Service computing has become very popular nowadays in providing big data analytics. The proposed system deals with how to implement software as a service product for a healthcare domain. Healthcare data has its sources mainly from Electronic health records (EHR), Mobile health applications, wireless medical devices and also wearable devices that can track patient activity. This huge volume of data needs to be processed and manipulated in a more useful manner. There are many challenges in implementing a cloud-based product for healthcare, first and foremost, the problem is security on the critical and confidential data stored in a cloud. This paper will focus on the technologies and concepts that support the implementation of cloud-based software application to store, analyze and visualize healthcare data on the cloud.

Binding technology to healthcare domain for simplifying the process of symptom detection and reliable methods of treatment has attracted vast research. Predictive analysis and recommendation systems have proved noteworthy for symptom detection and have been able to revolutionize healthcare at a very large scale. Our team envisions a web application as the basis of our project inclined towards building a better and efficient platform to simplify the complex procedure of health assessment and monitoring. Using big-data approach, the system that we intend to build shall provide reliable recommendations by comparing user generated data with that of cleansed system data using Apache Spark and IBM Watson services. A self-learning system which auto-upgrades itself with the inflow of data, this web application will provide an user-friendly platform for patients to monitor their symptoms, learn more about the symptoms based on the recommendations given by machine learning algorithm, have received recommendations validated from a doctor and monitor their health on a visual dashboard. Solving the problem of delayed medical attention and inefficient diagnosis, our web application will be one stop solution for everyone's healthcare needs, more broadly - a one-click solution.

With the advent of web 3.0, cloud and mobile technologies, data has evolved enormously in terms of quality and quantity to satisfy a variety of user needs. Managing and processing such large data efficiently and effectively is a major challenge to the information industry. Though conventional Database Management systems (DBMS) can support many applications, they are now unable to handle distinct types of data competently. Processing structured and unstructured data in conventional DBMS degrades system performance and results in inefficient storage utilization. In addition, cloud and mobile technologies offer various challenges to conventional databases in terms of performance and scalability. NoSQL services are based on highly scalable architecture and performance characteristics which are best suited for distributed services in cloud environment. However, when it comes to managing structured data, there is no match to the capabilities of conventional RDBMS technologies. Therefore, our approach is to design a distributed storage system using a combination of RDBMS and NoSQL databases to ensure optimal system performance and scalability. Our target system is a Radiology Information System (RIS), a component of e-Healthcare Information System (HIS) comprising of large amounts of structured, semi-structured and unstructured data. The RIS system will be hosted on a hybrid cloud where the private cloud is used to store the sensitive data of the patients and the public cloud is used to store the public data.

With the increasing demand and popularity in wireless mobile technologies, more and more applications have been developed in the market to use the technologies and to achieve higher work efficiency to facilitate client users to fetch and manage information anytime and anywhere. In this paper, an investigation and analysis report of NFC (Near Field Communication) technology in mHealthcare (mobile healthcare) area focusing on security, privacy and performance is presented. One of the main focuses presented in the paper is to incorporate QR (Quick Response) code into the existing NFC technology in the mHealthcare domain.

The goal of the system framework (e-Hospice+) is to create an Electronic Health Record (EHR) System which can be used by medical clinic to provide special healthcare services to hospice care patients. The framework allows both web-based and mobile-based healthcare application frameworks to be created to satisfy a variety of needs of clinical personnel. The web-based applications are performed at the clinic as a main source of information and services to patients and service providers. The mobile-based applications are run on smartphones and used by clinicians during their visits the patients. The EHR data can be exchanged between application servers and smartphones using web services. The design framework focuses on the three key areas: data design, user interface, and data Security and privacy.

The objective in the paper is to design a multimedia hybrid system which provides communication methods and file types for performing better communication among hospitals, physicians and patients. All the data is stored on a server and accessible only by authorized users. The data includes text, voice, video, and image data. The system is not only accessible through desktops and laptops but also mobile devices such as smartphones and tablets.

