{"title":"TRANSLATING THE STPA-SEC SECURITY METHOD INTO A MODEL-BASED ENGINEERING APPROACH","authors":"Ehab Silawi, Avi Shaked, Yoram Reich","doi":"10.1002/iis2.13249","DOIUrl":"https://doi.org/10.1002/iis2.13249","url":null,"abstract":"<p>In today's interconnected digital ecosystem, protecting cyber-physical systems is critical. STPA-Sec is a systematic method that allows to analyze system designs and identify vulnerabilities in those designs from the onset and throughout the system lifecycle. In this article, we describe a carefully designed metamodel that accommodates the concepts and steps of the method. We translate key concepts from STPA-Sec into a metamodel, with the intention of facilitating a more structured and disciplined application of STPA-Sec. We demonstrate the advantage of using the metamodel in two case studies. This article offers a step forward in the rigorous application of STPA-Sec.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"1948-1963"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165514","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A System Dynamics Model of Organizational Resilience","authors":"Ivan W. Taylor, Niamat Ullah Ibne Hossain","doi":"10.1002/iis2.13203","DOIUrl":"https://doi.org/10.1002/iis2.13203","url":null,"abstract":"<p>Resilience is the ability to avoid, withstand, and recover from adversity. In this paper, we examine organizational resilience using a case study of an organization that suffers from a series of scandals that lead to problems with its reputation as an inclusive organization, which results in difficulties in recruiting and retaining employees. We suggest some policies involving leadership efforts to change the culture in the organization and thereby restore its reputation. Based on the results of a System Dynamics Model that mixes quantitative and qualitative measures, we find that changing organizational culture is difficult. There can be inertia and long delays before the leadership sees results in improved recruiting and retention statistics.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"1184-1195"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165206","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Modeling Enterprise Software with UAF","authors":"Matthew Hause, Lars-Olof Kihlström","doi":"10.1002/iis2.13280","DOIUrl":"https://doi.org/10.1002/iis2.13280","url":null,"abstract":"<p>Systems and Software Engineers often have an uneasy relationship. The job of the systems engineer is to work with the stakeholders to define a set of requirements that meet their needs. These are then allocated to various solution spaces such as electronic hardware, mechanical, procedural, and software among others. For many systems, the functional requirements are almost exclusively software requirements. Correspondingly, as an increasing amount of project manpower, schedule time, and budget are allocated to software, it becomes increasingly important that systems and software engineers communicate effectively. The Systems Modeling Language (SysML) has helped in this regard in that it can provide executable behavioral models with precise semantics to express software requirements in a model. These models define “What is required” without overly constraining the implementation. In addition, SysML can be used to define performance constraints, required concurrency, hardware memory and processor budgets, interfaces, safety critical requirements, etc. These aspects are essential for software engineers to understand the constraints and limitations of their environment. At the System of Systems (SoS)/Enterprise level, defining software/systems employs a similar pattern, but at a higher level of abstraction. In the Unified Architecture Framework, capabilities are defined for the enterprise, with systems and software allocated to realize the capabilities. In the same way that capabilities depend on one another, the implementing systems and software interact to support each other. In the past, enterprise software would be modeled as residing in mainframes in a federated software pattern. Modern software can be modeled throughout the enterprise in a distributed network that can adapt to the changing needs of the enterprise to do load leveling, dynamic and late binding, reconfiguration, and reallocation of hardware resources as necessary. If the domain includes the Industrial Internet of Things (IIOT), then deployment could include edge devices, embedded software, Programmable Logic Controllers (PLC), PCs, servers, cloud computing, and of course mainframes. The Object management Group (OMG) Data Distribution Services (DDS) standard enables these capabilities across these devices in a universal format implemented by multiple vendors. However, before this complex system of systems can be implemented, it must first be architected and designed to ensure that it will be fit for purpose both now and as the complex system of systems expands and evolves. This paper will examine the aspects of modeling software in the UAF, and how it can help guide enterprise and system and software architecture.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"2452-2475"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165273","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Jounes-Alexander Gross, Katharina Polanec, Dominik Vereno, Christoph Binder, Christian Neureiter
