SDL Process Research Articles

The improvement of web-application SDL process to prevent Insecure Design vulnerabilities

The improvement of web-application SDL process to prevent Insecure Design vulnerabilities

Exploring University Students' Self-Directed Learning in Online Learning

This qualitative case study aims to understand the situation of university students' SDL and identify the factors that help university students solve the problem of SDL in online learning. It involved seven participants who were selected according to the inclusion criteria. Using thematic analysis of the interview data, the researchers found that the university students' perceptions of the problems of SDL in online learning are: traditional teaching and learning limits SDL, lack of effective monitoring and evaluation of the SDL process, insufficient awareness of SDL, insufficient effective resources for SDL, methods of teaching SDL need to be improved, and inadequate online learning platform. Besides, reforming online teaching and learning models, building a mechanism for monitoring and evaluating SDL, strengthening university students' knowledge of SDL, improving online learning resources, improving methods of teaching SDL, and creating an online favorable atmosphere for university students are solutions to help university students solve the problem of SDL in online learning.

Security requirements identification and prioritization for smart toys

• We present a process for identifying issues, threats and requirements for the development of secure smart toys. • We outline security issues, threats and requirements identified by the proposed elicitation process. • We present two prioritization techniques for security requirements. • We compare the results obtained by different prioritization. techniques • We discuss how to tailor the results to specific scenarios. A smart toy is a traditional toy (e.g., car, doll and stuffed pet) that can use sensors and cloud-based services to leverage data collection to learn user’s preferences and provide them with more personalized experiences. The high connectivity and the “intelligent” nature of smart toys are indeed appealing for children. Nevertheless, connected devices are easy targets of hacking and personal data exchanged with cloud services raises many security concerns, especially when the main target audience are vulnerable users, i.e., children. Many security breaches have been found in bestseller smart toys, and several security incidents have been reported. Many organizations (e.g., FBI, Consumers International and Mozilla) have raised alerts to parents pointing to the risks associated with such products. Many studies have been published trying to solve or mitigate security problems in smart toys, but they usually focus on specific aspects of the toy architecture and usage. In this paper, we show how we used the Microsoft SDL method to identify a comprehensive list of security issues based on specific regulations (e.g., COPPA, PIPPEDA, GDPR), threats based on surface attack analysis, and security requirements that address security issues and threats. We also present a method we adopt to prioritize the security requirements based on risk assessment, the AHP method and generic scenarios. Although the security requirements we identify and prioritize may not be sufficient to all cases, they are comprehensive enough to cover most scenarios. Furthermore, the rationale we provide of how to use the SDL process to identify and prioritize security requirements may be useful to tailor the requirements and the priority list to specific contexts.

KEMAMPUAN SELF DIRECTED LEARNING DAN PENCAPAIAN HASIL BELAJAR: Studi Cross Sectional

The ability of professional nurses to be independent in their learning process is one way to ensure continued improvement and mastery of advance competencies in professional nursing practice. Efforts are being made to improve the ability of SDL is expected to encourage the achievement of nursing competency standards, which are responsible for lifelong learning, professional development and maintain their competence. The aims of this study are to determine the students’ SDL ability during clinical education after being involved in PBL curricula, to analyze the relationship between SDL ability and students’ learning outcomes during clinical practice and to explain the description of students’ SDL process. The design of quantitative was cross sectional approach and data collection using SDLRS Fisher questionnaire. Qualitative used in-depth. The participants were 60 students of Akper Syekh Yusuf Gowa who involved in the clinical education. The average score of student’s self-directed learning ability was 154. The Pearson correlation test showed a positive relationship between the ability of SDL and the achievement of learning outcomes(r= 0.373 and p<0.05). Results of the qualitative data analysis showed who had high SDL score were able to perform all SDL according Knowles SDL process description. Students with high score have already internalizing SDL values. Students with low score only able to perform half of SDL process which was stated by Knowles (1975), students have not internalizing SDL values yet.

