that combines knowledge acquired from both statistical and symbolic text learning techniques is one of the three themes of this work. The creation of a new user model that captures the different levels of expertise reflected in exchanged e-mail messages, and makes use of them in linking knowledge providers and knowledge seekers is the second. The design of a new information distribution method to reduce both information overload and underload is the third.

Citizen sensor networks are open information systems in which members of the public act as information providers. The information distributed in such networks ranges from observations of events (e.g. noise measurements or monitoring of environmental parameters) to probabilistic estimates (e.g. projected traffic reports or weather forecasts). However, due to rapid advances in technology such as high speed mobile internet and sophisticated portable devices (from smart-phones to hand-held game consoles), it is expected that citizen sensor networks will evolve. This evolution will be driven by an increase in the number of information providers, since, in the future, it will be much easier to gather and communicate information at a large scale, which in turn, will trigger a transition to more commercial applications. Given this projected evolution, one key difference between future citizen sensor networks and conventional present ones is the emergence of self-interested behaviour, which can manifest in two main ways. First, information providers may choose to commit insufficient resources when producing their observations, and second, they may opt to misreport them. Both aspects of this self-interested behaviour are ignored in current citizen sensor networks. However, as their applications are broadened and commercial applications expand, information providers are likely to demand some kind of payment (e.g. real or virtual currency) for the information they provide. Naturally, those interested in buying this information, will also require guarantees of its quality. It is these issues that we deal with in this thesis through the introduction of a series of novel two-stage mechanisms, based on strictly proper scoring rules. We focus on strictly proper scoring rules, as they have been used in the past as a method of eliciting truthful reporting of predictions in various forecasting scenarios (most notably in weather forecasting). By using payments that are based on such scoring rules, our mechanisms effectively address the issue of selfish behaviour by motivating information providers in a citizen sensor network to, first, invest the resources required by the information buyer in the generation of their observations, and second, to report them truthfully. To begin with, we introduce a mechanism that allows the centre (acting as an information buyer) to select a single agent that can provide a costly observation at a minimum cost. This is the first time a mechanism has been derived for a setting in which the centre has no knowledge of the actual costs involved in the generation of the agents' observations. Building on this, we then make two further contributions to the state of the art, with the introduction of two extensions of this mechanism. First, we extend the mechanism so that it can be applied in a citizen sensor network where the information providers do not have the same resources available for the generation of their observations. These different capabilities are reflected in the quality of the provided observations. Hence, the centre must select multiple agents by eliciting their costs and the maximum precisions of their observations and then ask them to produce these observations. Second, we consider a setting where the information buyer cannot gain any knowledge of the actual outcome beyond what it receives through the agents' reports. Now, because the centre is not able to evaluate the providers' reported observations through external means, it has to rely solely on the reports it receives. It does this by fusing the reports together into one observation which then uses as a means to assess the reports of each of the providers. For the initial mechanism and each of the two extensions, we prove their economic properties (i.e. incentive compatibility and individual rationality) and then present empirical results comparing a number of specific scoring rules, which includes the quadratic, spherical, logarithmic and a parametric family of scoring rules. These results show that although the logarithmic scoring rule minimises the mean and variance of an agent's payment, using it may result in unbounded payments if an agent provides an observation of poor quality. Conversely, the payments of the parametric family exhibit finite bounds and are similar to those of the logarithmic rule for specific values of the parameter. Thus, we show that the parametric scoring rule is the best candidate in our setting. We empirically evaluate both extended mechanisms in the same way, and for the first extension, we show that the mechanism describes a family of possible ways to perform the agent selection, and that there is one that dominates all others. Finally, we compare both extensions with the peer prediction mechanism introduced by \cite{trustsr1} and show that in all three mechanisms the total expected payment is the same, while for both our mechanisms the variance in the total payment is significantly lower.

