Search

Data Warehouse je dio informacijskog sustava Lure koji koristimo za sveobuhvatno izvješćivanje i analizu kroz više poslovnih razina. Jezgru sustava predstavljaju OLAP - On Line Analytical Processing server i front-end tvrtke Cognos, te Microsoft SQL Server 2000, uz korištenje Data Transformation Services kao ETL alata. Trenutno sustavu pristupa gotovo 200 korisnika koji dnevno u prosjeku postave do 4000 upita. Data Warehouse sadrži oko 250 tablica, oko 130 procedura za load podataka, te oko 120 GB podataka. Implementirani multidimenzionalni model podataka trenutno je podijeljen na oko 50 kocaka i 6 poslovnih modula. Sustav se neprekidno razvija i nadopunjuje posljednjih godinu dana.

Međunarodna telekomunikacijska mreža Hrvatske. Međunarodna signalizacija zajedničkim kanalom. Telekomunikacijske usluge podržane međunarodnom sigalizacijom zajedničkim kanalom. Planiranje međunarodne mreže zajedničkim kanalom. Model signalizacijske mreže. Analiza raspoloživosti signalizacijske mreže.

XXX

Personal authentication is an important process we encounter almost every day; when we are logging on a computer, entering a company where we work, or a restricted area, when we are using our plastic credit cards to pay for a service or to complete some other financial transaction, etc. In each of these processes of personal authentication some kind of magnetic or optical token is required. But by using novel technologies like mobile computing and wireless networking, it is possible to avoid carrying multitude of ID cards or remembering a number of PIN codes. Article shows how to efficiently authenticate users via Personal Area Networks (PAN) like Bluetooth or IrDA using commonplace AES (Rijndel) or MD5 encryption. This method can be implemented on many types of mobile devices like Pocket PC PDA with Windows CE (Windows Mobile 2003) real-time operating system, or any other customized OS, so we will explain all components and key features of such basic system., 5 pages, 6 figures, 1 table, MIPRO Conference in Opatija, Croatia, 2006

Proces autentifikacije iznimno je važan element informacijske sigurnosti, budući da predstavlja prvi korak prijave korisnika u sustav. Single Sign-On (skraćeno SSO) predstavlja proces autentifikacije koji omogućava korisniku predočenje svojih akreditacijskih podataka samo jednom kako bi mogao pristupiti svim dozvoljenim resursima. Nakon što se korisnik autentificira može izvršavati aplikacije za koje je autoriziran. Autentifikacija se temelji na oznakama. SSO je tradicionalno smatran sigurnosnom tehnologijom koja uz autentifikaciju obuhvaća i autorizaciju. Danas se najviše razvija SSO za Web, gdje se osim autentifikacije i autorizacije velika važnost pridaje prezentaciji podataka koja ovisi o autentificiranom principalu.

In this paper, we provide a selected list of tools that can be used for assessing Web application security. Intention is to present available tools that can help in search of vulnerabilities in Web applications and thus make them more secure. The paper is written for Web application developers and testers, and of course, students who have interest in web development. So, it is concentrated on free and/or open source tools, and thereby, commercial products are not mentioned. First part of paper provides overview of vulnerabilities that can be detected by using mentioned tools. In the second part, the tools are described and it is shown for which actions these tools can be used.

"A mobile game-based learning project has been exploiting the motivational power and affordances of the latest mobile technologies. Developed with sponsorship from the EC, the initiative began in October 2005. It is a practical response to a need to help young people develop decision-making skills for use in crisis situations. The aim is an innovative approach to education that is informal, fun, motivating - and effective. The first learning models, informed by social-constructivist theory, have already been tested with a large sample of international students. This paper describes how the mGBL user trials utilised website facilities to capture the views and experiences of the students. Findings are reported and discussed. These include signs that it would be worth exploring a growing 'mobile divide' and associated issues."

