2014 Theoretical Aspects of Software Engineering Conference最新文献_第3页

A Three-Dimensional Model for Software Security Evaluation 软件安全评价的三维模型

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.31

Zhuobing Han, Xiaohong Li, Ruitao Feng, Jing Hu, Guangquan Xu, Zhiyong Feng

{"title":"A Three-Dimensional Model for Software Security Evaluation","authors":"Zhuobing Han, Xiaohong Li, Ruitao Feng, Jing Hu, Guangquan Xu, Zhiyong Feng","doi":"10.1109/TASE.2014.31","DOIUrl":"https://doi.org/10.1109/TASE.2014.31","url":null,"abstract":"Software security evaluation is considered as a significant and indispensible activity in all phases of software development lifecycle, and there are also many factors that should be taken into account such as the environment, risks, and development documents. Despite the achievements of the past several decades, there is still a lack of methodology in evaluating software security systematically. In this paper, we propose a comprehensive model for evaluating the software security from three different but complementary points of view: technology, management and engineering. The technological dimension is 7 security levels based on Evaluation Assurance Levels (EALs) from ISO/IEC15408, the management dimension mainly concerns the management of software infrastructures, development documents and risks, and the engineering dimension focuses on 5 stages of software development lifecycle. Experts evaluate software security through the evidence items which are collected from these three dimensions and provide their assessments. Relying on Analytic Hierarchy Process (AHP) and Dempster-Shafer Evidence Theory, assessments obtained from the experts can be combined and merged to get a score which presents the security degree of software. A case study illustrates how the evaluators may use the proposed approach to evaluate security of their system.","PeriodicalId":371040,"journal":{"name":"2014 Theoretical Aspects of Software Engineering Conference","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131223632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Mixed Simulation of Multi-valued Models 多值模型的混合仿真

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.18

Ou Wei, Juanjuan Chen

引用次数: 0

A Formal Development Approach for Self-Organising Systems 自组织系统的形式化开发方法

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.11

Qin Li, Graeme Smith

引用次数: 1

Choreography Scenario-Based Test Data Generation 编排基于场景的测试数据生成

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.25

Kai Ma, Jin Wang, Hongli Yang, Jun Yan, Jian Zhang, S. Qin

引用次数: 0

iDola: Bridge Modeling to Verification and Implementation of Interrupt-Driven Systems iDola:中断驱动系统验证与实现的桥梁建模

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.33

Han Liu, Hehua Zhang, Yu Jiang, Xiaoyu Song, M. Gu, Jiaguang Sun

{"title":"iDola: Bridge Modeling to Verification and Implementation of Interrupt-Driven Systems","authors":"Han Liu, Hehua Zhang, Yu Jiang, Xiaoyu Song, M. Gu, Jiaguang Sun","doi":"10.1109/TASE.2014.33","DOIUrl":"https://doi.org/10.1109/TASE.2014.33","url":null,"abstract":"In real-time embedded applications, interrupt-driven systems are widely adopted due to strict timing requirements. However, development of interrupt-driven systems is time-consuming and error-prone. To conveniently ensure a trustworthy system design and implementation is a challenging problem, especially in complex applications. In this paper, we present a novel domain-specific language called iDola to model interrupt-driven systems declaratively and concisely. A major strength of iDola is the feasibility to capture complex interrupt handling mechanism in real-time operating systems and target platforms, such as delayed service and buffered processing. We also propose the formal operational semantics and code generation algorithm of iDola, so that iDola models can be transformed to timed automata for verification and loaded to generate platform-specific codes. We apply iDola on the modeling of an industrial interrupt-driven system, multifunction vehicle bus controller which runs in an embedded environment with eCos operating system. Based on iDola, the system is modeled with a dispatcher which embodies advanced interrupt handling in eCos, including buffered interrupt service routine and deferred service routine. Through transformation, the system design is verified and design bugs are detected. Code generation is also executed using the proposed algorithm. Generated codes display comparatively equal performance in the real system. We believe iDola can facilitate building a trustworthy interrupt-driven system.","PeriodicalId":371040,"journal":{"name":"2014 Theoretical Aspects of Software Engineering Conference","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114507810","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Data Resources in Dynamic Environments 动态环境中的数据资源

