معماری های سازمانی برای تحول دیجیتال در شرکت های کوچک و متوسط

Enterprise architectures for the digital transformation in small and medium-sized enterprises

Abstract

The transformation towards smart connected factories causes enormous changes in mechanical engineering industry starting from the development of cyber-physical production systems up to their application in production. Enterprise architectures already offer suitable methods to support the alignment of the internal IT landscape. New demands like customer involvement, iterative development and increased business-orientation arising with these digitized products require new approaches and methods. This paper presents the foundation and the first steps aiming at the development of a method for the holistic planning of the digital transformation in small and medium-sized mechanical engineering enterprises.

1 Introduction

personalized value. This becomes particularly obvious in the demand for individualized products and the increasing influence of customers on the development and the production processes [1]. Factories can only meet this challenge by the application of digital technologies. In Germany, the term Industrie 4.0 represents the aspired target state. Through improvements in information, communication and automation technology live information is available over life cycles of products, processes and factories. Production systems, products and humans are closely networked. Moreover, the resulting big data is used for holistic optimization. [2, 3, 4] This special situation gives rise to opportunities and risks for mechanical engineering enterprises. Based on customer data there are numerous new possibilities for product and process improvements including the optimization of the machining process or spare part forecasting services. At the same time, they are confronted with new demands. Customers not just want to buy a physical machine but service systems, consisting of hard- and software, that offer additional value in their unique context [1, 4, 5]. Examples are context-based features and information for machine operators that support manufacturing to adapt rapidly changing customer needs. To realize such use cases a close collaboration of manufacturers and mechanical engineering enterprise is required. Through this development, IT is not any longer just a technological tool to improve the efficiency of internal processes. By becoming an essential part of the value creation it grows up to a new source of competitive advantage and thus takes a transformative role [5]. The required extension of products by digital components to the point of cyber-physical systems and their integration into service systems leads enterprises in mechanical engineering into a fundamental change process – the digital transformation. Besides mechanics and electronics they now need to develop digital capabilities and implement them into fast-changing, cross-company processes and structures. Especially for small and medium-sized enterprises (SMEs) this is an enormous challenge [6].

With the help of business model appraoches, many enterprises already started to design digital value creation concepts. But these means are very limited when it comes to deriving and implementing processes and IT services. In contrast to existing IT-based products, the new service logic requires a holistic process view. To take full advantage of the digital opportunities adequate models, methods and tools are needed [4, 7]. With enterprise architectures (EA) information systems literature already offers a well-proven solution for this challenge [8, 9]. The aim of this paper is to examine if this approach is appropriate for digital transformation in SMEs of mechanical engineering. Therefore, digital transformation and EA are defined. Afterwards, strengths and weaknesses of EA in the context of digital transformation in SMEs are analyzed. In addition, this paper presents the first steps for the development of a method for the holistic planning of the digital transformation in small and mediumsized mechanical engineering enterprises.

چالش های فنی، راه حل ها و تحلیل مقایسه ای جرم یابی قانونی ابر 

Cloud forensics: Technical challenges, solutions and comparative analysis

Abstract

Cloud computing is arguably one of the most significant advances in information technology (IT) services today. Several cloud service providers (CSPs) have offered services that have produced various transformative changes in computing activities and presented numerous promising technological and economic opportunities. However, many cloud customers remain reluctant to move their IT needs to the cloud, mainly due to their concerns on cloud security and the threat of the unknown. The CSPs indirectly escalate their concerns by not letting customers see what is behind virtual wall of their clouds that, among others, hinders digital investigations. In addition, jurisdiction, data duplication and multi-tenancy in cloud platform add to the challenge of locating, identifying and separating the suspected or compromised targets for digital forensics. Unfortunately, the existing approaches to evidence collection and recovery in a non-cloud (traditional) system are not practical as they rely on unrestricted access to the relevant system and user data; something that is not available in the cloud due its decentralized data processing. In this paper we systematically survey the forensic challenges in cloud computing and analyze their most recent solutions and developments. In particular, unlike the existing surveys on the topic, we describe the issues in cloud computing using the phases of traditional digital forensics as the base. For each phase of the digital forensic process, we have included a list of challenges and analysis of their possible solutions. Our description helps identifying the differences between the problems and solutions for non-cloud and cloud digital forensics. Further, the presentation is expected to help the investigators better understand the problems in cloud environment. More importantly, the paper also includes most recent development in cloud forensics produced by researchers, National Institute of Standards and Technology and Amazon.

1 Introduction

The advent of cloud computing in recent years has produced major technological advancement in the way Information Technology (IT) services are provisioned and deployed. Cloud computing, which can be used by individuals as well as corporations, continues to grow at remarkable rate due to its many favorable features. Among others, adopting cloud computing users can alleviate big capital investments, replacing them with low cost and more flexible operational expenses, while taking advantage of its speed, agility, flexibility, infinite elasticity and more importantly mobility because services can be accessed anytime from anywhere. The offered features have fuelled a phenomenal growth in cloud services market. Independent studies conducted by organizations, such as the European Network and Information Security Agency (ENISA) and Gartner, predicted a sharp increase in the adoption of cloud computing services by corporate organizations, educational institutions and Government agencies (Gartner, 2014; IEEE, 2014). A study by Market Research Media found that the global cloud computing market is expected to grow at a compound annual growth rate of 30% reaching $270 billion by 2020 (Zawaod and Hasan, 2013). The growth is mainly fuelled by the cost savings and pay per use model offered by cloud computing. A similar case study conducted on cloud migration reported an average cost saving of 37% when organizations move their infrastructures to Amazon EC2 cloud, in addition to potentially eliminating 21% of the support calls, showing compelling reasons to adopt cloud computing (KhajehHosseini et al., 2010). A recent study conducted by RightScale group on the adoption of cloud computing, concluded that cloud adoption reaches ubiquity with 87 percent of the surveyed organizations using public cloud. Amazon Web Services (AWS) leading the cloud adoption at 54 percent (RightScale, 2014).

On the other hand, Cloud Security Alliance (CSA) reported a corresponding growth in cloud vulnerability incidents. Specifically, CSA’s report shows that cloud vulnerability incidents between 2009 and 2011 have more than doubled, with top three cloud service providers (CSPs), i.e., Amazon, Google and Microsoft, accounted for 56% of all non-transparent cloud vulnerability incidents. The report also cited that the number of vulnerability incidents over the past five years has risen considerably (CSA, 2013b). The increasing security incidents in the cloud are caused, among others, by easy user account registration provided by CSPs, unfettered accessibility, and virtually unlimited computing power. In essence, attackers can open bogus accounts to the cloud, use them to carry out their acts, terminate the accounts and disappear into ether once their malicious acts have been performed. Easy access and almost unlimited power of the cloud allow the attackers, using cloud as a platform, to perform their powerful attacks from anywhere in short periods.