Location-based services (LBSs) provided by mobile phone operators are being adopted at a much slower pace than expected, especially in Europe. LBS technology can be utilized for tracking services, as well as for location-sensitive information services, marketing based on customer location, location-based games and for other purposes. In this paper the Unified Theory of Acceptance and Use of Technology (UTAUT) was used to investigate the potential for the acceptance of such services. A set of LBSs that may be of interest to young adults was identified and a survey based on the UTAUT was designed. This survey was applied on college students of information systems who were mobile phone users and experienced in the use of computers and the Internet. This paper presents an empirically derived model of the adoption of LBSs developed from the results of the reported survey.

IKEv2 is a protocol for key exchange in Internet security architecture. We have implemented first, stripped down version of IKEv2 that supported only IPv4 addresses. The implementation had some provisions that have been introduced in order to make later implementation of IPv6 easier. Currently, we are extending IKEv2 implementation with missing functionality in order to make it fully functional. In this paper we describe implementation details of IPv6 introduction into IKEv2 protocol implementation.

Poslovna pravila, kao nedjeljivi dio poslovanja, važan su čimbenik uspješnosti. Stoga je bitno prepoznati ih, formalno zapisati i omogućiti njihovo korištenje. Uz nekoliko definicija i klasifikacija poslovnih pravila, ovaj članak opisuje prednosti korištenja poslovnih pravila, navodi čega se treba pridržavati prilikom njihovog formaliziranja, te daje pregled nekoliko mogućih načina prikaza.

Oblikovanje maloprodajne poslovne jedinice razmatra se kao rezultat kombinacije čimbenika radnoga procesa: ljudskoga rada, stalnih i obrtnih sredstava, te, posebno, čimbenika &laquo ; informacija&raquo ; . U radu se iznosi teza o presudnom utjecaju čimbenika &laquo ; informacija&raquo ; na oblikovanje maloprodajnih poslovnih jedinica. Na toj se osnovici iznose i teze o budućnosti trgovine u razvijenim tržišnim gospodarstvima. Radi se o sve većoj potrebi razvijanja suvremenih informacijskih tehnologija i informacijskih sustava maloprodajnoga poduzeća i maloprodajne poslovne jedinice. Na toj su osnovici nastale i suvremene menadžmentske koncepcije, koje se u radu pokušavaju identificirati. Svrha je rada uočavanje potrebe konkretnijih istraživanja za uobličavanje razvojnih strategija hrvatskih gospodarskih subjekata na području maloprodaje.

All companies of any sector or dimension that want to improve their products, services and performances, answer on demands quickly, effectively, with coordination and innovation, must include Knowledge management in their culture. The essence of KM is to understand human and intellectual capital as the biggest resource, and also necessity to manage abilities and competencies inside the company, as well as let people be the best they could. What is the situation in Croatia? Study will show us that in our companies still do not exist enough knowledge about KM, about its implementation, exploitation and its benefits. Protagonists of this study are 12 sample companies from product and service sector. In the first part of this study it will be analyzed actual condition that represents KM in strategic management as well as knowledge about importance and abundance from the management, administration and employee view, and in the second part we will show plans, ideas, methodologies of optimization of work process with human intellectual resources.

IKEv2 is a protocol for exchanging keys in the IPsec architecture. In it's specification, EAP was proposed as one of the authentication mechanisms. EAP is extensible authentication protocol based on client/server architecture and allows introduction of additional EAP methods. Implementation of this protocol is complex and in our project it was decided to include one of the existing implementations of EAP into IKEv2 protocol. WPA_supplicant implementation is chosen for peer and this article mainly describes how it was included. IKEv2 responder, on the other side, will rely on RADIUS server for EAP. Therefore it should provide protocol traverse between IKEv2 and RADIUS, both encapsulating EAP packets.

Today we live in a society that we call the information society where information has become a resource of great value. Along with this kind of society web applications that provide information through various services have appeared. Web applications have been driven to the point of very high visual appearance and services quality level but the part that is still in the second plan is the question of web applications security. In this paper we will point to this problem, we will show the most common problems in web applications security today and we will give suggestions that can help in solving these problems. We will also present our research data about knowledge and common practice of companies in the matter of solving these problems.