{"title":"Addressing Cross-Domain Interoperability between Automotive and Smart Grid Architecture Models","authors":"Jounes-Alexander Gross, Katharina Polanec, Dominik Vereno, Christoph Binder, Christian Neureiter","doi":"10.1002/iis2.13263","DOIUrl":"https://doi.org/10.1002/iis2.13263","url":null,"abstract":"<p>The rapid advancement and diversification of technical domains, particularly in automotive and smart grid sectors, are pivotal in driving the emerging energy revolution. This evolution is instrumental in governing the future of smart cities, characterized by escalating complexity and diversity within these domains. Such a landscape necessitates seamless collaboration among various domain experts, a task often complicated by the prevalent use of domain-specific languages and tools tailored to specific engineering needs. This poses a significant challenge towards cross-domain interoperability.</p><p>Addressing this challenge, our research introduces a novel approach leveraging abstraction layers inspired by the Software Platform Embedded Systems (SPES) methodology. This approach aims to enhance the compatibility of domain-specific frameworks, with a focus on the Smart Grid Architecture Model (SGAM) and the Automotive Reference Architecture Model (ARAM). By applying these SPES-inspired abstraction layers, our work facilitates the reconciliation of varying levels of detail across different domains.</p><p>The paper culminates in a proof of concept that demonstrates the practical implementation of this approach, showcasing a method to achieve effective cross-domain interoperability. This implementation not only underscores the feasibility of our proposed solution but also illuminates a pathway for managing the intricate interplay of systems in the rapidly evolving landscape of smart cities.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"2186-2201"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165422","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Early Validation using Architectural Overviews (A3AO) a Case Study in an IoT Consultancy","authors":"Eirik Hidle, Marianne Kjørstad","doi":"10.1002/iis2.13146","DOIUrl":"https://doi.org/10.1002/iis2.13146","url":null,"abstract":"<p>This paper focuses on the use of A3 Architectural Overviews (A3AO) for early validation of stakeholder needs and system concept as part of a tender proposal in an IoT consultancy. Tender proposals are an essential part of communication between most companies working in the engineering field. Often with hightech companies, a technical knowledge gap exists between the different stakeholders reading tender proposals. This knowledge gap increases the risk of miscommunication and wasteful work. A real-life case from an IoT consultancy tendering an IoT concept for a processing facility forms the basis for the research. Applying an action research approach, the researchers tailored the A3AO framework to fit within the consultancy's work flow and developed an A3AO describing the tendered system concept. The customer received and later accepted the tender proposal including the A3AO containing the stakeholders' problems and needs, a concept solution, and a roadmap detailing further work. In this study, we collected data from observations, semi-structured interviews, surveys, and a follow-up questionnaire to the customer. The study found that the A3AO functions as a tool for early validation and that it helped bridge the knowledge gap between the consultancy and customer. The study also raises questions and criticism regarding cost and complexity. The consultancy later decided to implement A3AOs in future proceedings.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"268-286"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165539","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Joe Gregory, Alejandro Salado, Sharon O'Neal, Richardo Larez, CJ Reda, Niko Martell, Evan Martin, Matthew Colson, John Masterson, David Armenta
