The popularity of cloud computing has made cloud services gradually become the leading computing model nowadays. The trustworthiness of cloud services depends mainly on construction processes. The trustworthiness measurement of cloud service construction processes (CSCPs) is crucial for cloud service developers. It can help to find out the causes of failures and to improve the development process, thereby ensuring the quality of cloud service. Herein, firstly, a trustworthiness hierarchy model of CSCP was proposed, and the influential factors of the processes were identified following the international standard ISO/IEC 12207 of the software development process.Further, a method was developed combined with the theory of information entropy and the concept of trustworthiness. It aimed to calculate the risk uncertainty and risk loss expectation affecting trustworthiness. Also, the trustworthiness of cloud service and its main construction processes were calculated. Finally, the feasibility of the measurement method were verified through a case study, and through comparing with AHP and CMM/CMMI methods, the advantages of this method were embodied. Carnegie-Mellon University and the National Defense Industry Association. The two models classified the development stages of software organizations in practice as defining, implementing, measuring, controlling and improving software products. However, only a framework was put forward, extracting no specific knowledge of each key process area and failing to quantify the quality of a specific process. Also, the two models are primarily used to evaluate the degree of process management practices of a development organization, involving many contents, and being time-consuming and costly. As a result, small and medium-sized software companies, even some large ones, face challenges to meet relevant requirements and standards. For most software development organizations, what they need is an objective, quantitative, real and easy-to-implement measurement method. The method should enable them to find the weak links in the cloud service construction process (CSCP), and then carry out subsequent improvement or reinforcement, thus reducing the probability of institutional failure and improving product quality. Other primary software process measurement methods include Goal-driven Software Measurement (GSM) [7], Practical software measurement (PSM) [8,9], and Statistical Process Control (SPC) [10]. Based on the characteristics of the CMM and GQM model [11], reference [12] established a software process framework supporting metrics and gave the metrics of software process improvement. However, it did not give the exact measurement steps for the software development process. Reference [13] discussed the significant problems in software process measurement and presented an active measurement model (AMM) to support software process improvement (SPI). It emphasized the measurement of quality, maintainability and stability of the software products, rather than the processes. To find the pro...

To obtain precise personalized services in mobile commerce, the users have to disclose their personal information to the operator, which constitutes a potential threat to their privacy security. In this paper, a mobile commerce privacy security risk assessment model is established based on information entropy and Markov chain, and effective security risk measurement, and assessment method is put forward. Our method can provide accurate and quantitative results in assessing privacy disclosure risk to guide the users’ selection of safe mobile commerce applications and protect their privacy security.

Epidemic risk has great uncertainty and harmfulness, which poses a potential threat to public health in a certain region. Establishing a special risk assessment system to assess and predict the potential epidemic risk of a region can effectively avoid or reduce the impact of epidemic risk. Therefore, this paper combs the related factors that affect the epidemic risk, and proposes an epidemic risk assessment model based on 12 indicators by combining Markov chain and AHP. The model can assess the epidemic situation in a certain region from four aspects: the probability of risk occurrence, the probability of loss, the possibility of risk disappearance and risk duration, so as to provide detailed data for the risk management and control of epidemic in the region, and help the epidemic prevention work to be carried out in a targeted way. Finally, the case analysis and method comparison are carried out,and the results show that the model proposed in this paper is reasonable and feasible.

No abstract