Network Address Translation (NAT) is a mechanism introduced with a primary purpose to postpone the problem of IPv4 addresses shortage, but it also has some other uses, most notably, easier site renumbering. From its introduction in the middle of 90's up until now, usage of NAT solution on the Internet has surged, but in the same time it is a very controversial subject since it introduces many problems into existing protocols. While working on IKEv2 (Internet Key Exchange v2) implementation we had to analyze NAT interrelation with IKEv2 protocol, enumerate problems, analyze them and finally propose appropriate solutions, if they are possible at all. This paper is a result of this analysis and it summarizes our findings. We also describe implementation we've done based on the analysis.

Proceedings of conferences: Digital economy - 3rd Alpe Adria Universities Initiative (ALADIN), Information Systems Security, Business Intelligence Systems - MIPRO 2006 29th International Convention

Investigations conducted in the field of biometric research have shown that palm possesses personal identification characteristics. In the first place these characteristics include length and weight of fingers as well as palm weight. Palm recognition is a non-intrusive biometric technique and verification process and result description are very simple. Due to the fact that some palm characteristics of a person are not very descriptive, a special task is to combine non-spotted individual characteristic in order to provide a strong identification trail. Depending on data needed for identification process, palm recognition techniques can be divided in next categories: application technology on palm ; excluding vein pattern on palm and geometry analyses of fingers. This paper will put accent on the palm recognition biometric technique used for security applications.

This paper represents a technical overview of a current state in Port-Based Network Access Control (PBNAC) for security policy enforcement at network access layer. It describes architecture and security protocols used by PBNAC. Architecture components, such as Supplicant, Authenticator and Authentication Server are discussed. The paper analyzes security protocols, specially, Extensible Authentication Protocol (EAP) variants such as EAP over LANs (EAPOL) and EAP Transport Layer Security (EAPTLS) and additionally Remote Authentication Dial In User Service (RADIUS). The paper also shows current limitations and future improvements of PBNAC systems.

Throughout the world Next Generation Networks are being rolled out by operators and service providers with the promises of new services and new sources of revenue. But service delivery is becoming increasingly complex because of a need to deliver a service across multiple domains and technologies to any end point at any time. Determining the QoS provides a discriminator between various types of service that suppliers provide, and leads to opportunities to balance the level of service quality offered against price and customer expectation. The use of QoS agreements in SLAs (Service Level Agreement) provides service providers with the opportunity to delight their Customers, build stronger long- term relationships and brand image, and maintain/grow market share. Therefore service providers are looking to introduce Integrated Network Operations Center (NOC) to offer high quality services with service level guarantees for various tiers of customers while managing the efficiency in the use of network and services. The article addresses challenges of building an Integrated Network Operations Center (NOC) for service providers on base of industry standards and discusses the sequence of steps that should be taken in order to implement it, with focus on end-to-end QoS guarantee (SLA).

This paper addresses the possibility of expert system's use in information system security (ISS) and defines a model of an expert system for selection of a security and protective measures. The development and increasing importance of information systems (IS) and their resources in business organizations emphasis the vulnerability of information systems and potential loses for organizations produced by different events that are threat for ISS. Some organizations are solving this problem with unplanned and inefficient use of security measures, but there are organizations that are using and implementing security measures that are appropriate, necessary and in accordance with other aspects of their organization. In this paper we explain a model how to define a set of security measures with those characteristics with help of an expert systems, that by combining the knowledge base, conclusion mechanism, risk assessment and ability to learn is able to select the necessary and appropriate security measures for ISS improvement.

