In January 2002 Bill Gates sent out the renowned "Trustworthy Computing" memo where he announced that the company would shift their focus from adding new features and functionality to security and privacy. This was what led to the formulation of the Security Development Lifecycle (SDL). This process is now mandatoryfor all development at Microsoft with meaningful business risk and/or with accessto sensitive data. The SDL led to great improvements of the number and severityof vulnerabilities in the products that went through the process. When the vulnerabilitiesin the Operation System (OS) were diminished Microsoft noticed thatthe threats moved to the application layer. This led to them wanting to spread their model to application developers. One interesting target group is mid-sized Independent Software Vendors (ISVs), mainly because there are so many of them. Finding out what development process they use today and how they would benefitfrom and could be informed about the SDL is of interest for Microsoft. Interviews with Microsoft evangelists, security experts and representatives from the target group has been preformed to get a better understanding of the situationtoday and how it could be improved. The interviews have resulted in a numberof recommendations for how to adjust the SDL and the information concerningthe process to meet mid-sized ISVs needs. A clear need for information, that is categorized and directed to the different bussiness areas in the software industry, with specific recommendations and courses of action for each of them, has beenidentified. The inter views have also resulted in a situation analysis of the security awareness at the target group today and the experts view of what activities in the SDL they would benefit from. The maturity level amongst the ISVs was found to be low and their own estimated vulnerability level was low. The estimated security awareness in the future on the other hand is high, this can be accounted for the upcoming migration to cloud services that is requested by the customersand the security issues this will lead to. One thing that is agreed upon that would be suitable to introduce is threat modeling. This requires little security knowledge yet leads to dramatic reduction in vulnerabilities. The experts have also shared improvements they think could be made on the SDL.

Thesis advisor: Michael Russell / SDL is an important life-long learning skill. Current research on SDL has approached it both as a set of skills students develop and as an instructional method. The study presented here approached SDL as an instructional method and explored educators’ instructional use of SDL in relation with pedagogical beliefs, a relationship that has not been sufficiently explored in past research. This relationship was also placed in a Critical Race Theoretical Framework to explore whether the implementation of SDL differed by the racial composition of schools. A multi-method approach was taken which included surveying and interviewing middle school teachers in Massachusetts public schools. Descriptive analyses, factor analyses, correlation analyses, regression analyses, and t-tests were conducted in order to explore the relationship between teachers’ implementation of SDL and their extent of technology integration and pedagogical beliefs, as well as whether the implementation of SDL differs based on the racial composition of the schools in which teachers work. Interviews were employed to explore the results further. Teachers with more student-centered beliefs had higher levels of implementation of SDL than those with more teacher-centered beliefs, and pedagogical beliefs were also a stronger predictor of the level of implementation of SDL than were teachers’ amount of technology use or beliefs about student technology use. No significant relationship was observed between SDL and the racial composition of schools. / Thesis (BA) — Boston College, 2019. / Submitted to: Boston College. College of Arts and Sciences. / Discipline: Departmental Honors. / Discipline: Sociology.

