The Experts below are selected from a list of 192123 Experts worldwide ranked by ideXlab platform

Yaron Ilan - One of the best experts on this subject based on the ideXlab platform.

  • the economics of Software Distribution over the internet revisited
    First Monday, 2001
    Co-Authors: Yaron Ilan
    Abstract:

    Research on the information economy has been based on the assumption that production of Software involves low, or even zero, marginal costs. This paper examines this assumption. It argues that the act of driving Internet traffic to an Internet server is an act of Distribution and that costs associated with it are actually Software production and Distribution costs. It suggests a generalized model, the Internet Distribution chain, using which the variable and marginal cost of production and Distribution can be revealed. Using this model the paper will show that marginal costs associated with the production and Distribution of Software actually resemble those of traditional products.

Teresa Gomez-diaz - One of the best experts on this subject based on the ideXlab platform.

Richard Robinson - One of the best experts on this subject based on the ideXlab platform.

  • STM - A case study in decentralized, dynamic, policy-based, authorization and trust management: automated Software Distribution for airplanes
    Security and Trust Management, 2011
    Co-Authors: Peter Hartmann, Monika Maidl, David Von Oheimb, Richard Robinson
    Abstract:

    We apply SecPAL, a logic-based policy language for decentralized authorization and trust management, to our case study of automated Software Distribution for airplanes. In contrast to established policy frameworks for authorization like XACML, SecPAL offers constructs to express trust relationships and delegation explicitly and to form chains of trusts. We use these constructs in our case study to specify and reason about dynamic, ad-hoc trust relationships between airlines and contractors of suppliers of Software that has to be loaded into airplanes.

  • Certificate-based Trust Establishment for Airplane Software Distribution
    AIAA Infotech@Aerospace Conference, 2009
    Co-Authors: David Von Oheimb, Peter Hartmann, Richard Robinson
    Abstract:

    Contemporary developments in airplane manufacturing and maintenance are motivating the introduction of significant new IT infrastructure, supporting increased communication and data transfer among aircraft and a variety of ground-based information systems operated by airlines and their business partners. A next generation of airplane designs, incorporating wired and wireless network interfaces, will support a wide spectrum of ”eEnabled” or network-enabled applications, including Distribution of airplane Software, collection and off-board retrieval of airplane health reports, perhaps even participation in advanced collaborative air traffic control. In this context it is clear that airline business viability and even flight safety will come to depend on the security of data transported in these applications. Trust is a fundamental element of security and information assurance in any business context, and must be treated as such in the design of networked IT systems. We consider the establishment and maintenance of trust relations for an application typical of networkenabled airplane applications, namely an Airplane Assets Distribution System (AADS) which affords a capability for on-line Distribution of airplane-resident Software from suppliers via airlines to airplanes. The AADS involves a large number of parties, among whom explicit and manageable trust relations are essential. In order to achieve integrity and authenticity of Software transmitted via the AADS, an infrastructure design solution employing digital signatures and public-key infrastructure must be instantiated and adapted for use in the aviation environment, which has its own architectural peculiarities and stringent assurance requirements. We introduce a protocol for initializing the certificate of an airplane which is used to secure and authenticate data sent by the airplane to its owning airline. We describe the basic protocol and several protection variants, first in an informal discussion and then in a precise formal way, pointing out the differences in security properties of the variants. Finally, we report on the results of model-checking our formalizations using the AVISPA protocol validation tool. The Airplane Certificate Initialization Protocol serves as a concrete example our methodology for modeling, analyzing, and discussing the design of safetyand securitycritical IT systems currently under development in the aerospace industry. Our experience shows this methodology is effective for exploring requirements and design alternatives, surfacing important issues, and giving evidence that the system architecture meets the desired security goals.

  • SAFECOMP - Formal Security Analysis of Electronic Software Distribution Systems
    Lecture Notes in Computer Science, 2008
    Co-Authors: Monika Maidl, David Von Oheimb, Peter Hartmann, Richard Robinson
    Abstract:

    Software Distribution to target devices like factory controllers, medical instruments, vehicles or airplanes is increasingly performed electronically over insecure networks. Such Software often implements vital functionality, and so the Software Distribution process can be highly critical, both from the safety and the security perspective. In this paper, we introduce a novel Software Distribution system architecture with a generic core component, such that the overall Software transport from the supplier to the target device is an interaction of several instances of this core component communicating over insecure networks. The main advantage of this architecture is reduction of development and certification costs. The second contribution of this paper describes the validation and verification of the proposed system. We use a mix of formal methods, more precisely the AVISPA tool, and the Common Criteria (CC) methodology, to achieve high confidence in the security of the Software Distribution system at moderate costs.

Alexander L. Wolf - One of the best experts on this subject based on the ideXlab platform.

  • ICSM - Evaluating Software Deployment Languages and Schema
    1998
    Co-Authors: Richard S. Hall, Dennis Heimbigner, Alexander L. Wolf
    Abstract:

    Software Distribution is evolving from a physical media approach to one where it is practical and advantageous to leverage the connectivity of networks. Network Distribution of Software systems provides timeliness and continuity of evolution not possible with physical media Distribution methods. To support network-based Software Distribution, companies and organizations such as Microsoft, Marimba, and the Desktop Management Task Force (DMTF) are strengthening their efforts to package Software systems in a way that is conducive to network Distribution and management. The result of these efforts has led to the creation of Software description languages and schema such as the Open Software Description format created by Microsoft and Marimba and the Management Information Format created by DMTF. While these efforts are steps in the right direction, they do not address deployment issues in a complete and systematic fashion. The contribution of this paper is to evaluate these leading Software description technologies.

  • Evaluating Software deployment languages and schema: an experience report
    Proceedings. International Conference on Software Maintenance (Cat. No. 98CB36272), 1
    Co-Authors: Richard S. Hall, Dennis Heimbigner, Alexander L. Wolf
    Abstract:

    Software Distribution is evolving from a physical media approach to one where it is practical and advantageous to leverage the connectivity of networks. Network Distribution of Software systems provides timeliness and continuity of evolution not possible with physical media Distribution methods. To support network-based Software Distribution, companies and organizations such as Microsoft, Marimba, and the Desktop Management Task Force (DMTF) are strengthening their efforts to package Software systems in a way that is conducive to network Distribution and management. The result of these efforts has led to the creation of Software description languages and schema such as the Open Software Description format created by Microsoft and Marimba and the Management Information Format created by DMTF. While these efforts are steps in the right direction, they do not address deployment issues in a complete and systematic fashion. The contribution of this paper is to evaluate these leading Software description technologies.

Zhang Xiao-feng - One of the best experts on this subject based on the ideXlab platform.