A trusted execution environment (TEE) is an isolated environment used for trusted execution. TEE solutions are usually proprietary and specific for a certain hardware specification, thereby limiting developers that use those TEEs. A potential solution to this issue is the use of open-source alternatives such as the TEE framework Keystone and the Reduced Instruction Set Computer V (RISC-V) hardware. These alternatives are rather young and are not as well established as the variants developed by ARM and Intel. To this end, the assurance in Keystone and RISC-V are analysed by studying a remote attestation assurance use case using the goal structuring notation (GSN) method. The aim is to investigate how GSN can be utilised to build assurance cases for TEEs on RISC-V. This thesis presents a process of how GSNs can be created to argue assurance for a TEE solution. Furthermore, Keystone operates under a specific threat model with made assumptions that may have a large impact depending on the use case. Therefore, Keystone is analysed to understand whether the framework mitigates existing vulnerabilities in TEEs. It is concluded that GSN is a viable method for arguing assurance in TEEs, providing great freedom in the creation of the GSN model. The freedom is also its weakness since the argument composition has a high impact on the argument. Furthermore, we conclude that Keystone mitigates multiple known vulnerabilities primarily through made assumptions in its threat model. These cases need to be considered by developers utilising Keystone to determine whether or not the assumptions are valid for their use case.

This thesis is focused on optimizing processes at Air Bank, a.s. The aim will be to analyze the banking process called. "Completing the new framework agreement" with the subsequent design optimization for faster problem solving. The first part will be presented theoretical insights that are intended to familiarize the reader with the basic concepts relating to the processes and their optimization. The next part will be focused on analysis of existing activities. Contribution of thesis will be in the analysis of selected processes and propose solutions that will have a real benefit for the operation of the entire department.

Les agences de notations ont récemment été l'objet d'une grande attention. Leur responsabilité dans la crise des subprimes a été questionné. Les médias ont mis en avant les notes trop généreuses qui avaient été attribué à certains produits complexes, avant de s'interroger sur leur comportement quand elles ont dégradé les notes des dettes souveraines. Dans cette thèse, après avoir revu une partie de la littérature sur le sujet, je m'interroge sur deux aspects spécifique de leur activité:(i) Quels sont les conséquences de confier une information publique (comme une note de crédit) à une entité privée ?(ii) Les agences de notations disent avoir pour principal actif la réputation. Cette dernière peut expliquer pourquoi on observe des périodes de sur- notations et d'autres de sous-notations ? / Credit rating agencies have recently been under a lot of scrutiny. Their responsibility in the last financial crisis has been questioned. They received much attention from the media. The credit rating agencies have been blamed for their too generous ratings before the crisis and also for being too severe during the European debt crisis. In this thesis, after an overlook of the recent literature, I look at two specific issues related to their activity: • What issues arise when public information is released by a private entity on financial markets? • Can reputation explains why a credit rating agency can be caught underrating (respectively overrating)

Details zum gegenwärtigen Stand der DDC-Anwendung in der Deutschen Nationalbibliothek liefert Monika Lösse (17.07. nach 10:00); und sozusagen den französischen Spiegel hält Anne-Célin Lambotte aus Paris dagegen (17.07.12:00).

Einleitend geht es um Berichte zu Anwendungen, darunter beispielsweise darüber, wie sich die vor ca. 10 Jahren durch unsere Deutsche Nationalbibliothek (DNB) eingeführte Dewey Decimal Classification (DDC) in der Praxis bewährt hat (hierzu Walther Umstätter, 16.07.10:15). Eine berechtigte Frage auch deshalb, weil die aus den USA stammende DDC vor der mutigen Entscheidung der DNB noch nicht in deutschen Bibliotheken angewendet wurde.

In Web-based applications, most user interactions take the form of navigating between Web pages. The structure of the navigation model thus has a strong impact on a Web application's usability. However, specifying a user-friendly navigation model for complex applications can be time-consuming, especially when designing for multiple presentation channels. We therefore present the formal semantics of the dialog flow notation (DFN) that provides constructs for the design of modular navigation models, and especially focus on constructs that reduce the specification redundancy within and between channels, thus reducing the design effort for Web-based user interfaces

A careful, investigative look at what could be described as “metaresearch” (research on research) within Human-Computer Interaction and Interaction Design reveals that there is an issue regarding the conceptualizing and communication of complex ideas and meanings. The multidisciplinary nature of this field causes confusion and difficulty in expression when disparate terminology from its different fields is used in unison to express ideas unique to it or complex enough to need sketching, gestures or extensive explanation to get the message across. This thesis argues that creating a unified language that can join these forms of expression is something that could potentially solve this issue, and proposes a blueprint of what such a language would look like, backing its claims using literature research and expert interviews.

No description available.

No description available.

No description available.