NOGUEIRA, Antonia Diana Braga. Uma proposta de integração das redes UMTS e IEEE 802.11 com suporte a mobilidade. 2007. 112 f. Dissertação (Mestrado em ciência da computação)- Universidade Federal do Ceará, Fortaleza-CE, 2007. / Submitted by Elineudson Ribeiro (elineudsonr@gmail.com) on 2016-07-08T18:49:42Z No. of bitstreams: 1 2007_dis_adbnogueira.pdf: 13756193 bytes, checksum: bb4a338bd2622ad6f90479ce37824ccd (MD5) / Approved for entry into archive by Rocilda Sales (rocilda@ufc.br) on 2016-07-18T13:41:19Z (GMT) No. of bitstreams: 1 2007_dis_adbnogueira.pdf: 13756193 bytes, checksum: bb4a338bd2622ad6f90479ce37824ccd (MD5) / Made available in DSpace on 2016-07-18T13:41:19Z (GMT). No. of bitstreams: 1 2007_dis_adbnogueira.pdf: 13756193 bytes, checksum: bb4a338bd2622ad6f90479ce37824ccd (MD5) Previous issue date: 2007 / Wireless Local Area Networks (WLANs) IEEE 802.11 reach relatively high data transmission rates when compared to other wireless networks, such as Bluetooth. These high data transmission rates have gained attention from the cellular networks operators, which have been considering IEEE 802.11 networks as a complement to their access networks. This interoperability between cellular systems and WLANs has been frequently discussed in the literature. For example, 3GPP (Third Generation Partnership Project) has defined six levels for the complete integration of the third generation cellular networks and WLANs. However, the mobility support has not been specified yet, which is necessary to make feasible voice and data transmission transparence for the final users. Thus, this work presents two approaches for the mobility management of the integration between UMTS and IEEE 802.11 networks: the first one is based on SIP (Session Initiation Protocol), and the other one is based on MIPv6 (Mobile IP version 6). This proposal extends the Loose Interworking architecture and uses the fourth level of the 3GPP specification. First, these approaches are modeled using sequence diagrams and, then, they are mapped to the SDL (Specification and Description Language) formal description technique. SDL, which is largely used to formally specify telecommunications systems, presents simulation and validation procedures that are applied to evaluate the specification and, consequently, the proposed approaches. / As redes locais sem fio (Wireless Local Area Networks - WLANs) IEEE 802.11 atingem taxas de transmissão de dados relativamente altas quando comparadas `a outras redes sem fio, por exemplo, Bluetooth. Essas altas taxas de transmissãao têm interessado as operadoras de redes celulares, as quais começam a ver as redes IEEE 802.11 como um complemento as suas redes de acesso. Esta interoperabilidade entre sistemas celulares e WLANs tem sido um tema bastante discutido na literatura. Por exemplo, o 3GPP (Third Generation Partnership Project) define seis n´ıveis para a total integração das redes celulares de terceira geração com as redes locais sem fio. No entanto, a integração com suporte a mobilidade ainda não foi especificada, o que é necessário para viabilizar a transparência de transmissão de voz e dados para os usuários finais. Esta dissertação apresenta então duas abordagens para o gerenciamento de mobilidade na integração do sistema 3G UMTS com as redes IEEE 802.11: uma baseada no SIP (Session Initiation Protocol ) e a outra no MIP versão 6 (Mobile IP version 6 - MIPv6). A proposta estende a arquitetura Loose Interworking e utiliza os requisitos do nível 4 do 3GPP. Para especificar a proposta, as abordagens de integração das redes UMTS e IEEE 802.11 foram modeladas em diagramas de seqüência e, em seguida, mapeadas para a técnica de descrição formal SDL (Specification and Description Language). SDL, que é bastante utilizada para especificar formalmente sistemas de telecomunicações, apresenta procedimentos de simulação e validação que são aplicados para avaliar a especificação e, em conseqüência, as abordagens propostas.

