scholarly journals Attribute Decoration of Attack–Defense Trees

2012 ◽  
Vol 3 (2) ◽  
pp. 1-35 ◽  
Author(s):  
Alessandra Bagnato ◽  
Barbara Kordy ◽  
Per Håkon Meland ◽  
Patrick Schweitzer

Attack–defense trees can be used as part of threat and risk analysis for system development and maintenance. They are an extension of attack trees with defense measures. Moreover, tree nodes can be decorated with attributes, such as probability, impact, and penalty, to increase the expressiveness of the model. Attribute values are typically assigned based on cognitive estimations and historically recorded events. This paper presents a practical case study with attack–defense trees. First, the authors create an attack–defense tree for an RFID-based goods management system for a warehouse. Then, they explore how to use a rich set of attributes for attack and defense nodes and assign and aggregate values to obtain condensed information, such as performance indicators or other key security figures. The authors discuss different modeling choices and tradeoffs. The case study led them to define concrete guidelines that can be used by software developers, security analysts, and system owners when performing similar assessments.

2008 ◽  
Vol 130 (5) ◽  
Author(s):  
Peter Leung ◽  
Kosuke Ishii ◽  
Jeffrey Abell ◽  
Jan Benson

Under the current trend of globalization, companies develop products not only to target a single market but to sell them to the entire world. Companies realize the importance of collaborative design, or workshare, to develop global regional engineering centers to balance design variations while ensuring local market success. This paradigm shift enables diverse customer values to be integrated into products but also introduces challenges in the management of work distribution. Extensive industry case studies have shown that capability and capacity of the regional centers drive the workshare decisions; however, this strategy overlooks the interdependence of the design systems causing many delays and quality problems. Seeing the opportunity, this paper presents a method to identify and to quantify the system-level workshare risk based on the couplings of system components to evaluate the overall workshare scenarios. The risk analysis consists of two key elements in terms of two relationships, the division of work for distributions (i.e., component coupling) and the work assignments of the distributed teams (i.e., workshare coupling), as well as an algorithm to combine the relationships to calculate the workshare risk. To illustrate the steps of the risk analysis, this paper applies it to a hair dryer design as a case study. The paper also discusses the usages and characteristics of the risk analysis, and concludes with the future research and the next steps of generalizing the method to other product development projects.


2017 ◽  
Vol 9 (1) ◽  
Author(s):  
Devi Renista Candra ◽  
Ken Ditha Thania

Abstract Department of Communication and Information Technology Government Prabumulih is a device which acts as a local government responsible for the fields of transportation, communication and informatics at level Prabumulih. The Department has the tacit and explicit knowledge that has not been optimally managed and documented. Office requires a knowledge management system, as evidenced by knowledge sharing features. System development method used is the 10-step knowledge management roadmap by Amrit Tiwana . While the method of knowledge sharing using the Boyer-Moore algorithm. The results of this study are worth a Knowledge Management System applied to the department. And based on the results of testing the application of knowledge sharing feature using the Boyer-Moore algorithm is very effective.   Keywords: Knowledge Management System, Knowledge Sharing, Boyer-Moore Algorithm


2020 ◽  
Vol 4 (2) ◽  
Author(s):  
Dimas Pratama

ABSTRACT: This study aimed to investigate goal-setting characteristics in the Directorate General of Customs and Excise (DGCE) using the XXX Customs Office as a sample. Document review related to Performance Management System (PMS) was examined, and in-depth interviews with employees in-charge are conducted for data collection. The result showed that goal-setting in DGCE partially had met quality goal characteristics in a way that the goals are specific and unambiguous. However, they are not challenging. Regarding participation, goals are mostly self-set at the staff level while they are more assigned at the supervisor level. From the employee perspective, goal-setting is sufficient to help them focus their effort and also set the work standard. This study also found that performance-related feedback is provided informally or maybe worse, it was neglected. This study provides an initial understanding of goal-setting practice in DGCE for further system development. One implication is to increase the number of mandatory KPIs for staff level.Keywords: Performance Management System, Goal-setting, Public sector, Indonesian Customs.ABSTRAK: Studi ini bertujuan untuk meneliti karakteristik sasaran kerja pegawai (SKP) atau indikator kinerja utama (IKU) pada Direktorat Jenderal Bea dan Cukai (DJBC) dengan sampel KPPBC XXX. Analisis terhadap dokumen terkait pengelolaan kinerja dan wawancara terhadap para pegawai yang bertanggung jawab atau mengetahui proses pengelolaan kinerja yang dilakukan. Hasil studi menunjukkan bahwa sasaran kinerja pegawai telah memenuhi kriteria, yaitu jelas dan tidak ambigu. Namun, SKP dan IKU masih kurang menantang. Terkait partisipasi, sasaran kinerja kebanyakan ditetapkan oleh masing-masing pegawai pada level pelaksana dan lebih banyak yang ditetapkan oleh organisasi pada level pengawas. Dari perpektif pegawai, penetapan SKP atau IKU telah efektif dalam hal membantu pegawai untuk fokus terhadap tujuan organisasi disamping memberikan standar atas penyelesaian pekerjaan. Terkait umpan balik diberikan secara informal atau malah lebih buruk, tidak diberikan sama sekali oleh atasan. Studi ini memberikan pemahaman pendahuluan atas proses penetapan sasaran kinerja di DJBC sebagai landasan dalam perbaikan sistem pengelolaan kinerja. Memperbanyak jumlah IKU mandatory bagi staf menjadi salah satu implikasi.Kata Kunci: Sistem Pengelolaan Kinerja, Penetapan Sasaran Kinerja, Sektor Publik, Bea Cukai. 


2012 ◽  
Vol 134 (07) ◽  
pp. 48-51
Author(s):  
Mario M. Copa

This article explores the need to establish an engineering maintenance management system and presents a case study of the same at Minera San Cristobal S.A. (MSC), a Bolivian mining company owned by Sumitomo Corp. Plant operational reliability elements are design, equipment, processes, and people. The company developed a format for maintenance management key performance indicators; for instance, comparing scheduled and unscheduled work orders or equipment availability vs. operational availability. These helped in measuring the performance of the equipment on which preventive maintenance had been performed. Within a short period of time, MSC has shown remarkable improvement. Early in 2009, the company had faced bankruptcy, and has now returned to profitability. The establishment of an engineering maintenance management system has produced change and growth, has raised the company’s standards, and has advanced MSC toward its goal to become a world-class company.


1989 ◽  
Vol 20 (SI) ◽  
pp. 127-132
Author(s):  
J. M. Manheimer ◽  
R. C. Burnett ◽  
J. A. Wallers

Sign in / Sign up

Export Citation Format

Share Document