Text in English, abstract in English and Afrikaans / Information is one of the most important resources in organizations today. The role of Marketing Information Systems (MKIS) is to facilitate the efficient and effective use of information in marketing decision-making. Service organizations are especially reliant on decision-support information, due to the complex nature of their environment. However, indications are that they are not utilizing information to their best benefit, despite the considerable advantages they might gain from it. In fact, it could be said that service organizations often seem to lack a culture of market orientation. In measuring the satisfaction with the quality of market intelligence, it becomes obvious that marketing decision-makers are generally dissatisfied with the results of MKIS. Some of the reasons are: • The 'disconnect' between information technology and marketing in organizations, which results in marketing decision-makers not getting information in the format they require, and feeling as if their requirements are not taken into account when MKIS are developed. • The lack of availability of usable customer and competitor data, which are regarded by marketing decision-makers as the most important categories of information. • The focus on generating data, but not adding value to it. Marketing decisionmakers have indicated that they require analysis, and not raw data. In order to bridge these problems, South African service organizations need to focus on the successful integration of MKIS into the organization. This requires an understanding of marketing decision-makers' requirements, closer cooperation between IT and marketing and the establishment of a culture of information sharing. / lnligting is een van die belangrikste hulpbronne van hedendaagse organisasies. Die rol van bemarkingsinligtingstelsels (BMIS) is die fasilitering van die doelmatige en effektiewe gebruik van inligting in bemarkingsbesluitneming. Diensorganisasies is veral afhanklik van besluitsondersteunende inligting, as gevolg van die komplekse aard van hulle omgewing. Tog is daar aanduidings dat hulle inligting nie tot die beste voordeel aanwend nie, ten spyte van die aansienlike voordeel wat hulle daaruit kan trek. In werklikheid kan dit gestel word dat diensorganisasies skynbaar nie 'n markgerigte kultuur het nie. In die meting van tevredenheid met die kwaliteit van markintelligensie blyk dit dat bemarkingsbesluitnemers in die algemeen ontevrede is met die resultate van BMIS. Sommige redes hiervoor: • Die gaping tussen inligtingstegnologie en bemarking in organisasies, wat daartoe lei dat bemarkingsbesluitnemers nie inligting ontvang in die formaat wat hulle vereis nie, en voel dat hulle behoeftes nie in ag geneem word wanneer BMIS ontwikkel word nie. • Die gebrek aan bruikbare inligting oor kliente en mededingers, wat deur benarkingsbesuitnemers beskou word as die belangrikste kategoriee van inligting. • Die fokus op die genereer van data, sonder om waarde daaraan toe te voeg. Bemarkingsbesluitnerners het aangedui dat hulle ontleding vereis en nie slegs 'rou' data nie. Ten einde hierdie probleme te oorbrug moet Suid-Afrikaanse diensorganisasies fokus op die suksesvolle integrasie van BMIS in die organisasie. Dit vereis begrip vir bemarkingsbesluitnemers se behoeftes, nader samewerking tussen inligtingstegnologie en bemarking en die daarstel van 'n kultuur van gedeelde inligting. / Business Management / D. Comm. (Business Management)

This thesis aims to create a fundamental historical and geographical framework for the study of runes written in medieval manuscripts. It does so by examining the transmission of Anglo-Saxon and Scandinavian rune-rows and runic alphabets within the wider context of contemporary medieval scholarship. The focal points of this study are the questions of the origin of the phenomenon, and how it developed between the eighth and the twelfth centuries, as evidenced by manuscripts currently held by continental and English libraries. In order to contextualise this study, a brief introduction is dedicated to the concept of runic manuscripts and to an overview of the scholarship which has been carried out on this material thus far. The observations from this discussion are then used to define the limitations of this work. Finally, a number of the issues currently faced by scholars with regard to defining the field of manuscript runology are examined, and the comparison with its epigraphical counterpart is made. The study includes thirty-nine manuscripts with alphabets or rune-rows; these are listed and described in a catalogue which comprises the main body of the thesis. Each manuscript receives a description of its history and contents, an analysis of the runic material it contains, and an examination of the immediate and wider contexts in which the runes appear. The information gathered in the catalogue is collectively analysed in the final chapter, which focuses on determining the origin and development of the phenomenon of runes in manuscripts. The examination of origin uses commonalities between the contexts of the runes to achieve insight into the medieval perception of manuscript runes, and to construct a possible point of origin. The development section then follows the evolution of the tradition and compares and contrasts its execution on the Continent and in the British Isles. Finally, these results are used to indicate the place of written runes within medieval learning, and to construct a general framework which can be used to build upon for future research.

