Terje Gjøsæter

• Ogbonna, Uchenna; Paupini, Cristina & Gjøsæter, Terje (2023). Situational Disabilities in Information Systems for Situational Awareness in Flood Situations in Nigeria. In Gjøsæter, Terje; Radianti, Jaziar & Murayama, Yuko (Ed.), Information Technology in Disaster Risk Reduction, 7th IFIP WG 5.15 International Conference, ITDRR 2022 - ITDRR 2022. Springer. ISSN 978-3-031-34206-6. p. 55–68. doi: https:/doi.org/10.1007/978-3-031-34207-3_4.
• Herrera, Lucia Castro; Shahbazi, Maryam; Majchrzak, Tim A.; Gjøsæter, Terje & Bunker, Deborah (2023). Attributes of Continuity in Support Information Systems: A Study of Social Media Listening Experiences. In Midha, Vishal & Animesh, Animesh (Ed.), The 29th Americas Conference on Information Systems (AMCIS). Association for Information Systems (AIS). ISSN 978-1-958200-05-6.
• Herrera, Lucia Castro; Gjøsæter, Terje; Majchrzak, Tim A. & Thapa, Devinder (2023). Signals of Transition in Crisis Management: Insights from a Study of Social Media Use in Public Service Organizations . In Bui, Tung X. (Eds.), Proceedings of the 56thAnnual Hawaii International Conference on System Sciences. HICSS Conference Office. ISSN 978-0-9981331-6-4. p. 1758–1767. Show summary

  In crisis informatics, little attention is placed on how transitions occur between periods of crisis and non-crisis. The analysis of transition behaviors in organizations could respond to both the cyclicality of risk and crisis management, and the need for continuity of services provided to the community. In studying transitions, we focus on social media use as a support system. Thus, with the objective to gain an insight into how sociotechnical systems navigate through periods of crisis and non-crisis, we leverage individual experiences that rely on social media as a source of information in public service organizations and developers of social media analytics support tools. The main contribution of this study is the explanation and conceptualization on how transitions happen by framing social media as a support system of information for crisis management. In addition, we highlight the return to a new steady-state, an overlooked area of organizational transitions and continuity.

• Aarland, Mari; Radianti, Jaziar & Gjøsæter, Terje (2023). Using System Dynamics to Simulate Trust in Digital supply Chain. In Radianti, Jaziar; Dokas, Ioannis; LaLone, Nicolas & Khazanchi, Deepak (Ed.), 20th Global Information Systems for Crisis Response and Management Conference (ISCRAM 2023). ISCRAM. ISSN 979-8-218-21749-5. p. 516–529. doi: 10.59297/CAGD9224.
• Rustenberg, Kjetil; Radianti, Jaziar & Gjøsæter, Terje (2023). Exploring Demons for the Establishment of Team Situational Awareness. In Radianti, Jaziar; Dokas, Ioannis; LaLone, Nicolas & Khazanchi, Deepak (Ed.), 20th Global Information Systems for Crisis Response and Management Conference (ISCRAM 2023). ISCRAM. ISSN 979-8-218-21749-5. p. 636–648. Show summary

  Individual situational awareness (SA) is crucial for building team SA, which is necessary for achieving a shared understanding of a situation, making informed decisions, and taking appropriate actions. This article examines the communication barriers that emerge when transitioning from individual to team SA in emergency management scenarios. We observed two emergency exercises on "ongoing life-threatening violence" and dam failure causing hospital congestion. The study was complemented with interviews with participants of these exercises, aiming at identifying barriers called SA-demons in the team setting. We discovered barriers that hinder the establishment of team SA, including a vicious cycle of mistrust, a fragmented information trap, a false feeling of mastery trap, and a decaying memory trap. These barriers can stem from individual, organizational, or technological factors. To complement existing SA theories, we applied the Cynefin framework and found that standard operating procedures can be potential barriers when transitioning into chaotic or complex domains.

• Herrera, Lucia Castro & Gjøsæter, Terje (2023). Leveraging Crisis Informatics Experts: A co-creating approach for validation of social media research insights. In Radianti, Jaziar; Dokas, Ioannis; LaLone, Nicolas & Khazanchi, Deepak (Ed.), 20th Global Information Systems for Crisis Response and Management Conference (ISCRAM 2023). ISCRAM. ISSN 979-8-218-21749-5. p. 439–448. Show summary

  Validation of findings is a challenge in practice-based research. While analysis is being conducted and findings are being constructed out of data collected in a defined period, practitioners continue with their activities. This issue is exacerbated in the field of crisis management, where high volatility and personnel turnover make the capacity to attend research demands scarce. Therefore, conducting classic member validation is logistically challenging for the researcher. The need for rigor and validity calls for alternative mechanisms to fulfill requirements for academic research. This article presents an approach for validation of results of a qualitative study with public organizations that use social media as a source of information in the context of crisis management. The unavailability of original interview-objects to validate our findings resulted in an alternative validation method that leveraged experts in crisis informatics. By presenting our approach, we contribute to encouraging rigor in qualitative research while maintaining the relationship between practice and academia.

• Prinz, Andreas; Engebretsen, Martin; Gjøsæter, Terje; Møller-Pedersen, Birger & Xanthopoulou, Themis Dimitra (2023). Models, systems, and descriptions: A cross-disciplinary reflection on models. Frontiers in Computer Science. ISSN 2624-9898. 5. doi: 10.3389/fcomp.2023.1031807. Full text in Research Archive Show summary

  There are many different notions of models in different areas of science that are often not aligned, making it difficult to discuss them across disciplines. In this study, we look at the differences between physical models and mental models as well as the difference between static and dynamic models. Semiotics provides a philosophical underpinning by explaining meaning-making. This allows for identifying a common ground between models in different areas. We use examples from natural sciences and linguistics to illustrate different approaches and concepts and to find commonalities. This study distinguishes between systems, models, and descriptions of models. This distinction allows us to understand the commonalities of mental and physical models in different areas.

