IFIP Open Access Digital Library
Not a member yet
22614 research outputs found
Sort by
Allowing for Secure and Accessible Authentication for Individuals with Disabilities of Dexterity
No full textPart 2: Late-Breaking ResultsInternational audiencePeople living with disabilities of dexterity can be vulnerable to attackers when authenticating using physical input methods, such as when inputting PIN numbers using a keypad at an ATM(Cash Point), due to the extended time these interactions take because of the device’s lack of accommodations and accessibility. This makes their input more observable to a potential attacker and thus compromises their security. In addition, when ease of use is severely compromised, this may cause a need to circumvent good security practices for practical usability which further makes these individuals vulnerable to potential attackers. While research in the field of accessible and secure authentication exists, limited work has focused on the unique needs of individuals who have limited to no hand or finger dexterity. This paper proposes an accessible framework for authentication (AAFIDD), that focuses on meeting the needs of this group. We implemented a prototype authentication model and present an initial user study with 7 participants that evaluated the efficacy of this prototype and the framework. Each participant was randomly assigned a PIN and asked to input it using a method reliant on hand-dexterity and then using the prototype gaze-based input. Users were timed and asked to evaluate their experience in terms of ease of use while a researcher attempted to perform an over-the-shoulder attack to evaluate the security. We found that the prototype input method was less likely to be interpreted by an observer than using a mouse to input, while users considered the prototype input method accessible and easy to use
Medical-Domain-Expert-Centered AI-Assisted Digitized Histopathology Education Tool
No full textPart 4: PostersInternational audienceEducation in the medical domain with the help of digitized content using state-of-the-art technology is a current topic, nowadays. In this paper, we are presenting our ongoing research on streamlining the medical domain expert workflow in the field of histopathology by designing a graphical user interface for an artificial-intelligence-powered (AI-powered) assistance educational tool for digitized specimen annotations. We found out that the approach to the presentation of the AI-powered features in the user interface should be built upon the level of expertise of the domain expert. The differences in interactions with the proposed annotation tools were observed in a case study with five participants with different levels of expertise from ongoing research cooperation with medical faculty students and domain experts in the field of histopathology. We discuss the quantitative and qualitative outcomes from the aforementioned case study to serve as a base for maximizing the benefits leveraging from applying AI-powered assistance tools in the field of education in digitized histopathology
Exploratory Study on Sustainability in Agile Software Development
No full textPart 4: PostersInternational audienceSustainability is continuously gaining attention from different software research disciplines and organizations because of the impacts of human activities on the planet aided by software products and services. The process of creating and developing these software products and services through agile has gained significant attention with different guidelines and frameworks proposed to support sustainability. However, there is the challenge of a few concrete illustrations that exemplify how these software sustainability design guidelines and frameworks have been applied in agile practice, specifically Scrum by software development practitioners. This creates no common ground for software development practitioners to understand their role in promoting sustainability during software design and development. This paper explores integrating sustainability into agile software requirement gathering, focusing on the Scrum framework. The outcome presented in this study represents early results from an ongoing case study with an agile development team in the industry
Facilitating Development of Accessible Web Applications
No full textPart 1: Full Research PapersInternational audienceToday, more than 60% of websites on the Internet are created and run using content management systems (CMS), and this rate is constantly increasing. Thus, it has become important to ensure that these platforms support and promote web accessibility for all. While in traditional software engineering approaches, the accessibility validation is carried out at the end of the process, often with the support of external validators, it would be important to support Web developers during the actual development process while the content is defined. The work described in this paper addresses the possibility of supporting web accessibility while developing websites with WordPress, the currently most used CMS. For this purpose, we report on the design and development of a plugin to evaluate the accessibility of pages created with this popular platform. The developed plugin aims to provide WordPress users with open, useful and effective accessibility evaluation support capable of filling the gaps in current practices
Team Automata: Overview and Roadmap
