Search results
1 – 10 of over 9000Joe Garcia, Russell Shannon, Aaron Jacobson, William Mosca, Michael Burger and Roberto Maldonado
This paper aims to describe an effort to provide for a robust and secure software development paradigm intended to support DevSecOps in a naval aviation enterprise (NAE) software…
Abstract
Purpose
This paper aims to describe an effort to provide for a robust and secure software development paradigm intended to support DevSecOps in a naval aviation enterprise (NAE) software support activity (SSA), with said paradigm supporting strong traceability and provability concerning the SSA’s output product, known as an operational flight program (OFP). Through a secure development environment (SDE), each critical software development function performed on said OFP during its development has a corresponding record represented on a blockchain.
Design/methodology/approach
An SDE is implemented as a virtual machine or container incorporating software development tools that are modified to support blockchain transactions. Each critical software development function, e.g. editing, compiling, linking, generates a blockchain transaction message with associated information embedded in the output of a said function that, together, can be used to prove integrity and support traceability. An attestation process is used to provide proof that the toolchain containing SDE is not subject to unauthorized modification at the time said critical function is performed.
Findings
Blockchain methods are shown to be a viable approach for supporting exhaustive traceability and strong provability of development system integrity for mission-critical software produced by an NAE SSA for NAE embedded systems software.
Practical implications
A blockchain-based authentication approach that could be implemented at the OFP point-of-load would provide for fine-grain authentication of all OFP software components, with each component or module having its own proof-of-integrity (including the integrity of the used development tools) over its entire development history.
Originality/value
Many SSAs have established control procedures for development such as check-out/check-in. This does not prove the SSA output software is secure. For one thing, a build system does not necessarily enforce procedures in a way that is determinable from the output. Furthermore, the SSA toolchain itself could be attacked. The approach described in this paper enforces security policy and embeds information into the output of every development function that can be cross-referenced to blockchain transaction records for provability and traceability that only trusted tools, free from unauthorized modifications, are used in software development. A key original concept of this approach is that it treats assigned developer time as a transferable digital currency.
Details
Keywords
- Software development
- Blockchain
- Cybersecurity
- Operational flight program
- Secure development environment
- Secure virtual machine
- Zero trust
- Embedded systems
- Mission-critical systems
- OFP
- DevOps
- DevSecOps
- Software support activity
- SSA
- SDE
- Permissioned blockchain
- Cryptocurrency
- Time-limited authorization for developer action
- TADA
- Code signing
- Trusted software guard
- SGX
- Trusted eXecution technology
- TXT
- Trusted platform module
- Self-hosting
- Controlled access blockchain
- CABlock
- Role-based access control
- RBAC
Ia Williamsson and Linda Askenäs
This study aims to understand how practitioners use their insights in software development models to share experiences within and between organizations.
Abstract
Purpose
This study aims to understand how practitioners use their insights in software development models to share experiences within and between organizations.
Design/methodology/approach
This is a qualitative study of practitioners in software development projects, in large-, medium- or small-size businesses. It analyzes interview material in three-step iterations to understand reflexive practice when using software development models.
Findings
The study shows how work processes are based on team members’ experiences and common views. This study highlights the challenges of organizational learning in system development projects. Current practice is unreflective, habitual and lacks systematic ways to address recurring problems and share information within and between organizations. Learning is episodic and sporadic. Knowledge from previous experience is individual not organizational.
Originality/value
Software development teams and organizations tend to learn about, and adopt, software development models episodically. This research expands understanding of how organizational learning takes place within and between organizations with practitioners who participate in teams. Learnings show the potential for further research to determine how new curriculums might be formed for teaching software development model improvements.
Details
Keywords
Arabella Mocciaro Li Destri and Giovanna Lo Nigro
The purpose of this paper is to analyse the possibility for firms to consider institutional settings to systematically direct dispersed individual efforts of discovery and…
Abstract
Purpose
The purpose of this paper is to analyse the possibility for firms to consider institutional settings to systematically direct dispersed individual efforts of discovery and invention towards objects (products or processes) of their interest in order to enhance their value creation capacity.
