Mohd Syazwan Abdullah

Knowledge-Based Systems – A Re-Evaluation

Abstract: Purpose – The goal of this paper is to re-evaluate the role of knowledge-based systems (KBS) in knowledge management (KM). While knowledge-based systems and expert systems were widely used in the past, they have now fallen from favor and are largely ignored in the knowledge management literature. This paper aims to argue that several factors have changed and it is now time to re-evaluate the contribution that such systems can make to knowledge management. Design/methodology/approach – The role of KBS in KM is explored through a comprehensive analysis of both the management and the technical literature on knowledge. The literature on KBS and expert systems is reviewed and some of the problems faced by them are highlighted. Some of the probable causes of these problems and some of the solutions that might be used to overcome them are indicated. The paper describes how knowledge systems (KS) could be used as an effective tool for managing knowledge. Findings – The lack of success of KBS technologies for managing knowledge is mainly due to organizational and managerial issues. These problems can be solved through feasibility studies before system development activities. KS technology is now being successfully applied in a variety of newer domains that exploit its capabilities. Practical implications – Some conclusions are drawn concerning integration of knowledge systems with knowledge management, problems of the early implementation of knowledge systems technology, and possible solution to overcome these problems. Originality/value – The main contribution of the article is in re-evaluating the role of knowledge-based systems as a tool for knowledge management.

SQL-injection vulnerability scanning tool for automatic creation of SQL-injection attacks

Securing the web against frequent cyber attacks is a big concern as attackers usually intend to snitch private information, financial information, deface and damages websites to prove their hacking capabilities. This type of vandalism may drive many corporations that conduct their business through the web to suffer financial and reputation damages. One of the most dangerous cyber attacks is the Structured Query Language (SQL)-injection attack, whereby this type of attack can be launched through the web browsers. The vulnerability of SQL-injection attack can be attributed to inappropriate programming practice by the website developers, which leaves a lot of doors widely open for the attackers to exploit these and gaining access to confidential information that resides in the website server databases. In order to address this vulnerability, it must be feasible to detect the vulnerability and enhance the coding structure of the website to avoid being an easy victim to this type of cyber attacks. Detecting the SQL-injection vulnerability requires the development of a powerful tool that can automatically create SQLinjection attacks using efficient features (different attacking patters) to detect the vulnerability of the websites. This paper discuss the development of a new web scanning (MySQLlInjector) tool with enhanced features that will be able to conduct efficient penetration test on PHP (started as Personal Home Page but now widely used as Hypertext Preprocesses) based websites to detect SQL injection vulnerabilities. This tool will automate the penetration test process, to make it easy even for those who are not aware familiar about hacking techniques.

A proposed methodology for establishing software process development improvement for small software development firms

Abstract Small software development firms represent the majority of all software firms in most countries. These firms are facing the same software engineering challenges that affect large software firms. Software Process Improvement (SPI) traditional models were developed to help large and very large firms, however small software firms could not afford these models. Furthermore, they need to manage and improve their software development processes for several reasons such as dealing with the rapid technology advances, maintaining their products, satisfying the customers’ needs and sustaining their operations. This paper presents the methodology’s stages of developing a suitable software development process improvement framework by using Capability Maturity Model Integration (CMMI-DEV V1.2) as the basic model for improvement and Extreme Programming (XP) method as the basic software development method.

A UML Profile for Knowledge-Based Systems Modelling

The Knowledge engineering (KE) techniques are essentially based on the knowledge transfer approach, from domain experts directly to systems. However, this has been replaced by the modelling approach which emphasises using conceptual models to model the problem-solving skill of the domain expert. This paper discusses extending the Unified Modelling Language by means of a profile for modelling knowledge-based system in the context of Model Driven Architecture (MDA) framework. The profile is implemented using the executable Modelling Framework (XMF) Mosaic tool. A case study from the health care domain demonstrates the practical use of this profile; with the prototype implemented in Java Expert System Shell (Jess). The paper also discusses the possible mapping of the profile elements to the platform specific model (FSM) of Jess and provides some discussion on the Production Rule Representation (FRR) standardisation work.

Using unified modeling language for conceptual modelling of knowledge-based systems

This paper discusses extending the Unified Modelling Language by means of a profile for modelling knowledge-based system in the context of Model Driven Architecture (MDA) framework. The profile is implemented using the eXecutable Modelling Framework (XMF) Mosaic tool. A case study from the health care domain demonstrates the practical use of this profile; with the prototype implemented in Java Expert System Shell (Jess). The paper also discusses the possible mapping of the profile elements to the platform specific model (PSM) of Jess and provides some discussion on the Production Rule Representation (PRR) standardisation work.

