Recent years, Android malware which execute malicious attacks within the scope of permissions which was approved by user is increasing. Generally it is installed by user. Therefore user can avoid being infected with obvious malware by checking permissions which application requires. However many users install applications without checking permissions and get infected. Such Android malware have various kinds of threats, so user need to protect his assets by himself. In this paper we propose an educational method to improve user's security literacy by having experience of pseudo malware's behavior and recognize threats, risks, assets and relations between permissions and adverse actions.

Android malware is increasing and flooded with malware which disguise as popular applications and execute malicious attacks within the scope of permissions which was approved by users. Such malware can be prevented by confirming all risky permissions. However confirming permissions is not full preparation for preventing infection, because of defective Android Permission System. Several functions which should be restricted are often not restricted by appropriate permissions. Moreover, applications can go beyond the approved permission by using Intent. This paper proposes a dynamic approval system. When an application executes an action which requires the permission, the proposed system shows a user such adequate information that he/she can judge whether the application is malicious or not. So he/she can determine whether to grant an application's action. The aim of the proposal system is to make fine grained application controllability, so that users can protect their personal valuable information from malware.

One key to success for high quality systems developments is to verify not only functional requirements but also the security requirements at the early stage of developments. However, it is difficult for general developers who have only less security knowledge to define verifiable requirements specification without leakages and errors. To reduce these some leakages or errors, this paper proposes a UML-based security requirements verification method using the security knowledge of Common Criteria.

A key to success of high quality software development is to define valid and feasible requirements specification. This paper proposes an efficient test case generation method from the validatable UML-based requirements analysis model to improve feasibility of the requirements specification.

This paper proposes a method of detecting troublesome defects in the Java source codes for enterprise systems using a model checking technique. A supporting tool also provides a function to automatically translate source code into a model which is simulated by UPPAAL model checker.

This paper proposes the stepwise automatic generation of a prototype system from the scenario based requirements analysis model based on UML. The system is a non-functional user interface prototype for Web applications. A scenarios is defined for every actor and for every normal, alternative and exceptional flow in a use case, so that it enriches the prototype system and is also utilized to test the final product.

In recent years, it has been widely acknowledged that classes designed by utilizing PBL (Project-Based Learning) are effective in enhancing the problem-solving ability of university students. In PBL-based classes, students try to apply their knowledge to solve the problems by themselves; therefore, such classes are effective in improving problem-solving and communication abilities of students. However, it is difficult for a teacher to appropriately assess individual contributions in a group work such as PBL. Since 2002, we have been planning and conducting group-work-based software development experiments as an approach to PBL. This paper describes the manner in which the class was designed and conducted in order to evaluate the contribution of each individual student based on the degree of achievement of a goal in a group work. We propose an evaluation method based on an evaluation model of PBL and discuss the trial results.

The authors' goal is to establish a flexible programming support for evolving systems that will enable one to modify programs using less labor, while maintaining good quality during service life. EVA (evolution mechanism for flexible agent) was developed to allow a flexible programming support system to be constructed based on their programming method for evolving systems. They consider that programming methods for evolving systems need to satisfy the following essential conditions. First, they need to make it easy to specify changes in a system in terms of new requirements. Second, they need to have a procedure for transmitting the new requirements to a program. Third, they need to be able to guarantee that the resultant program will meet the new requirements. Finally, because of the repetitive nature of much evolving systems work, they need to provide for the reuse of similar modifications during programming. In order to overcome limitations in program modification techniques which have only considered programming products, programming processes have been introduced into the method. To achieve their goal, they have formulated programming products and programming processes using such formal techniques as functional programming, type theory, modules, parameterized programming and natural deduction, and have constructed a mechanism of reusing these formal programming processes. The paper explains a case study which shows how to develop an evolving system using EVA and it discusses how one can use EVA's mechanism effectively.

Our research goal is to construct an environment that mechanically supports human intellectual activities through software development with reuse. We propose a model of software development with systematic reuse in which the existing program can be altered to meet the given specification change using the program derivation process from the specification. We consider what kinds of knowledge must be acquired when a specification is changed and how they have to be integrated so well as to implement our method on a computer system. In particular, we focus on the following points in terms of program synthesis. First, a wide spectrum language, Extended IML, defines a framework in which specifications, program and the elaborate derivation process can be expressed formally on a computer system. This forms a basic unit of reusable knowledge for specification change. Second, a reuse process is formulated in which a new requirement changes the efficient specification and its program is altered to meet this requirement correctly. Third, we consider some conditions and a mechanism by which the knowledge can be integrated so as to obtain an objective program automatically, implying that we will yet profit from reusing the knowledge.