Vulnerability assessment (VA) tools are usually GUI applications requiring human interaction which is not often desirable while performing tests in large network environments. Effectiveness of this setup can be limited due to many reasons such as: both configuration time and duration of assessment are both increased, test traffic passing internetwork boundaries can be mistakenly identified by IDS as DoS attack, intervening firewalls may block or silently drop test traffic causing incomplete and erroneous test results, local tests performed on individual host may require setup and management of additional security credentials. Lightweight software solution based on automation, distribution and code portability is developed to address majority of “ GUI setup” problems and to provide higher degree of automation. Additionally, integration with SIM solution is provided and results are evaluated.

Digital to Intelligent Local Government (LG) Transition Framework contains interrelated Political, Conceptual, Technological, Institutional and Transitional components. Political component presents endogenous political models (directions), harmonized by exogenous ones and verified by best practices. Conceptual component is derived on LG service requirements model, integration and interoperability of services, Knowledge and Sustainable Development Intelligent City Model with resulted Interoperable Processes Model, Enlarged Data Model, Web Service Model and Management Model. Technological component is structured on Enabling ICT Model and Standards for LG. Institutional Infrastructure and Transition components based on Resource Model are presented.

Minimal safety conditions for protection of person, money and values in financial institutions are accomplished in facilities in which values and money transfer are being conducted, during undertaking of certain actions regarding transport, and during transport of cash money and values, as well as during transfer of cash money and values. The foundation for setting the necessary measurements for protection against robbery, burglaries and larcenies, as well as for building and managing the whole security business system with cash money and values are defined with regulations that tend the question of protection. Building the security management system for cash money and values is crucial for insuring the safe business management in financial institutions.

Proceedings of conferences: Digital economy - 3rd Alpe Adria Universities Initiative (ALADIN), Information Systems Security, Business Intelligence Systems - MIPRO 2006 29th International Convention

U radu se najprije obrađuje nekoliko modela razvijanja kontakata između pojedinačnoga potrošača i prodavaonice, vezano uz razvoj lokalnog, regionalnog, nacionalnog, međunarodnog i globalnog tržišta. Potom se obrađuje e - commerce na području maloprodaje (on - line shopping, te potrebe i mogućnosti njegova daljnjeg razvoja s obzirom na zahtjece na informacijsku i komunikacijsku tehnologiju kao i s obzirom na zahtjeve na razvijanje odgovarajućih logističkih sustava i korištenje prostora.

Information security as a component of information system can be described with a set of security indicators. Using these indicators it is possible to observe response and changes in the security system which appeared as a reaction on unsecured occurrences from the environment. With their comparison in the period of time it is possible to measure security performance and manage security. It is necessary to choose a metric for designing such a set of indicators for monitoring security performance. There are a few types of security metrics which have different ability to describe security state in some specific areas of information system. A purpose of this paper is to point out the classes of general and specific security metrics and to determine taxonomy and form of metrics description suitable for effective security monitoring considering the area of its use.

In this paper we will describe that user authentification methods based on hash functions like MD5, NT / NTLM and SHA-1 can be easily compromised. We used methods that utilize cryptanalytic tables based on time memory tradeoff procedures (TMTO) and we analyzed certain limitations on this approach. We suggest improvements to this technique and additional concepts like parallelized creation and querying of tables which improve speed and memory efficiency of the entire procedure. With those modifications a new concept for TMTO procedures is created. We will also describe vulnerabilities based on physical access to a segment of a computer network infrastructure that can compromise almost any quasi secure system. Regarding those vulnerabilities we will present a number of biometric authentification methods that can minimize or nullify this security risks.

Instant-messaging and Voice over IP software are more and more becoming targets of virus and malware writers. They are attempting to bypass security-system updates and to collect user’ s confidential personal and financial data. In their nature, those threats are different from usual threats, e.g. those affecting e-mails. Updating virus definitions and antivirus software components is not efficient enough because of high mutating level of those kinds of viruses. The main cause of the success of those threats is in speed of inter-infecting between users.

