Exploit

Managing and analyzing a huge number of low-level alerts is very difficult and exhausting for network administrators. Alert correlation methods have been proposed to decrease the number of alerts and make them more intelligible. Proposed methods for alert correlation are different in terms of their performance, accuracy and adaptivity. We present a new hybrid model not only to correlate alerts

Technology has impacted businesses in different areas, and, consequently, many companies have found it necessary to make changes in their structures and business models to improve customer satisfaction. The objective was to quantify the effect of dynamic capabilities on customer satisfaction, through digital transformation within the automotive sector. A random sample of 42 questionnaires on 127 surveyed industries was collected during the period 2019–2020 in a pre-COVID-19 context. A structural equation model (SEM) in two stages was applied. In the first stage, two reflective models were built. In a second stage, a structural equation model was evaluated. The results obtained in this study showed that the capabilities of sensing, seizing and innovation were suitably grouped in a construct called “Dynamic Capabilities”. A positive influence of Dynamic Capabilities on customer satisfaction was found. Therefore, the companies in this industry should focus on developing dynamic capabil...

One of the key factors that endangers network security is software vulnerabilities. So, increasing growth of vulnerability emergence is a critical challenge in security management. Also, organizations constantly encounter the limited budget problem. Therefore, to do network hardening in a cost-benefit manner, quantitative vulnerability assessment for finding the most critical vulnerabilities is a vital issue. The most prominent vulnerability scoring systems is CVSS (Common Vulnerability Scoring System) that ranks vulnerabilities based on their intrinsic characteristics. But in CVSS, Temporal features or the effect of existing patches and exploit tools in risk estimation of vulnerabilities are ignored. So, CVSS scores are not accurate. Another deficiency with CVSS that limits its application in real networks is that, in CVSS, only a small set of scores is used for discriminating between numerous numbers of vulnerabilities.  To improve the difficulties with existing scoring systems, here some security metrics are defined that rank vulnerabilities by considering their temporal features beside their intrinsic ones. Also, by the aim of improving scores diversity in CVSS, a new method is proposed for Impact estimation of vulnerability exploitation on security parameters of the network. Performing risk assessment by considering the type of the attacker which endangers the network security most is another novelty of this paper.

A monitor is a widely-used concurrent programming abstraction that encapsulates all shared state between threads. Monitors can be classified as being either implicit or explicit depending on the primitives they provide. Implicit monitors are much easier to program but typically not as efficient. To address this gap, there has been recent research on automatically synthesizing explicit-signal monitors from an implicit specification, but prior work does not exploit all paralellization opportunities due to the use of a single lock for the entire monitor. This paper presents a new technique for synthesizing fine-grained explicit-synchronization protocols from implicit monitors. Our method is based on two key innovations: First, we present a new static analysis for inferring safe interleavings that allow violating mutual exclusion of monitor operations without changing its semantics. Second, we use the results of this static analysis to generate a MaxSAT instance whose models correspond ...

ABSTRACT Workplace learning is complex in form. It is explorative, social and creative enquiry, and because it is carried out in the socio‐political domain of the workplace, it is potentially exploitative of all who contribute. This paper suggests that the workplace researcher might conceptualise the contributions of participants as benefits and/or gifts, to which the appropriate response is gratitude. The paper discusses the notion of gratitude and how it might be expressed in workplace research.