Informática e Sistemas de Informação | Artigos em revistas internacionais / Papers in international journals
Permanent URI for this collection
Browse
Recent Submissions
- Framework for adaptive serious gamesPublication . Pistono, Alvaro Marcos Antonio de Araujo; Santos, Arnaldo; Baptista, Ricardo José Vieira; São Mamede, HenriqueProfessional training presents a significant challenge for organizations, particularly in captivating and engaging employees in these learning initiatives. With the ever‐evolving landscape of workplace education, various learning modes have emerged within organizations, and e‐learning stands out as a prominent choice. This increasingly cost‐effective and adaptable solution has revolutionized training by facilitating numerous learning activities, including the seamless integration of educational games driven by cutting‐edge technologies. However, incorporating serious games into educational and professional settings introduces its own set of challenges, particularly in quantifying their tangible impact on learning and assessing their adaptability across diverse contexts. Organizations require a consistent framework to guide best practices in implementing e‐learning combined with serious games in professional training. The primary objective of this research is to bridge this gap. Rooted in the methodology of Design Science Research, it aims to provide a comprehensive framework for creating and assessing adaptive serious games that achieve desired learning and engagement outcomes. The overarching goal is to enhance the teaching–learning process in professional training, ultimately elevating student engagement and boosting learning outcomes to new heights. The proposal is grounded in a review of literature, expert insights, and user experiences with Serious Games in professional training, considering learning outcomes and forms of adaptation as essential characteristics for developing or evaluating Serious Games. The result is a framework designed to guide learners toward improved learning outcomes and increased engagement. The proposal underwent evaluation through triangulation, involving focus groups and expert interviews. Additionally, it was utilized in the development and assessment of a Serious Game, offering new insights and application suggestions. This experiment provided an evaluation of the framework based on real courses. In summary, this investigation contributes to the development of evidence‐based approaches for the effective use of Serious Games in professional training.
- Common techniques, success attack factors and obstacles to social engineering: a systematic literature reviewPublication . Lopes, António; São Mamede, Henrique; Reis, Leonilde; Santos, ArnaldoKnowledge of Social Engineering is crucial to prevent potential attacks related to organizational Information Security. The objective of this paper aims to identify the most common social engineering techniques, success attack factors, and obstacles, as well as the good practices and frameworks that could be adopted concerning their mitigation. As an analysis methodology, a Systematic Literature Review was carried out. The findings revealed that the discussion about SE attacks has increased and that the most imminent threat is phishing. Exploiting human vulnerabilities is a growing threat when the attack is not carried out directly through technical means. There continue to be more technical attacks than non-technical attacks. Encouraging organizational security prevention, like training, education, technical controls, process development, defense in detail, and the development of security policies, should be considered mitigating factors for the negative impact of SE attacks. Most SE frameworks/models are focused on attack techniques and methods, mostly on technical components, decorating human factor. As a novelty, we found the opportunity to develop a new framework that could improve coverage of the gaps found, supported on security international standards, that could help and support researchers in developing their work, understanding open research topics, and providing a clearer understanding of this type of threat.
- Strengthening the resilience and perseverance of rural accommodation enterprises in the iberian depopulated areas through enterprise architecturePublication . Silveira, Rodolfo Anes; São Mamede, HenriqueThe research objective of this work is to develop and evaluate an enterprise architecture for rural accommodation in the Iberian Peninsula that responds to the demand of the remote labor market. Through an extensive literature review and the application of ArchiMate modeling, this study focuses on providing an enterprise architecture that promotes business resilience and environmental sustainability and boosts the local economy. The proposed enterprise architecture is remotely evaluated by experts, highlighting potential benefits, challenges, and areas for improvement. The results show that the proposed enterprise architecture has the potential to improve the long-term success of rural lodging businesses, enhance the customer experience, promote sustainability, and contribute to economic growth in rural areas through value exchange among stakeholders. The ArchiMate model provides a holistic perspective on stakeholder interactions and interoperability across all functional business areas: Customer Service, Product Management, Omnichannel Commerce, Human Resources, Business Strategy, Marketing, and Sustainability Management. The idea is to empower rural lodging businesses to create a better customer experience, achieve energy and environmental efficiency, contribute to local development, respond quickly to regulatory changes and compliance, and develop new revenue streams. The main goal is to improve offers, mitigate seasonal effects, and reverse the continuous cycle of decline in areas with low population density. Therefore, this ArchiMate modeling can be the initial basis for the digitization or expansion of the rural lodging industry in other geographies.
