Search results

This paper aims to describe an effort to provide for a robust and secure software development paradigm intended to support DevSecOps in a naval aviation enterprise (NAE) software support activity (SSA), with said paradigm supporting strong traceability and provability concerning the SSA’s output product, known as an operational flight program (OFP). Through a secure development environment (SDE), each critical software development function performed on said OFP during its development has a corresponding record represented on a blockchain.

An SDE is implemented as a virtual machine or container incorporating software development tools that are modified to support blockchain transactions. Each critical software development function, e.g. editing, compiling, linking, generates a blockchain transaction message with associated information embedded in the output of a said function that, together, can be used to prove integrity and support traceability. An attestation process is used to provide proof that the toolchain containing SDE is not subject to unauthorized modification at the time said critical function is performed.

Blockchain methods are shown to be a viable approach for supporting exhaustive traceability and strong provability of development system integrity for mission-critical software produced by an NAE SSA for NAE embedded systems software.

A blockchain-based authentication approach that could be implemented at the OFP point-of-load would provide for fine-grain authentication of all OFP software components, with each component or module having its own proof-of-integrity (including the integrity of the used development tools) over its entire development history.

Many SSAs have established control procedures for development such as check-out/check-in. This does not prove the SSA output software is secure. For one thing, a build system does not necessarily enforce procedures in a way that is determinable from the output. Furthermore, the SSA toolchain itself could be attacked. The approach described in this paper enforces security policy and embeds information into the output of every development function that can be cross-referenced to blockchain transaction records for provability and traceability that only trusted tools, free from unauthorized modifications, are used in software development. A key original concept of this approach is that it treats assigned developer time as a transferable digital currency.

Software developers extensively use stack overflow (SO) for knowledge sharing on software development. Thus, software engineering researchers have started mining the structured/unstructured data present in certain software repositories including the Q&A software developer community SO, with the aim to improve software development. The purpose of this paper is show that how academics/practitioners can get benefit from the valuable user-generated content shared on various online social networks, specifically from Q&A community SO for software development.

A comprehensive literature review was conducted and 166 research papers on SO were categorized about software development from the inception of SO till June 2016.

Most of the studies revolve around a limited number of software development tasks; approximately 70 percent of the papers used millions of posts data, applied basic machine learning methods, and conducted investigations semi-automatically and quantitative studies. Thus, future research should focus on the overcoming existing identified challenges and gaps.

The work on SO is classified into two main categories; “SO design and usage” and “SO content applications.” These categories not only give insights to Q&A forum providers about the shortcomings in design and usage of such forums but also provide ways to overcome them in future. It also enables software developers to exploit such forums for the identified under-utilized tasks of software development.

The study is the first of its kind to explore the work on SO about software development and makes an original contribution by presenting a comprehensive review, design/usage shortcomings of Q&A sites, and future research challenges.

This purpose of this paper is to present ISML-MDE, a model-driven environment that includes ISML, a platform-independent modeling language for enterprise applications; ISML-GEN, a code generation framework to automatically generate code from models; and LionWizard, a tool to automatically integrate different components into a unified codebase.

The development comprises five stages: standardizing architecture; refactoring and adapting existing components; automating their integration; developing a modeling language; and creating code generators. After development, model-to-code ratios in ISML-MDE are measured for different applications.

The average model-to-code ratio is approximately 1:4.6 when using the code generators from arbitrary models. If a model transformation is performed previously to the code generation, this ratio raises to 1:115. The current validation efforts show that ISML properly supports several DSL essential characteristics described by Kahraman and Bilgen (2015).

ISML-MDE was tested on relatively small applications. Further validation of the approach requires measurement of development times and their comparison with previous similar projects, to determine the gains in productivity.

The value of ISML-MDE can be summarized as follows: ISML-MDE has the potential to significantly reduce development times, because of an adequate use of models and transformations. The design of ISML-MDE addresses real-world development requirements, obtained from a tight interaction between the researchers and the software development company. The underlying process has been thoroughly documented and it is believed it can be used as a reference for future developments of MDE tools under similar conditions.

