HCI increasingly engages with the concept of time, with many studies focusing on how temporal relations are produced and reconfigured through computing technologies. However, less attention is paid to the impact of temporality on researchers themselves and specifically their capacity for ethical reflection and action. This paper explores the interplay between temporal features and ethical reflection in HCI research projects. Through a reflective multi-ethnography of nine research projects, we examine how temporal features can influence ethical capacity across the lifecycle of research. The study employs infrastructural and chronopolitical analysis (after Star and Sharma) and offers a range of considerations for researchers to help activate greater temporal awareness for everyday wisdom, to acknowledge temporal power, mobilise responsibility, counter isolation in interdisciplinarity, and promote collective action and dynamic methodologies for temporal research. The study responds to calls for more ethnographic approaches to temporality that address specific HCI needs and focus on practice.

Pain is an essential indicator of health and guides clinical treatments. Logging pain is important in supporting this. However, there is little research into pre-adolescent children's pain logging tools. Utilising the Bluebells method to engage children as co-designers, we gathered children's perspectives on pain-logging tools; in the first workshop by using tangible design approaches to support creative thinking, and in the second workshop by discussing developed prototypes based on the children's designs. Our findings highlight design concepts that the research team – despite many years of pain-related research – had not considered in the context of paediatric logging, namely a) prioritizing children's privacy in social settings while using pain-logging tools; b) emphasizing personalization to boost engagement; and c) logging general well-being of children alongside pain intensity to collect more insightful data. These findings thus demonstrate the value of co-designing pain-logging technologies with children.

Despite the availability of various methods and tools to facilitate secure coding, developers continue to write code that contains common vulnerabilities. It is important to understand why technological advances do not sufficiently facilitate developers in writing secure code. To widen our understanding of developers' behaviour, we considered the complexity of the security decision space of developers using theory from cognitive and social psychology. Our interdisciplinary study reported in this article (1) draws on the psychology literature to provide conceptual underpinnings for three categories of impediments to achieving security goals, (2) reports on an in-depth meta-analysis of existing software security literature that identified a catalogue of factors that influence developers' security decisions, and (3) characterises the landscape of existing security interventions that are available to the developer during coding and identifies gaps. Collectively, these show that different forms of impediments to achieving security goals arise from different contributing factors. Interventions will be more effective where they reflect psychological factors more sensitively and marry technical sophistication, psychological frameworks, and usability. Our analysis suggests “adaptive security interventions” as a solution that responds to the changing security needs of individual developers and a present a proof-of-concept tool to substantiate our suggestion.

Authorization is an important security concern in cloud computing environments. It aims at regulating an access of the users to system resources. A large number of resources associated with REST APIs typical in cloud makes an implementation of security requirements challenging and error-prone. To alleviate this problem, in this paper we propose an implementation of security cloud monitor. We rely on model-driven approach to represent the functional and security requirements. Models are then used to generate cloud monitors. The cloud monitors contain contracts used to automatically verify the implementation. We use Django web framework to implement cloud monitor and OpenStack to validate our implementation.

REST APIs are being increasingly used in the industry including their application in safety-critical domain and in the IoT world. They offer basic CRUD (create, retrieve, update and delete) interfaces. However, REST APIs can be used to build services with more advanced scenarios. Developing such services with REST constraints requires rigorous approaches that are capable of creating services that can be trusted for their behavior. In this work, we present an approach based on formal verification technique for a development of REST services using Event-B. We focus on deriving a correct system architecture by refinement and consistency verification of service design models. We illustrate our approach on a Hotel Reservation System.

An Application-Programming Interface or API provides a set of program functions that can be used to build new applications. In this paper, we study how to use the expectation-confirmation theory (ECT) to identify API usability problems, and what obstacles a novice developer faces when learning a new API and its accompanying development tools. We conduct a study over the impact of using a visual editor on API usability and then use the expectation-confirmation theory to study perceptions about the API and the editor. We finally present a list of obstacles found in the study that can be used by others to create more usable APIs and development tools.

We present an integrated approach to design and validate RESTful composite web services. We use the Unified Modeling Language (UML) to specify the requirements, behavior and published resources of each web service. In our approach, a service can invoke other services and exhibit complex and timed behavior while still complying with the REST architectural style. We show how to transform service specifications into UPPAAL timed automata for verification and test generation. The service requirements are propagated to the UPPAAL timed automata during the transformation. Their reachability is verified in UPPAAL and they are used for computing coverage level during test generation. We validate our approach with a case study of a holiday booking web service.

A UML protocol state machine describes a behavioral interface for a class as a number of states and transitions between states triggered by method calls. In this paper, we present an approach to generate behavioral class interfaces in the form of class contracts from UML protocol state machines. The generated contracts can be used for documentation, test case generation, test case oracle, and as run-time assertions and thus help to test and validate the implementation of a class against its interface. We formalize protocol state machines with its structure and semantics for generating class contracts. The state invariants of the source and target states are considered along with the pre- and post-conditions of the transitions. Different types of transitions like simple, join, fork, high-level, and self transitions are supported, as well as non-deterministic behavior. The approach is supported by a tool to generate automatically the contracts from UML models.

Web service composition is an emerging trend in the field of service oriented architecture, where a new Web service is developed using existing Web services. Developing a composite Web service is a complex task. There are a number of reported techniques for modeling Web service compositions to specify the exact requirements, identify errors, and eliminate the conflicts in the development of a composite Web service at design level. In this paper, we study and classify various UML based approaches for modeling web service compositions. We also present a detailed analysis of all such approaches.