• Prinz, Andreas; Xanthopoulou, Themis Dimitra; Gjøsæter, Terje & Møller-Pedersen, Birger (2022). On abstraction in the OMG hierarchy: systems, models, and descriptions, ACM / IEEE 25th International Conference on Model Driven Engineering Languages and Systems (MODELS). Association for Computing Machinery (ACM). ISSN 978-1-4503-9467-3. p. 322–330. doi: 10.1145/3550356.3561573. Full text in Research Archive Show summary

  The Model-Driven Architecture (MDA) uses a metadata hierarchy with several layers that are placed on top of each other. The traditional view is that the layers provide abstractions related to models in languages defined by meta-models. Over the years, it has been difficult to define a consistent understanding of the layers. In this paper, we propose such a consistent understanding by clarifying the relations between the different elements in the hierarchy. This is done based on the Scandinavian approach to modelling that distinguishes between systems and system descriptions. Systems can be physical, digital, or even mental, while descriptions can be programs, language descriptions, specifications, and diagrams. We relate descriptions and systems by explaining where semantics of objects originate and how they apply in the hierarchy.

• Herrera, Lucia Castro & Gjøsæter, Terje (2022). Community Segmentation and Inclusive Social Media Listening. Proceedings of the International ISCRAM Conference. ISSN 2411-3387. p. 1012–1023. Full text in Research Archive Show summary

  Social media analytics provide a generalized picture of situational awareness from the conversations happening among communities present in social media channels that are that are, or risk being affected by crises. The generalized nature of results from these analytics leaves underrepresented communities in the background. When considering social media analytics, concerns, sentiment, and needs are perceived as homogenous. However, offline, the community is diverse, often segmented by age group, occupation, or language, to name a few. Through our analysis of interviews from professionals using social media as a source of information in public service organizations, we argue that practitioners might not be perceiving this segmentation from the social media conversation. In addition, practitioners who are aware of this limitation, agree that there is room for improvement and resort to alternative mechanisms to understand, reach, and provide services to these communities in need. Thus, we analyze current perceptions and activities around segmentation and provide suggestions that could inform the design of social media analytics tools that support inclusive public services for all, including persons with disabilities and from other disadvantaged groups.

• Aarland, Mari & Gjøsæter, Terje (2022). Digital Supply Chain Vulnerabilities in Critical Infrastructure: A Systematic Literature Review on Cybersecurity in the Energy Sector. ICISSP. ISSN 2184-4356. p. 326–333. doi: 10.5220/0010803800003120. Full text in Research Archive Show summary

  The main purpose of this paper is to identify the current state of the art on digital supply chain cybersecurity risks in critical infrastructure and how the term resilience is used in this context. To achieve this objective, the authors applied a systematic literature review method that summarises and analyses the studies relevant for the research topic. In total 33 papers were identified. The results show that limited research is done on supply chain risks in critical infrastructure. Relevant frameworks and methods for resilience of supply chains have also been identified. These frameworks and methods could be very beneficial for a more holistic management of cybersecurity risks in the increasingly complex supply chains within critical infrastructure.

• Gjøsæter, Terje & Radianti, Jaziar (2021). Cyber-Security in Digital Metering Value Chain for Mountain Landslide Warning. In Murayama, Yuko; Velev, Dimiter & Zlateva, Plamena (Ed.), Information Technology in Disaster Risk Reduction, 5th IFIP WG 5.15 International Conference, ITDRR 2020, Sofia, Bulgaria, December 3–4, 2020, Revised Selected Papers. Springer Berlin/Heidelberg. ISSN 978-3-030-81469-4. doi: 10.1007/978-3-030-81469-4_14.
• Gjøsæter, Terje & Radianti, Jaziar (2021). Cyber-Security in Digital Metering Value Chain for Mountain Landslide Warning. In Murayama, Yuko; Velev, Dimiter & Zlateva, Plamena (Ed.), Information Technology in Disaster Risk Reduction, 5th IFIP WG 5.15 International Conference, ITDRR 2020, Sofia, Bulgaria, December 3–4, 2020, Revised Selected Papers. Springer Berlin/Heidelberg. ISSN 978-3-030-81469-4. doi: 10.1007/978-3-030-81469-4_14.
• Gjøsæter, Terje & Radianti, Jaziar (2021). Cyber-Security in Digital Metering Value Chain for Mountain Landslide Warning. In Murayama, Yuko; Velev, Dimiter & Zlateva, Plamena (Ed.), Information Technology in Disaster Risk Reduction, 5th IFIP WG 5.15 International Conference, ITDRR 2020, Sofia, Bulgaria, December 3–4, 2020, Revised Selected Papers. Springer Berlin/Heidelberg. ISSN 978-3-030-81469-4. doi: 10.1007/978-3-030-81469-4_14.
• Radianti, Jaziar; Gjøsæter, Terje & Chen, Weiqin (2021). Slaying the SA-Demons – Humans vs. Technology – A Content analysis. In Adrot, Anouck; Grace, Rob; Moore, Kathleen & Zobel, Christopher W. (Ed.), ISCRAM 2021 Conference Proceedings - 18th International Conference on Information Systems for Crisis Response and Management. ISCRAM Association. ISSN 978-1-949373-61-5. p. 946–958. Full text in Research Archive Show summary

  This paper examines Situation Awareness (SA) and the application of Endsley’s SA-Demons in different contexts and research areas. We perform content analysis to examine how they are used, and to what degree they are perceived as stemming from human-error or weaknesses in technology and if any suggestions for mitigation are primarily focused on the human or the technology side. Based on our findings, we propose Universal Design as a tool that can counter the effects of the SA-Demons by improving the usability and accessibility of SA-supporting technology and thereby removing barriers to SA, rather than challenging the users to overcome not only barriers that are a result of the complexity of the situation itself, but also additional barriers that are caused by inferior and suboptimal design of the technology in use.