M.A. (Information Science) / As organisations exist in the constantly overwhelming information age, more emphasis is put on information as resource and the economic value it has in the organisation. The South African life insurance industry is no different from other organisations and deals with a vast number ofinformation that flows through these organisations daily. In this study, the role of information, the management of information and the existence and implementation of an information policy are examined. The appointment of an information manager to manage information is also examined. The study was done to determine the level of importance and value of information in this type of industry and whether the South African insurance industry has identified information as a valuable resource in the organisation. Information as resource and the management thereof as competitive advantage is studied. The research methods applied were to carry out a literature study on information and its role as resource in an organisation, the roles and responsibilities of an information manager and the advantage and implementation of an information policy in the organisation. A questionnaire was compiled and sent to all the major South African life insurance companies to determine the above aspects and the current status in this industry.

M.Phil. (Information Management) / An efficient document management system is one that considers the user’s needs for information and the ability of the system to provide valuable information that matches certain characteristics. When users utilise a document management system (DMS) they require a system that they perceive will make their work easier. The efficient and effective use of a DMS depends on how receptive the users are to technology and their intention in using the system. The documents in the document management system are corporate knowledge and should therefore be stored in a central repository such as the DMS, where the company’s corporate memory cannot be lost. The DMS has all the capabilities to keep documents safe where the documents can be accessed again. To measure the technology acceptance of end users, research has identified the technology acceptance model (TAM) as the ideal method. TAM is tailored to elaborate on computer usage, perceived ease of use, attitudes toward using and usage behaviour. The research stream on technology acceptance and use has become one of the most prolific and is claimed to be the most mature research in the modern information system field. The problem identified was to analyse the user’s behavioural intent towards effectively utilising the Eskom in-house document management system. The purpose was to investigate the use of the document system that is currently in place at Eskom and determine user perspectives. Employees working in Eskom cannot afford to neglect using the document management system on a regular basis. Important documents relevant for everyday work are stored in the system, and all employees are granted access to these documents. Given these considerations, users’ perceptions of the in-house document system cannot be taken for granted, and these issues were researched. The findings from the TAM variables showed that perceptions of users towards the DMS were divided, while half of the users were satisfied with the information, system, usefulness and ease of using the system the other half was not satisfied. A division in opinion emerged whether the system should be replaced or rather improved. Benefits of both options were weighed and the study suggested that the system be replaced.

The NHS is providing patients with access to summaries of their individual health records, so that they can understand and manage their conditions more effectively. At the same time, the government is encouraging patients to be more involved in the decisions made about their direction of care, as evidence shows that outcomes improve if decision-making is shared. As the Internet grows, people are using it as a major source of health information. However, anybody can post information to the Internet, and there is no guarantee that it is reliable, accurate, based on research, or relevant. Therefore, people searching online for health information, using generic search engines, are at risk of finding information that may have a detrimental effect on their health and wellbeing. The aim of this research is to produce a model of a multi-approach evidence-based, post-diagnosis support system for patients and carers in England. The literature review carried out by the author identified 300 papers which looked at both the importance of patient participation in decision-making, and the issues with finding and using health information for patients and carers, but not together in the same research. While much has been written about evidence based practice for health professionals, there is a gap in the research about evidence-based patient choice and information service provision and skills for the general public. This is an issue for health professionals because patients are being actively encouraged to participate in the choices made about their treatment, but while there is evidence demonstrating the effectiveness of patient participation, there is no evidence to say that they have adequate access to information and the skills to use it. Health services need to know if there is appropriate information support for the general public, otherwise there is a risk that patients will not have the right information to help them make the best choice. To assess the information-seeking behaviour of the general public, a mixed-study analysis was performed using quantitative and qualitative surveys, and 139 responses were collected and analysed. The population included people suffering from Alzheimer’s disease and their carers. The evidence and the survey results confirmed that people do want to make decisions with their doctor, and that they do search for information, but do not always find what they are looking for. They said that they would value librarian support and information skills training, but would also find an all-encompassing consumer health information web-site useful. A consumer health information literacy framework was developed based on the existing SCONUL Seven Pillars of Information Literacy framework and the five steps to evidence based practice concept. This framework provided the foundation for the design and development of COCO, an innovative model to facilitate access to high quality consumer health information using existing NHS online information products combined with the information skills of public and medical librarians. The innovations of COCO are that it focuses on the whole population, supports those who are and are not computer literate, creates an opportunity for collaboration within the library sector, and builds on existing NHS online resources rather than creating new ones. COCO provides people with a central access point to reliable and relevant online consumer health information to help them make informed decisions about their care pathway. The collaborative element of the model ensures that is accessible to everyone, without incurring significant costs to public services. The main output from this research synthesis, is an original needs-based model (COCO), designed to simplify the consumer health information-seeking process for the general public, enabling them to access the right information to fulfil their information needs and help them make evidence-based treatment decisions with their doctors. The design of COCO was reviewed, validated and improved using structured opinions of experts in consumer health information, evidence based practice, information literacy, and information technology. Real-life consumer scenarios were used to manually test COCO against free text searches in Google. The search results from COCO and Google were analysed and compared using six validation metrics. This demonstrated the efficiency of COCO in providing significantly better quality information relevant to patients and carers, compared to Google. A mock-up of the final design and search results of COCO were then prepared, along with recommendations for future research.

