Software and Systems Modeling最新文献

Formalising privacy regulations with bigraphs. 用图表形式化隐私法规。

IF 3 3区计算机科学

Software and Systems Modeling Pub Date : 2026-01-01 Epub Date: 2025-06-24 DOI: 10.1007/s10270-025-01293-2

Ebtihal Althubiti, Blair Archibald, Michele Sevegnani

{"title":"Formalising privacy regulations with bigraphs.","authors":"Ebtihal Althubiti, Blair Archibald, Michele Sevegnani","doi":"10.1007/s10270-025-01293-2","DOIUrl":"10.1007/s10270-025-01293-2","url":null,"abstract":"With many governments regulating the handling of user data-the General Data Protection Regulation, the California Consumer Privacy Act, and the Saudi Arabian Personal Data Protection Law-ensuring systems comply with data privacy legislation is of high importance. Checking compliance is a tricky process and often includes many manual elements. We propose that formal methods, that model systems mathematically, can provide strong guarantees to help companies prove their adherence to legislation. To increase usability we advocate a diagrammatic approach, based on bigraphical reactive systems, where privacy experts can explicitly visualise the systems and describe updates, via rewrite rules, that describe system behaviour. The rewrite rules allow flexibility in integrating privacy policies with user-specified systems. We focus on modelling notions of providing consent, withdrawing consent, purpose limitations, the right to access and sharing data with third parties, and define privacy properties that we want to prove within the systems. Properties are expressed using the computation tree logic and proved using model checking. To show the generality of the proposed framework, we apply it to two examples: a bank notification system, inspired by Monzo's privacy policy, and a cloud-based home healthcare system based on the Fitbit app's privacy policy.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"25 2","pages":"487-513"},"PeriodicalIF":3.0,"publicationDate":"2026-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC12996049/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147488105","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A formalization of Heisenbugs and their causes in terms of hyperproperties. 从超性质的角度形式化海森堡bug及其成因。

IF 3 3区计算机科学

Software and Systems Modeling Pub Date : 2026-01-01 Epub Date: 2026-02-24 DOI: 10.1007/s10270-025-01345-7

Sarah Sallinger, Georg Weissenbacher, Florian Zuleger

引用次数: 0

The MDENet education platform: zero-install directed activities for learning MDE. MDENet教育平台：零安装定向活动学习MDE。

IF 3 3区计算机科学

Software and Systems Modeling Pub Date : 2026-01-01 Epub Date: 2025-06-02 DOI: 10.1007/s10270-025-01292-3

Steffen Zschaler, Will Barnett, Artur Boronat, Antonio Garcia-Dominguez, Dimitris Kolovos

{"title":"The MDENet education platform: zero-install directed activities for learning MDE.","authors":"Steffen Zschaler, Will Barnett, Artur Boronat, Antonio Garcia-Dominguez, Dimitris Kolovos","doi":"10.1007/s10270-025-01292-3","DOIUrl":"10.1007/s10270-025-01292-3","url":null,"abstract":"Setting up and configuring model-driven engineering (MDE) tools is not straightforward because the MDE tooling landscape is highly fragmented and because many MDE tools are research prototypes with limited documentation. This creates significant accidental complexity for learners of MDE, who have to overcome installation and configuration hurdles before they can even begin to focus on the core MDE concepts they should be learning. This is further complicated by the complexity of modern MDE tools, which can overwhelm new learners, making it difficult for them to work out what they should do next to achieve a given goal. To address these challenges, we have developed a web-based playground platform that enables learners to engage with MDE learning activities without the need to install anything. The playground metaphor allows teachers to expose only those functionalities directly required for the completion of a particular learning activity. We present the general architecture of the platform, our approach to the declarative integration of new MDE tools, and the way in which teachers can flexibly and declaratively define new MDE learning activities. We have used our platform in a range of different contexts, from live tutorials and 10-week university courses, to developing documentation webpages for MDE tools. We describe examples of such uses, showcasing the flexible configurability of the platform for different types of activities and contexts.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"25 1","pages":"287-313"},"PeriodicalIF":3.0,"publicationDate":"2026-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC12957651/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147367005","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Making a case for enterprise modelling as a research method. 企业建模作为一种研究方法的案例。

IF 3 3区计算机科学

Software and Systems Modeling Pub Date : 2026-01-01 Epub Date: 2025-12-02 DOI: 10.1007/s10270-025-01343-9

