MCETECH 2009 - Tutorial Preliminary Program All tutorials are held in the Azrieli Pavilion and Theatre, Carleton University. Tutorials are in English. Please register on-line. Monday, May 4th, 2009 Tutorial 1 Understanding how RFID Technologies & EPC Network Enable Innovative e-Business Models: a BPR Approach Speaker Ygal Bendavid, École Polytechnique de Montréal and Academia RFID Location Room 301, 9:00-12:30 (May 4th) Abstract The recent interest in Radio Frequency Identification (RFID) technologies & EPC Network offers an interesting opportunity for researchers & professionals to examine the impact and potential benefits on e-business models. Although this technology has improved substantially over the last few years, its adoption by the business community still raises some challenges and unanswered questions for both developers and potential users. Biography Ygal Bendavid is a post doctoral researcher at the ePoly Center of Expertise in Electronic Commerce. He is an instructor as well as co-founder and academic director of Academia RFID. He teaches at various institutions including the École Polytechnique de Montréal, the Université du Québec à Montréal (UQAM) and the Université de Sherbrooke and has been invited as a guest speaker for international conferences on technology management and innovation. Dr. Bendavid holds a Ph.D. in Industrial Engineering (Management of Technology) and is CompTIA RFID+ certified. Tutorial 2 Social Web, Web Architecture and the OpenSocial Standard Speaker Claude Coulombe, Université de Montréal Location Room 101, 14:00-17:30 (May 4th) Abstract The Social Web describes how people socialize and interact on the Web sharing a variety of interests. It is therefore quite natural in the context of Web 2.0, where the emphasis is on users, that entrepreneurs have created Web 2.0 applications that focus on social interactions and communities. Typical examples of social network sites are websites such as Facebook, Twitter, Ning, Delicious, LinkedIn, Yahoo!, Myspace, Flickr and many others. With the proliferation of such social networking sites has emerged the need for common standards and open source tools. In this tutorial we will see the common architectural concepts and design patterns behind social network sites and the emerging and quite successful OpenSocial standard promoted by Google and its numerous partners. The discussion will be accompanied by code snippets in Java, JavaScript, XML and CSS Keywords: Social Web & Social Network definition, Examples, Need for a social API, Quick return on Ajax, Gadgets, Gadgets container, REST and RPC Web services,  OpenSocial Standard, Shindig Server, Google Web Toolkit (GWT) as a gadgets factory. Biography Claude Coulombe (Ph.D. in progress, M.Sc. in Computer Science, B.Sc. in Physics) is a pioneer of AI based commercial software and a software entrepreneur since he founded Machina Sapiens (Correcteur101) and more recently Lingua Technologies. Experienced with agile software development, OOP and J2EE, Claude has strong expertise with emerging Web 2.0 technologies, Rich Internet Applications, Ajax and the Google Web Toolkit. Tuesday, May 5th, 2009 Tutorial 3 Interoperability in Healthcare Speaker Norm Archer, McMaster University Location Room 301, 15:30-17h30 (May 5th) Abstract This tutorial will discuss two major questions facing the Canadian healthcare system.  The first is the low rate of adoption of electronic record systems by institutions and the even lower rate of adoption by physicians.  The second is record and system interoperability, which is clearly essential if the adoption rate is to increase to an acceptable level, since this will greatly increase access to external sources of patient information, improve system efficiency, and at the same time increase the benefits available to adopters.  But interoperability is clearly not possible without adoption.  In what appears to be a chicken and egg situation, upon closer inspection there is actually a clear path ahead.  And that is to work with those physicians and healthcare institutions that have forged ahead to implement high usage electronic health record systems, by developing working solutions that can be implemented elsewhere. This will allow the implementation of interoperable EHRs and EMRs to diffuse from existing pockets of successful application throughout their health regions and across their provinces or territories.  We will discuss several such pilot sites where this is already occurring, and the best policy appears to be to help in the design of such pilots, to encourage their implementation and study their results, and to take from them the lessons learned and to apply them elsewhere. Biography Norm Archer is Professor Emeritus/Special Advisor at the McMaster eBusiness Research Centre. Dr. Archer specializes in information systems, more specifically in electronic commerce and project management. His research interests include Web-based decision support systems, the effective transition of corporate moves to electronic commerce, intelligent software agents, and risk in project management. He taught courses in information systems, project management, and electronic commerce. Dr. Archer has published in a number of journals, including Decision Sciences, IEEE Transactions on Systems, Man & Cybernetics, International Journal of Human-Computer Studies, Journal of Operations Management, and the International Journal of Technology Management. He has consulted on issues related to computer system and software selection, and project management. He is a member of the Canadian Information Processing Society, the Association for Computing Machinery, and the Project Management Institute. He holds a Ph.D. in Physics (McMaster University), an M.S. in Operations Research (New York University) and a B.Sc. in Engineering Physics (University of Alberta). Tutorial 4 Open Source Software Licensing Best Practices in a Post Jacobsen v. Katzer World Speaker Thomas Prowse, Gowlings Location Room 301, 10:30-12:00 (May 5th) Abstract This tutorial will begin with a short overview of the Jacobsen v. Katzer decision and its practical implications. The core tutorial program will consist of an interactive discussion with the panellists from Black Duck Software, Eclipse and Nortel focused on practical insight, advice and discussion on best practices for the management and use of Open Source Software (OSS) code in a hybrid development environment. Biography Thomas Prowse is a partner in Gowlings’ business law department working from the Firm’s Kanata Technology Law Office. Thomas’ practice focuses on providing legal advice to technology companies. He practises in the area of technology law, including technology acquisition, licensing, and development and has a particular focus on Open Source Software matters. His practice also includes technology-related commercial matters such as strategic