• Gupta, Suraj; Gjøsæter, Terje & Giannoumis, G. Anthony (2021). Web Accessibility and Web Developer Attitudes Towards Accessibility in Mozambique. In Margherita, Antona & Stephanidis, Constantine (Ed.), Universal Access in Human-Computer Interaction. Access to Media, Learning and Assistive Environments. 15th International Conference, UAHCI 2021, Held as Part of the 23rd HCI International Conference, HCII 2021, Virtual Event, July 24–29, 2021, Proceedings, Part II . Springer. ISSN 978-3-030-78091-3. p. 213–231. doi: 10.1007/978-3-030-78092-0_14. Show summary

  People with disabilities are found to be severely affected by barriers in websites and other web services. This paper aims to study the web accessibility issues in Mozambique and to review the factors that contribute to it. The case study is based on results from 2 perspectives: first, automatic evaluation of five prominent national websites, and second through fieldwork, interviewing and interacting with web developers in Mozambique. The study found that none of the websites are WCAG 2.1 compatible and the web developers, in general, do not consider web accessibility in their products and services. The underlying factors responsible for web inaccessibility are found out to be extrinsic.

• Hasan, Sayed Kamrul & Gjøsæter, Terje (2021). Screen Reader Accessibility Study of Interactive Maps. In Margherita, Antona & Stephanidis, Constantine (Ed.), Universal Access in Human-Computer Interaction. Access to Media, Learning and Assistive Environments. 15th International Conference, UAHCI 2021, Held as Part of the 23rd HCI International Conference, HCII 2021, Virtual Event, July 24–29, 2021, Proceedings, Part II . Springer. ISSN 978-3-030-78091-3. p. 232–249. doi: DOI:%2010.1007/978-3-030-78092-0_15.
• Aarland, Mari; Radianti, Jaziar & Gjøsæter, Terje (2021). Cyber-Security in Digital Metering Value Chain for Mountain Landslide Warning. In Murayama, Yuko; Velev, Dimiter & Zlateva, Plamena (Ed.), Information Technology in Disaster Risk Reduction, 5th IFIP WG 5.15 International Conference, ITDRR 2020, Sofia, Bulgaria, December 3–4, 2020, Revised Selected Papers. Springer Berlin/Heidelberg. ISSN 978-3-030-81469-4. p. 170–182. doi: https:/doi.org/10.1007/978-3-030-81469-4_14.
• Paupini, Cristina & Gjøsæter, Terje (2021). Disaster Risk Reduction for All? Understanding Intersectionality in Disaster Situations. In Murayama, Yuko; Velev, Dimiter & Zlateva, Plamena (Ed.), Information Technology in Disaster Risk Reduction, 5th IFIP WG 5.15 International Conference, ITDRR 2020, Sofia, Bulgaria, December 3–4, 2020, Revised Selected Papers. Springer Berlin/Heidelberg. ISSN 978-3-030-81469-4. p. 183–192. doi: 10.1007/978-3-030-81469-4_15. Full text in Research Archive
• Gjøsæter, Terje; Radianti, Jaziar & Chen, Weiqin (2020). Towards Situational Disability-aware Universally Designed Information Support Systems for Enhanced Situational Awareness. In Hughes, Amanda; McNeill, Fiona & Zobel, Christopher W. (Ed.), ISCRAM 2020 Conference Proceedings – 17th International Conference on Information Systems for Crisis Response and Management. Virginia Tech. ISSN 978-1-949373-27-1. p. 1038–1047. Show summary

  This paper takes on the challenge of designing situational awareness information systems that take into account not only the prevalence of so-called demons of situational awareness, but also situational disabilities that will typically occur in a disaster situation, both in the control room and in the field among the general public as well as first responders. It further outlines how a situational awareness information system process model can be adapted and used as a basis for designing situational awareness information support systems that address these issues with the help of Universal Design principles.

• Gjøsæter, Terje; Radianti, Jaziar & Chen, Weiqin (2020). Universal Design of ICT for Emergency Management from Stakeholders’ Perspective - A Systematic Literature Review. Information Systems Frontiers. ISSN 1387-3326. doi: 10.1007/s10796-020-10084-7. Full text in Research Archive Show summary

  While Universal Design principles have been adopted in many areas to ensure that products and services are usable for the broadest possible diversity of users, there is still an open area when it comes to the emergency management domain. This article aims at providing a systematic overview of the current state of the emerging research field of Universal Design of Information and Communication Technology (ICT) for Emergency Management, and to highlight high-impact research opportunities to ensure that the increasing introduction of ICT in Emergency Management can contribute to removing barriers instead of adding more barriers, in particular for the elderly and people with disabilities. A systematic review on relevant literature on Universal Design, ICT and Emergency Management between 2008 and 2020 was employed using predefined frameworks, to answer the following questions: (1) Who are the target audiences (stakeholders) in research on Universal Design of ICT in Emergency Management in the different categories of Emergency Management ICT tools, and to what degree is Human-Centred Design and Universal Design taken into account? (2) What are the most important challenges and gaps in research on Universal Design of ICT in Emergency Management? We identify a set of gaps in the literature, indicating that there are some challenges where Universal Design is still limitedly addressed in technology development. We also derive promising future research topics based on areas that are missing in the literature.

