The 13th European Conference on Object-Oriented Programming (ECOOP'99) brought some 500 participants to Lisbon from June 14th to June 18th, 1999. As usual, the workshops took place during the rst two days of the conference and gave authors and participants an opportunity to present and discuss the most topicalandinnovativeideasinobject-oriented technology.Theimportanceofthe workshopswithinthecontext ofECOOPisbecomingincreasinglyrecognised; for the rs t time inthe history of the conference, the number of workshopproposals for ECOOP'99 actually exceeded the slots availableand some had to be refused. In addition to the usual conference proceedings, Springer-Verlag has also undertaken, forthe pasttwo years, the publicationof a WorkshopReader, which bringstogether the results of the workshops, panels, and posters held during the conference. This book, the 4th ECOOP WorkshopReader, di ers from previous editions in two signi cant ways. Firstly, instead of simply reproducing the position - pers, it presents an overview of the main points made by the authors as well as a summary of the discussions that took place. Secondly, to make the text more uniformandreadable, allchapters havebeen written ina commonformat(using LaTeX lncs style les). This book was only possible thanks to the eo rt of each workshop organiser in particular, and each workshop, poster, and panel participant in general. The innovations introduced in this book implied additional work for the workshop organisers in terms of recording and summarising the discussions as well as adapting the written presentations to a common format. This extra e ort will certainly be appreciated by the readers.

would like to express our appreciation to the authors and participants of ISD 99, who made the meeting a memorable one, and these proceedings a valuable contribution to the relevant literature. October 1999 Peggy Agouris and Anthony Stefanidis $FNQRZOHGJPHQWV This workshop was partially supported by the National Science Foundation (NSF), Directorate for Computer and Information Sciences and Engineering, Division of Information and Intelligent Systems (IIS), through CAREER grant number 9702233, and by the National Center for Geographic Information and Analysis (NCGIA). VII Preface: RUNVKRS 2UJDQL]DWLRQ: RUNVKRS &KDLU Peggy Agouris, University of Maine 3URJUDP &RPPLWWHH &KDLU Anthony Stefanidis, University of Maine 3URJUDP &RPPLWWHH Kate Beard, University of Maine Panos Chrysanthis, University of Pittsburgh Max Egenhofer, University of Maine Wolfgang Foerstner, University of Bonn, Germany Andrew Frank, Technical University of Vienna, Austria Dieter Fritsch, University of Stuttgart, Germany Mike Goodchild, University of California - Santa Barbara Armin Gruen, Swiss Federal Institute of Technology, Switzerland Thanasis Hadzilacos, Computer Technology Institute, Greece Marinos Kavouras, National Technical University of Athens, Greece David Mark, State University of New York at Buffalo Dave McKeown, Carnegie Mellon University Martien Molenaar, ITC, The Netherlands Dimitris Papadias, University of Science and Technology, Hong Kong, China Hanan Samet, University of Maryland - College Park Tapani Sarjakoski, Finnish Geodetic Institute, Finland Timos Sellis, National Technical University of Athens, Greece Shashi Shekhar, University of Minnesota Nektaria Tryfona, Aalborg University, Denmark Vassilis Tsotras, University of California - Riverside Marc van Kreveld, Utrecht University, The Netherlands /RFDO $UUDQJHPHQWV Blane Shaw, University of Maine 2UJDQL]LQJ &RPPLWWHH"

This book constitutes the refereed proceedings of the First International Symposium on Foundations of Information and Knowledge Systems, FoIKS 2000, held in Burg, Germany, in February 2000.The 14 revised full papers and four short papers were carefully reviewed and selected from a total of 45 submissions. Among the topics addressed are logical foundations and semantics of datamodels, dependency theory, integrity and security, temporal aspects, foundations of information systems design including Web-based information services, and query languages and optimization.