{"title":"THE DIGITAL ENGINEERING FACTORY: CONSIDERATIONS, CURRENT STATUS, AND LESSONS LEARNED","authors":"Joe Gregory, Alejandro Salado, Sharon O'Neal, Richardo Larez, CJ Reda, Niko Martell, Evan Martin, Matthew Colson, John Masterson, David Armenta","doi":"10.1002/iis2.13186","DOIUrl":"https://doi.org/10.1002/iis2.13186","url":null,"abstract":"<p>In industry, the advancement of digital engineering and the digital thread aims to reduce the impact of knowledge ‘siloes’ by providing a way to integrate data across the entire system lifecycle and across multiple domains. In a typical engineering curriculum, however, courses are still treated as ‘siloes’, and students often do not have the opportunity to experience this industrially relevant approach to engineering. The Digital Engineering Factory (DEF) is a digital engineering environment under development at the University of Arizona to support engineering students. The DEF supports students by providing access to multiple engineering tools and is structured using a ‘hub-and-spoke’ approach to consolidate data from these tools. Through this connected architecture, students can transfer data generated in a particular course to tools for use in other courses. Connecting course activities in this way enables students to experience a complete end-to-end system lifecycle. At its ‘hub’, the DEF uses Violet to integrate data from multiple sources, create a digital thread, and generate a graph representation of the dataset. This knowledge graph, written in the Ontological Modeling Language (OML), can be viewed in OML Rosetta and is structured according to the University of Arizona Ontology Stack (UAOS). The use of the UAOS and OML Rosetta allows instructors to leverage semantic web technologies to support teaching activities such as grading. In this paper, the authors review the objectives of the DEF, discuss the status of the project, and highlight current limitations and lessons learned with regards to its deployment. These may be useful to inform similar developments in industrial settings.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"927-943"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165202","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
YangYang Zhao, Terje Lehn Karlsen, Timothy K. Craig
{"title":"Risk Management in Project Planning for Life Science R&D: An Integration of the NTCP Framework","authors":"YangYang Zhao, Terje Lehn Karlsen, Timothy K. Craig","doi":"10.1002/iis2.13247","DOIUrl":"https://doi.org/10.1002/iis2.13247","url":null,"abstract":"<p>As with many industries, the early life science R&D drug discovery sector is facing growing pressure and higher demands on products in terms of cost, quality, and time-to-market. Additionally, the complexity of involved targets and systems, requirements for rapid, safe, and developable candidates are increasing. The drug discovery market, often regarded as rather conservative, relies more and more on advanced technologies. It is therefore a significant task for suppliers to create good solutions that meet customer requirements. The life science industry has a long tradition of using projects as the preferred method to manage these complex systems developments, such as the production of target proteins, screening of compounds, and follow-up of hit compounds. When applying the project approach, the level of uncertainty is usually high, and the risk of those uncertainties must be managed starting in the early planning phase. Thus, this paper focuses on the issue of how to manage risks in the early project planning phase. We first review state-of-the-art practices in risk management for complex systems project management and identify an important framework, Novelty-Technology-Cost-Pace (NTCP), and apply it to successful risk management for early life science projects. Through an in-depth case study in the life science industry, we demonstrate a systemic integration of the NTPC framework into project planning.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"1890-1903"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165512","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Daniel R. Call, Daniel R. Herber, Steven A. Conrad
{"title":"The Effects of the Assessed Perceptions of MBSE on Adoption","authors":"Daniel R. Call, Daniel R. Herber, Steven A. Conrad","doi":"10.1002/iis2.13157","DOIUrl":"https://doi.org/10.1002/iis2.13157","url":null,"abstract":"<p>Traditional document-based systems engineering (SE) practices have proven inadequate to address modern systems' increasing complexity, leading to shortcomings in SE outcomes. To address these limitations, model-based systems engineering (MBSE) has emerged with an emphasis on the system model as the primary SE artifact. Despite its potential, MBSE has not achieved widespread adoption. This study explores MBSE adoption challenges through the lens of the diffusion of innovations theory to identify factors hindering its adoption. The study's methodology includes a survey distributed to SE professionals focusing on perceptions of attributes of MBSE identified by the diffusion of innovations theory, current use of models and MBSE, and basic demographic information. Results highlighted that respondents recognize the relative advantage of MBSE in improving data quality and traceability, but perceived complexity and compatibility with existing practices still present barriers to adoption. Subpopulation analysis reveals that those who are not already involved in MBSE efforts face the