• Paupini, Cristina; Giannoumis, G. Anthony & Gjøsæter, Terje (2020). A User-Centered Approach to Digital Household Risk Management. Communications in Computer and Information Science (CCIS). ISSN 1865-0929. 1226, p. 82–88. doi: 10.1007/978-3-030-50732-9_12.
• Giannoumis, George Anthony; Gjøsæter, Terje & Paupini, Cristina (2020). Towards an Indoor Navigation Application for Emergency Evacuations and Persons with Visual Impairments – Experiences from First Responders and End Users. IFIP Advances in Information and Communication Technology. ISSN 1868-4238. 575, p. 159–167. doi: 10.1007/978-3-030-48939-7_14.
• Gjøsæter, Terje; Radianti, Jaziar & Chen, Weiqin (2019). Understanding situational disabilities and situational awareness in disasters. Proceedings of the International ISCRAM Conference. ISSN 2411-3387. 2019-May, p. 940–949. Full text in Research Archive
• Giannoumis, G. Anthony; Gjøsæter, Terje; Radianti, Jaziar & Paupini, Cristina (2019). Universally Designed Beacon-Assisted Indoor Navigation for Emergency Evacuations, Information Technology in Disaster Risk reduction - Third IFIP TC5 DCITDRR International Conference ITDRR 2018 Held at the 24th IFIP World Computer Congress, WCC 2018 Poznan, Poland, September 20-21, 2018 Revised Selected Papers. Springer Nature. ISSN 978-3-030-32168-0. p. 120–129. doi: 10.1007/978-3-030-32169-7_9. Full text in Research Archive
• Tunold, Siv; Radianti, Jaziar; Gjøsæter, Terje & Chen, Weiqin (2019). Perceivability of Map Information for Disaster Situations for People with Low Vision. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 11572 LNCS, p. 342–352. doi: 10.1007/978-3-030-23560-4_25. Full text in Research Archive
• Radianti, Jaziar & Gjøsæter, Terje (2019). Digital Volunteers in Disaster Response: Accessibility Challenges. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 11573 LNCS, p. 523–537. doi: 10.1007/978-3-030-23563-5_42. Full text in Research Archive
• Radianti, Jaziar; Gjøsæter, Terje & Chen, Weiqin (2019). Universal Design of Information Sharing Tools for Disaster Risk Reduction. IFIP Advances in Information and Communication Technology. ISSN 1868-4238. 516, p. 81–95. doi: 10.1007/978-3-030-18293-9_8. Full text in Research Archive
• Radianti, Jaziar & Gjøsæter, Terje (2018). Metrics for Ensuring Security and Privacy of Information Sharing Tools for Improved City Resilience: A Review Approach. International Journal of Information Systems for Crisis Response and Management (IJISCRAM). ISSN 1937-9390. 9(3). doi: 10.4018/IJISCRAM.2017070103.
• Gjøsæter, Terje; Radianti, Jaziar & Chen, Weiqin (2018). Universal design of ICT for emergency management: A systematic literature review and research agenda. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 10907 LNCS, p. 63–74. doi: 10.1007/978-3-319-92049-8_5. Full text in Research Archive
• Gjøsæter, Terje & Radianti, Jaziar (2018). Evaluating Accessibility and Usability of an Experimental Situational Awareness Room, Advances in Design for Inclusion, Proceedings of the AHFE 2018 International Conference on Design for Inclusion. Springer. ISSN 978-3-319-94621-4. doi: 10.1007/978-3-319-94622-1_21. Full text in Research Archive
• Guttormsen, Stian; Prinz, Andreas & Gjøsæter, Terje (2017). Consistent Projectional Text Editors. In Pires, Luís Ferreira; Hammoudi, Slimane & Selic, Bran (Ed.), Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development. SciTePress. ISSN 978-989-758-210-3. p. 515–522. doi: 10.5220/0006264505150522.
• Radianti, Jaziar & Gjøsæter, Terje (2017). Secure and Privacy-Preserving Information Sharing for Enhanced Resilience, Information Systems for Crisis Response and Management in Mediterranean Countries. Springer. ISSN 9783319676333. p. 204–219. doi: 10.1007/978-3-319-67633-3_17.
• Ulltveit-Moe, Nils; Gjøsæter, Terje; Assev, Sigurd M. & Øysæd, Halvard (2017). Towards Efficient Teacher Assisted Assignment Marking Using Ranking Metrics. In Costagliola, Gennaro; Uhomoibhi, James; Zvacek, Susan & McLaren, Bruce M. (Ed.), Computers Supported Education: 8th International Conference, CSEDU 2016, Rome, Italy, April 21-23, 2016, Revised Selected Papers. Springer. ISSN 978-3-319-63184-4. p. 359–379. doi: 10.1007/978-3-319-63184-4_19.
• Gjøsæter, Terje; Prinz, Andreas & Nytun, Jan Pettersen (2016). MOF-VM: Instantiation Revisited. In Hammoudi, Slimane; Pires, Luís Ferreira; Selic, Bran & Desfray, Philippe (Ed.), Proceedings of the 4th International Conference on Model-Driven Engineering and Software Development. SciTePress. ISSN 978-989-758-168-7. p. 137–144. doi: 10.5220/0005606101370144. Show summary

  The Model-Driven Architecture (MDA) is based on an understanding of a hierarchy of levels that are placed on top of each other and that are connected with instantiation. For practical MDA use, it is important to be clear about the kinds of objects that reside on the different levels and the relations between them as well as relations to objects outside of the MDA domain. This article aims at enhancing the understanding of these objects and relations by relating them to a virtual MOF machine.

• Ulltveit-Moe, Nils; Assev, Sigurd M.; Gjøsæter, Terje & Øysæd, Halvard (2016). Streamlining Assessment using a Knowledge Metric. In Uhomoibhi, James; Costagliola, Gennaro; Zvacek, Susan & McLaren, Bruce M. (Ed.), CSEDU 2016 Proceedings of the 8th International Conference on Computer Supported Education, proceedings volume 1. SciTePress. ISSN 978-989-758-179-3. p. 190–197. doi: 10.5220/0005862601900197. Show summary

  This paper proposes an efficient tool-supported methodology for marking student assignment answers accord- ing to a knowledge metric. This metric gives a coarse hint of student answer quality based on Shannon entropy. The methodology supports marking student assignments across each sub-assignment answer, and the metric sorts the answers, so that the most comprehensive textual answers typically get the highest ranking, and can be marked first. This ensures that the teacher quickly gets an overview over the range of answers, which allows for determining a consistent marking scale in order to reduce the risk of scale sliding or hitting the wrong scale level during marking. This approach is significantly faster and more consistent than using the traditional approach, marking each assignment individually.

