Thursday, February 28, 2008

To start

I wish to be a scientist, though due to the nature of things I am working on I will never be eligible to win a Nobel Prize, I still want to be a scientist. The ironic point is that my field of study, Software Engineering, seems to be useful to very limited group of people in the world: software companies, programmers, and software developers. I won’t cure any disease, I won’t discover a new planet in the corner of the universe, and I won’t even build a new machine or technology.

So, as my little tiny PhD studies move on, I am discovering that there is no revolution left. I sometimes feel I am sitting on a sofa, or at most behind a monitor, and I am making theories about how softwares, specially the secure ones, are being developed, and why they fail, and what we should do or not to do to prevent the failure.

I am not a security expert, but I am interested in developing secure software systems. Even more general, I am interested in general system security, and in particular case of Software Engineering, which is the area I am doing a PhD in, I am interested in security requirements, attack modeling, vulnerability analysis, countermeasure analysis, trade-offs among security and other goals such as privacy and usability.

I have crazy ideas to start a revolution in secure software engineering, and I have little tiny ideas to move the discipline an epsilon ahead. This Blog is where I am going to talk about them, since my PhD thesis does not have enough space for all that crap.


Boyd said...


The most rigorous part of the dissertation includes the

Methods Section
Study Design
Research questions and hypothesis formulation
Development of instrumentation
Describing the independent and dependent variables
Writing the data analysis plan
Performing a Power Analysis to justify the sample size and writing about it

Results Section
Performing the Data Analysis
Understanding the analysis results
Reporting the results.
When you enter this phase of the program, you are nearing the end of the journey. Given the difficulty of this phase, one often wishes they had previewed what was to come.
Many Ph.D candidates seem to hit a brick wall and feel disarmed when called upon to work on the methods and results section of their dissertation.
This is the point where many students diligently search for help calling on their advisor, peers, university assistance and even Google.
This is also the time when the student asks themselves the question" HOW MUCH HELP IS TOO MUCH".
Surely no one will deny that having your dissertation written for you is very wrong.

On the other hand, it is not unusual for doctoral students to get help on specific aspects of their dissertation.(e.g. APA formatting and editing) It also is not unusual for advisors to encourage students to seek outside help.

If you are a distance learning student it is almost essential you seek outside assistance for the methods and results section of your dissertation. The very nature of distance learning suggest the need for not only outside help but help from someone gifted in explaining highly technical concepts in understandable language by telephone and e-mail.

Distance learning, and the availability of programs, has increased exponentially over the last few years with some of the most respected institutions (Columbia University, Engineering; Boston University and others) offering a Ph.D in a variety of fields. If you are enrolled in a distance learning program, or considering one, you will be interested in reviewing the reference sites listed at the bottom of this page.

As stated above, many students hit their dissertation "brick wall" when they encounter the statistics section. Frequently, a student will struggle for months with that section before they seek a consultant to help them. This often leads to additional tuition costs and missed graduation dates.

If I were to name a single reason why a PhD candidate gets off track in their program it is the statistics and their fear of statistics.

So, the question is whether or not it is ethical to get help at all. If so, how much help is too much.

I don't know if there has ever been a survey of dissertation committee members who were asked this question, however, I know many advisors take the following position when they suggest or approve outside help:

To a large extent the process is self controlling. If the student relies too much on a consultant, the product may look good, however, the student will be unable to defend his/her dissertation.

It takes a committed effort on the part of the student and the consultant (resulting in a collaborative/teaching exchange) to have the student responsible for the data and thoroughly understand the statistics. The day the student walks in front of the committee to defend, there should be no question as to his/her understanding of statistics.

When their defense is successful, the question of "was the help too much" is answered.

If you are a Ph.D candidate and would like additional information, you may email me at:


Reference sites:

gvwilson said...

There are still plenty of revolutions left... you just have to find 'em ;-)