Design/methodology/approach
The authors conduct a comparative analysis of the different institutional settings within which software products are invented and produced – closed producer-centred model, open user-centred model, and hybrid interactive producer-user model.
Findings
The authors draw indications regarding the possibility to design institutional settings for value creation and the potential pitfalls tied to these strategic tools.
Originality/value
A theoretical framework is elaborated in order to understand the different ways in which institutional contexts influence and direct value creation processes. The model analysed shows the firms’ deliberate attempt to stimulate a dynamic process of social interaction and communication which may foster higher levels of creativity and innovation. In order to guarantee the necessary accessibility and to sufficiently motivate external programmers towards the perception of a new code, the firm has to surrender the traditional source through which it appropriates value: barriers to the accessibility of the code developed through IPRs. The adoption of an institutional setting which facilitates dynamic value creation processes suggests, therefore, the need to turn to dynamic mechanisms for value appropriation in parallel.
Details
Keywords
Saima Ritonummi, Valtteri Siitonen, Markus Salo and Henri Pirkkalainen
The purpose of this study is to investigate the barriers that prevent workers in the software industry from experiencing flow in their work.
Abstract
Purpose
The purpose of this study is to investigate the barriers that prevent workers in the software industry from experiencing flow in their work.
Design/methodology/approach
This study was conducted by using a qualitative critical incident technique-inspired questionnaire.
Findings
The findings suggest that workers in the software industry perceive that the most obvious obstacles to experiencing flow are related to work not presenting enough cognitive challenges and situational barriers related to the characteristics of the job (e.g. workdays having too many interruptions and distractions, timetables often being considered too tight for creative exploration and problem solving and having negative user experiences with development tools).
Originality/value
The findings provide insights into flow barriers, specifically barriers that prevent workers in the software industry from experiencing flow.
Details
Keywords
Robson Almeida Borges De Freitas and Antonio Martins de Oliveira Junior
Although Public Research Institutions (PRIs) are large technology producers, they lack automated information tools that follow technical and scientific criteria for assessing and…
Abstract
Purpose
Although Public Research Institutions (PRIs) are large technology producers, they lack automated information tools that follow technical and scientific criteria for assessing and valuing patents. The assessment and valuation processes are stages of technology transfer (TT) that make it possible to obtain productive arrangements and guide the efforts of those involved in the development, maintenance and negotiation. This study aims to analyze the hybrid model of assessment and valuation of technologies by Soares (2018), applying the ‘Valorativo' software. In addition to patent value and indicator scores, the methods allow an understanding of the technology portfolio and its management.
Design/methodology/approach
This research is quali-quantitative, following an approach of applied nature and descriptive objectives. The research has bibliographical, documental and case study features based on the software development methodologies described in the study and the theoretical framework.
Findings
The Valorativo software assisted in the analysis of ten patents on PRIs. With the data collection and patent analysis, PAT1 scored highest among engineering patents, PAT3 scored highest among pharmaceutical patents and PAT10 scored highest among biotechnology patents. Five of the assessed patents resulted in a surplus of net present value (NPV), final net present value (NPVF) and royalties; revenue expectations outpaced investments.
Practical implications
The authors based the developed software on Soares’s (2018) methodology, with additional calculations and graphs. The Web software and the spreadsheet with Visual Basic for Application (VBA) were developed to deal with the patents assessment and valuation, helping in the analysis of their Legal Value, Technological Value and Market Conditions in the assessment process, and the Discounted Cash Flow and NPV in the valuation process.
Originality/value
The software helps with patent analysis and can generate indicators for traders, technology holders and researchers. Thus, it was necessary to understand and develop a theoretical-applied framework to outline and replicate the methodology clearly and easily.