- Adopting ISO 20022: opportunities, challenges, and success factors for corporations in payment processingPublication . Constantino, João; São Mamede, Henrique; Silva, Miguel Mira daThis research explores the adoption of ISO 20022, a standard that corporations can leverage to instruct payments to their partner financial institutions. Due to the complexity and case-specific variables involved, the adoption process may be complex and require significant effort from financial institutions and customers over an extended period. This research analyzes the opportunities and challenges for corporate users posed by ISO 20022 and identifies the success factors that must be considered during the adoption process. The research key findings indicate that an implementation approach incorporating flexibility, custom extensions, the use of a markup language for creating and managing messages, pilot testing, and user feedback can be an effective adoption model for ISO 20022. Design Science Research Methodology is employed in designing, building, and evaluating a solution proposal to develop a structured, customized, and flexible solution complying with the ever-changing requirements and landscape. This research contributes to the payment processing field by providing a comprehensive adoption model for ISO 20022 that considers critical factors and challenges. The proposed customized and flexible solution can assist corporations in successfully adopting ISO 20022 and contribute to creating a common language and model for payment data worldwide. The initiative's success depends on the effective adoption by all players, including corporations.
- The relationship between digital transformation and digital literacy - an explanatory model: systematic literature reviewPublication . Arnaud, José; São Mamede, Henrique; Branco, FredericoDigital transformation has been one of the main trends in organizations in recent years, and digital literacy is a critical factor in the success of this transformation. Digital transformation involves the use of digital technologies to improve an organization’s processes, products, and services. For this transformation to be successful, it is necessary for employees to have knowledge of and skills in digital technologies. Digital literacy allows employees to understand technologies and their applications, know how to use them efficiently and safely, evaluate and select the most appropriate digital tools for each task, and be prepared to deal with problems and challenges that arise in the digital environment. Thus, this study is relevant because it seeks to understand how digital literacy can impact Digital Transformation in organizations and, through the construction of an explanatory model, allows the identification of variables that influence this relationship by developing strategies to improve the digital literacy of employees in organizations.
- Factors affecting cloud computing adoption in the education context: systematic literature reviewPublication . Santos, António; Martins, José; Gonçalves, Ramiro; São Mamede, Henrique; Branco, Frederico; Pestana, Pedro Duarte; Martins, JoséThis systematic literature review investigates the factors influencing cloud computing adoption within both educational and organizational settings. By synthesizing a comprehensive body of research, this study finds and analyzes the determinants that shape the decision-making process about cloud technology adoption. Security, cost-effectiveness, scalability, interoperability, and regulatory compliance are examined across educational institutions and organizational contexts. Additionally, socio-economic, political, and technological factors specific to each context are explored to provide a nuanced understanding of the challenges and opportunities associated with cloud computing adoption. The review reveals commonalities and differences in adoption drivers and barriers between education and organizational environments, offering insights into tailored strategies for effective implementation. This research contributes to the existing literature by shedding light on the multifaceted nature of cloud adoption and offering valuable guidance for educators, organizational leaders, policymakers, and technology providers looking to use cloud computing to enhance operations and services.
- Mobile device forensics framework: a toolbox to support and enhance this processPublication . Bruno M. V. Bernardo; São Mamede, Henrique; Santos, Vítor M. P. D. dos; Barroso, João M. P.Cybercrime is growing rapidly, and it is increasingly important to use advanced tools to combat it and support investigations. One of the battlefronts is the forensic investigation of mobile devices to analyze their misuse and recover information. Mobile devices present numerous challenges, including a rapidly changing environment, increasing diversity, and integration with the cloud/IoT. Therefore, it is essential to have a secure and reliable toolbox that allows an investigator to thwart, discover, and solve all problems related to mobile forensics while deciphering investigations, whether criminal, civil, corporate, or other. In this work, we propose an original and innovative instantiation of a structure in a forensic toolbox for mobile devices, corresponding to a set of different applications, methods, and best practice information aimed at improving and perfecting the investigative process of a digital investigator. To ensure scientific support for the construction of the toolbox, the Design Science Research (DSR) methodology was applied, which seeks to create new and unique artifacts, drawing on the strength and knowledge of science and context. The toolbox will help the forensic investigator overcome some of the challenges related to mobile devices, namely the lack of guidance, documentation, knowledge, and the ability to keep up with the fast-paced environment that characterizes the mobile industry and market.
