Academic literature on the topic 'Guideline generation'

Thesis (Ph. D.)--University of North Carolina at Chapel Hill, 2008.<br>Title from electronic title page (viewed Feb. 17, 2009). "... in partial fulfillment of the requirements for the degree of Doctor of Philosophy in the Division of Pharmaceutical Outcomes and Policy in the School of Pharmacy." Discipline: Pharmaceutical Outcomes and Policy; Department/School: Pharmacy.

Conducting risk assessments is a vital part of securing information systems. The task of conducting risk assessments is a time-consuming and costly task for organizations. Thus different security control frameworks have been created to assist in the process. These security control frameworks consists of information about what the organization is supposed to implement to achieve a level of security in their information system. To understand what network hardening solution to use and in what part of the system, an analyst needs to manually use the implementation details gathered from the framework. A security control can be split into different security tiers depending on the amount of security the implementation achieves. The security tiers are defined by the authors of the security control framework. An organization can reduce their cost and time spent on implementing the security by having a tool that parses the information system and creates guidelines based on security controls and parsed data. In this research, we will compare different security controls and based on the findings, investigate hardware, software and configurations that are being used when conducting network hardening. We will evaluate to which extent it is possible to generate guidelines that meet the given security tier, whether it is feasible to apply them and present a prototype that is able to generate guidelines. The different security controls will be compared by analyzing the contents of each control in the frameworks. A comprehensive mapping will be created and based on the information gathered in the mapping, network-hardening implementations will be investigated based on the devices in our experiment environment. With implementations at hand, a tool will be proposed that parses information systems and outputs guidelines that integrate the implementations in a readable format. Experts within the field of system hardening then evaluate the created guidelines in terms of achieving defined security levels. For the comparison, a total of 148 different controls were identified to be related in some way. With 148 controls at hand, the prototype can output 111 different guidelines with different security tier associations. According to the comments from the experts, the proposed guidelines were able to satisfy each security tier. Our prototype displayed that we were able to create guidelines that can meet a given security tier. Although the implementation of each guideline is not automated, identifying what network-hardening implementation should be used is done in an automated fashion and thus allowing organizations to put their spending and time into other organizational interests. \newline<br>Att utföra riskbedömningar är en nödvändig process när ett informations-system ska säkras. Uppgiften med att utföra riskbedömningar är för organisationer en tidskrävande och dyr process. Därför har olika ramverk för säkerhetskontroller tagits fram för att underlätta denna uppgift. Dessa ramverk innehåller information över vad en organisation behöver implementera för att erhålla en specifik nivå av säkerhet i deras informations-system. Den här säkerhetsnivån varierar beroende på hur mycket säkerhet en implementation tillför. De olika nivåerna definieras av ramverksförfattarna. För att förstå vilka nätverkshärdningar organisationen ska använda samt för vilken del i systemet dessa härdningar ska appliceras, behöver en analytiker manuellt gå igenom implementerings-lösningar i ramverken tillsammans med systemet och på så vis ta fram korrekt härdningsåtgärd för en specifik del i systemet. Syftet med arbetet är att jämföra olika säkerhetskontroller och baserat på resultatet undersöka hur hårdvara, mjukvara och konfigurationer kan användas för att härda nätverket. Vi kommer att utvärdera i vilken utsträckning det är möjligt att generera riktlinjer, huruvida det är möjligt att applicera riktlinjerna och ta fram en prototyp som kan generera riktlinjer. De olika ramverken kommer att jämföras genom att innehållet i deras säkerhetskontroller analyseras. En omfattande mappning kommer att tas fram baserat på analysen och utifrån mappningen kommer ytterliggare implementationer rörande nätverkshädrning analyseras. Med hjälp av implementationerna kommer ett verktyg att föreslås vilket analyserar ett informations-system och som producerar riktlinjer som integrerar implementationerna till ett läsbart format. Dessa riktlinjer undersöks sedan av experter gällande hur väl riktlinjerna uppnår definerade säkerhetsnivåer. Under arbetet identifierades totalt 148 olika säkerhets-kontroller som påvisade likhet med varandra. Med dessa 148 kontroller tillgodo klarade vår prototyp av att producera 111 olika riktlinjer tillhörande olika säkerhetsnivåer beroende på systemet som matades in. Enligt kommentarerna ur granskningen som experterna utförde gick följande att konstatera: riktlinjerna som tas fram genom prototypen kunde upprätthålla varje säkerhetsnivå. Vår prototyp påvisade att det var möjligt att skapa riktlinjer som uppnår en efterfrågad säkerhetsnivå. Även om implementering för varje producerad riktlinje inte är automatiserad så kunde vår prototyp automatisera processen av att avgöra vilken nätverks-härdnings implementation som skulle användas för var riktlinje. Detta tillåter organisationer att lägga mer tid och investeringar i andra organisatoriska intressen.