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.9

W. Zeng, M. Koutny

引用次数: 8

Combining Syntactic and Semantic Encoding for LTL Bounded Model Checking 结合句法和语义编码的LTL有界模型检验

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.13

Wanwei Liu, Xiaoguang Mao, G. Pu, Rui Wang

引用次数: 0

Towards a Stochastic Occurrence-Based Modeling Approach for Stochastic CPSs 基于随机发生的随机cps建模方法研究

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.35

B. Cheng, Dehui Du

{"title":"Towards a Stochastic Occurrence-Based Modeling Approach for Stochastic CPSs","authors":"B. Cheng, Dehui Du","doi":"10.1109/TASE.2014.35","DOIUrl":"https://doi.org/10.1109/TASE.2014.35","url":null,"abstract":"Cyber-Physical Systems (CPSs) face many challenges, one of which is the complexity of our world full of a variety of stochastic behavior. Due to the excess complexity the increasing number of need for autonomous long running components appears and gives rise to a special concern for energy so that a great challenge becomes open to us that how to model, analyze and make effective evaluation for either one or both of stochastic behavior and energy consumption. To solve the problem, we present a Stochastic Occurrence Hybrid Automata (SOHA) which unify all stochastic behavior into triggers among probabilistic events and use a unified way to describe both stochastic and deterministic events occurrence, besides introduce the energy function with time to model energy harvesting or consumption. In this paper, we give the formal syntax and semantics of SOHA based on labeled transition system and then propose a SOHA-based modeling approach that provides a more reasonable way to concisely model stochastic hybrid systems with the use of refinement and stochastic abstraction. This approach helps build a better model with hiding the details we may not concern, which is useful to the analysis in the future. To illustrate our approach and its benefit, we discuss a benchmark of hybrid systems Energy Aware Buildings as case study.","PeriodicalId":371040,"journal":{"name":"2014 Theoretical Aspects of Software Engineering Conference","volume":"301 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134446295","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Bayesian Model-Based Prediction of Service Level Agreement Violations for Cloud Services 基于贝叶斯模型的云服务服务水平协议违反预测

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.34

B. Tang, Mingdong Tang

引用次数: 25

Application-Specific Architecture Selection for Embedded Systems via Schedulability Analysis 基于可调度性分析的嵌入式系统特定应用架构选择

2014 Theoretical Aspects of Software Engineering Conference Pub Date : 2014-09-01 DOI: 10.1109/TASE.2014.32

Han Liu, Hehua Zhang, Yu Jiang, Xiaoyu Song, M. Gu, Jiaguang Sun

{"title":"Application-Specific Architecture Selection for Embedded Systems via Schedulability Analysis","authors":"Han Liu, Hehua Zhang, Yu Jiang, Xiaoyu Song, M. Gu, Jiaguang Sun","doi":"10.1109/TASE.2014.32","DOIUrl":"https://doi.org/10.1109/TASE.2014.32","url":null,"abstract":"Architecting real-time embedded systems is of the top significance during the design phase, especially in complex applications. Due to limited time and resource, to guarantee scheduling eminence without violating application-specific constraints is a challenging problem in architecture level. In this paper, we firstly present an enhanced transformation from AADL models to Cheddar input for schedulability analysis. With subprogram and delayed connection, this transformation is feasible for complex system designs. Based on schedulability analysis, we further propose a novel architecture selection engine, which evaluates scheduling performance through selection standards and application-specific constraints via satisfaction functions. With the proposed selection engine, information from both schedulability and real-time constraints are captured to pick up an optimal architecture. We apply the proposed approach on the architecture selection of an industrial control system in railway applications. Four candidate AADL architectures are transformed and analyzed for schedulability. Then in the selection engine, candidates are ranked within two application constraints. Compared to the selection of general criteria and traditional AHP, our engine excels at better schedulability and satisfaction on real-time application-specific constraints. Moreover, with adjustment on constraints, our engine shows delicate sensitivity by generating a modified selection. We believe the proposed approach can facilitate architecture design of real-time embedded systems.","PeriodicalId":371040,"journal":{"name":"2014 Theoretical Aspects of Software Engineering Conference","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126632934","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1