• Nergaard, Henrik; Ulltveit-Moe, Nils & Gjøsæter, Terje (2016). ViSPE: A Graphical Policy Editor for XACML. In Camp, Olivier; Weippl, Edgar R.; Bidan, Christophe & Aïmeur, Esma (Ed.), Information Systems Security and Privacy. Springer Science+Business Media B.V.. ISSN 978-3-319-27667-0. p. 107–121. doi: 10.1007/978-3-319-27668-7_7. Show summary

  In this paper we present the Visual Security Policy Editor (ViSPE), a policy-maker-friendly graphical editor for the eXtensible Access Control Markup Language (XACML). The editor is based on the programming language Scratch and implemented in Smalltalk. It uses a graphical block-based syntax for declaring access control polices that simplifies many of the cumbersome and verbose parts of XACML. Using a graphical language allows the editor to aid the policy-maker in building polices by providing visual feedback and by grouping blocks and operators that fit together and also indicating which blocks that stick together. It simplifies building policies while still maintaining the basic structure and logic of XACML.

• Gjøsæter, Terje & Prinz, Andreas (2015). Languagelab - a meta-modelling environment. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 9369, p. 91–105. doi: 10.1007/978-3-319-24912-4_8.
• Gjøsæter, Terje (2015). LCL - A Graphical Meta-Language for Specification of Language Constraints. In Hammoudi, Slimane; Ferreira Pires, Luis; Desfray, Philippe & Filipe, Joaquim (Ed.), MODELSWARD 2015 - Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development, ESEO, Angers, Loire Valley, France, 9-11 February, 2015 . SciTePress. ISSN 978-989-758-083-3. p. 329–337. doi: 10.5220/0005250603290337.
• Ulltveit-Moe, Nils; Nergaard, Henrik; Gjøsæter, Terje & Betts, Jennifer (2015). XACML Privacy Policy Editor for Critical Infrastructures. In Tryfonas, Theo & Askoxylakis, Ioannis G. (Ed.), Human Aspects of Information Security, Privacy, and Trust - Third International Conference, HAS 2015, Held as Part of HCI International 2015. Springer. ISSN 978-3-319-20375-1. p. 705–716. doi: 10.1007/978-3-319-20376-8_63. Show summary

  This paper describes a Scratch-based eXtensible Access Control Markup Language (XACML) editor ViSPE that can be used for designing authorisation and anonymisation policies, as well as how these policies can be enforced by using the Reversible anonymiser. Private and confidential information can be protected based on identified security requirements, as described in two case studies. The first case covers privacy-enhanced IDS-alarm handling in a traffic control centre, and in the second case, we mitigate insider threats with a secure configuration deployment policy.

• Nergaard, Henrik; Ulltveit-Moe, Nils & Gjøsæter, Terje (2015). A Scratch-based Graphical Policy Editor for XACML, 1st International Conference on Information Systems Security and Privacy (ICISSP 2015), ESEO, Angers, Loire Valley - France, 9-11 February 2015. SciTePress. ISSN 978-989-758-081-9. doi: 10.5220/0005240101820190. Show summary

  Abstract: This paper proposes a policy-maker -friendly editor for the eXtensible Access Control Markup Language (XACML) based on the programming language Scratch. Scratch is a blocks-based programming language designed for teaching children programming, which allows users to build programs like a puzzle. We take this concept one step further with an XACML policy editor based on the graphic programming elements of Scratch implemented in Smalltalk. This allows for aiding the user on how to build policies by grouping blocks and operators that fit together and also indicating which blocks that will stick together. It simplifies building the XACML policies while still having an XACML "feel" of the graphic policies.

• Barstad, Vera; Goodwin, Morten & Gjøsæter, Terje (2014). Predicting Source Code Quality with Static Analysis and Machine Learning. NIKT: Norsk IKT-konferanse for forskning og utdanning. ISSN 1892-0713. 2014.
• Gjøsæter, Terje; Ulltveit-Moe, Nils; Kolhe, Mohan Lal; Hylsberg Jacobsen, Rune & Malki Ebeid, Emad Samuel (2014). Security and Privacy in the SEMIAH Home Energy Management System. In Grosspietsch, Erwin & Klöckner, Konrad (Ed.), Proceedings of the Work in Progress Session held in connection with SEAA 2014 the 40th EUROMICRO Conference on Software Engineering and Advanced Applications and DSD 2014 the 17th EUROMICRO Conference on Digital System Design. Johannes Kepler University. ISSN 978-3-902457-40-0. p. 23–24.
• Barstad, Vera; Shulgin, Volodymyr; Goodwin, Morten & Gjøsæter, Terje (2013). Towards a Collaborative Code Review Plugin. In Tøssebro, Erlend & Meling, Hein (Ed.), Norsk informatikkonferanse NIK 2013, Universitetet i Stavanger, 18. - 20.november 2013. Akademika forlag. ISSN 978-82-321-0365-2. p. 37–40. Show summary

  This paper investigates the feasibility of a plugin facilitating identification of code quality. The proposed solution includes a distributed plugin that performs static code analysis as well as machine learning based classification, and is able to identify well written and badly written code.

• Ulltveit-Moe, Nils; Gjøsæter, Terje; Assev, Sigurd M.; Køien, Geir Myrdahl & Oleshchuk, Vladimir (2013). Privacy handling for critical information infrastructures. In Gomes, Luís & Hübner, Michael (Ed.), Industrial Informatics (INDIN), 2013 11th IEEE International Conference on. IEEE conference proceedings. ISSN 978-1-4799-0752-6. p. 688–694. doi: 10.1109/indin.2013.6622967. Show summary

  This paper proposes an architecture and a methodology for privacy handling in Critical Information Infrastructures. Privacy is in this respect considered as both the risk of revealing person-sensitive information, for example from critical infrastructures in health institutions, but also to identify and avoid leakage of confidential information from the critical information infrastructures themselves. The architecture integrates privacy enhancing technologies into an enterprise service bus, which allows for policy-controlled authorisation, anonymisation and encryption of information in XML elements or attributes in messages on the service bus. The proposed methodology can be used to identify, quantify and reduce leakages of private or confidential information. It also suggests privacy enforcement mechanisms to increase the resilience against sensitive information leakages caused by cyber attacks.

