One of the important tasks during software testing is the generation of test cases. Unfortunately, existing approaches to test case generation often have problems limiting their use. A problem of dynamic test case generation approaches, for instance, is that a large number of iterations can be necessary to obtain test cases. This article introduces a formal framework for the application of the well-known search strategy of binary search in path-oriented test case generation and explains the binary search-based test case generation (BINTEST) algorithm.

We study the complexity of temporal logics over concurrent systems that can be described by Mazurkiewicz traces. We develop a general method to prove that the uniform satisfiability problem of local temporal logics is in PSPACE. We also demonstrate that this method applies to all known local temporal logics.

Ciencias de la Computación / Para lograr coherencia y flexibilidad en unidades de aprendizaje basadas en documentos multimedia, varios autores han recomendado estructurar los componentes de los cursos en grafos. En un grafo de curso, los recursos educacionales son encapsulados como objetos de aprendizaje (LO - Learning Objects) con sus respectivos metadatos (LOM - Learning-Object Metadata) y son interconectados con relaciones de varios tipos retóricos y/o semánticos. Los grafos de recursos son almacenados en repositorios en los cuales los metadatos sirven para facilitar su recuperación y reutilización. Sin embargo, tales sistemas se enfrentan con problemas serios en cuanto al uso de los LOMs: los metadatos son difíciles de instanciar y los autores de cursos generalmente no tienen estímulos para cumplir con esta tediosa tarea ya que ellos mismos no se benefician de los metadatos que generan. La generación automática de metadatos resuelve este problema. Sin embargo, este método se limita a ciertos metadatos excluyendo la mayor parte de los metadatos subjetivos tales como los metadatos educacionales. Esta limitación motivó el enfoque de esta tesis sobre una técnica complementaria: un método híbrido basado en la sinergia entre procesos automáticos e intervención humana. La generación híbrida de LOMs puede ser aplicada sobre los atributos que no pueden ser automáticamente generados. Sin embargo, este enfoque está basado en la contribución de usuarios no siempre cooperativos, quienes necesitarían ver beneficios para motivar su participación. Proponemos estudiar los usos de LOM durante la creación de cursos, no sólo desde la perspectiva de la generación híbrida sino también desde la perspectiva de los beneficios que pueden brindar los LOMs. Esta estrategia tiene como objetivo soportar una retroacción positiva en la cual los beneficios puedan motivar la generación de LOMs de buena calidad, y la buena calidad de los LOMs pueda mejorar los beneficios. En particular, esta tesis investiga métodos para (1) integrar sin transición la generación híbrida de LOMs dentro de una herramienta de creación de cursos, (2) procesar un conjunto de LOMs aunque ciertos metadatos quedaran incompletos, incorrectos, o faltantes, (3) mejorar los resultados de los métodos clásicos de recuperación de LOs usando los metadatos de los LOs que componen un curso. Desarrollamos una herramienta de código abierto para validar las propuestas de esta tesis. Experimentos preliminares mostraron que los LOMs pueden mejorar significativamente la recuperación de LOs adicionales durante el proceso de creación de cursos.

