A. Boucherit, L. M. Castro, O. Hasan, Abdallah Khababa
{"title":"Towards a hybrid formal analysis technique for safety-critical software architectures","authors":"A. Boucherit, L. M. Castro, O. Hasan, Abdallah Khababa","doi":"10.1504/ijccbs.2021.117993","DOIUrl":"https://doi.org/10.1504/ijccbs.2021.117993","url":null,"abstract":"Given the catastrophic damage that bugs in critical systems can inflict on human life and its socio-economic environment, the use of rigorous analysis techniques while developing such systems is ge...","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125070527","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"An SMT-based approach for generating trace examples and counter-examples of parametric properties","authors":"Salim Chehida, Y. Ledru, Yoann Blein, Germán Vega","doi":"10.1504/ijccbs.2021.117997","DOIUrl":"https://doi.org/10.1504/ijccbs.2021.117997","url":null,"abstract":"The ParTraP language has been designed to express temporal and timed properties on finite execution traces of parametric events. It aims to ease properties' expression for users not experienced in ...","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"252 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123243684","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Besma Khaireddine, Marwa Ben AbdelAli, L. L. Jilani, Aleksandr Zakharchenko, A. Mili
{"title":"Correctness enhancement: a pervasive software engineering paradigm","authors":"Besma Khaireddine, Marwa Ben AbdelAli, L. L. Jilani, Aleksandr Zakharchenko, A. Mili","doi":"10.1504/ijccbs.2020.10030618","DOIUrl":"https://doi.org/10.1504/ijccbs.2020.10030618","url":null,"abstract":"Refinement-based correctness-preserving transformations are considered as the gold standard of program transformations. While we do not dispute the merits of transforming programs in a way that preserves their correctness, we argue that the vast majority of software engineering processes are in fact instances of correctness enhancement rather than correctness preservation. In this paper, we discuss mathematics of correctness enhancement, i.e., the process of making a program more correct than it is with respect to a specification; then we highlight in what way and to what extent correctness enhancement pervades the practice of software engineering.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"207 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124648662","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. Tortorelli, A. Fiaschetti, A. Giuseppi, V. Suraci, Roberto Germanà, F. D. Priscoli
{"title":"A security metric for assessing the security level of critical infrastructures","authors":"A. Tortorelli, A. Fiaschetti, A. Giuseppi, V. Suraci, Roberto Germanà, F. D. Priscoli","doi":"10.1504/ijccbs.2020.10030622","DOIUrl":"https://doi.org/10.1504/ijccbs.2020.10030622","url":null,"abstract":"The deep integration between the cyber and physical domains in complex systems make very challenging the security evaluation process, as security itself is more of a concept (i.e., a subjective property) than a quantifiable characteristic. Traditional security assessing mostly relies on the personal skills of security experts, often based on best practices and personal experience. The present work is aimed at defining a security metric allowing evaluators to assess the security level of complex cyber-physical systems (CPSs), as critical infrastructures, in a holistic, consistent and repeatable way. To achieve this result, the mathematical framework provided by the open source security testing methodology manual (OSSTMM) is used as the backbone of the new security metric, since it allows to provide security indicators capturing, in a non-biased way, the security level of a system. Several concepts, as component lifecycle, vulnerability criticality and damage potential - effort ratio are embedded in the new security metric framework, developed in the scope of the H2020 project ATENA.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114705985","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Marta Olszewska, Fatima Shokri-Manninen, A. Edmunds, M. Waldén
{"title":"Applying guidelines for system modelling in Event-B - a systematic literature review","authors":"Marta Olszewska, Fatima Shokri-Manninen, A. Edmunds, M. Waldén","doi":"10.1504/ijccbs.2020.10030617","DOIUrl":"https://doi.org/10.1504/ijccbs.2020.10030617","url":null,"abstract":"Developing safety-critical systems is an intricate task since it involves the application of well-established and rigorous methods, supported by good practices. The modelling is merely a part of this undertaking. However, it plays a significant role in the description of the system, how it will behave and what properties it will have. Formal methods, for instance Event-B, are utilised in such cases to assure that the system is correct-by-construction and functions as required. In this work we use a literature review method to collect a body of knowledge that would support the Event-B practitioners with modelling guidelines. We first define the domains in which the guidelines fall and divide them into two categories: beginners and advanced. Then we provide a collection of guidelines as reinforcements for domain-specific applications of Event-B.