Details
Keywords
Carin Lindskog and Monika Magnusson
The purpose of this study is to apply the concept of organizational ambidexterity as a conceptual lens to increase the understanding of tensions between exploitation (continuity…
Abstract
Purpose
The purpose of this study is to apply the concept of organizational ambidexterity as a conceptual lens to increase the understanding of tensions between exploitation (continuity) and exploration (change) in Agile software development (ASD) project teams, and particularly the balancing (ambidextrous) strategies utilized.
Design/methodology/approach
A conceptual framework was constructed from interdisciplinary sources on ambidexterity. A literature review of publications on ambidexterity in ASD was then performed, and the results from the selected publications were classified according to an extension of the conceptual framework.
Findings
Contextual ambidexterity in ASD is affected by the four basic coherent concepts: time, task, team and transition. The study found that most ambidextrous factors and strategies were task and team-related. In addition, a mixture of hard (performance) strategies and soft (social) strategies is needed in order for people/teams to (be able to) become ambidextrous.
Practical implications
To provide a better understanding of ASD, it is important to identify a broader set of ambidextrous factors and strategies that can impact ASD project teams. The expanded conceptual framework can serve as a basis for future empirical research and provide insights to practitioners on how to strengthen ambidexterity in ASD projects.
Originality/value
The contribution is of great importance for ASD research and practice, as ASD methods are a popular method for managing projects within ASD and in other nonsoftware organizations. In addition, as more and more organizations struggle to deal with rapidly changing environments, interest in the phenomena of paradoxical tensions and the strategy (ambidexterity) to deal with these tensions increase.
Details
Keywords
Manzoor Hassan Malik and Nirmala Velan
The purpose of this paper is to investigate both long-run and short-run dynamics among the software and services export, investment in information technology (IT) and GDP in India…
Abstract
Purpose
The purpose of this paper is to investigate both long-run and short-run dynamics among the software and services export, investment in information technology (IT) and GDP in India and to investigate the direction of the relationship among the given three macro-economic variables.
Design/methodology/approach
The time series data have been taken to investigate the long-run relationship exists among the variables. Annual data were collected from the NASSCOM Annual Reports, Planning Commission of India and Reserve Bank of India during the period 1980–2016. Cointegration and vector error correction model have been used for analyzing the causal relationship among investment in IT, software exports and GDP in India.
Findings
Cointegration results confirm that software and services export, investment in IT and GDP are cointegrated, implying that there exists the long-run equilibrium relationship among the given three macro-economic variables. Similarly, vector error correction mechanism Granger causality results hold that there is uni-directional long-run causality running from software and services export and investment in IT to GDP, implying that software and services export is an important determinant of economic growth in India.
Research limitations/implications
The limitations of the paper are generalization of the results and proxy variable for IT investments.
Practical implications
The paper has implications for the expansion of market concentration, diversification of software and service exports, and investments in R&D for increasing competitiveness of the industry in the global market.
Originality/value
This paper focuses on originality in the analysis of the relationship among the given variables software exports, investment in the IT sector and GDP in India. All the work has been done in original by the authors and the work used have been acknowledged properly.
Details
Keywords
Lorenzo Lynberg and Ahmed Deif
This paper addresses a gap in research literature in the fields of blockchain technology (BC), supply chain network dynamics (SC) and network effect phenomena (NE). Extant BC and…
Abstract
Purpose
This paper addresses a gap in research literature in the fields of blockchain technology (BC), supply chain network dynamics (SC) and network effect phenomena (NE). Extant BC and SC literature describes the potential benefits to be reaped through the adoption of BC technology. While BC technology does not yet meet the researched expectations of adoption, performance and efficacy, the authors analyze the three inter-related fields (BC, SC and NE) to bridge this gap in theory.
Design/methodology/approach
This paper begins with a research review correlating the technological fundamentals of BC technology into fundamental value propositions for SC logistics contexts. The authors review the gap between these theoretical technological functions and the current ecosystem of BC applications. With an overarching understanding of BC in SC contexts, this paper then explores the phenomena of NE and attempts to synthesize various interrelated aspects of the three fields (BC, SC and NE). Research frameworks from extant literature are used for cross-comparing legacy software/information system solutions with potential and existing BC-based solutions. Case studies are utilized to support this analysis.