Validation of SDL-based architectural design models using communication-based coverage criteria

ContextAs the capability to automatically generate code from different models becomes more sophisticated, it is critical that these models be adequately tested for quality assurance prior to code generation. ObjectiveAlthough simulation-based black-box testing strategies exist for these models, it is important that we also employ white-box testing strategies similar to those used to test implementation code to further validate the quality of these models. MethodWe apply coverage testing to architectural design models represented by SDL, a Specification and Description Language. Our previous study defined a methodology for automatic test generation with respect to two structural-based criteria, all-node and all-edge, for each individual SDL process. In this paper, we present new coverage criteria such as n-step-message-transfer and sender–receiver-round-trip, aiming at the communication between different SDL processes. ResultsA test generator using innovative backward tracking and forward validation has been implemented to support these criteria, guiding test generation to detect bugs which could not be revealed by test cases generated only with respect to the all-node and all-edge criteria. ConclusionsThe results of our case study support the feasibility of using our test generator to create test cases satisfying the proposed communication-based criteria.

Validation of SDL specifications using EFSM-based test generation

Existing methods for testing an SDL specification mainly allow for either black box simulation or conformance testing to verify that the behavior of an implementation matches its corresponding model. However, this relies on the potentially hazardous assumption that the model is completely correct. We propose a test generation method that can accomplish conformance verification as well as coverage criteria-driven white box testing of the specification itself. We first reformat a set of EFSMs equivalent to the processes in an SDL specification and identify “hot spots” – nodes or edges in the EFSM which should be prioritized during testing to effectively increase coverage. Then, we generate test sequences intended to cover selected hot spots; we address the possible infeasibility of such a test sequence by allowing for its rejection decided by a constraint solver and re-generation of an alternate test sequence to the hot spot. In this paper, we present our test generation method and tool, and provide case studies on five SDL processes demonstrating the effectiveness of our coverage-based test sequence selection.

Advanced intelligent network service laboratory

This paper presents the architecture of a laboratory for design, validation and execution of advanced intelligent network (AIN) services. The AIN service laboratory permits testing of new services from design to execution. It is composed of two main parts: a design environment, where design and logical validation take place, and a hardware/software system closely emulating a real AIN structure (with service switching points, service control points, etc.), where the service can be directly tested. A technical overview of the AIN service laboratory is provided, describing the following issues: a formal and practical approach to validation, ranging from traditional human inspection to automatic verification of global temporal properties; a logic-programming based concurrency model and nondeterministic backtrackable simulator on which SDL processes, representing IN functional entities and agents, are mapped; animation of network scenarios; a service logic execution environment designed on the basis of IN functional architecture defined in CCITT draft recommendation Q1214; a standard basic call state model (BCSM)-based call control, implemented in a service switching point (SSP) emulator. Furthermore, a description of an advanced universal personal telecommunication (UPT) service for which new network capabilities such as speech recognition are integrated and tested in the AIN service laboratory, is provided as an example.

A graphic SDL support environment

An SDL toolset is presented which is based on the semantics and syntax of the design language SDL recommended by the CCITT. SDL has been developed for the specification of telecommunication systems. In the meantime it has been accepted by a wider user community for the description of various real time systems. In this way a first version of the SDL tool is currently being used in the development of the telephone exchange HICOM as well as in the field of automation technology. The toolset supports the design phase and initiates the implementation and test phase. The drawing of SDL block diagrams, process diagrams, tree diagrams and sequence charts is essentially facilitated by workstations with raster graphics. At present the SDL tool is implemented on the SICOMP WS 30 UNIX workstation. The diagrams can be syntactically checked and there is the possibility of an automatic generation of different target codes. In addition validation tools are incorporated such as to check liveness properties or to simulate the dynamic behaviour before implementation. Further, connections to other software tools are planned that support requirements engineering.