This paper investigates the feasibility and potential of using a mobile smartphone as a user administration control for storage system network. It includes the design and implementation of a mobile smartphone software system that can be used to perform system administration activities on the storage system without the need of using a laptop or desktop system. In the paper the design of some effective metaphors to present the storage system on the limited display area of a mobile smartphone device and the set of system features chosen for implementation are presented. Current storage system administration is limited to using storage controller console or Microsoft Windows Clients. The solution described in this paper provides an alternative smart interface to the storage system. This research effort is focused on investigating the potential of using mobile smartphone software application as a smart user interface protocol to communicate with the storage system network.

Ubiquitous systems emphasize in designing services to the users anywhere and anytime regardless of users' locations. Existing mobile systems usually have problems that they lack S.C.A.L.E. (Scalability, Connectivity, Adaptability, Liability, and Ease-of-use) design factors that a typical ubiquitous system must support. To design these factors in a mobile system is very expensive during system set-up, reconfiguration and modification stages as there are no proper and efficient solutions available. In addition, the current mobile systems lack security, privacy and wireless accessibility features so that they are prevented from expanding widely. The paper explores potential methods and approaches to successfully design and implement various challenging aspects of Service Governance of Service Oriented Architecture (SOA) in a wireless mobile infrastructure environment. Applying Service Governance of Service Oriented Architecture helps to make services more secure, reusable, interoperable, and available, and imposes all the features a ubiquitous mobile system should have. A prototype system uSG-Health was developed using the approach.

Phishing has become the most popular practice among the criminals of the Web. Phishing attacks are becoming more frequent and sophisticated. The impact of phishing is drastic and significant since it can involve the risk of identity theft and financial losses. This paper explains the most popular methods used for phishing and the PhishCatch algorithm developed to detect phishing. The PhishCatch algorithm is a heuristic based algorithm which will detect phishing emails and alert the users about the phishing emails. The phishing filters and rules in the algorithm are formulated after extensive research of phishing methodologies and tactics. After testing, we determined that PhishCatch algorithm has a catch rate of 80% and an accuracy of 99%. The approach used in developing this algorithm, the implementation details and testing results are discussed in this paper.

Conflicts can occur in access control models due to many reasons. Conflict resolution in real-time can be a challenging task due to the complexity of the access control rules. For a large number of access rules for a given service, detecting exactly which rules caused conflicts can be a daunting task. This paper describes an algorithm to resolve conflicts using the ARSL (Authorization Rule Specification Language) model. The algorithm is designed to work on the complexity issues of conflict resolution by preventing the occurrences of conflicts. The algorithm is based on priority of the authorization rules for a given resource and the priority is based on the sequence of occurrences of the authorization rules specified in the ARSL input file.

Phishing, a criminal act of collecting personal, bank and credit card information by sending out forged e-mails with fake websites, has become the most popular practice among the criminals of the Web. Phishing attacks are becoming more and more sophisticated and are constantly on the rise. The impact of phishing is quite drastic since it involves the threat of identity theft and financial losses. A lot of groups and organizations are trying to study this act and also inform and update the public on what are the latest tactics being used in the phishing sector. According to industry estimates, phishing attacks are on the rise every year and the existing anti phishing solutions fall short in detecting phishing. Moreover, phishers come up with innovative methods of phishing everyday making it even more difficult to detect and prevent phishing. This paper explains in detail the various methods used in phishing. We perform a root-cause analysis of the methods used in phishing, the motivation for phishing and in the process come up with a fishbone diagram outlining the causes and methodologies used in phishing. This analysis is aimed at helping developers to design and develop better anti phishing solutions.

Mobile devices used in e-commerce or m-commerce have been in existence for a few years now, however in the last couple of years they have started playing a significant role in our life as the technologies in the Internet advance. A number of mobile applications and services are already in the market and more are expected to become available in the future. As more demand is placed on mobile devices, it will become critical to properly manage the limited storage, display, and processing power of mobile devices. The purpose of this paper is to develop a viable mobile database design methodology for designing appropriate databases for m-commerce oriented systems involving mobile business applications and services.