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"562 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-07-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131988672","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"AltaRica 3.0 in ten modelling patterns","authors":"M. Batteux, T. Prosvirnova, A. Rauzy","doi":"10.1504/IJCCBS.2019.10020023","DOIUrl":"https://doi.org/10.1504/IJCCBS.2019.10020023","url":null,"abstract":"AltaRica 3.0 is an object-oriented modelling language dedicated to probabilistic risk and safety analyses. It is a prominent representative of modelling formalisms supporting the so-called model-based approach in reliability engineering. In this article, we illustrate the key features of the AltaRica 3.0 technology by presenting the implementation of ten very common modelling patterns. We demonstrate in this way the expressive power of the language as well as its elegance and simplicity of use.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130164328","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Formal methods in dynamic software updating: a survey","authors":"Razika Lounas, M. Mezghiche, Jean-Louis Lanet","doi":"10.1504/IJCCBS.2019.10020014","DOIUrl":"https://doi.org/10.1504/IJCCBS.2019.10020014","url":null,"abstract":"Dymanic software updating (DSU) consists in updating running programs on-the-fly without any downtime that leads to systems unavailability. The use of DSU in critical applications raises several issues related to update correctness. Indeed, an erroneous dynamic update may introduce safety vulnerabilities and security breaches. In this perspective, the use of formal methods has gained a large interest since they respond to the high need of rigor required by such applications. Several frameworks were developed to first express update correctness which is based on several criteria. Then, the proposed formalisms are used to specify DSU systems, express correctness criteria and establish them. In this paper, we present a review of researches on the application of formal methods to DSU systems. We give a classification of systems according to the paradigms of programming languages and then we explain the correctness criteria and categorise the articles regarding the approaches of formalisation to establish the correctness. This information is useful to help ongoing researches in having an overview on the application of formal methods in DSU.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"37 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131855557","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Survey on international standards and best practices for patch management of complex industrial control systems: the critical infrastructure of particle accelerators case study","authors":"U. Gentile, L. Serio","doi":"10.1504/IJCCBS.2019.10020044","DOIUrl":"https://doi.org/10.1504/IJCCBS.2019.10020044","url":null,"abstract":"Industrial control systems (ICSs) are control and data acquisition systems employed to control distributed assets with a centralised data acquisition and supervisory control. ICSs strictly rely on computer-based systems and on installed remote controllers, which are subject to a constant patch deployment to upgrade functionalities, to resolve security issues and to reduce potential flaws. The patch management is not a trivial process since it can introduce new vulnerabilities within the systems. A key factor to perform successful patch management is to comply with the recommendations provided by the international standards and by the best practices currently adopted in the industry. This paper surveys the few existing international standards on patch management and the best practices, currently adopted in industry, and evaluates the relevance of standards and the best practices to the context of critical infrastructures for particle accelerators.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"140 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125947838","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A versatile approach for ranking and modelling of non-functional requirements","authors":"Harsimran Kaur, Ashish Sharma","doi":"10.1504/IJCCBS.2019.10020013","DOIUrl":"https://doi.org/10.1504/IJCCBS.2019.10020013","url":null,"abstract":"To effectively encode domain knowledge of customers and implementation strategies of developers in critical computer based system (CBS), requirement engineering plays a significant role. For development of quality software, it is indeed necessary to specify both functional and non-functional requirements (NFRs). However, unlike functional requirements, NFRs are not given much importance and are often generically captured which results in missing out on quality parameters during CBS development. This lacuna can be taken care with inclusion of details regarding NFRs at initial stages of CBS development. NFRs can be addressed by use of interpretive structural modelling (ISM) and analytical hierarchy process (AHP) methods for identification of critical NFRs. Further, new artifacts have been introduced in use case diagram and reference model to document and validate the identified critical NFRs. Each proposed artefact in software requirement specification (SRS) document was initially analysed individually and then compared with other noticeable methodologies.","PeriodicalId":210749,"journal":{"name":"Int. J. Crit. Comput. Based Syst.","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124810985","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}