The first of the eight United Nations Millennium Development Goals for 2015 is to “Eradicate Extreme Poverty and Hunger”. Achieving this goal would be aided by having an effective and productive agricultural community. Agricultural organisations assist producers to be more effective in their operation through Commercial Extension Services (CES). Through CES, producers are advised and educated about new agricultural practices, techniques and products. A key component of CES is the provision of relevant information to producers. The problem this research addressed was that producers experience difficulty in accessing the information they require in a timeous, relevant and personalised manner. No suitable framework was found for agricultural organisations to use when designing and implementing an Information Services Platform. The main research objective was to develop and evaluate an Information Services Framework (ISF) for organisations offering information as a CES. The research methodology used to achieve this objective was Design Science Research (DSR). DSR is an iterative methodology with three cycles, namely the relevance, the design and the rigor cycles. The relevance cycle was used to acquire the information required to inform the design cycle. The information was collected by using literature research and empirical studies. The first study, the Producer Information Requirements Survey (PIRS) sought to determine the information requirements of grain producers and was conducted by interviewing grain producers in the Swartland region of South Africa. The second study, the Internet and Mobile Device Usage Survey (IMDUS) investigated the use of the Internet and mobile devices amongst South African producers by means of a national on-line survey. The quantitative and qualitative results of the analysis were used during the design phase to develop the ISF. The design phase of DSR process led to the creation of an ISF for providing Information as a Service (IaaS) in CES. The framework allows for information services to be provided in a manner and form customised to an individual producer’s preferences. The foundation of the framework is that information can be sourced from various sources, internal or external to the organisation and distributed to producers by using a unified platform. During the research, an agricultural organisation, BKB GrainCo used the proposed ISF to develop an Information Services Platform (ISP) to provide information to its producers. BKB GrainCo’s development process included two evaluations. The first evaluation, the Information Preferences Prototype Survey, was intended to test a key component of the framework, the nformation Preferences Profile. The Information Preferences Profile was conceptualized following the PIRS. In the PIRS it was determined that individual producers would prefer to specify what information they would receive, when they required it and have it delivered by using a medium of their choice. The second evaluation of the design phase was a Usability Study. The Usability Study was intended to test the functionality of the system across various technologies. The rigor cycle, following the implementation of BKB GrainCo’s ISP, contained the main evaluation, the Information Services Platform Evaluation. The evaluation was used to test the impact of BKB GrainCo’s ISP on perception of received service. The evaluation used a standardised version of the standardised SERVQUAL instrument specifically adapted in this research to measure the provision of IaaS. The results obtained during the evaluation indicated that the BKB GrainCo’s Information Services Platform was found to be valued by producers and improved the communication services of agricultural organisations. It was inferred from the successful implementation of BKB GrainCo’s ISP and the positive response from producers, after the evaluations, that the developed ISF was suitable for an agricultural organisation to provide CES. The theoretical contributions included underpinning the concept of CES in terms of stakeholder theory. Its underpinning provides justification for agricultural organisations to improve CES – including the provision of information. A second theoretical contribution was the extension of SERVQUAL as an IS theory by developing and validating a dimension designed to test the provision of IaaS. Providing producers with accurate and reliable personalised information has the capacity to improve producers’ ability to make informed decisions. Informed decision making will contribute to having an effective and productive agricultural community; resulting in improvement of agricultural output and contributing to food security and job creation. Improved agricultural output, better food security and job creation are aspects which will contribute toward the attainment of the first of eight United Nations Millennium Development Goals for 2015, which is to “Eradicate Extreme Poverty and Hunger”.