• He, Xin; Ravikumar Santhi, Ram Kumar; Mu, Liping; Gjøsæter, Terje & Li, Frank Yong (2012). Formal verification of a Cooperative Automatic Repeat reQuest MAC protocol. Computer Standards & Interfaces. ISSN 0920-5489. 34(4), p. 343–354. doi: 10.1016/j.csi.2011.12.001. Show summary

  Cooperative communications, in which a relay node helps the source node to deliver its packets to the destination node, are able to obtain significant benefits in terms of transmission reliability, coverage extension and energy efficiency. A Cooperative Automatic Repeat reQuest (C-ARQ) MAC protocol has been recently proposed to exploit cooperative diversity at the MAC layer. In this paper, we validate the integrity and the validity of the C-ARQ protocol using formal methods. The protocol logic is modeled in SDL and implemented in PROMELA. The functionality of the C-ARQ protocol is verified through simulations and verifications using SPIN.

• Gjøsæter, Terje & Prinz, Andreas (2011). Teaching Computer Language Handling - From Compiler Theory to Meta-modelling. In Fernandes, Joao M. (Eds.), Generative and Transformational Techniques in Software Engineering III International Summer School, GTTSE 2009, Braga, Portugal, July 6-11, 2009. Revised Papers. Springer Science+Business Media B.V.. ISSN 9783642180224. p. 446–460. doi: 10.1007/978-3-642-18023-1_14. Show summary

  Most universities teach computer language handling by mainly focussing on compiler theory, although MDA (model-driven architecture) and meta-modelling are increasingly important in the software industry as well as in computer science. In this article, we investigate how traditional compiler theory compares to meta-modelling with regard to formally defining the different aspects of a language, and how we can expand the focus in computer language handling courses to also include meta-model-based approaches. We give an outline of a computer language handling course that covers both paradigms, and share some experiences from running a course based on this outline at the University of Agder.

• Mu, Liping; Gjøsæter, Terje; Prinz, Andreas & Tveit, Merete Skjelten (2010). Specification of modelling languages in a flexible meta-model architecture. In AMC, ECSA (Eds.), ECSA '10 Proceedings of the Fourth European Conference on Software Architecture. ACM Publications. ISSN 978-1-4503-0179-4. p. 302–308. Show summary

  Originally, meta-models were used to specify the structure (abstract syntax) of modelling languages. This is reflected both in meta-languages like MOF and Ecore, and the four-layer meta-model architecture. Presently, meta-modelling is used for specification of complete languages. In this situation, it turns out that the traditional meta-languages are not always expressive enough to capture all language aspects. This usually implies the use of more than one metalanguage in the meta-model architecture to cover the different language aspects. There are many approaches to address this challenge. In this paper, we analyze these approaches, and based on this analysis, we re-think the meta-model architecture focusing on complete language specifications. In our meta-model architecture, each aspect of a language conforms to an aspect-specific meta-language at the level above, and models can reside at different levels depending on their context and use. This meta-model architecture is easier to understand, more flexible and more extensible; therefore it may be useful in the design of meta-model-based language specification platforms, as well as for promoting the understanding of the principles of meta-modelling.

• He, Xin; Kumar, Ram; Mu, Liping & Gjøsæter, Terje (2010). Formal Verification of a Cooperative Automatic Repeat Request MAC Protocol. In Fallmyr, Terje & Hjelmås, Erik (Ed.), Norsk Informatikkonferanse. Tapir Akademisk Forlag. ISSN 978-82-519-2703-1. p. 13–23. Show summary

  Cooperative communications, in which a relay node assists the source node to deliver its packets to the destination node thus adding diversity, is gaining more attention within the research community. The initial studies on the physical layer have shown significant gains from cooperative diversity in terms of reliability, coverage range and energy efficiency. A Cooperative Automatic Repeat reQuest MAC protocol, (C-ARQ), has been proposed to utilize cooperative diversity from the MAC layer. In this paper, we inspect this novel C-ARQ protocol to check its integrity and validity using formal methods. The protocol logic is modeled in SDL and implemented in PROMELA. The functionality of the C-ARQ protocol is confirmed through simulations and verified using the SPIN tool.

• Gjøsæter, Terje & Prinz, Andreas (2010). Teaching Model Driven Language Handling. Electronic Communications of the EASST. ISSN 1863-2122. 34. Full text in Research Archive
• Gjøsæter, Terje & Prinz, Andreas (2009). Preserving Non-essential Information Related to the Presentation of a Language Instance. In Aalberg, Trond (Eds.), Norsk Informatikk Konferanse 2009. Tapir Akademisk Forlag. ISSN 978-82-519-2491-7. p. 85–96. Show summary

  In this article, we look at issues related to the preservation and re-generation of non-essential aspects like style and formatting for diagrams and code for different presentations of a computer language. We will primarily examine these issues from a meta-modelling perspective. We may encounter these issues when we have different presentations for a language and have to generate code/diagram fragments as a result of synchronisation between the different presentations. Similar issues may arise if we want to store the model (an instance of the meta-model that defines the language) instead of the source text or diagram, and have to re-generate the code/diagram. We describe how existing tools and approaches handle these issues, then we look at what solutions for storing the style information are possible. We develop some requirements and look at how the possible solutions support these requirements, and finally we discuss some ideas for implementation based on the recommended solutions.

• Gjøsæter, Terje; Isfeldt, Ingelin F. & Prinz, Andreas (2009). Sudoku - A Language Description Case Study, Lecture Notes in Computer Science. Springer. ISSN 9783642004339. p. 305–321. Show summary

  A complete language description includes the structure as well as constraints, textual representation, graphical representation, and behaviour (transformation and execution). As a case study in language description, we consider Sudoku as a language, where a Sudoku puzzle is an instance of the language. Thus we are able to apply meta-model-based technologies for the creation of a language description for Sudoku, including correctness checking of a puzzle, and solving strategies. We identify what has to be expressed and how this can be done with the technology available today.