NOGUEIRA, Antonia Diana Braga. Uma proposta de integração das redes UMTS e IEEE 802.11 com suporte a mobilidade. 2007. 91 f. : Dissertação (mestrado) - Universidade Federal do Ceará, Centro de Ciências, Departamento de Computação, Fortaleza-CE, 2007. / Submitted by guaracy araujo (guaraa3355@gmail.com) on 2016-05-30T19:51:57Z No. of bitstreams: 1 2007_dis_adbnogueira.pdf: 13756193 bytes, checksum: bb4a338bd2622ad6f90479ce37824ccd (MD5) / Approved for entry into archive by guaracy araujo (guaraa3355@gmail.com) on 2016-05-30T19:52:27Z (GMT) No. of bitstreams: 1 2007_dis_adbnogueira.pdf: 13756193 bytes, checksum: bb4a338bd2622ad6f90479ce37824ccd (MD5) / Made available in DSpace on 2016-05-30T19:52:27Z (GMT). No. of bitstreams: 1 2007_dis_adbnogueira.pdf: 13756193 bytes, checksum: bb4a338bd2622ad6f90479ce37824ccd (MD5) Previous issue date: 2007 / Wireless Local Area Networks (WLANs) IEEE 802.11 reach relatively high data transmission rates when compared to other wireless networks, such as Bluetooth. These high data transmission rates have gained attention from the cellular networks operators, which have been considering IEEE 802.11 networks as a complement to their access networks. This interoperability between cellular systems and WLANs has been frequently discussed in the literature. For example, 3GPP (Third Generation Partnership Project) has defined six levels for the complete integration of the third generation cellular networks and WLANs. However, the mobility support has not been specified yet, which is necessary to make feasible voice and data transmission transparence for the final users. Thus, this work presents two approaches for the mobility management of the integration between UMTS and IEEE 802.11 networks: the first one is based on SIP (Session Initiation Protocol), and the other one is based on MIPv6 (Mobile IP version 6). This proposal extends the Loose Interworking architecture and uses the fourth level of the 3GPP specification. First, these approaches are modeled using sequence diagrams and, then, they are mapped to the SDL (Specification and Description Language) formal description technique. SDL, which is largely used to formally specify telecommunications systems, presents simulation and validation procedures that are applied to evaluate the specification and, consequently, the proposed approaches. / As redes locais sem fio (Wireless Local Area Networks - WLANs) IEEE 802.11 atingem taxas de transmissão de dados relativamente altas quando comparadas `a outras redes sem fio, por exemplo, Bluetooth. Essas altas taxas de transmissãao têm interessado as operadoras de redes celulares, as quais começam a ver as redes IEEE 802.11 como um complemento as suas redes de acesso. Esta interoperabilidade entre sistemas celulares e WLANs tem sido um tema bastante discutido na literatura. Por exemplo, o 3GPP (Third Generation Partnership Project) define seis n´ıveis para a total integração das redes celulares de terceira geração com as redes locais sem fio. No entanto, a integração com suporte a mobilidade ainda não foi especificada, o que é necessário para viabilizar a transparência de transmissão de voz e dados para os usuários finais. Esta dissertação apresenta então duas abordagens para o gerenciamento de mobilidade na integração do sistema 3G UMTS com as redes IEEE 802.11: uma baseada no SIP (Session Initiation Protocol ) e a outra no MIP versão 6 (Mobile IP version 6 - MIPv6). A proposta estende a arquitetura Loose Interworking e utiliza os requisitos do nível 4 do 3GPP. Para especificar a proposta, as abordagens de integração das redes UMTS e IEEE 802.11 foram modeladas em diagramas de seqüência e, em seguida, mapeadas para a técnica de descrição formal SDL (Specification and Description Language). SDL, que é bastante utilizada para especificar formalmente sistemas de telecomunicações, apresenta procedimentos de simulação e validação que são aplicados para avaliar a especificação e, em conseqüência, as abordagens propostas.