additional adoption obstacles of limited trial opportunities and tool access (chi-squared test of independence between these populations resulted in <i>p</i> = 0.00). The survey underscores the potential for closer alignment between MBSE and existing SE methodologies to improve the perceived compatibility of MBSE. Future studies would benefit from examining additional variables identified by the diffusion of innovations theory, incorporating control questions to differentiate between perceptions of SE generally and MBSE specifically, identification of better methods to assess current MBSE use by participants, and measures to broaden the participant scope. Finally, the imminent introduction of SysML v2 presents a unique opportunity to reshape perceptions of MBSE to improve the adoption rate of MBSE and enhance its accessibility among SE professionals.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"462-478"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165331","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Erik Herzog, Robert Nilsson, Judith Crockford, Andrii Berezovskyi, Torbjörn Holm, Jad El-khoury, Tord Ringenhall, Eran Gery, Stefan Albinsson
{"title":"Enabling Digital Engineering with Federated PLM – Experiences from the Heliple-2 Project","authors":"Erik Herzog, Robert Nilsson, Judith Crockford, Andrii Berezovskyi, Torbjörn Holm, Jad El-khoury, Tord Ringenhall, Eran Gery, Stefan Albinsson","doi":"10.1002/iis2.13213","DOIUrl":"https://doi.org/10.1002/iis2.13213","url":null,"abstract":"<p>Implementing a digital engineering infrastructure is a strategic endeavour for any organisation. In this paper an investigation in the feasibility of federated Product Lifecycle Management is presented, starting from a presentation of the guiding architecture pattern and an evaluation of implementation alternatives. Interoperability standards from Open Services for Lifecycle Collaboration (OSLC) are introduced along with presentation of tool infrastructure for automatic generation of OSLC interfaces. Implementation experience validates that this is a viable and attractive alternative for implementing digital engineering.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"1367-1383"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165407","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Securing Your Eggs in Multiple Baskets — Assuring a Resilient and Secure Supply Chain","authors":"Matthew Hause, Mitchell Brooks, Robert Kennedy","doi":"10.1002/iis2.13235","DOIUrl":"https://doi.org/10.1002/iis2.13235","url":null,"abstract":"<p>The global supply chain is a complex system of systems made up of and relying on other complex systems of systems (SoS) to achieve its goals. To take a typical example, Enterprise A is supplied essential parts on a regular basis to manufacture its products. To place the order requires global financial systems, integrated email systems, the internet, multiple telecommunications systems, and supply software provided by large companies. To deliver the parts may require air and maritime transportation systems, the rail network, interstate highway systems, road haulage companies, state and local transportation systems and so forth. When any of these complex systems fail, the impact can be global, and the results catastrophic. Recent examples include the shortage of Personal Protective Equipment (PPE) during the COVID pandemic, computer chip shortages delaying the assembly and sales of cars, and, most recently, the baby formula shortage. These were due to disruptions in the supply chain caused by an overreliance on single sourced suppliers who failed to deliver, transportation disruptions, outsourcing of critical parts, supplies, medicines to distant countries, and/or an overreliance on “Just In Time” for inventory management. This is the case of placing too many eggs in too few baskets, and often just one basket. Counterfeit or substandard parts and products can enter the supply chain via graft, breaks in chain of custody, or carelessness. This has included critical mechanical parts on aircraft, chips containing spyware, and substandard or out of date medicines substituted for the real thing resulting in serious illness and death. This complex SoS needs to be examined, studied, and understood in the same way as a mission critical system; threats, vulnerabilities, and risks need to be identified and mitigated and assurance cases defined to ensure a solid and reliable supply chain. This paper will look at the supply chain of an example factory system to determine how some of these problems can be predicted, prevented, mitigated, and solved using the UAF, RAAML and assurance case techniques.</p>","PeriodicalId":100663,"journal":{"name":"INCOSE International Symposium","volume":"34 1","pages":"1748-1770"},"PeriodicalIF":0.0,"publicationDate":"2024-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142165409","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}