- A lightweight ontology for enterprise architecture mining of API gateway logsPublication . Pinheiro, Carlos Roberto; Guerreiro, Sérgio Luís P. Duarte; São Mamede, HenriqueEnterprise Architecture (EA) is defined as a set of principles, methods, and models that support the design of organizational structures, expressing the different concerns of a company and its IT landscape, including processes, services, applications, and data. One role of EA management is to automate modeling tasks and maintain up-to-date EA models while reality changes. However, EA modeling still relies primarily on manual methods. Contributing to EA modeling automation, EA Mining is an approach that uses data mining techniques for EA modeling and management. It automatically captures existing information in operational databases to generate architectural models and views. This paper presents an ontology for EA Mining that focuses on generating architectural models from API gateway log files. An ontology defines the concepts and relationships among them to uniquely describe a domain of interest and specify the meaning of the terms. API Gateways are information technology components that serve as a facade between information systems and enterprise business partners. The ontology development methodology followed the SABiO process, whereas the Unified Foundational Ontology provided the foundations of the ontology and OntoUML, the ontology modeling language. An experiment in an e-commerce application scenario was conducted to evaluate the theoretical feasibility and applicability of the ontology. Automatic semantic and syntactic validation tools and semi-structured expert interviews were used to confirm the desired ontology properties. This study aims to contribute to the evolution of the knowledge base of EA Management.
- Business process automation in SMEs: a systematic literature reviewPublication . Moreira, Sílvia; São Mamede, Henrique; Santos, Arnaldo; SantosBusiness Process Automation has been gaining increasing importance in the management of companies and organizations since it reduces the time needed to carry out routine tasks, freeing employees for other, more creative and exciting things. It can be applied in the most varied business areas. Organizations from any sector of activity can also adopt it. Given these benefits, the granted success in transforming business processes would be expected. However, automation initiatives still fail. Adopting this technology can raise social, technological, ethical, methodical, and organizational issues. These facts have triggered the necessity for a summary that could extract more information about how to implement Business Process Automation (BPA), attending to the administrative processes, especially when applied in Small and Medium-sized Enterprises (SMEs). This study aims not only to review the available literature on how to implement BPA but also to typify the processes that can be automated, which technologies or tools exist for making that change, and influence factors in the procedure of BPA. We have covered more than 300 research papers published between 2016 and 2023 in reputable scientific data sources like Scopus, Web of Science/Clarivate, and ScienceDirect/Elsevier. The review revealed some paths for BPA, with some common steps. In addition, some common process characteristics fundamental to automation are exposed, as well as factors that are critical to an organization for successful automation. The results indicate that BPA is an established area in Business Process Management related to technologies/tools like Robotic Process Automation (RPA) or Cognitive-Robotic Process Automation (C-RPA), Workflow Management Systems (WfMS), Enterprise Resource Planning (ERP), and Blockchain. As far as we observed, this Systematic Literature Review(SLR) is a unique study that covers all the environmental variables for applying automation in business processes.
- Data governance & quality management: innovation and breakthroughs across different fieldsPublication . Bernardo, Bruno Miguel Vital; São Mamede, Henrique; Barroso, João Manuel Pereira; Santos, Vítor Manuel Pereira Duarte dosIn today’s rapidly evolving digital landscape, the substantial advance and rapid growth of data presents companies and their operations with a set of opportunities from different sources that can profoundly impact their competitiveness and success. The literature suggests that data can be considered a hidden weapon that fosters decision-making while determining a company’s success in a rapidly changing market. Data are also used to support most organizational activities and decisions. As a result, information, effective data governance, and technology utilization will play a signi cant role in controlling and maximizing the value of enterprises. This article conducts an extensive methodological and systematic review of the data governance discovering its key concepts, frameworks, and maturity assessment models. Our goal is to establish the current baseline of knowledge in this eld while providing differentiated and unique insights, namely by exploring the relationship between data governance, data assurance, and digital forensics. By analyzing the existing literature, we seek to identify critical practices, challenges, and opportunities for improvement within the data governance discipline while providing organizations, practitioners, and scientists with the necessary knowledge and tools to guide them in the practical de nition and application of data governance initiatives.