Large volumes of XML data exist on the Internet and in information systems of various companies and organizations. Therefore, there is an increasing need of integrating XML data into data warehousing systems. We have proposed a methodology for data warehouse design, when sources of data are XML Schemas and conforming XML documents. A prototype tool has been developed to verify and support our methodology. The tool automates many parts of the conceptual and logical design process, thus helping the designer in designing faster and more accurately. In this paper the main features of the tool for data warehouse design from XML sources are presented.

Business intelligence systems find textual data a very useful source of information. Text processing algorithms and systems in English and other world languages are well developed, which is not the case with Croatian language. This paper explores the applicability of existing systems and examines optimal parameters for Croatian. The quality of input data strongly influences clustering and classification results. Experiments are significantly better run after reducing noise. The impact of input learning set size and dimensionality are also considered. Special preprocessing for Croatian language consists of morphological normalisation, a useful step towards better results. Non-croatian specialised text mining tools are also applicable.

Pokušaji definiranja najbolje prakse, postupka i pravila koji bi poslužili kao okvir i koncept za unapređivanje sigurnosti IS-a a istovremeno zadovoljili potrebe poslovodstva u posljednja su dva desetljeća rezultirali nastankom koncepta i norma sigurnosti (BS, ISO, GAO, NASA, NIST, COBIT, OCTAVE, OECD, US DoD i dr.). Na njihovom temelju nastaje veći broj metoda i tehnika (CRAMM, RuSecure, COBRA, BS upute, FMEA, ALE, FTA/ETA, FRAP i dr.). One se međusobno razlikuju ali dijele i zajedničke osobine. S obzirom uzore metode su različito pogodne za određene kategorije problema pa je potrebno točno utvrditi njihovo porijeklo. Ovaj rad utvrđuje izvore i tijek nastanka danas najpoznatijih metoda za podršku procesu unapređivanja sigurnosti IS-a. Opisuju se osnovne osobine temeljnih pristupa upravljanja sigurnošću IS-a te metode i tehnike koje ih podržavaju. Cilj je utvrditi hijerahiju koja će poslužiti za daljnju klasifikaciju podrške unapređenju sigurnosti te pomoć pri izboru primjerene metode.

Decision Support System (DSS) in a firm is a vital part of it`s entire information system. It can be defined as computer technology solutions that can be used to support complex decision making and problem solving. It`s goal is to provide quality informations to the user due to support in decision making where informations are the result of real data processing. Decision Support Systems in management combine a vast number of methods and they focus their activities on problem solving area of business management. The survival and regional/global competitiveness of today`s companies, in the turbulent business environment, depends on getting the right information in the right time. DSS tools like "data warehouses", "knowledge warehouses", OLAP (On-Line Analytical Processing), "data mining", Web-based DSS enable finding and filtering of data into much needed information. Application of DSS would make croatian firms much competitive on regional as well as on global European market.

Proceedings of Conferences: Business Intelligence, Digital Economy -2nd e-business ALADIN, Information Systems Security - MIPRO 2005 28th International Convention

The development and increasing importance of information systems (IS) and their resources in business organizations emphasis the vulnerability of information systems and potential losses for business organizations produced by different events that are threat for information system security – threats like unauthorized intrusion in information system, stealing of information system resources, etc. The paper addresses the problem of information system security management thru risk assessment and use of international standards like ISO 17799 and BS 7799. The problem is then described as a process of information system security management with its phases and necessary measures to be taken to ensure security of the information system and its resources.

Web services are becoming important integrative component of modern, distributed information systems. However, data transfer over the public infrastructure imposes strong security demands which should be met by the developers of such systems. There are various ways to solve security issues, and they should be validated within the context of particular application. It must be noted that Web services are invoked indirectly through the client application and that all credentials and authorizations should be additionally interpreted at the Web service level. Also Web services can be cascaded which means that authorization and authentication credentials should be propagated across the application levels. Because of that, security mechanisms of Web services are technically and organizationally complex and should be carefully fitted in the whole of the information system.