• Gjøsæter, Terje; Prinz, Andreas & Scheidgen, M (2008). Meta-model or Grammar? Methods and Tools for the Formal Definition of Languages, Proceedings of the Nordic Workshop on Model Driven Engineering. University of Iceland Press. p. 67–82. Show summary

  There are many different ways to define a programming language. There are also several aspects of a programming language that can be formally defined; the behaviour of the language, its representation, structure and constraints. In this article, we investigate how traditional compiler theory compares to meta-modelling with regard to formally defining these aspects, from the perspective of a few example languages. We will perform the comparison primarily from the perspective of the following criteria: human readability, formality, provability, and applicability for automatic tool generation. We have found that structure and constraints can be handled fine with both approaches. Textual representation is usually better in grammars, but for editors meta-models are very close. Transformations are handled better by meta-models. Graphical representation and execution are not well covered in any of the two.

• Isfeldt, Ingelin F.; Gjøsæter, Terje & Prinz, Andreas (2008). Meta-model-based implementation of Sudoku: Eclipse vs. Visual Studio, Norsk informatikkonferanse : NIK 2008. Tapir Akademisk Forlag. p. 51–62. Show summary

  By considering Sudoku as a language, where a Sudoku puzzle is an instance of the language, we are able to apply meta-model-based technologies for the implementation of Sudoku, including correctness checking of a puzzle and solving strategies. The description of Sudoku includes not only the structure of Sudoku, but also covers constraints, textual representation, graphical representation, and behaviour (transformation and execution). We have created a meta-model-based description of Sudoku and use this as a basis for a comparative implementation in Eclipse with various plug-ins, and in Visual Studio with DSL-tools.

• Ulltveit-Moe, Nils; Olsen, Morten Goodwin; Pillai, Anand Balachandran; Thomsen, Christian; Gjøsæter, Terje & Snaprud, Mikael Odd H. (2008). Architecture for large-scale automatic web accessibility evaluation based on the UWEM methodology, Norsk informatikkonferanse : NIK 2008. Tapir Akademisk Forlag. p. 95–106. Show summary

  The European Internet Accessibility Observatory (EIAO) project has developed an observatory for performing large scale automatic web accessibility evaluations of public sector web sites in Europe. The architecture includes a distributed web crawler that crawls web sites for links until either a given budget of web pages have been identified or the web site has been crawled exhaustively. Subsequently, a uniform random subset of the crawled web pages is sampled and sent for accessibility evaluation. The evaluation results are stored in a Resource Description Format (RDF) database that later is loaded into the EIAO data warehouse using an Extract-Transform-Load (ETL) tool. The aggregated indicator results in the data warehouse are finally presented in a Plone based online reporting tool. This paper describes the final version of the EIAO architecture and outlines some of the technical and architectural challenges that the project faced, and the solutions developed towards building a system capable of regular large-scale accessibility evaluations with sufficient capacity and stability. It also outlines some possible future architectural improvements.

• Gjøsæter, Terje; Nytun, Jan Pettersen; Prinz, Andreas; Snaprud, Mikael Odd H. & Tveit, Merete Skjelten (2006). Modelling accessibility constraints. Lecture Notes in Computer Science (LNCS). ISSN 0302-9743. 4061, p. 40–47. Show summary

  This paper describes the combination of research topics from two projects focusing on web accessibility testing, and on metamodelling and high-level specification languages. This combination leads to a novel approach to accessibility assessment that will improve the understanding of accessibility issues, and explore the potential for generating executable accessibility tests based on accessibility constraint models.

View all works in Cristin

• Gjøsæter, Terje; Radianti, Jaziar & Murayama, Yuko (2023). Information Technology in Disaster Risk Reduction, 7th IFIP WG 5.15 International Conference, ITDRR 2022 - ITDRR 2022. Springer. ISBN 978-3-031-34206-6. 376 p.
• Gjøsæter, Terje; Radianti, Jaziar & Murayama, Yuko (2023). Information Technology in Disaster Risk Reduction. Springer. ISBN 978-3-031-34207-3. 500 p.

View all works in Cristin

• Prinz, Andreas; Xanthopoulou, Themis Dimitra; Gjøsæter, Terje & Møller-Pedersen, Birger (2022). On abstraction in the OMG hierarchy: systems, models, and descriptions.
• Aarland, Mari & Gjøsæter, Terje (2022). Digital Supply Chain Vulnerabilities in Critical Infrastructure: A Systematic Literature Review on Cybersecurity in the Energy Sector.
• Gjøsæter, Terje & Snaprud, Mikael (2021). Harmonization of Terminology for Emergency Management.
• Aarland, Mari; Gjøsæter, Terje & Radianti, Jaziar (2020). Cyber-Security in Digital Metering Value Chain for Mountain Landslide Warning.
• Paupini, Cristina; Giannoumis, G. Anthony & Gjøsæter, Terje (2020). A User-Centered Approach to Digital Household Risk Management.
• Gjøsæter, Terje; Radianti, Jaziar & Chen, Weiqin (2018). Universal Design of ICT for Emergency Management: A Research Agenda.
• Sanderson, Norun Christine; Gjøsæter, Terje; Chen, Weiqin & Kessel, Siri (2017). Universell utforming – i et IKT perspektiv.
• Sanderson, Norun Christine; Gjøsæter, Terje & Kessel, Siri (2017). Promotion of knowledge on Universal Design of ICT among IT students and staff at a University College in Norway.
• Ulltveit-Moe, Nils; Assev, Sigurd M.; Gjøsæter, Terje & Øysæd, Halvard (2015). FrontScraper – Digital Assessment Tool.
• Gjøsæter, Terje; Ulltveit-Moe, Nils & Nergaard, Henrik (2015). Security and Privacy in the SEMIAH Home Energy Management System.
• Gjøsæter, Terje; Nergaard, Henrik & Ulltveit-Moe, Nils (2015). SEMIAH Security and Privacy leaflet. Show summary

  Shifting energy consumption from peaks to off-peaks where there is high generation of electricity from renewable energy sources

• Ulltveit-Moe, Nils & Gjøsæter, Terje (2015). Forskning - Spill og Lek ?
• Gjøsæter, Terje & Ulltveit-Moe, Nils (2015). MAGERITCC - MAGERIT OCIL testsuite and Control Catalogue for Verinice. Show summary

  This project contains a MAGERIT control catalogue for the Verinice information security management system and an Open Checklist Initiative Language (OCIL) testsuite for MAGERIT. MAGERIT is a Spanish risk assessment standard that is available for free.