Findings
Several key considerations and themes are identified to better inform practitioner and researcher decision-making. Novel insights pertain to BC platform architecture and application modularity, integrated governance and decision-making capabilities, and the automation capabilities that arise from a healthy application and smart contract ecosystem.
Originality/value
The core contribution is the synthesis of network effect theory with SC phenomena and BC theory and the exploration of how these three fields are inter-related in the maturation of BC technology. Specifically, the authors deepen insights from extant literature by contextualizing findings with relevant interdisciplinary theoretical frameworks.
Details
Keywords
Manzoor Hassan Malik and Nirmala Velan
The aims of the paper are to investigate IT software and service export function for India. First, cointegration tests have been used to investigate the long-run equilibrium…
Abstract
Purpose
The aims of the paper are to investigate IT software and service export function for India. First, cointegration tests have been used to investigate the long-run equilibrium relationship of the given variables. Second, long-run coefficients and associated error correction mechanism are estimated.
Design/methodology/approach
Annual time series data on IT software and service exports, human capital, exchange rate, investment in IT, external demand and openness index have been used for the present study during the period 1980–2017. The data are collected from the National Association of Software and Service Companies (NASSCOM), Planning Commission of India, University Grants Commission (UGC) of India, real effective exchange rate (REER) database and World Bank development indicators. Auto regressive distributed lag (ARDL) model is used to analyze both short-run and long-run dynamic behaviour of economic variables with appropriate asymptotic inferences.
Findings
Results of the analysis show the stable long-run equilibrium relationship among the given variables. It is found that external demand, exchange rate, human capital and openness index have a substantial long-run impact on the IT software and service exports. We also found that the coefficient of error correction term is negative and significant at 1% of the level of significance, which confirms the existence of stable long-run relationship which means adjustment will take place when there is a short-run deviation to its long-run equilibrium after a shock.
Research limitations/implications
There may be other determinants of software and service exports apart from those considered by the present study. Due to the non-availability of data, the study considers only important determinants that determine the software and service exports in India. The IT exports are an emerging and dynamic field of economic activity and the rate of change is so rapid that the relevance of individual factors may change over time. The study period is also limited to available data.
Practical implications
The paper has implications for achieving sustainability in IT software and service exports growth. It is recommended that policies directed at improving the performance of IT software and service exports should largely consider the long-run behaviour of these variables.
Originality/value
This paper focuses on originality in the analysis of the relationship among the given variables including IT software and service exports, human capital, exchange rate, investment in IT, external demand and openness index in India. All the work has been done in original by the authors, and the work used has been acknowledged properly.
Details
Keywords
Adriano Rehder, João Valsecchi Souza, Roberto Marx and Mario Sergio Salerno
Agile methods are increasingly being applied in the contexts of innovation beyond traditional information technology (IT) and physical product development projects, such as when…
Abstract
Purpose
Agile methods are increasingly being applied in the contexts of innovation beyond traditional information technology (IT) and physical product development projects, such as when process improvements are being implemented. Nevertheless, this phenomenon is still recent and little addressed in the literature, with few descriptions of empirical cases. This study aims to address this gap.
Design/methodology/approach
This multiple case study aims to present and discuss the application of Agile practices embedded in large companies’ innovation value chains, focusing on improvements of business processes. The following research question is pursued: How are large companies applying elements of Agile methods to their innovation processes when implementing incremental improvements in their operational processes? Based on the idea that the Agile-Stage-Gate model is an alternative to this challenge, this study investigates the application of this hybrid model in two large Brazilian companies by presenting their idiosyncrasies, lessons learned, adaptations, challenges and benefits.
Findings
Overall, it was observed that the experience with the application of the Agile-Stage-Gate model is positive for these companies, with better customer engagement, easier project control and increased productivity of the project team.
Originality/value
For those aiming to implement the Agile-Stage-Gate model, this paper identifies the main adaptations made in order to combine the purist approaches and critical success factors for its implementation.
Details