This volume of the Lecture Notes in Computer Science series contains all papers accepted for presentation at the 10th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management (DSOM'99), which took place at the ETH Zurich in Switzerland and was hosted by the Computer Engineering and Networking Laboratory, TIK. DSOM'99 is the tenth workshop in a series of annual workshops, and Zurich is proud to host this 10th anniversary of the IEEE/IFIP workshop. DSOM'99 follows highly successful meetings, the most recent of which took place in Delaware, U.S.A. (DSOM'98), Sydney, Australia (DSOM'97), and L'Aquila, Italy (DSOM'96). DSOM workshops attempt to bring together researchers from the area of network and service management in both industry and academia to discuss recent advancements and to foster further growth in this ?eld. In contrast to the larger management symposia IM (In- grated Network Management) and NOMS (Network Operations and Management S- posium), DSOM workshops follow a single-track program, in order to stimulate interaction and active participation. The speci?c focus of DSOM'99 is "Active Technologies for Network and Service Management," re?ecting the current developments in the ?eld of active and program- ble networks, and about half of the papers in this workshop fall within this category.

CHARME'99 is the tenth in a series of working conferences devoted to the dev- opment and use of leading-edge formal techniques and tools for the design and veri?cation of hardware and systems. Previous conferences have been held in Darmstadt (1984), Edinburgh (1985), Grenoble (1986), Glasgow (1988), Leuven (1989), Torino (1991), Arles (1993), Frankfurt (1995) and Montreal (1997). This workshop and conference series has been organized in cooperation with IFIP WG 10. 5. It is now the biannual counterpart of FMCAD, which takes place every even-numbered year in the USA. The 1999 event took place in Bad Her- nalb, a resort village located in the Black Forest close to the city of Karlsruhe. The validation of functional and timing behavior is a major bottleneck in current VLSI design systems. A predominantly academic area of study until a few years ago, formal design and veri?cation techniques are now migrating into industrial use. The aim of CHARME'99 is to bring together researchers and users from academia and industry working in this active area of research. Two invited talks illustrate major current trends: the presentation by Gerard Berry (Ecole des Mines de Paris, Sophia-Antipolis, France) is concerned with the use of synchronous languages in circuit design, and the talk given by Peter Jansen (BMW, Munich, Germany) demonstrates an application of formal methods in an industrial environment. The program also includes 20 regular presentations and 12 short presentations/poster exhibitions that have been selected from the 48 submitted papers."

The NCITS Accredited Standards Committee H7 Object Information Management, now part of NCITS T3 Open Distributed Processing, and the Object Management Group BUsiness Object Domain Task Force (BODTF) jointly sponsored the Fifth Annual OOPSLA Workshop on Business Object Component Design and Implementation. The focus of the workshop was on design and implementation of business object component frameworks and architectures. Key aspects discussed included: * What is a comprehensive definition of a business object component'? * Are the four layers (user, workspace, enterprise, resource) presented at the OOPSLA'98 workshop the right way to layer a..bysiness object component. system? * How is a business object component implemented across these layers? What are the associated artefacts? Are there different object models representing the same business object component in different layers? * What are the dependencies between business object components? How can they be plug and play given these dependencies? How can they be flexible and adaptive? How do they participate in workflow systems? * How will the em~rgence of a web-based distributed object-computing infrastructure based on XML, influence business object component architectures? In particular, is the W3C WebBroker proposal appropriate for distributed business object component computing? The aim of the workshop was to: * Enhance the pattern literature on the specification, design, and implementation of interoperable, plug and play, distributed business object components.

This monograph-like state-of-the-art survey presents the history, the key ideas, the success stories, and future challenges of performance evaluation and demonstrates the impact of performance evaluation on a variety of different areas through case studies in a coherent and comprehensive way. Leading researchers in the field have contributed 19 cross-reviewed topical chapters competently covering the whole range of performance evaluation, from theoretical and methodological issues to applications in numerous other fields. Additionally, the book contains one contribution on the role of performance evaluation in industry and personal accounts of four pioneering researchers describing the genesis of breakthrough results.The book will become a valuable source of reference and indispensable reading for anybody active or interested in performance evaluation.

This book constitutes the thoroughly refereed post-proceedings of the International Workshop on Software Architectures for Product Families IW-SAPF-3, held in Las Palmas de Gran Canaria, Spain in March 2000. The 24 revised full papers presented together with an introduction and two surveys were carefully reviewed and selected for inclusion in the book. The papers are organized in topical sections on product family practice, business, product family concepts, product family methods, evolution, and product family techniques.