Submitted by Pedro Barros (pedro.silvabarros@ufpe.br) on 2018-07-11T20:37:26Z No. of bitstreams: 2 license_rdf: 811 bytes, checksum: e39d27027a6cc9cb039ad269a5db8e34 (MD5) TESE Cledja Karina Rolim da Silva.pdf: 4417000 bytes, checksum: 9649b9a2c3b86f1c7a2ce85556b2cc63 (MD5)<br>Approved for entry into archive by Alice Araujo (alice.caraujo@ufpe.br) on 2018-07-17T20:32:07Z (GMT) No. of bitstreams: 2 license_rdf: 811 bytes, checksum: e39d27027a6cc9cb039ad269a5db8e34 (MD5) TESE Cledja Karina Rolim da Silva.pdf: 4417000 bytes, checksum: 9649b9a2c3b86f1c7a2ce85556b2cc63 (MD5)<br>Made available in DSpace on 2018-07-17T20:32:08Z (GMT). No. of bitstreams: 2 license_rdf: 811 bytes, checksum: e39d27027a6cc9cb039ad269a5db8e34 (MD5) TESE Cledja Karina Rolim da Silva.pdf: 4417000 bytes, checksum: 9649b9a2c3b86f1c7a2ce85556b2cc63 (MD5) Previous issue date: 2016-03-04<br>CNPQ<br>Most work about instructions in Augmented Reality do not follow established patterns or design rules – each approach defines its own method for conveying instructions. This work describes our results and experiences towards defining design guidelines for Augmented Reality instructions. From these guidelines, we propose a set of instructions and empirically validate them. The guidelines were derived from a survey of the most common visualization techniques and instruction types applied in Augmented and Mixed Reality. Moreover, we studied how instructions were done in 2D and 3D and how they can be applied in the Augmented Reality context. We observed that most work is related to object instructions and less work to body movement instructions. However, our proposal can be used in both cases. To validate our proposal we implemented a C⁺⁺ system, which -can be seen as a library to be used in different kinds of environments where the instructions of body and objects movements are important. A RGB-D sensor was applied to capture the movements. As result, we had visualization techniques applied together with typical AR instructions and indications of what kind of instruction could be used to: emphasize parts, indication of direction of the movement, management of occlusion, management of depth and feedback.<br>Grande parte de trabalhos relacionados a instruções em Realidade Aumentada não segue padrões ou guias de desenvolvimento – cada abordagem define seu modo próprio de transmitir instruções. Este trabalho descreve nossos resultados e experiência na direção de definir guias de desenvolvimento ou projeto para aplicações que utilizem Realidade Aumentada. A partir dessas guias de desenvolvimento, propomos um conjunto de instruções e empiricamente validamos as mesmas. Essas guias foram derivadas de uma pesquisa extensiva sobre as técnicas de visualização e instruções relacionadas à Realidade Aumentada e Mista. Além disso, verificamos trabalhos sobre instruções 2D e 3D para entender o funcionamento desta área para checar como e que tipo de informação poderia ser adaptada e usada no contexto de aplicações para Realidade Aumentada. Observamos que a maioria dos trabalhos é relacionada a instruções com objetos e há poucos trabalhos relacionados a instruções de movimentos do corpo. Para validar nossa proposta, implementamos um sistema em C⁺⁺, o qual tem o objetivo de ser uma biblioteca para ser usada em diferentes tipos de ambientes ou contextos onde instruções de movimento do corpo sejam importantes. Para capturar o movimento do corpo, um sensor RGB-D foi utilizado. Como resultado, apresentamos técnicas de visualização aplicadas com instruções comuns em Realidade Aumentada e indicação de que tipo de instrução pode ser usada para: realçar partes, indicação da direção do movimento, gerenciamento de oclusão, gerenciamento de profundidade e retorno para o usuário.

