Papers by Dr.Parvez Mahmood Khan
Sustaining IT PMOs during Cycles of Global Recession

Estimation is one of the most critical areas in software project management life cycle, which is ... more Estimation is one of the most critical areas in software project management life cycle, which is still evolving and less matured as compared to many other industries like construction, manufacturing etc. Originally the word estimation, in the context of software projects use to refer to cost and duration estimates only with software-size almost always assumed to be a fixed input. Continued legacy of bad estimates has compelled researchers, practitioners and business organizations to draw their attention towards another dimension of the problem and seriously validate an additional componentsize estimation. Recent studies have shown that size is the principal determinant of cost, and therefore an accurate size estimate is crucial to good cost estimation[10]. Improving the accuracy of size estimates is, therefore, instrumental in improving the accuracy of cost and schedule estimates. Moreover, software size and cost estimates have the highest utility at the time of project inception-when most important decisions (e.g. budget allocation, personnel allocation, etc). are taken. The dilemma, however, is that only highlevel requirements for a project are available at this stage. Leveraging this high-level information to produce an accurate estimate of software size is an extremely challenging and high risk task. This study acknowledges the presence and effect of risk in any software estimate and offers pragmatic strategies for risk mitigation.

Cryptanalysis of Image Encryption Algorithm Based on Fractional-Order Lorenz-Like Chaotic System
Advances in Intelligent Systems and Computing, 2015
This paper provides break of an image encryption algorithm suggested by Xu et al. recently in [Co... more This paper provides break of an image encryption algorithm suggested by Xu et al. recently in [Commun Nonlinear Sci Numer Simulat 19 (10) 3735–3744 2014]. The authors realized a Laplace transformation based synchronization between two fractional-order chaotic systems to execute error-free encryption and decryption of digital images. The statistical analyses show the consistent encryption strength of Xu et al. algorithm. However, a careful probe of their algorithm uncovers underlying security shortcomings which make it vulnerable to cryptanalysis. In this paper, we analyze its security and proposed chosen plaintext-attack/known plaintext-attack to break the algorithm completely. It is shown that the plain-image can be successfully recovered without knowing secret key. The simulation of proposed cryptanalysis evidences that Xu et al. algorithm is not secure enough for practical utilization.

2013 Third International Conference on Advanced Computing and Communication Technologies (ACCT), 2013
Software Development Projects can vary considerably in difficulty, size and type. This has led to... more Software Development Projects can vary considerably in difficulty, size and type. This has led to evolution and development of many associated project management methodologies and standard SDLC-Models. This paper acknowledges the risks associated with wrong selection of SDLC-models on business critical software projects and offers a pragmatic solution by proposing a handy selection matrix for choosing best-fit SDLC models on different types of Software Development Projects, covering both traditional and agile methodologies. This paper is the result of an study carried out to evaluate the methods & practices of Project Life Cycle Model Selection actually used and practiced on the projects selected for this study (from businesses and IT-industry in India), with overall objective of proposing better methods and prescriptive guidance for decision making process for right selection of SDLC-Model on business critical software development projects. Right selection of SDLC-Methodology using a decision support tool can and will help successful completion of business critical software development projects and realization of business objectives for which the projects were undertaken.

International Journal of Soft Computing and Software Engineering, 2012
It is well known fact that was phrased by famous quality scholar P.B. Crosby that "it is always c... more It is well known fact that was phrased by famous quality scholar P.B. Crosby that "it is always cheaper to do the job right the first time". However, this statement must be reconsidered with respect to software development projects, because the concept of quality and associated costs measurements in software engineering discipline is not as matured as in manufacturing and other fields of the industry. Post delivery defects (i.e. software bugs) are very common and integral part of software industry. While the process of measuring and classifying quality cost components is visible, obvious and institutionalized in manufacturing industry, it is still evolving in software industry. In addition to this, the recommendations of British standard BS-6143-2:1990 for classifying quality-related costs into prevention costs, appraisal costs, and failure costs have been successfully adopted by many industries, by identifying the activities carried out within each of these categories, and measuring the costs connected with them, software industry has a long-way to go to have the same level of adoption and institutionalization of cost of quality measurements and visibility. Cost of Quality for software isn't the price of creating a quality software product or IT-service. It's actually the cost of NOT creating a quality software product or IT-service. The chronic affliction of majority of software development projects that are frequently found bleeding with cost overruns, schedule slippage, scope creep and poor quality of deliverables in the global IT industry, was the trigger for this research work. The idea was to examine a good number of SDLC-projects (proper mix of successful projects as well as failed projects) from multiple organizations end-to-end (i.e. from project-inception to project-closure) and empirically assess the quality management approach -focusing on how the quality was planned on these project(s), what specific software quality assurance and software quality control measured were employed on the projects under study and it's possible impact on overall project success and achievement of business objectives. Lessons learnt from this study offer valuable prescriptive guidance for small and medium software businesses, who can benefit from this study by applying the same for their quality improvement initiatives using CoQ-metric, to enhance the capability and maturity of their SDLC-project performance.
Cloud computing delivers computing resources as services rather than products over a network. As ... more Cloud computing delivers computing resources as services rather than products over a network. As an emerging trend, it is quite necessary to evaluate working performances and security issues that cloud computing deals with. This paper is a review of existing results on modeling and simulation technology which are powerful tools to deal with security issues [32]. Reiteriating the basic concepts and security issues that cloud computing confronts and thereby, reviewing the currently available modeling and simulation technology. Furthermore, elucidating the two types of existing cloud computing simulators, i.e, Simulators based on software and next, simulators based on both software and hardware. Recapitulating with the comparision of existing cloud computing simulators.
Uploads
Papers by Dr.Parvez Mahmood Khan