Crypto '99, the Nineteenth Annual Crypto Conference, was sponsored by the International Association for Cryptologic Research (IACR), in cooperation with the IEEE Computer Society Technical Committee on Security and Privacy and the Computer Science Department, University of California, Santa Barbara (UCSB). The General Chair, Donald Beaver, was responsible for local organization and registration. The Program Committee considered 167 papers and selected 38 for presentation. This year's conference program also included two invited lectures. I was pleased to include in the program UeliM aurer's presentation "Information Theoretic Cryptography" and Martin Hellman's presentation "The Evolution of Public Key Cryptography." The program also incorporated the traditional Rump Session for informal short presentations of new results, run by Stuart Haber. These proceedings include the revised versions of the 38 papers accepted by the Program Committee. These papers were selected from all the submissions to the conference based on originality, quality, and relevance to the field of cryptology. Revisions were not checked, and the authors bear full responsibility for the contents of their papers.

Vulnerability management (VM) has been around for millennia. Cities, tribes, nations, and corporations have all employed its principles. The operational and engineering successes of any organization depend on the ability to identify and remediate a vulnerability that a would-be attacker might seek to exploit. What were once small communities became castles. Cities had fortifications and advanced warning systems. All such measures were the result of a group recognizing their vulnerabilities and addressing them in different ways. Today, we identify vulnerabilities in our software systems, infrastructure, and enterprise strategies. Those vulnerabilities are addressed through various and often creative means. Vulnerability Management demonstrates a proactive approach to the discipline. Illustrated with examples drawn from Park Foreman's more than three decades of multinational experience, the book demonstrates how much easier it is to manage potential weaknesses than to clean up after a violation. Covering the diverse realms that CISOs need to know and the specifics applicable to singular areas of departmental responsibility, he provides both the strategic vision and action steps needed to prevent the exploitation of IT security gaps, especially those that are inherent in a larger organization. Completely updated, the second edition provides a fundamental understanding of technology risks-including a new chapter on cloud vulnerabilities and risk management-from an interloper's perspective. This book is a guide for security practitioners, security or network engineers, security officers, and CIOs seeking understanding of VM and its role in the organization. To serve various audiences, it covers significant areas of VM. Chapters on technology provide executives with a high-level perspective of what is involved. Other chapters on process and strategy, although serving the executive well, provide engineers and security managers with perspective on the role of VM technology and processes in the success of the enterprise.

This book constitutes the refereed proceedings of the Second International Symposium on High-Performance Computing, ISHPC'99, held in Kyoto, Japan in May 1999.
The 23 revised full papers presented were carefully selected from a total of 61 submissions. Also included are the abstracts of several invited talks and 12 reviewed short papers corresponding to the poster presentations given at the symposium. The papers address many current issues in high-performance computing and communication, regarding hardware and network architectures as well as regarding software and theoretical foundations; also advanced applications are studied in a variety of fields including modeling, visualisation, and computational science.