As our southwestern cities continue to grow in essentially uncontrolled and sprawling patterns it becomes increasingly apparent that new planning approaches and design guidelines must be generated to rectify past and combat future problems. Today, many community developments focus decision making principles on purely economic gain at the expense of addressing the socio-cultural, aesthetic, functional, economic, and environmental issues. In an attempt to address these issues, we employed both qualitative and quantitative methods of research. The qualitative methods included: a case study analysis of past, present and future communities; a literature review of past communities and new theoretical movements; structured interviews with real estate developers in the southwest; and participant observation encompassing peer dialogue and design reviews. The quantitative methods included statistical analysis of questionnaires given to designers and developers practicing in the southwest. A series of design and planning guidelines were distilled from this research. They were then tested by applying them to the design of a new community in the southwestern United States.

Thesis (M.S.)--Massachusetts Institute of Technology, Dept. of Architecture, 1987.<br>MICROFICHE COPY AVAILABLE IN ARCHIVES AND ROTCH.<br>Includes bibliographical references (pages 107-109).<br>This thesis is a continuation of the thoughts and efforts of the author's participation and co-organization of the Space Station Design Workshop (SSDW). The SSDW was a student run event whose inception surfaced in the Spring of 1986, materialized over the summer of that year, and subsequently "launched" itself in the Fall term. The emphasis of the SSDW was on the development and design of a deployable truss system which would be transported in, and deployed from, the cargo bay of the space shuttle. The design emphasis on deployability over an erectable system was based upon the former's lower construction overh~ the creation of "instant real estate", and the inherent lower Extravehicular Activity (EVA) time resulting in a higher margin of crew safety. This thesis is a continuation of the groundwork laid by the SSDW into the design criteria and implementation strategy for the living habitat of a six man Space Station. The scope of the thesis can be summarized in its six sections: 1. A study of appropriate space station analogs with a presentation of conclusions and recommendations based upon the findings. 2. A study of the anthropometrics of the human body in a zero-gravity environment with a presentation of conclusions and recommendations based upon the findings. 3. A study of the physiological effects of zero-gravity on the human body with a presentation of conclusions and recommendations based upon the findings. 4. A study of three strategies of interior module design with a presentation of conclusions and recommendations based upon the findings. 5. A presentation of the the current NASA Space Station art as a basis of comparative study to this thesis' proposed design. 6. A presentation of a complete space station design proposal and implementation strategy based upon recommendations of the preceeding studies.<br>by David Michael Johnson.<br>M.S.

From being a fictional element in sci-fi, voice control has become a reality, with inventions such as Apple's Siri, and interactive voice response (IVR) when calling your doctor's office. The combination of radio’s strength as a hands-free medium, public radio’s mission to reach across all platforms and the rise of voice makes up a relevant intersection; voice controlled public radio in Sweden. This thesis has aimed to investigate how radio listeners wish to interact using voice control to listen to on-demand radio content. Additionally, what does public radio need to consider when implementing the UX for voice control? A questionnaire, Google Analytics-data from Sveriges Radio’s mobile app and website, and an interview with National Public Radio were used to determine four initial functions voice controlled on-demand. The functions were turned into four scenarios, used as the basis for a workshop and brainstorming session. Three of these scenarios were then selected to be the foundation for a Wizard of Oz-prototype, which six users evaluated. The results indicate that to create a viable voice user interface (VUI) for radio, there needs to be a profile for the user to create a personalized experience, with filtered searches created by user behaviour and preference settings. The VUI also needs to allow synonyms for program names, as well as keyword tag material for clustering similar material and to enable personalized user searches. This keyword-system can further be utilized to give user recommendations based on behaviour and preferences. A companion application with a graphical user interface (GUI) can be used for such functionality as settings, help, queuing and creating playlists. Finally, the system needs to ensure that the users are taken care of and guided. A radio host can be used as a basis for the system's persona, to create a consistent and familiar interface. Aspects to examine in the future are more extensive user testing for the VUI design, filter bubbles, ensuring that the user data is not misused or leaked, dimensions of the system's persona, the future of radio and the progress of IPAs.