This chapter addresses a significant topic in Algeria, namely the issue of Corporate Social Responsibility (CSR), by examining the use of business ethics codes. In recent years, there has been growing interest among companies in implementing practices that can justify their CSR efforts, including the development of corporate business ethics codes. These codes play a crucial role in formalizing the integration of CSR strategies. In Algeria, several companies have adopted business ethics codes; one such example is the companies in the oil and gas sector, the leading oil industry company in Algeria. These companies have implemented a business ethics code to provide justification and guidance for their CSR practices. The main objective of this chapter is to demonstrate the commitment of companies to CSR through the development of their business ethics codes. It presents the results of a comprehensive analysis of the business ethics codes of Algerian companies in the oil and gas sector. The approach involved the development of an analytical framework with various criteria and an objective examination of the business ethics code to yield results that aligned with these criteria. The study concludes that the business ethics codes of these companies serve as sources of internal regulation that primarily address ethical concerns and reflects the existing Algerian regulations at the organizational level.

The purpose of this paper is twofold: first, to make a contribution to the theoretical understanding of documents and documentary agency in society through examples from a defined institutional and professional setting; and second, to create an understanding for the role of ethical codes in the process of defining and developing modern librarianship.

This study analyses the role of documentation carrying content of professional ethics in the formulation of modern librarianship. This is done through a series of example documents of various kinds, such as founding charters, peer handbooks and ethical codes systematically analysed through the use of document theory and theory on institutional change.

The findings of this study suggest that documents pronouncing ethical self-regulation within librarianship play a primarily legitimising role in situations where new types of libraries emerge or when libraries adapt to social change. The study proposes legitimacy as a key aspect of documentality, thus supplementing the established understanding of the concept.

This study is the first to analyse the role of ethical codes in libraries using document theory. It brings new knowledge to the role of ethical self-regulation in librarianship over time and in different institutional contexts. In suggesting a developed definition of documentality, it contributes to the theoretical understanding of the role of documents and documentation in institutions and in society at large.

This study seeks to deepen the understanding of the political process underlying the establishment and evolution of corporate governance (CG) regulations in a developing country.

Drawing on regulatory space concept (Hancher and Moran, 1989) and Oliver's (1991) typology of strategic responses, the authors identify which actor participated in and benefitted from the establishment of a new transnational CG regulation in Pakistan. Data were collected through interviews and from the published secondary sources.

The findings highlighted regulations are being influenced and shaped up by the political process of negotiation, bargaining, manipulation and domination between powerful and resourceful actors in a given regulatory space. National regulators and regulatees can be indeed fervent opponents to the transnational regulations when it comes to protecting their well-rooted national interests.

This study contributes to the accounting literature by illustrating political processes through which internationally recognised CG practices are resisted, negotiated and implemented in the developing countries. The regulator must pay attention that the outcome of the regulatory change process is the result of carefully crafted and conscious strategies of actors in the regulatory space.

The purpose of this study is to understand the concept of “Low Code No Code” applications and study its scope of application for web designing, rapid application development (RAD) and supply chain digitization (SCD).

A qualitative exploratory study was conducted for this exploratory study. A semi-structured open-ended questionnaire was prepared by the authors. Based on the questionnaire in-depth interviews were conducted with subject matter experts having more than 10 years of experience in the domain of supply chain management and digitization. The study questionnaire focused on the current reach and future potential of “Low Code No Code” platforms. A total of 20 responses were collected from experts as post this point thematic saturation was reached. A non-probabilistic convenience sampling was applied to identify the experts The data was content analyzed for themes.

The major findings that emerged from the study was that “Low Code No Code” platforms applications could be used across end-to-end SCD. The study also revealed that RAD through “Low Code No Code” platforms could reduce organizations dependency on coders. In the case of procurement, “Low Code No Code” applications could improve vendor and supplier management by streamlining processes. The cost-effective and easy-to-maintain “Low Code No Code” application development could help Medium and Small-Scale Enterprises level the playing field against large organizations. The lack of adoption strategy and low perceived usefulness was identified as major barriers to the adoption of “Low Code No Code” applications by organizations.

“Low Code No Code” application-based automation would enable better utilization of organizational supply chain (SC) resources and capabilities. This would improve the sustainability performance of the firm. Furthermore, it would also enable the provision of SC services at a lower cost level, thus benefiting customers.