Extending ETL framework using service oriented architecture

Abstract Extraction, Transformation and Loading (ETL) represent a big portion of a data warehouse project. Complexity of components extensibility is a main problem in the ETL area, because ETL components are tightly-coupled to each others in the current ETL framework. The missing extensibility feature causes impediments to add new components to the current ETL framework; to meet special business needs. This paper shows how to restructure the current ETL framework based on Service Oriented Architecture (SOA) to be easier to extend. This restructuring solution distributes the ETL into interoperable components. The distribution of Extraction, Transformation and Loading components while keeping interoperability amongst them; can be achieved by SOA. A Classified-Fragmentation component to enhance the report generation speed is added to the new framework; as a proof of the extensibility concept. The result of this work is an extensible ETL framework including Classified-Fragmentation component as an extension.

Goal-ontology approach for modeling and designing ETL processes

Abstract The data warehouse (DW) system’s design involves several tasks such as defining DW requirements, modeling DW schemas, and specifying ETL processes operations, and these have been studied and practiced for many years. However, the common designrelated problems such as defining user requirements and deriving data integration and transformation activities are far away from being resolved due to the variation and ambiguity of user requirements and the complexity of ETL processes, and these were the fundamental issues of conflicts in heterogeneous information sharing environments. Current approaches are based on existing software requirement methods that have limitations on reconciliation of the user semantics toward the modeling of the DW. This will prolong the process to define the ETL processes specifications accordingly. The semantic framework of DW system development in this paper is focused on the requirement analysis method for designing the ETL processes. The method RAMEPs (Requirement Analysis Method for ETL Processes) was developed to support the design of ETL processes by analyzing and producing the DW requirements as required by the organization, decision-makers, and developers. The ETL processes are modeled and designed by capturing two important facts: i) DW schemas, and ii) data sources integration and transformation. The validation process emphasized on the correctness of the goal-oriented and ontology requirement model, and validated by using compliant tools that can build both models. The correctness of RAMEPs was evaluated in the real case study of a gas utility company in Malaysia. The case study was used to illustrate how the RAMEPs method can be implemented for designing the ETL processes. The RAMEPs approach was reviewed by DW developers for assessing the strength and weakness of this method.

Knowledge Modelling Using The UML Profile

This paper discusses platform independent conceptual modeling of a knowledge intensive application, focusing on the use of knowledge-based systems (KBS) in the context of model-driven engineering. An extension to the Unified Modeling Language (UML) for knowledge modeling is presented based on the profiling extension mechanism of UML. The UML profile discussed in this paper has been successfully captured in a Meta-Object-Facility (MOF) based UML tool — the executable Modeling Framework (XMF). The example is that of modeling a knowledge-based system for the Ulcer Clinical Practical Guidelines (CPG) Recommendations. It demonstrates the use of the profile, with the prototype system implemented in the Java Expert System Shell (JESS).

A framework for interoperable distributed ETL components based on SOA

Extraction, Transformation and Loading (ETL) are major functionalities in data warehousing solutions. Lack of component distribution and interoperability are considered as main problems in the ETL because these ETL components are tightly-coupled in the current ETL framework. This paper discusses how to distribute the Extraction, Transformation and Loading components so as to achieve loose-coupling. Furthermore, it also shows how interoperability can be applied to these distributed ETL components. Service Oriented Architecture (SOA) is capable of addressing the mentioned missing features of distribution and interoperability by restructuring the current ETL framework. SOA standards are used in restructuring the ETL processes. The result of this work is the tested interoperable distributed components of the ETL framework.

Business Intelligence Model for Sustainability of the Malaysian Rural Telecenters

The objective of this paper is to galvanize research on rural telecenters sustainability. The research explores the sustainability of the Malaysian rural telecenters with the support of business intelligence (BI). It is posited that BI methods and tools could play vital role in assisting telecenters implement and monitor sustainable practices. The BI information planning phase, i.e., the systematic way of defining relevant information was utilized in this research. The empirical study was conducted through interviews and observations with a range of stakeholders including ministry officers, telecenters managers and operators. A thematic model comprising of sustainability issues and challenges that arise as the roles of telecenters evolved and the relationships between these issues is developed through content analysis. This study contributes to both theory and practice by (a) the use of content analysis to discover and explicate key issues faced by rural telecenters as they aim to fill their national mission, (b) the support of the telecenters managers in enhancing participation by local communities, (c) the identification of essential capabilities for effective and socially sustainable rural telecenters, and (d) the identification of sustainability model developed which can provide a basis for future telecenter research.