According to other authors, neural networks outperform linear statistical methods in sale forecasting and prediction. For these reasons they were suggested as one of the data mining techniques in this domain, together with decision trees and statistical methods. The paper investigates the possibilities of integrative use of on-line analytical processing (OLAP) and neural networks in finding the best model for sale prediction of footwear and leather goods. A sale data cube is created using the real data from a Croatian company. Since our previous results showed that OLAP analyses and drilling methods are able to provide an additional knowledge into the neural network model, this research is focused on evaluating separate models that can be suggested by looking into the OLAP analyses. The accuracy of models is compared using the mean square error as the objective function. The sensitivity analysis is also performed in order to extract the most important variables for the sale prediction. The results can serve as guidelines for researchers as well as for practitioners that aim to use the best of both methodologies in improving the efficiency of their businesses.

Distance learning is more and more interesting to everyone. Learning Management Systems are capable to be the source of data for business intelligence software. Business Intelligence software integrated with Learning Management System can help to analyze the way student uses distance learning, what are the effects and how to improve its quality. This paper describes the design of Business Intelligence Module integrated with Learning Management System used in project for Department of Education, Croatia. Special attention is given to experiences, like measuring competency level or gap analysis on training requirement against job function.

The quality of decision-making process is affected by the quality of information used in the process. Trends in data processing for decision support show that business users need analytical applications which incorporate a variety of data analysis techniques incorporating task-specific knowledge, i.e. that are business task-oriented. Such business analytics applications must be vertically connected across the organization, their information is desired to be in a visually acceptable form, even through wireless devices. The analysis functions have to be integrated into the information system, and integrated into the action and result measurements.

The widespread and rapidly growing use of html format of e-mail is accompanied with the presence of the malicious code (viruses, trojans, worms, active scripts, redirection to malicious web contents, and other similar things), especially in the light of the widespread illegal advertising. Apart from the antivirus tools and the tools used to remove spam, on Linux mail servers there are other tools like Procmail, Maildrop, CSMail and MIMEdefang, which can also be used to filter e-mail. In this paper the authors have shown a method for the development of the programme solution which can be added to the above mentioned tools. By using the suggested method the html contents is sorted out from the messages by putting it into the compressed attachment and thus leaves the pure text in the message. The user has thus been secured from the above mentioned threats and can decide for himself whether he wants to open the attachment or not.

Data Quality platforms are probably the least explored and used group of Business Intelligence software platforms in Croatia and whole Adriatic region so far. Our market is not large enough to be interresting for global to invest in development of localized rules ses for their platforms. There are three main reasons for that. First reason is the price of such platforms that is substantial even for the largest potential clients in the market. The second reason is that the most of companies were not aware of benefits that they can achieve with that kind of software platfoems. Third and most important reason was the fact that neither od leading data quality platformswas ready to handle Croatian-specific first name, last name and address data in the standardization and cleansing process, because of different code page and different rules to be handled compared to any other European language. Fortunately, things are beginning to change for better and this article describes the localization process and creation of rule sets for Data Quality platform at a project in major Croatian company.

Data warehouse is a copy of transaction data specifically structured for query and analysis [1]. Within data warehouse, data is usually stored in a dimensional model. On-Line Analytical Processing (OLAP) is an approach to analysis and reporting that enables a user to easily and selectively extract and view data from different points of view based on a multidimensional data structure called a cube [2]. There are numerous data warehousing platforms available on the market. Exhaustive data warehousing platform comprises of data warehouse server, OLAP server and some data mining functionality. There are no present standards to support interoperability between different OLAP systems. In this article, two major initiatives towards standardization are examined: XMLA and JOLAP. Web service is a piece of business logic, located somewhere on the Internet, that is accessible through standard-based Internet protocols such as HTTP or SMTP [3]. Web services are neither language nor platformspecific. Using Java programming language, general purpose client tool prototype for standardized OLAP data access is developed. Client communicates with OLAP data source through web service and is based on XMLA 1.1. specification. It is concluded that the client encompasses satisfactory set of functionalities.