Conselho Nacional de Desenvolvimento CientÃfico e TecnolÃgico / As redes locais sem fio (Wireless Local Area Networks - WLANs) IEEE 802.11 atingem taxas de transmissÃo de dados relativamente altas quando comparadas `a outras redes sem fio, por exemplo, Bluetooth. Essas altas taxas de transmissÃao tÃm interessado as operadoras de redes celulares, as quais comeÃam a ver as redes IEEE 802.11 como um complemento as suas redes de acesso. Esta interoperabilidade entre sistemas celulares e WLANs tem sido um tema bastante discutido na literatura. Por exemplo, o 3GPP (Third Generation Partnership Project) define seis nÂıveis para a total integraÃÃo das redes celulares de terceira geraÃÃo com as redes locais sem fio. No entanto, a integraÃÃo com suporte a mobilidade ainda nÃo foi especificada, o que à necessÃrio para viabilizar a transparÃncia de transmissÃo de voz e dados para os usuÃrios finais. Esta dissertaÃÃo apresenta entÃo duas abordagens para o gerenciamento de mobilidade na integraÃÃo do sistema 3G UMTS com as redes IEEE 802.11: uma baseada no SIP (Session Initiation Protocol ) e a outra no MIP versÃo 6 (Mobile IP version 6 - MIPv6). A proposta estende a arquitetura Loose Interworking e utiliza os requisitos do nÃvel 4 do 3GPP. Para especificar a proposta, as abordagens de integraÃÃo das redes UMTS e IEEE 802.11 foram modeladas em diagramas de seqÃÃncia e, em seguida, mapeadas para a tÃcnica de descriÃÃo formal SDL (Specification and Description Language). SDL, que à bastante utilizada para especificar formalmente sistemas de telecomunicaÃÃes, apresenta procedimentos de simulaÃÃo e validaÃÃo que sÃo aplicados para avaliar a especificaÃÃo e, em conseqÃÃncia, as abordagens propostas. / Wireless Local Area Networks (WLANs) IEEE 802.11 reach relatively high data transmission rates when compared to other wireless networks, such as Bluetooth. These high data transmission rates have gained attention from the cellular networks operators, which have been considering IEEE 802.11 networks as a complement to their access networks. This interoperability between cellular systems and WLANs has been frequently discussed in the literature. For example, 3GPP (Third Generation Partnership Project) has defined six levels for the complete integration of the third generation cellular networks and WLANs. However, the mobility support has not been specified yet, which is necessary to make feasible voice and data transmission transparence for the final users. Thus, this work presents two approaches for the mobility management of the integration between UMTS and IEEE 802.11 networks: the first one is based on SIP (Session Initiation Protocol), and the other one is based on MIPv6 (Mobile IP version 6). This proposal extends the Loose Interworking architecture and uses the fourth level of the 3GPP specification. First, these approaches are modeled using sequence diagrams and, then, they are mapped to the SDL (Specification and Description Language) formal description technique. SDL, which is largely used to formally specify telecommunications systems, presents simulation and validation procedures that are applied to evaluate the specification and, consequently, the proposed approaches.

Mit der aktuellen Überarbeitung der Sprache SDL (Specification and Description Language) der ITU-T wurde die semantische Fundierung der formalen Definition dieser Sprache vollständig überarbeitet; die formale Definition basiert nun auf dem Kalkül der Abstract State Machines (ASMs). Ebenfalls neu definiert wurde das um objekt-orientierte Konzepte erweiterte Datentypsystem. Damit musste eine formale semantische Fundierung für diese neuen Konzepte gefunden werden. Der bisher verwendete Kalkül ACT.ONE sollte nicht mehr verwendet werden, da er schwer verwendbar, nicht implementierbar und nicht auf Objektsysteme erweiterbar ist. In der vorliegenden Arbeit werden die Prinzipien einer formalen Sprachdefinition dargelegt und die Umsetzung dieser Prinzipien für die Sprache SDL-2000 vorgestellt. Dabei wird erläutert, dass eine konsistente Sprachdefinition nur dadurch erreicht werden konnte, dass die Definition der formalen Semantik der Sprache parallel mit der Entwicklung der informalen Definition erfolgte. Dabei deckt die formale Sprachdefinition alle Aspekte der Sprache ab: Syn-tax, statische Semantik und dynamische Semantik. Am Beispiel der Datentypsemantik wird erläutert, wie jeder dieser Aspekte informal beschrieben und dann formalisiert wurde. Von zentraler Rolle für die Anwendbarkeit der formalen Semantikdefinition in der Praxis ist der Einsatz von Werkzeugen. Die Arbeit erläutert, wie aus der formalen Sprachdefinition voll-automatisch ein Werkzeug generiert wurde, das die Sprache SDL implementiert, und wie die durch die Umsetzung der formalen Semantikdefinition in ein Werkzeug Fehler in dieser Definition aufgedeckt und behoben werden konnten. / With the latest revision of ITU-T SDL (Specification and Description Language), the semantic foundations of the formal language definition were completely revised; the formal definition is now based on the calculus of Abstract State Machines (ASMs). In addition, the data type system of SDL was revised, as object-oriented concepts were added. As a result, a new semantical foundation for these new concepts had to be defined. The ACT.ONE calculus that had been used so far was not suitable as a foundation any more, as it is hard to use, unimplementable and not extensible for the object oriented features. In this thesis, we elaborate the principles of a formal language definition, and the realisation of these principles in SDL-2000. We explains that a consistent language definition can only be achieved by developing the formal semantics definition in parallel with the development of the informal definition. The formal language definition covers all aspects of the language: syntax, static semantics, and dynamic semantics. Using the data type semantics as an example, we show how each of these aspects is informally described, and then formalized. For the applicability of the formal semantics definition for practitioners, usage of tools plays a central role. We explain how we transform the formal language definition fully automatically into a tool that implements the language SDL. We also explain how creating the tool allowed us to uncover and correct errors in the informal definition.