O presente trabalho trata do desenvolvimento de software educativo para o ensino do tema escala de pessoal de enfermagem. O desenvolvimento do hipertexto, publicado via Internet, foi desenvolvido com o objetivo de oferecer subsídios para ao aluno de graduação e para o enfermeiro gerente de recursos humanos. Aborda aspectos trabalhistas, legais e humanos fundamentais para o profissional enfermeiro. Etapas metodológicas do desenvolvimento: revisão bibliográfica; organização da rede semântica; organização do hipertexto a partir dos nós de conteúdo; definição do design das telas e imagens; elaboração da simulação; planejamento do banco de dados. Para coleta de dados convidamos docentes de Administração em enfermagem e alunos de graduação das escolas públicas de enfermagem de São Paulo. A avaliação fez-se por meio de formulário eletrônico no próprio site. Principais resultados: o site recebeu aprovação da maioria dos participantes. A média de aprovação, somando os critérios excelente e satisfatório, foi de 70 % das respostas. Algumas vantagens do recurso tecnológico são: disponibilidade de conteúdo aos graduandos e profissionais, possibilidade do aluno de realizar simulação; possibilidade dos alunos estudar nos momentos oportunos; o programa informa ao professor os registros dos exercícios simulados. / The present work is about educational software development to teach nursing personnel scale. Hypertext development published via Internet was developed aiming to provide subsidies for undergraduate students and for the personnel manager nurse. It entails working, legal and human fundamental aspects for the nurse. Development methodological steps: bibliographic review, semantic net organization, hypertext organization from knots content, image and screen definition design, simulation devising, databank planning. For collection of data we invited professors of nursing administration and students of graduation of the São Paulo public nursing schools. The evaluation was made by electronic form in the own site. Main results: the site received approval from most of the participants. The approval average, adding the excellent and satisfactory criterious, it was of 70% of the answers. Some advantages of the technological resource are: content availability to the students and professionals, the student's possibility to accomplish simulation; the students' possibility to study in the opportune moments; the program informs the teacher the registrations of the simulate exercises.

O presente trabalho trata do desenvolvimento de software educativo para o ensino do tema escala de pessoal de enfermagem. O desenvolvimento do hipertexto, publicado via Internet, foi desenvolvido com o objetivo de oferecer subsídios para ao aluno de graduação e para o enfermeiro gerente de recursos humanos. Aborda aspectos trabalhistas, legais e humanos fundamentais para o profissional enfermeiro. Etapas metodológicas do desenvolvimento: revisão bibliográfica; organização da rede semântica; organização do hipertexto a partir dos nós de conteúdo; definição do design das telas e imagens; elaboração da simulação; planejamento do banco de dados. Para coleta de dados convidamos docentes de Administração em enfermagem e alunos de graduação das escolas públicas de enfermagem de São Paulo. A avaliação fez-se por meio de formulário eletrônico no próprio site. Principais resultados: o site recebeu aprovação da maioria dos participantes. A média de aprovação, somando os critérios excelente e satisfatório, foi de 70 % das respostas. Algumas vantagens do recurso tecnológico são: disponibilidade de conteúdo aos graduandos e profissionais, possibilidade do aluno de realizar simulação; possibilidade dos alunos estudar nos momentos oportunos; o programa informa ao professor os registros dos exercícios simulados. / The present work is about educational software development to teach nursing personnel scale. Hypertext development published via Internet was developed aiming to provide subsidies for undergraduate students and for the personnel manager nurse. It entails working, legal and human fundamental aspects for the nurse. Development methodological steps: bibliographic review, semantic net organization, hypertext organization from knots content, image and screen definition design, simulation devising, databank planning. For collection of data we invited professors of nursing administration and students of graduation of the São Paulo public nursing schools. The evaluation was made by electronic form in the own site. Main results: the site received approval from most of the participants. The approval average, adding the excellent and satisfactory criterious, it was of 70% of the answers. Some advantages of the technological resource are: content availability to the students and professionals, the student's possibility to accomplish simulation; the students' possibility to study in the opportune moments; the program informs the teacher the registrations of the simulate exercises.

