International Journal of New Computer Architectures and their Applications

519-533

Authors: Fazal-e- Amin, Ahmad Kamil Mahmood, Alan Oxley

Software product lines and open source software are two emerging paradigms in software engineering. A common theme in both of these paradigms is „reuse‟. Software product lines are a reuse centered approach that makes use of existing assets to develop new products. At the moment, a motivation for using open source software is so as to gain access to source code, which can then be reused. The product line community is being attracted to open source components. The use of open source software in software product lines is not for one time reuse but, being a core asset, the component is intended to be used repeatedly for the development of other products in the family. In this paper the results of an exploratory study is presented; it was conducted to explore the factors affecting the reusability of open source components. On the basis of the results of the exploratory study a reusability attribute model is presented which makes use of established object oriented metrics accompanied with newly defined metrics. The assessment using the proposed metrics is compared with the rankings assigned by human evaluators.

542-552

Authors: Bilal Munir Mughal, Asif Ali Wagan, Halabi Hasbullah

Life safety on road is the key motivation behind the research in Vehicular Ad-hoc Network (VANET). As basic communication mechanism VANET-equipped vehicles broadcast periodic safety beacons to keep the neighboring vehicles aware of the situation at all times. Well known broadcast communication problems i.e. hidden/exposed nodes, collisions and inherent challenges in VANET e.g. dynamic environment, limited bandwidth, are prone to hinder the exchange of potentially lifesaving information. Furthermore, the most of vehicle-to-vehicle broadcast communication will comprise of single-hop periodic safety beacons thus it becomes important to measure their Quality of Service (QoS) under congested vehicular environment. With the help of extensive simulations, a detailed analysis is presented to assess the performance of single-hop periodic safety beacons. Parameters i.e. communication range, beacon generation interval and safety beacon size are effective in controlling the QoS levels. The QoS metrics used for the evaluation are packet delivery ratio, per-node throughput, end-to-end delay and Packet loss ratio breakup. Simulation results show that in congested environment it is very difficult to meet the safety application‟s QoS requirements.

565-580

Authors: Muhammad Qaiser Saleem, Jafreezal Jaafar, Mohd Fadzil Hassan

Currently most of the enterprises are using SOA and web services technologies to build their web information system. They are using MDA principles for design and development of WIS and using UML as a modelling language for business process modelling. Along with the increased connectivity in SOA environment, security risks rise exponentially. Security is not defined during the early phases of development and left onto developer. Properly configuring security requirements in SOA applications is quite difficult for developers because they are not security experts. Furthermore SOA security is cross-domain and all required information are not available at downstream phases. Furthermore, business process expert; who is the actual stakeholder of the business process model is unable to specify security objectives due to lake of security modelling elements in a general purpose modelling languages like UML. As a result, business process expert either ignore the security intents in their model or indicate them in textual way. A security intents DSL is presented as a UML profile where security intents can be modelled as stereotypes on UML modelling elements during the business process modelling. Aim is to facilitate the business process expert in modelling the security requirements along the business process modelling. This security annotated business process model will facilitate the architectural team in specifying the concrete security implementation. As a proof of work we apply our approach to a typical on-line flight booking system business process.

599-614

Authors: Sabrina Ahmad, Noor Azilah Muda

Negotiation is one promising effort during requirements elicitation process to improve the quality of software requirements. When negotiation is claimed beneficial theoretically, it is important that the deployment of negotiation is examined and the effectiveness of negotiation is evaluated through empirical study. This paper aims at providing an empirical framework design to examine the improvement in software requirements through negotiation. Besides, it elaborates the relevance of negotiation in requirements elicitation process and its effectiveness. An empirical study method is imposed to design the framework. The design is carefully established based the selection of population and participants, the experimental protocol, threats to validity and justification of measures.

624-639

Authors: Md. Mahedi Hassan, Poo Kuan Hoong

The working group of NetLMM has proposed a new approach, known as network-based mobility management protocol that is actively standardized by Internet Engineering Task Force called Proxy Mobile IPv6 where many mobility signaling messages are performed by a network entity on behalf of a mobile host. Proxy Mobile IPv6 is an effective mobility management protocol for next generation wireless networks that are expected to enable network access ubiquity. Proxy Mobile IPv6 has salient features that attract a lot of attention among the telecommunication and Internet communities. However, Proxy Mobile IPv6 stills suffer from lengthy handover latency and packet loss when Mobile Host moves away to a new network with high speed mobility during the handover process. In order to improve the performance of Proxy Mobile IPv6, we proposed a solution scheme with integration of Media Independent Handover and neighbor discovery message of IPv6 to reduce handover latency and packet loss. But, this proposed protocol does not have methods to prevent security threats such as replay attack and key exposure when mobile host first enters into Proxy Mobile IPv6 domain and also during the handover process. In order to protect this proposed protocol, an authentication method based on the authentication protocol is presented in this paper that can prevent security threats. Also, this authentication method reduces authentication latency.