No description available.

No description available.

No description available.

Orientador: Ivanil Sebastião Bonatti / Dissertação (mestrado) - Universidade Estadual de Campinas, Faculdade de Engenharia Eletrica e de Computação / Made available in DSpace on 2018-08-05T17:46:41Z (GMT). No. of bitstreams: 1 Paula_RogerSouzade_M.pdf: 2003604 bytes, checksum: 7ccd5b2689086b74bf7073670abe3138 (MD5) Previous issue date: 2006 / Resumo: Uma rede ad hoc é uma coleção de estações móveis sem ?o formando dinamicamente uma rede temporária sem necessidade de qualquer infra-estrutura de rede pré-existente ou administração centralizada. Protocolos de roteamento utilizados em redes ad hoc sem ?o devem ser capazes de se ajustarem automaticamente a ambientes extremos, como os de alta mobilidade e baixa largura de banda. Assim, avanços recentes em pesquisas sobre redes sem ?o concentram-se cada vez mais na adaptação de tais protocolos, diante da inter-relação entre as várias medidas de desempenho, como aquelas relacionadas às alterações na topologia (quebra de enlaces, mobilidade dos nós etc.) e aos parâmetros de qualidade de serviço (vazão, atraso etc.). Esta tese trata da modelagem e simulação de redes ad hoc sem ?o, contribuindo de forma signi?cativa nas áreas de modelo matemático, avaliação de desempenho e especi?cação de protocolos. Na primeira, é proposta uma nova estratégia que seleciona a rota de menor colisão dentre os mínimos caminhos existentes entre duas estações da rede. Na segunda área, sendo a de maior contribuição, uma análise de desempenho detalhada é realizada entre o protocolo de roteamento proposto nesta tese, Minimal Congestion On-Demand Routing (MCOR), e o Dynamic Source Routing (DSR), um protocolo de referência da literatura. Por ?m, é apresentado um modelo de validação do protocolo proposto através da ferramenta de especi?cação e validação, Speci?cation and Description Language (SDL) / Abstract: An ad hoc network is a collection of wireless mobile nodes forming dynamically a temporary network without the use of any preexisting network infrastructure or centralized administration. Routing protocols used in wireless ad hoc networks must be capable to adjust automatically to extreme environments, as high mobility and low bandwidth. Hence, recent avances in wireless research focus more and more on the adaptation of such protocols, due to the interrelationship among various performance measures, like as those related to topological changes (link breakages, node mobility etc.) and quality of service parameters (throughput, delay etc.). This thesis argues the modelling and simulation of wireless ad hoc networks, contributing signi?cantly on areas of mathematical model, performance evaluation and protocols speci?cation. First, is proposed a new strategy that selects the route of minimal collision, among all minimum hop paths between two stations. Second, being the area of major contribution, a detailed performance analysis is executed between the routing protocol proposed in this thesis, Minimal Congestion On-Demand Routing (MCOR), and the Dynamic Source Routing (DSR), a reference protocol in the literature. Lastly, is presented a validation model of the proposed protocol through validation and speci?cation tool, Speci?cation and Description Language (SDL / Mestrado / Telecomunicações e Telemática / Mestre em Engenharia Elétrica