La creciente competitividad del mercado, genera una dificultad cada vez mayor en las organizaciones para alcanzar el éxito en sus proyectos. Tal hecho busca priorizar criterios económicos, tiempo, costo, calidad y alcance, ocasionando falta de controles que resultan en brechas de seguridad en la compañía. De esa forma se deja en segundo plano procedimientos de seguridad como por ejemplo el testeo de aplicaciones web. Estas poseen vulnerabilidades que podrían proporcionar los medios para que usuarios finales maliciosos violen mecanismos de protección de un sistema y obtengan acceso a información privada o recursos de la empresa. Los pronósticos referentes a la violación de datos indican que la industria de salud será el blanco más buscado para los ataques cibernéticos en 2017 ya que el alto valor de los registros de salud electrónicos (EHRs) llama cada vez más la atención de los cibercriminales. Dichos registros representan una fuente de ganancias mayor a la que si se accediera a información de tarjetas o cuentas bancarias. El presente proyecto propone un modelo de madurez de seguridad de aplicaciones web ante ciberataques para clínicas de nivel 2 bajo la norma técnica del MINSA, orientada a mostrar las debilidades de las aplicaciones web y las mejoras que se puedan realizar en aspectos de seguridad. El proyecto permitió la implementación de mejoras por parte de las empresas clientes en sus plataformas web mediante la recomendación propuesta por la guía de mejora luego de haber realizado el pentesting propuesto. / Bearing in mind that the projections made for the area of information security point to an increase in attacks on the health sector, added to the lack or little diffusion of security maturity models that allow organizations to know the status of their website in terms of security and that the existing models lack a post-evaluation monitoring, it is necessary to propose a model of security maturity of web applications against cyber-attacks, oriented to the health sector, which is simple to apply. The maturity model proposes to offer the user a portfolio of tools that asks them to apply tests and obtain their results, interpret them and place them at a level of maturity before cyberattacks, then proposing controls to improve the security of the web. This model will be based on the International Professional Practice Framework methodology and will include the main vulnerabilities published by the Open Web Application Security Project to propose attacks that identify the weakness of the evaluated web system, so that the client company has the possibility to reinforce its weaknesses. Guides will also be proposed to select strategies to improve critical points from a security perspective. Because of the validation, it was found that, of the 14 tests applied, five were approved, positioning the web at level 3 of maturity, which means that there are validations in the structure of the web; however, they are partial or inefficient. / Tesis

A software system, once deployed into its target environment, might need to be modified for various reasons. The reasons might be specific to that software system, such as failures, or, more general, such as changes in the environment in which the software system is embedded. Depending on the reason, a modification might obviously not only be restricted to a particular software system. It might also concern other existing software systems and particularly also software systems under development. The modification of a software system under development is merely a problem of modifying its development process, also called software process. Such modifications generally cannot be automatically carried out by autonomous process support systems due to the complexity inherent in software processes and in the necessary modifications. It usually needs to be guided by a human process manager. A process support system can, however, offer the human process manager certain services to assist in modifying a software process. One of these services is that of decision support.

The use of components in development of complex software systems can surely have various benefits. Their testing, however, is still one of the open issues in software engineering. Both the developer of a component and the developer of a system using components often face the problem that information vital for certain development tasks is not available. Such a lack of information has various consequences to both. One of the important consequences is that it might not only obligate the developer of a system to test the components used, it might also complicate these tests. This article gives an overview of component testing approaches that explicitly respect a lack of information in development.

A common challenge in the development of web applications today lies in the handling of unforeseen navigation steps initiated by the user through the browser’s Back, Forward and Reload buttons. These operations break the synchrony of dialog states on the server and the client, provoking non-intuitive and possibly destructive application behaviour if not properly handled. We therefore present an approach to handling Back and Forward navigation that realizes undo/redo semantics and illustrate its implementation using the example of a web-based conference management system. The presented approach is subsequently discussed with regard to its general applicability and alternative handling semantics.

Hypertext-based user interfaces have become attractive for many distributed applications today, but they do not reach the usability level of window-based UIs. Because of insufficient dialog control logic, they cannot manage nested and hierarchical dialog structures that users have come to expect from window-based UIs. We therefore present a framework that implements a dialog control logic capable of handling complex, nested dialog structures, and introduce a notation and an XML-based language for specifying such dialog structures. Key concepts are the encapsulation of multiple dialog steps in context-independent dialog modules that can be nested arbitrarily, and the specification of multiple devicespecific interaction patterns for a single deviceindependent application logic. The framework allows black box reuse, leaving only the implementation of the application logic, the design of the user interface and the specification of the dialog flow to application developers.