652-664

Authors: Nurul Haszeli Ahmad, Syed Ahmad Aljunid, Jamalul-lail Ab Manan

Since early 70s, software vulnerabilities have been classified and measured for various purposes including software assurance. Out of many software vulnerabilities, C vulnerabilities are the most common subject discussed, classified and measured. However, there are still gaps in those early works as C vulnerabilities still exist and reported by various security advisors. The most common and highly ranked is C overflow vulnerabilities. Therefore, we propose this taxonomy, which classified all existing overflow vulnerabilities including four vulnerabilities that have never been classified before. We also provide a guideline to identified and avoid these vulnerabilities from source code perspective. We ensure our taxonomy is constructed to meet the characteristics of well-defined taxonomy. We also evaluate our taxonomy by classifying various software security advisories and reports using our taxonomy. As a result, our taxonomy is complete and comprehensive, and hence, is a valuable reference to be used as part of software assurance processes.

683-693

Authors: M Nordin A Rahman, Yuzarimi M Lazim, Farham Mohamed

The huge size of multimedia data requires for efficient data classification and organization in providing effective multimedia data manipulation. Those valuable data must be captured and stored for potential purposes. One of the main problems in Multimedia Information System (MIS) is the management of multimedia data. As a consequence, multimedia data management has emerged as an important research area for querying, retrieving, inserting and updating of these vast multimedia data. This research considers the rough set theory technique to organize and categorize the multimedia data. Rough set theory method is useful for exploring multimedia data and simplicity to construct multimedia data classification. Classification will help to improve the performance of multimedia data retrieving and organizing process.

714-720

Authors: Mehrdad Jangjou, Alireza Bagheri, Mohammad Mansour Riahi Kashani, Koosha Sadeghi Oskooyee

Interference and specially one of the most common kinds of it which is also known as physical interference, is among the most critical problems in terms of multi-robot co-operation. A simple way reducing interference is to make robots remain in unique work areas and move the objects to the next robot as soon as they intersect their areas’ borders. The problem of interference reduction, in this article, was investigated using complex task partitioning in the self-organized robotic swarms. The presented method is simulated, which eliminates some of the previous simulations’ limitations in many domains including the number and robots’ speed. These developments contribute to a more real impression of the natural world problems. The results show improvements in terms of operation cost.

743-756

Authors: Norzaliha Mohamad Noor, Rusli Abdullah, Mohd Hasan Selamat

Early warning system (EWS) is a technology to mitigate risk is used to disseminate timely information. Then knowledge management system (KMS) is used to support for decision facilitation will integrate with EWS to disseminate timely information with proactive early warning. Issues on timeliness for timely reporting and decision facilitation are regarded as main challenge for mitigation of risk. Therefore in this paper, we suggest the model of integration between KMS and EWS known as KMS@EWS as a solution to support early warning for timely reporting and to guide on decision facilitation. The integration model is to combine the knowledge management (KM) processes, activities and technologies with the EWS functionalities. The proposed model is based on empirical study by using literatures on EWS and KMS. In which we synthesize the analysis and findings of both EWS and KMS for the integration. We propose the implementation model in clinical diagnostic (CD) environment of dengue fever (DF) manifestation. This model is intended to provide early warning when any abnormalities or peculiar pattern of DF and symptoms arise and detected during the interaction between physicians and patients in the CD environment. Thus, this paper attempts to integrate relevant enabling KM technologies and processes with EWS components and functionalities into an environment that would support activities for early warning thru organizational knowledge creation, use and management for timely reporting and detection by providing decision facilitation and initiate early warning of DF during CD processes.

766-779

Authors: Zul Hilmi Abdullah, Nur Izura Udzir, Ramlan Mahmod, and Khairulmizam Samsudin

File is a component of a computer system that has importance value of its own, either in terms of availability, integrity, confidentiality and functionality to a system and application. If unintended changes happen on the related file, it may affect the security of related computer system. File integrity monitor (FIM) tools is widely used to minimize the file security risk. This paper proposed dynamic schedule for FIM. This paper presents a dynamic scheduling for FIM by combining on-line and off-line monitoring based on related files security requirement. Files are divided based on their security level group and integrity monitoring schedule is defined based on related groups. The initial testing result shows that our system is effective in on-line detection of file modification.