TheaimoftheARTS 99workshopistobringtogetherresearchersandpr- titioners interested in the design of real-time and probabilistic systems. It is intendedtocoverthewholespectrumofdevelopmentandapplicationofspec- cation, veri cation, analysisandconstructiontechniquesforreal-timeandpro- bilisticsystems. BeingaworkshopundertheumbrellaoftheAMASTmovement (AlgebraicMethodologyAndSoftwareTechnology), ARTSisintendedtoprovide aforumforthepresentationofapproachesthatarebasedonaclearmathema- calbasis. Aspectsofreal-timeandprobabilisticsystemsfortheworkshopinclude (butarenotlimitedto): compositionalconstructionandveri cationtechniques, automaticandmachine-supportedveri cation, casestudies, formalmethodsfor performanceanalysis, semantics, algorithmsandtools, andhybridsystems. ARTS 99wasorganisedbytheLehrstuhlfur ] Informatik7attheUniversity ofErlangen-Nurn ] bergandtookplaceattheSt]adtlicheVolkshochschuleinB- berg(Oberfranken), GermanyfromMay26{28,1999. PreviouseditionsofARTS workshopswereorganizedbytheUniversityofIowa, USA(1993), Universityof Bordeaux, France(1995), BrighamYoungUniversity, USA(1996), andGeneral SystemsDevelopment, Mallorca, Spain(1997). Previousproceedingsappeared asLNCS1231orasbooksintheAMASTSeriesofComputing. TheProgramCommitteeselected17papersfromatotalof33submissions. Each submitted paper was sent to three Program Committee members, who wereoftenassistedbysub-referees. Duringaone-weekdiscussionviae-mail, the ProgramCommitteehasmadetheselectionofthepapersonthebasisofthe reviews. Thisvolumecontainsthe17selectedpapersplus3invitedpapers(in eitherfullorabstractform). IwouldliketothanktheProgramCommitteemembersandthesub-referees fortheire orts. Ialsoliketothanktheinvitedspeakersforgivingatalkatthe workshopandfortheircontributiontotheproceedings. SpecialthankstoUlrich Herzog, ChrisMoog, TeodorRus, DiegoLatellaandRuthAbraham(Springer- Verlag)fortheirsupport. Withouttheirhelp, thiseventwouldnothavebeen possible. March1999 Joost-PieterKatoen ProgramChair ARTS 99 Invited Speakers Bengt Jonsson (Uppsala University, Sweden) Frits W. Vaandrager(University of Nijmegen, The Netherlands) Moshe Y. Vardi (Rice University, USA) Steering Committee Manfred Broy (Technical University of Munich, Germany) Edmund Clarke (Carnegie Mellon University, USA) Ulrich Herzog (University of Erlangen-Nu ]rnberg, Germany) Zohar Manna (Stanford University, USA) Maurice Nivat (University of Paris 6, France) Amir Pnueli (Weizmann Institute of Science, Israel) Teodor Rus (Chair, University of Iowa, USA) ProgramCommittee Rajeev Alur (University of Pennsylvania, USA) Jos Baeten (Eindhoven University of Technology, The Netherlands) Christel Baier (University of Mannheim, Germany) Miquel Bertran (University of Ramon Llull, Spain) Antonio Cerone (University of South Australia, Australia) Rance Cleaveland (SUNY at Stony Brook, USA) Jim Davies (Oxford University, UK) Colin Fidge (University of Queensland, Australia) David de Frutos (University of Madrid, Spain) Hubert Garavel (INRIA Rhone-Alpes, France) Constance Heitmeyer (Naval Research Laboratory, USA) Tom Henzinger (University of Berkeley, USA) Jane Hillston (University of Edinburgh, UK) Joost-Pieter Katoen (University of Erlangen-Nu ]rnberg, Germany, Chair) Rom Langerak (University of Twente, The Netherla

The 2nd International Conference on Product Focused Software Process - provement(PROFES2000)continuedthesuccessofthePROFES'99conference. It was organized in Oulu, Finland, June 20-22, 2000. The PROFES conference has its roots in the PROFES Esprit project (http: //www.ele.vtt.?/profes/), but by 1999 it had already evolved into a full-?edged general purpose conference gaining wide-spread international popularity. ThemainthemeofPROFES2000wasprofessionalsoftwareprocessimpro- ment (SPI) motivated by product and service quality needs. SPI is facilitated by softwareprocessassessment, softwaremeasurement, processmodeling, andte- nology transfer and has become a practical tool for quality software engineering and management. The conference addresses both the solutions found in practice aswellasrelevantresearchresultsfromacademia.Thepurposeoftheconference is to bring into the light the most recent ?ndings and results of the area and to stimulate discussion between the researchers, experienced professionals, and technology providers for SPI. WiththetremendousgrowthofInternetandtelecommunicationapplications, it is ever more important to emphasize the quality in softwareproducts and p- cesses.With plenty of new people andnew software-basedapplications emerging at a very fast pace, it is easy to forget the importance of product and process improvement, and to repeat the same mistakesalreadymade in moretraditional software development. The PROFES conference has addressed this issue by - plicitly enhancing the conferencetopicstowardsInternetandtelecommunication applications. Another important addition is the Learning Software Organizations (LSO2000) workshop, which was organized in conjunction with PROFES 2000. TheLSOworkshopseriesisacommunicationforumthataddressesthe questions of organizational learning from a software point of view and builds upon exi- ing work on knowledge management and organizational learning. LSO comp- mented the PROFES program encouraging fruitful discussions and information exchange between the participants of PROFES 2000 and LSO 2000.