alliance, mergers and acquisitions, and intellectual property transactions. Before re-joining Gowlings, Thomas was Senior Counsel with Nortel, where he was the Law Department leader on the Nortel Open Source Advisory Team. Prior to Nortel, Thomas worked with the Federal Government on the development of new copyright legislation after practicing intellectual property law with the Ottawa office of Gowlings. Thomas was admitted to the Ontario Bar in 1987 and is a member of the Law Society of Upper Canada and the Intellectual Property Institute of Canada. He received an LL.B. degree from Queen's University in 1985 after graduating from the University of Saskatchewan with a B.A. in Political Science. Tutorial 5 Putting Zotero to Work: Free and Open Source Research Management for You and Your Institution Speaker Trevor Owens, George Mason University Location Room 102, 13:30-17:30 (May 5th) Abstract Zotero, the free, easy-to-use Firefox extension that helps collect, manage, and cite research sources, is now enterprise ready and equipped to facilitate your institutions research. With more than a hundred institutions, recommending Zotero as a research tool its clear that the tool is now the new standard in research management. Tutorial attendees will learn both how Zotero can help in their own research and how Zotero can help facilitate best research practices at their institution or enterprise. The tutorial will also describe the recently released Zotero API. Biography Trevor Owens is the technology evangelist and community lead for Zotero, at the Center for History and New Media, George Mason University. He is also working on the ECHO project. Trevor received his undergraduate degree in history and the history of science from the University of Wisconsin-Madison and is currently working on a master's degree in history at George Mason University. His undergraduate thesis examined the history of children's biographies of Marie Curie and Albert Einstein. Trevor is interested in the history of public perceptions of science, and the use and evaluation of historical games and interactives. Before coming to the CHNM, Trevor was a member of the Games, Learning, and Society Conference planning committee. Tutorial 7 User Requirements Notation for Business Processes Speaker Alireza Pourshaid, IBM and University of Ottawa Location Room 301, 13:30-15:00 (May 5th) Abstract This tutorial will give an introduction to applications of the User Requirement Notation (URN), standardized by ITU-T in November 2008, for business process modeling (BPM) and business process performance management. In the first part of the tutorial, the two URN sub-languages for describing goals (Goal-oriented Requirement Language) and scenarios/processes (Use Case Maps) will be discussed. In the second part of the tutorial, we will present a BPM framework and methodology developed by extending URN to support Key Performance Indicators (KPIs). Finally, we will describe two example processes from the health care sector and describe how to apply the framework in real-life scenarios. Biography Alireza Pourshahid received his M.Sc. degree in E-Business Technologies from the University of Ottawa in 2008 and is now working at IBM. He is also a Ph.D. student at the University of Ottawa. His main research interests are Business Process and Performance Management, Process Modeling, Trust Modeling, and Software Development Methodologies. He co-authored a paper that received the best paper award at MCETECH 2008. Wednesday, May 6th, 2009 Tutorial 8 Technology Innovation Speaker Andrew Fisher, Wesley Clover Location Room 301, 10:30-12:00 (May 6th) Abstract The tutorial will walk participants through the Wesley Clover Affiliate program highlighting key elements and steps in the process of technology innovation, incubation and launch. Lessons learned from experiences with university partners around the world will be discussed. The University of Waterloo (Canada), University of Wales (United Kingdom), Institut national des télécommunications (France), Rochester Institute of Technology (US), and University of Ottawa (Canada) will be discussed. Biography Andrew Fisher is responsible for new venture creation at Wesley Clover. He currently manages a portfolio of assets in both ICT and media sectors. In additional Andrew run’s the Mitel Affiliate program that is responsible for identifying and commercializing gaps in existing portfolio investments. He co-founded NewHeights Software Corporation, sold in 2007, where he managed all Service Provider, large enterprise, and vertical market accounts. Leveraging Wesley Clover's global technology portfolio of over a dozen companies, Andrew spearheads the corporation’s solutions which reach from the network’s core to the end user experience, incorporating VOIP, IPTV, Unified Communications and IP Multimedia Subsystem technologies. Andrew has an academic background in Economics, Computer Science and Engineering and is a graduate of the University of British Columbia. Previous to Wesley Clover, Andrew has held production roles within the Canadian Department of National Defense and Natural Resources Canada. Tutorial 9 Securing Internet Applications - Why SSL is Not Enough Speaker Preeti Raman, Carleton U. Location Room 102, 14:00-17:30 (May 6th) Abstract This tutorial will focus on current threats to web applications and possible countermeasures to mitigate those threats. The first part of the talk will focus on the client, while the latter half will focus on vulnerabilities in the web application and the web server. We will cover various kinds of attacks including cross-site scripting attacks, SQL injection, buffer overflows and phishing. Apart from using numerous real-world examples, this talk includes a demonstration of the effort required for a successful attack. The hands-on, live demonstration is followed by the lessons learned and an introduction to some safeguard strategies that can help minimize such attacks on web applications. Biography Preeti Raman is a researcher at the Carleton Computer Security Lab. She is also the President and CEO of ByteMatters, a managed services provider of business and software solutions. Preeti’s own personal experience spans various facets of IT enabled transformation, application development and managed service provision. She brings global technology and innovation management experience gained through her time in China, India and North America. She received a B.Eng. degree in Computer Science from the Bangalore  University and a Masters in Computer Science from Carleton University. She is a Certified Information Systems Security Professional (CISSP), and a Microsoft Certified Application Developer (MCAD.NET). Her interests include Bio-inspired Computing, Ubiquitous & Pervasive computing security and Intrusion Detection on the web. She is the Chair of the IEEE Women in Engineering chapter of the Ottawa Section.