“Low Code No Code” application-based automation would help organizations to reduce the dependency on coders and Information Technology developers SCD. This could also allow SC managers to make more apps to be built in less time without the need of complex coding. This could potentially reduce app development costs toward digitizing SCs.

To the best of the authors’ knowledge, this was one of the very first studies regarding how “Low Code No Code” applications could revolutionize the SC using these app development capabilities. This study also provided an extensive study of Diffusion of Innovations and Technological Organizational Theory frameworks for in the context of “Low Code No Code” technology adoption.

Physical phenomena interact with each other in ways that one cannot be analyzed without considering the other. To account for such interactions between multiple phenomena, partitioning has become a widely implemented computational approach. Partitioned analysis involves the exchange of inputs and outputs from constituent models (partitions) via iterative coupling operations, through which the individually developed constituent models are allowed to affect each other’s inputs and outputs. Partitioning, whether multi-scale or multi-physics in nature, is a powerful technique that can yield coupled models that can predict the behavior of a system more complex than the individual constituents themselves. The paper aims to discuss these issues.

Although partitioned analysis has been a key mechanism in developing more realistic predictive models over the last decade, its iterative coupling operations may lead to the propagation and accumulation of uncertainties and errors that, if unaccounted for, can severely degrade the coupled model predictions. This problem can be alleviated by reducing uncertainties and errors in individual constituent models through further code development. However, finite resources may limit code development efforts to just a portion of possible constituents, making it necessary to prioritize constituent model development for efficient use of resources. Thus, the authors propose here an approach along with its associated metric to rank constituents by tracing uncertainties and errors in coupled model predictions back to uncertainties and errors in constituent model predictions.

The proposed approach evaluates the deficiency (relative degree of imprecision and inaccuracy), importance (relative sensitivity) and cost of further code development for each constituent model, and combines these three factors in a quantitative prioritization metric. The benefits of the proposed metric are demonstrated on a structural portal frame using an optimization-based uncertainty inference and coupling approach.

This study proposes an approach and its corresponding metric to prioritize the improvement of constituents by quantifying the uncertainties, bias contributions, sensitivity analysis, and cost of the constituent models.

Corporate codes of conduct originated around 1900 in the USA gaining further momentum in the 1950s in relation to anti‐trust legislation. Subsequently, the adoption of codes of ethics has spread throughout the world and they now feature extensively in many organisations. The literature relating to codes of ethics, therefore, spans many decades and is undoubtedly comprehensive. The purpose of the paper is to provide an appropriate anthology of codes of ethics.

A descriptive, historical, anthological approach has been taken.

This paper examines the motivations for the adoption of codes of ethics, which naturally also includes international codes, their frequency of use and content. Codes are also not without critique and it is appropriate to highlight the criticisms of codes, to provide an assessment of their potential effectiveness, the issues surrounding implementation and enforcement and the relationship to organisational culture and leadership.

As noted, the literature on codes of conduct is extensive and while effort has been made to capture the key themes the review is not necessarily exhaustive.

The literature is characterised by the means of institutionalising ethics in organisations and the paper concludes with a summative reflection on the key dimensions that appear to be paramount for improving the efficacy of codes of conduct.

The purpose of this study is on the top 500 companies in South Africa (as per the TopCo, 2014 list) that have a code of ethics, to see the current state of development in this area after 20 years of focus by the government and business on making corporate South Africa a more ethical environment, in which to conduct business.

A structured questionnaire survey method was used to gather the data and it was directed to the company secretaries of these top 500 companies.

Many companies in South Africa have a well-established set of protocols to enact the ethos of their code of ethics, indicating that they are becoming increasingly aware of the benefits to them of having a code. South African companies are, therefore, implementing both a code of ethics and strategies that contribute to creating an ethical corporate culture.

This study provides an opportunity to further research assessing and comparing other companies in non-Western and emerging economies.

After 20 years of endeavours by business people and lawmakers to improve the ethical framework of South African business, there is still plenty of work to be done, as so many top companies do not appear to have a code of ethics.

There have been limited studies in the area of business ethics in South African companies. This study is the first of its kind in the South African context and establishes the current practice 20 years after the King I report.