This volume contains revisedversions of selected papers presented at the Fourth Australian Workshop on Distributed Arti?cial Intelligence (DAK 91), together with a set of invited papers. Each paper has been reviewed by at least two program committee members. The workshop was held in Brisbane, Queensland, Australia on July 17,1992. The goalof the workshopwas to promoteresearchin distributed arti?cial intelligence and multi-agent systems, both nationally and internationally. Thepapers covera widerangeofissuesin the?eldof distributed arti?cial intelligence and multi-agent systems, such as theories, languages, and applications. Manypeoplecontributedtothesuccessofthis workshop. Wewouldliketothank all the authors who submitted papers to the workshop. Many thanks also to the members of the programme committee who diligently reviewed all the papers submitted. Finally, we thank the editorial sta? of Springer-Verlag for publishing this contribution to the Lecture Notes in Arti?cial Intelligence series. October 1998 Chengqi Zhang and Dickson Lukose Programme Committee Chengqi Zhang (Co-Chair) University of New England, Australia Dickson Lukose (Co-Chair) Brightware Inc., USA Victor Lesser University of Massachusetts, USA Je?rey S. Rosenschein Hebrew University, Israel Toshiharu Sugawara NTT Basic Research Labs, Japan Rose Dieng ACACIA Project, INRIA, France Norbert Glaser CRIN-INRIA Lorraine, France Sascha Ossowski Rey Juan Carlos Univ, Spain Michael Luck University of Warwick, UK Mark d Inverno University of Westminster, UK Tim Norman University of London, UK Douglas Norrie University of Calgary, Canada Bernard Moulin Laval University, Canada Zhisheng Huang University of London, UK Minjie Zhang Edith Cowan University, Australia Brahim Chaib-draa Laval University, Canada Table of Contents TeamFormationbySelf-InterestedMobileAgents . . . . . . . . . . . . . . . . . . . . . . . . . ."

Human Error and System Design and Management contains a collection of contributions presented at an international workshop with the same name held from March 24-26, 1999 at the Technical University of Clausthal, Germany. The purpose of this workshop was to discuss the results of a research project investigating the "Influences of Human-Machine-Interfaces on the Error-proneness of Operator Interaction with Technical Systems" in a broad context. Therefore experts from academia and industry were invited to participate so that practical as well as theoretical aspects of the subject matter were covered. Topics included recent considerations concerning multimedia and ecological interfaces as well as situation awareness.
This book contains the current thinking on this discussion and can be regarded as a supplement to engineers and researchers who are active in the area of human machine interfaces.

This is a book about IT in organizations how it works, how it changes organization and the problems and challenges it creates. Based on detailed research in several sectors (financial services, hospitals etc.) the authors present an up to date analysis of current issues. The book is divided into three main sections: Strategies and Markets; Integrating Technology and Organization; and Networks.

This book constitutes the refereed proceedings of the Second East European Symposium on Advances in Databases and Information systems, ADBIS '98, held in Poznan, Poland in September 1998.
The 25 revised full papers presented were selected from a total of 90 submissions and six extended abstracts within a special section. "East meets West." The papers are organized in topical sections on query languges, optimization, collaborative systems, schema integration, storage and version management, object systems, knowledge discovery and the Web, and systems design.

This book explores a broad cross section of research and actual case studies to draw out new insights that may be used to build a benchmark for IT security professionals. This research takes a deeper dive beneath the surface of the analysis to uncover novel ways to mitigate data security vulnerabilities, connect the dots and identify patterns in the data on breaches. This analysis will assist security professionals not only in benchmarking their risk management programs but also in identifying forward looking security measures to narrow the path of future vulnerabilities.