• Ulltveit-Moe, Nils & Gjøsæter, Terje (2014). WP2 Methodology to identify assets and associated threats and vulnerabilities.
• Gjøsæter, Terje & Ulltveit-Moe, Nils (2013). WP2 - Methodology to identify assets and associated threates and vulnerabilities - Risks and Challenges.
• Gjøsæter, Terje & Ulltveit-Moe, Nils (2013). WP2 - Methodology to identify assets and associated threats and vulnerabilities.
• Gjøsæter, Terje & Ulltveit-Moe, Nils (2013). Consortium Partner Presentation - University of Agder (UiA).
• Ulltveit-Moe, Nils & Gjøsæter, Terje (2013). PRECYSE WP2 Methodology: Architectural issues, D2.2, Action plan.
• Gjøsæter, Terje (2012). Open Source Licences and their usage in PRECYSE.
• Gjøsæter, Terje (2012). PRECYSE NEWSLETTER Nyhetsbrev Nr. 1 / Juni 2012.
• Gjøsæter, Terje & Snaprud, Mikael Odd H. (2006). Workshop on Web Accessibility and Metamodelling.
• Snaprud, Mikael Odd H.; Sawicka, Agata; Balachandran, Anand Pillai; Olsen, N.; Olsen, M. G. & Gjøsæter, Terje (2005). Open Source - Basis for synergies in the ICT education and research.
• Gjøsæter, Terje; Nytun, Jan P.; Prinz, Andreas & Tveit, Merete Skjelten (2005). Accessibility testing XHTML documents using UML. Show summary

  This paper handles modeling and test of accessibility requirements for web documents. We propose to use metamodelling with UML and OCL for this task. Our own environment within the SMILE project has proposed a basic representation that can be used on all levels in a metamodelling architecture; this representation is used for representation of the elements of the metamodel, models and model instances. We show the use of OCL formulas to express simple and advanced accessibility requirements.

• Gustavsen, Trond Stølen; Haslum, Kjetil & Gjøsæter, Terje (2003). Implementing elliptic curve cryptosystems using Hesse curves over prime fields.
• Munkvold, Bjørn Erik; Gjøsæter, Terje; Hagen, Dag Auby; Opach, Tomasz; Pilemalm, Sofie Elisabeth & Radianti, Jaziar [Show all 10 contributors for this article] (2021). Evaluering av INSITU skogbrannøvelse. Universitetet i Agder. ISSN 978-82-8427-050-0. Full text in Research Archive
• Ulltveit-Moe, Nils; Nergaard, Henrik; Erdödi, László; Gjøsæter, Terje; Kolstad, Erland & Berg, Pål (2016). Secure Information Sharing in an Industrial Internet of Things. arXiv.org. Show summary

  This paper investigates how secure information sharing with external vendors can be achieved in an Industrial Internet of Things (IIoT). It also identifies necessary security requirements for secure information sharing based on identified security challenges stated by the industry. The paper then proposes a roadmap for improving security in IIoT which investigates both short-term and long-term solutions for protecting IIoT devices. The short-term solution is mainly based on integrating existing good practices. The paper also outlines a long term solution for protecting IIoT devices with fine-grained access control for sharing data between external entities that would support cloud-based data storage.

• Gabioud, Dominique; Erdodi, Laszlo; Basso, Gillian; Unander, Harald; Werlen, Karl & Ulltveit-Moe, Nils [Show all 10 contributors for this article] (2015). SEMIAH D3.2 – Overall System Requirements and Functional Specifications. SEMIAH Consortium.
• Henriksen, Bjørnar; Kolstad, Erland; Unander, Harald; Ulltveit-Moe, Nils & Gjøsæter, Terje (2015). SEMIAH D3.1 Verification and Validation Plan. SEMIAH Consortium. Show summary

  This document contains a high-level verification and validation plan for SEMIAH. It describes the test strategy and methods that will be utilised to complement the software development activities in WP6. The SEMIAH test strategy is mainly based on International Software Testing Qualifications Board’s (ISTQB’s) Agile Test Extension [1]. The testing activities will be divided in four phases: feature development, continuous integration, system test, and pilot system. The business requirements will be validated in acceptance tests through exploratory testing. Features or functionalities of the SEMIAH system will be tested in the feature acceptance tests during the development phase. Nominated feature tests will also be included in the system test and regression testing. Non-functional requirements will be tested either as a natural part of the feature development or during system integration or system test activities. In the integration and system test phases the system will be built step-by-step as new features are delivered from the feature development tasks. At the end, a final system acceptance test will be conducted before the system is released for pilot testing in actual homes. Verification of Develco, Netplus, and Fraunhofer OGEMA products and their wireless interfaces towards appliances or smart devices are not part of this test strategy, nor is the testing of research features that are not to be integrated in the pilot system.

• Gjøsæter, Terje; Prinz, Andreas & Snaprud, Mikael (2015). Abstractions and Architecture for Language Specification. Universitetet i Agder. ISSN 978-82-7117-809-3.
• Ulltveit-Moe, Nils; Gjøsæter, Terje; Erdödi, László & Siegl, Stefan (2015). D8.1 Specification of Security and Privacy Handling. SEMIAH Consortium.
• Gjøsæter, Terje & Prinz, Andreas (2013). Languagelab 1.1 user manual. Universitetet i Agder.

View all works in Cristin