No full textPart 3: Survey PaperInternational audienceTeam Automata is a formalism for interacting component-based systems proposed in 1997, whereby multiple sending and receiving actions from concurrent automata can synchronise. During the past 25+ years, team automata have been studied and applied in many different contexts, involving 25+ researchers and resulting in 25+ publications. In this paper, we first revisit the specific notion of synchronisation and composition of team automata, relating it to other relevant coordination models, such as Reo, BIP, Contract Automata, Choreography Automata, and Multi-Party Session Types. We then identify several aspects that have recently been investigated for team automata and related models. These include communication properties (which are the properties of interest?), realisability (how to decompose a global model into local components?) and tool support (what has been automatised or implemented?). Our presentation of these aspects provides a snapshot of the most recent trends in research on team automata, and delineates a roadmap for future research, both for team automata and for related formalisms
TRAC: A Tool for Data-Aware Coordination
No full textPart 4: Tool PapersInternational audienceWe propose , a tool for the specification and verification of coordinated multiparty distributed systems. Relying on finite-state machines (FSMs) where transition labels look like Hoare triples, can specify the coordination of the participants of a distributed protocol for instance an execution model akin blockchain smart contracts (SCs). In fact, the transitions of our FSMs yield guards, and assignments over data variables, and with participants binders. The latter allow us to model scenarios with an unbounded number of participants which can vary at run-time. We introduce a notion of well-formedness to rule out meaningless or problematic specifications. This notion is verified with and demonstrated on several case studies borrowed from the smart contracts domain. Then, we evaluate the performance of using a set of randomised examples, studying the correlations between the features supported and the time taken to decide well-formedness
COTS: Connected OpenAPI Test Synthesis for RESTful Applications
No full textPart 1: Regular PapersInternational audienceWe present a novel model-driven approach for testing RESTful applications. We introduce a (i) domain-specific language for OpenAPI specifications and (ii) a tool to support our methodology. Our DSL, called COpenAPI, is inspired by session types and enables the modelling of communication protocols between a REST client and server. Our tool, dubbed COTS, generates (randomised) model-based test executions and reports software defects. We evaluate the effectiveness of our approach by applying it to test several open source applications. Our findings indicate that our methodology can identify nuanced defects in REST APIs and achieve comparable or superior code coverage when compared to much larger handcrafted test suites
The Practice of Enterprise Modeling: 17th IFIP Working Conference, PoEM 2024, Stockholm, Sweden, December 3–5, 2024, proccedings
No full textInternational audienceBook Front Matter of LNBIP 53
Functional Security in Automation: The FAST Approach
No full textPart 4: Security, Compliance, and Configuration in Enterprise ModelingInternational audienceAutomated systems and technologies, integral to Industry 5.0, combine interconnected actuators, such as industrial robots and computational devices, forming a network spanning various manufacturing stages, including design, logistics, and sales. These systems, which automate tasks traditionally performed by humans, vary from manual to fully automated and depend on vendor support for maintenance and troubleshooting, often requiring remote access for optimal operation. As digitalisation grows, alongside the demand for on-demand production and rising labour costs, securing these systems becomes crucial, not merely optional. Despite their importance, awareness of the security risks associated with automated systems still needs to be improved. Companies need to recognise and adhere to security standards and regulations. This paper outlines a systematic literature review introducing the Functions, Assets, Security Threats, and Mitigation Techniques (FAST) approach, a structured framework for managing security risks in automated systems. It explores using a domain model for security risk management to assess threats and their impacts on data confidentiality, integrity, and availability. Additionally, it proposes risk treatment strategies and countermeasures to mitigate these risks
Dividing Permutations in the Semiring of Functional Digraphs
No full textPart 2: Contributed PapersInternational audienceFunctional digraphs are unlabelled finite digraphs where each vertex has exactly one out-neighbor. They are isomorphic classes of finite discrete-time dynamical systems. Endowed with the direct sum and product, functional digraphs form a semiring with an interesting multiplicative structure. For instance, we do not know if the following division problem can be solved in polynomial time: given two functional digraphs A and B, does A divide B? That A divides B means that there exist a functional digraph X such that AX is isomorphic to B, and many such X can exist. We can thus ask for the number of solutions X. In this paper, we focus on the case where B is a permutation, that is, a disjoint union of cycles. There is then a naïve sub-exponential algorithm to compute the number of non-isomorphic solutions X, and our main result is a polynomial algorithm when A is fixed. It uses a divide-and-conquer technique that should be useful for further developments on the division problem