This book constitutes the refereed proceedings of the 8th International Symposium on System Configuration Management, SCM-8, held in conjunction with ECOOP'98 in Brussels, Belgium, in July 1998.
The volume presents 17 revised full papers carefully reviewed and selected for presentation; also included is a tutorial lecture; approximately half of the papers come from industry. The book is divided into sections on industrial experience, experimental systems, product data management and system configuration management, formal approaches, cooperative systems, and Web-based applications.

The idea of creating the European Dependable Computing Conference (EDCC) was born at the moment when the Iron Curtain fell. A group of enthusiasts, who were pre viously involved in research and teaching in the ?eld of fault tolerant computing in different European countries, agreed that there is no longer any point in keeping pre viously independent activities apart and created a steering committee which took the responsibility for preparing the EDCC calendar and appointing the chairs for the in dividual conferences. There is no single European or global professional organization that took over the responsibility for this conference, but there are three national in terest groups that sent delegates to the steering committee and support its activities, especially by promoting the conference materials. As can be seen from these materi als, they are the SEE Working Group "Dependable Computing" (which is a successor organizationof AFCET)in France, theGI/ITG/GMATechnicalCommitteeonDepend ability and Fault Tolerance in Germany, and the AICA Working Group "Dependability of Computer Systems" in Italy. In addition, committees of several global professional organizations, such as IEEE and IFIP, support this conference. Prague has been selected as a conference venue for several reasons. It is an easily accessible location that may attract many visitors by its beauty and that has a tradition in organizing international events of this kind (one of the last FTSD conferences took place here).

This workshop series is now over ten years old, which is a pretty long time for a very focussed topic: Configuration Management. The first conference took place in 1988 (Grassau, Germany) and the topics were focussed on version control and rebuilding. Many people consider that SCM is one of the few areas of software engineering that can be considered to be really successful. Products, that more or less fulfill their p- pose, exist, and everybody agrees that they are now mandatory for a successful so- ware project. Indeed, during the second half of the nineties, SCM has entered a maturation phase, in which good commercial products have been incorporating many of the features - signed and discussed at previous conferences of this workshop. With the generali- tion of commercial products, the question now is: What are the objectives of a sci- tific workshop on this topic? Is there any more research to be done in SCM today? This ninth volume in the series reflects pretty well the current state and mood in the CM community. There are an unprecedented number of papers discussing the current state of the art and trying to identify research directions (session 6). On some core topics, like versioning (session 3), and following SCM8 tracks, papers present work on unified models. Versioning models, after years of raging discussions, now seem to have found a consensus.

Many antiquated or legacy systems are still in operation today because they are critical to the organizations continued operations or are prohibitively expensive to replace. This book guides practitioners in managing the process of legacy system evolution. The author introduces a comprehensive method for managing a software evolution project, from its conception to the deployment of the resulting system. The book helps managers answer two critical decisions: What is the best way to evolve a particular legacy system? and How can the legacy system be migrated to a selected target architecture?

This book constitutes the refereed proceedings of the Second Australasian Conference on Information Security and Privacy, ACISP'97, held in Sydney, NSW, Australia, in July 1997.
The 20 revised full papers presented were carefully selected for inclusion in the proceedings. The book is divided into sections on security models and access control, network security, secure hardware and implementation issues, cryptographic functions and ciphers, authentication codes and secret sharing systems, cryptanalysis, key escrow, security protocols and key management, and applications.

This book constitutes the refereed proceedings of the 9th International Conference on Advanced Information Systems Engineering, CAiSE'97, held in Barcelona, Spain, in June 1997. The volume presents 30 revised full papers selected from a total of 112 submissions; also included is one invited contribution. The book is divided into topical sections on requirements engineering; information systems design; methods, environments, and tools; distributed information systems; and workflow systems.

This book constitutes the refereed proceedings of the 9th International Conference on Modeling Techniques and Tools for Computer Performance Evaluation, held in St. Malo, France, in June 1997.
The volume presents 17 revised full papers carefully selected by the program committee for the proceedings; also included is an extended abstract of an invited talk. The collection of papers presented represents state-of-the-art work in computer performance evaluation. Among the issues addressed are fully distributed systems, statistical multiplexing for high-speed networks, and implications of the concept of dependability.