Approved for public release; distribution is unlimited<br>The German Armed forces acquisition guideline, the Customer Product Management (CPM), regulates the principal acquisition process steps including the responsibilities between civil and military departments. Many of the CPMs specified deliverables, like formulating needs, writing requirements and conducting analysis, are created and managed by military personnel that are assigned to support the acquisition management. These military personnel are not always familiar with the common systems engineering and acquisition methodologies and tools. The capabilities of the German armed forces are derived based on missions and tasks. The variation and number of needed capabilities leads to a greater likelihood of risk, threat and funding. ASW missions currently are no longer considered primary capabilities of the German Navy. The ASW ships in service cannot accommodate the future ASW helicopter (MH90), which will cause the loss of utilization of this primary warfighting ASW sensor and weapon. On the other hand ships without any ASW capabilities, like the F125, can accommodate ASW helicopters. This dilemma is still unresolved by naval leaders. This thesis shall examine the German basic acquisition guidelines and present applicable systems engineering methodologies and tools considering existing regulations. A basic systems engineering process will be demonstrated using a possible German Navy next generation ship-borne ASW-system through the presented methodologies.

This research, which was begun as part of the now defunct CargoLifter project, concerns the ground handling and support systems of the large rigid airships (commonly known as "Zeppelins") that were built between 1900 and 1940. The intention was to assess the value of such historical information as has survived from the previous generation of very large airships in order to minimise the physical and financial risks inherent in the development of any future generations of such aircraft. The idea was to isolate and understand the fundamental issues that were actually encountered by the ground based personnel responsible for looking after the various British, German, American and Italian airships of the previous generation, and to gather as much information as possible about the techniques and operational procedures that were devised, tried and tested in the field. This information would then be used to establish guidelines for future projects that are based on real experience rather than on prediction, assumption or theory. Sadly, the CargoLifter project foundered in 2002; however the author had by then amassed sufficient research material for him to complete the study independently and to present it as a guide for the ground handling of hitherto unrealised concepts such as the proposed new "Transport category" or "CargoLifter" type large airships. Such practical skills as those required by airship ground crew personnel are normally passed on by firsthand instruction from one experienced practitioner to the trainee. This option is not available for the next generation of very large airships because there are no personnel alive today with any operational experience of the previous generation of really large airships. The problem therefore is to examine the historical records and to evaluate the written information in order to interpret it and pass on knowledge that will reduce the risk of future generations wasting their time in "re-inventing the wheel. " In the course of the study it was found that historical research (HR) enabled the results of the pre-war prototype projects to be usefully assessed despite the fact that very little of the material was written with that end in view. More specifically the analysis of historical airship activities (AHAA) revealed that it was possible to retrieve a considerable amount of lost or forgotten knowledge concerning the ground handling of very large airships, also to unearth ideas that were ahead of their time, which might be applicable today or in the future; and in addition to identify several areas worthy of further investigation (e. g. ideas that were rejected at the time but which may now be feasible due to technological progress). The research and analysis also uncovered some ideas and suggested solutions which are fundamentally flawed and that should be avoided by designers of large airships and their support systems. The work includes a detailed analysis of the tasks involved in the ground handling of very large airships and concludes with a suggested strategy for all those intent upon the design and planning of ground support infrastructures for any further large airship development projects either today or in the future.