01557nas a2200157   4500008004100000022001400041245013800055210006900193260004200262300001000304490000600314520100300320100001901323700001901342856003801361       2019                        eng d  a1927-032100aConceptualizing a New Domain Using Topic Modeling and Concept Mapping: A Case Study of Managed Security Services for Small Businesses0 aConceptualizing a New Domain Using Topic Modeling and Concept Ma  aOttawabTalent First Networkc08/2019  a55-640 v93 aThe objective of this paper is to show how topic modeling and concept mapping can be used to conduct a literature review in a new  domain. The paper makes two contributions. First, it uses topic modeling to map out the literature in the new domain. Topic modeling provides an alternative to manual clustering of articles and allows the identification of non-obvious connections between ideas expressed in a collection of articles. Second, it identifies the underlying concepts in the new domain and their relationships by creating a concept map from the extracted topics . As a case study, the paper reviews the recent literature in the intersection of managed security services and small businesses. In particular, it identifies elements of the managed security services concept as it applies to small businesses. The audience of the paper includes anyone who is exploring a new  domain by reviewing the literature, and in particular, students, researchers, and members of industrial R&D projects.1 aWeiss, Michael1 aMuegge, Steven  uhttps://timreview.ca/article/126102583nas a2200241   4500008004100000022001400041245010600055210006900161260004200230300001000272490000600282520183100288653002202119653001802141653002502159653002702184653001802211100001602229700002302245700001702268700001902285856003702304       2017                        eng d  a1927-032100aCombining Exploratory Analysis and Automated Analysis for Anomaly Detection in Real-Time Data Streams0 aCombining Exploratory Analysis and Automated Analysis for Anomal  aOttawabTalent First Networkc04/2017  a25-310 v73 aSecurity analysts can become overwhelmed with monitoring real-time security information that is important to help them defend their network. They also tend to focus on a limited portion of the alerts, and therefore risk missing important events and links between them. At the heart of the problem is the system that analysts use to detect, explore, and respond to cyber-attacks. Developers of security analysis systems face the challenge of developing a system that can present different sources of information at multiple levels of abstraction, while also creating a system that is intuitive to use. In this article, we examine the complementary nature of exploratory analysis and automated analysis by testing the development of a system that monitors real-time Border Gateway Protocol (BGP) traffic for anomalies that might indicate security threats. BGP is an essential component for supporting the infrastructure of the Internet; however, it is also highly vulnerable and can be hijacked by attackers to propagate spam or launch denial-of-service attacks. Some of the attack scenarios on the BGP infrastructure can be quite elaborate, and it is difficult, if not impossible, to fully automate the detection of such attacks. This article makes two contributions: i) it describes a prototype platform for computing indicators and threat alerts in real time and for visualizing the context of an alert, and ii) it discusses the interaction of exploratory analysis (visualization) and automated analysis. This article is relevant to students, security researchers, and developers who are interested in the development or use of real-time security monitoring systems. They will gain insights into the complementary aspects of automated analysis and exploratory analysis through the development of a real-time streaming system.10aanomaly detection10acybersecurity10aexploratory analysis10areal-time data streams10avisualization1 aShah, Ahmed1 aAbualhaol, Ibrahim1 aGad, Mahmoud1 aWeiss, Michael  uhttp://timreview.ca/article/106801592nas a2200241   4500008004100000022001400041245005200055210005200107260004200159300000900201490000600210520093300216653001601149653001801165653002701183653001801210653002201228653001401250653001601264653001501280100001901295856003601314       2016                        eng d  a1927-032100aCrowdsourcing Literature Reviews in New Domains0 aCrowdsourcing Literature Reviews in New Domains  aOttawabTalent First Networkc02/2016  a5-140 v63 aConducting a literature review in new domains presents unique challenges. The literature in a new domain is typically broad, fragmented, and growing quickly. Because little is known about the new domain, the literature review cannot be guided by established classifications of knowledge, unlike in an existing domain. Rather, it will be driven by evidence that challenges and extends existing knowledge. In a way, exploring a new domain means looking for anomalies in the evidence that cannot be explained by what is already known. This article summarizes lessons from conducting two literature reviews in new domains in the area of cybersecurity. It then presents a design for using leader-driven crowdsourcing to collect evidence and synthesize it into insights in a new domain. The article will be relevant to those who are exploring a new domain, in particular students, researchers, and members of R&D projects in industry.10aco-creation10acrowdsourcing10acrowdsourcing platform10acybersecurity10aliterature review10anarrative10anew domains10asystematic1 aWeiss, Michael  uhttp://timreview.ca/article/96301020nas a2200121   4500008004100000022001400041245006200055210006100117260004200178520062300220100001900843856003600862       2011                        eng d  a1913-610200aControl and Diversity in Company-led Open Source Projects0 aControl and Diversity in Companyled Open Source Projects  aOttawabTalent First Networkc04/20113 aA majority of open source development today is carried out by companies. Building on open source allows companies to focus their development effort on the points of difference over their competitors. This article discusses the recent trend towards collectives of companies that develop shared assets in the form of open source projects, and creates a model for company-led open source projects around two dimensions: the level of control over the project and the diversity of applications derived from the project. The article then explores how the model can be interpreted from a product line engineering perspective.1 aWeiss, Michael  uhttp://timreview.ca/article/436