In today's age of information technology, there is an increasing concern for the privacy of an individual's records stored on computers. The Internet and security vulnerabilities provide an opportunity for hackers to misuse information. The level of an individual's trust for an organization can be ensured or influenced by the organization's privacy policy. Privacy has become a concern only recently and hence, creating well documented and comprehensive organizational privacy policies still remains a challenge. The paper presents results on a special privacy policy modeling language processor (PPMLP) based on service oriented architecture (SOA) for an organization to model the structure and contents of private policy they want through a meta type of privacy policy specifications.

Due to the high complexity involved in Web based distributed systems, it has been difficult to effectively perform the testing process with limited resources to obtain a more thorough coverage of testing. This might open the doors for potential security attacks. Testing such a system is complicated and expensive, and sometimes some tests may not be possible to perform due to the availability of resources. A workflow based test automation framework system was designed and implemented to conduct the test cases and demonstrate the concept. A tester can launch a testing process against a target system by clicking a few buttons on the user screens, and the framework of the workflow test automation system performs the entire testing job in the background. The workflow framework communicates with the participating testers performing testing processes, and provides feedback of each test in real time. The framework also allows plug-ins of a variety of testing workflow definitions for different testing processes.

The use of Web Services has begun to significantly impact organizations and companies. Major business oriented objectives in reducing costs, shortening time, and improving quality and productivity can be achieved by using the Web Services technology. The Web Services software technology enables software components independently developed in disparate platforms to interact and collaborate in a seamless manner. They constitute a loosely-coupled, distributed system that is highly scalable. However, they also inherit the potential vulnerabilities of such systems. As Web Services increase in complexity and connectivity, the associated security risks also increase exponentially. Many of the security breaches can be traced back to poor verification and validation tasks. In this paper, a study on security related software vulnerabilities in SOAP-based Web Services is presented. The security context of traditional Web applications is compared to that of Web Services. An attempt has been made to map common attack patterns to security verification requirements with regard to Web Service software systems.

Web services constitute an important part of distributed applications, providing flexibility in the development of distributed applications. One of the key challenges in Web Service security is to determine whether an authenticated user has access to only those services for which he has authorization. Since all authorization patterns for accessing resources cannot be anticipated and hence the access rules cannot be defined beforehand, implementing authorization becomes a concern. This paper describes an approach aimed at a more generalized and reusable solution which provides the flexibility to handle authorization rule updates in real time. The authorization framework is complemented by ARSL (Authorization Rule Specification Language), which is based on predicate logic.

The waterfall-based software development methodology usually requires significant efforts and lengthy intervals to develop, review, inspect, and test very large and complex real-time software systems. Although the methodology itself is stable and mature, the quality of software products still largely depends on development efforts expended in testing, which is usually very costly and time consuming. The author describes the implementation of an integrated approach of software development, review, inspection, and testing based on well-identified software requirements. Due to the huge size and the complex feature interactions of the 5ESS Switch software, the process of review, inspection, and testing has been very important to the project. To enhance the quality of the products, it is necessary to ensure the feature requirements requested by customers, external and internal, are developed correctly. The requirement traceability procedure described in the paper is a systematic method to assist 5ESS Switch scientists and engineers to achieve the goal. The results of the implementation of the requirement traceability procedure and its RADIX tool are significant.>

This paper covers the following topics: software productivity and quality measurements; an approach to data-gathering to raise software productivity and quality; software quality measurement-Project Muse results; MIS software development (customer satisfaction through quality improvement); and an approach to software quality and productivity measurements for AT&T operations systems.>

A description is presented of the software productivity measurement metrics, the important productivity factors, and some applications of the software productivity data for the 5ESS switch developed for the US market. The measurement of production rate and the study of productivity factors have established a solid foundation for the pursuit of productivity and quality improvement within the 5ESS switch development community.>

The author describes a novel software estimation modeling process as well as the important productivity factors and the productivity measurement metrics used in the 5ESS project, one of the largest telecommunication projects at AT&T Bell Laboratories. The 5ESS switch is a modern digital electronic switching system with a distributed hardware and software architecture. The model estimation approach has greatly improved the quality of estimates. The study of productivity factors has resulted in some significant productivity and quality improvement processes in the 5ESS development community.>