Sergio España, Gudrun Thorsteinsdottir, Vijanti Ramautar, Óscar Pastor

{"title":"Making a case for enterprise modelling as a research method.","authors":"Sergio España, Gudrun Thorsteinsdottir, Vijanti Ramautar, Óscar Pastor","doi":"10.1007/s10270-025-01343-9","DOIUrl":"10.1007/s10270-025-01343-9","url":null,"abstract":"Enterprise modelling (EM) refers to the systematic elicitation and documentation of organisational phenomena from several interrelated perspectives. Widely applied in information and computer sciences to engineer enterprises and information systems, it is rarely recognised as a research method in itself, much less outside these disciplines. This paper advocates that EM is a valid research method, within and outside its traditional application domains, highlighting its efficacy in eliciting and documenting organisational phenomena. Our study supports our claims with examples from a project investigating the application of EM as a research method to examine the intricate interplay between sustainability reporting and strategic management practices. Additionally, we have consulted experts in EM, who provided their opinions on the strengths and weaknesses of EM as a research method, and helped delineate a roadmap to foster its recognition and adoption. Throughout the paper, we emphasise the potential that EM brings to structure research and the lens that its modelling constructs provide to investigate organisational motivations, structures, processes, communications, information flow, technology, and their intricate interrelations.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"25 3","pages":"695-725"},"PeriodicalIF":3.0,"publicationDate":"2026-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC13388363/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148563076","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

ATM: a Logic for Quantitative Security Properties on Attack Trees. ATM：攻击树上定量安全属性的逻辑。

IF 3 3区计算机科学

Software and Systems Modeling Pub Date : 2026-01-01 Epub Date: 2025-10-31 DOI: 10.1007/s10270-025-01323-z

Stefano M Nicoletti, Milan Lopuhaä-Zwakenberg, E Moritz Hahn, Mariëlle Stoelinga

{"title":"ATM: a Logic for Quantitative Security Properties on Attack Trees.","authors":"Stefano M Nicoletti, Milan Lopuhaä-Zwakenberg, E Moritz Hahn, Mariëlle Stoelinga","doi":"10.1007/s10270-025-01323-z","DOIUrl":"https://doi.org/10.1007/s10270-025-01323-z","url":null,"abstract":"Critical infrastructure systems - for which high reliability and availability are paramount - must operate securely. Attack trees (ATs) are hierarchical diagrams that offer a flexible modelling language used to assess how systems can be attacked. ATs are widely employed both in industry and academia but - in spite of their popularity - little work has been done to give practitioners instruments to formulate queries on ATs in an understandable yet powerful way. In this paper we fill this gap by presenting <math><mi>ATM</mi></math> , a logic to express quantitative security properties on ATs. <math><mi>ATM</mi></math> allows for the specification of properties involved with security metrics that include \"cost\", \"probability\" and \"skill\" and permits the formulation of insightful what-if scenarios. To showcase its potential, we apply <math><mi>ATM</mi></math> both to the case study of a CubeSAT and to a larger model, constructed from the real-life cyberespionage campaign Operation Dream Job, as recorded by the MITRE ATT&CK Database. We showcase property specification on the corresponding attack trees and propel usability of <math><mi>ATM</mi></math> by presenting <math><mi>LangATM</mi></math> - a domain specific language for our logic. Finally, we present theory and algorithms - based on binary decision diagrams - to check properties and compute metrics of <math><mi>ATM</mi></math> -formulae.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"25 4","pages":"1011-1031"},"PeriodicalIF":3.0,"publicationDate":"2026-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC13529857/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"148881599","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

AI simulation by digital twins: systematic survey, reference framework, and mapping to a standardized architecture 数字孪生的人工智能模拟：系统调查、参考框架和映射到标准化架构

3区计算机科学

Software and Systems Modeling Pub Date : 2025-08-19 DOI: 10.1007/s10270-025-01306-0

Xiaoran Liu, István Dávid

引用次数: 1

Diagrammatic physical robot models. 图解物理机器人模型。

IF 3.2 3区计算机科学

Software and Systems Modeling Pub Date : 2025-01-01 Epub Date: 2025-03-12 DOI: 10.1007/s10270-025-01270-9

Alvaro Miyazawa, Sharar Ahmadi, Ana Cavalcanti, James Baxter, Mark Post, Pedro Ribeiro, Jon Timmis, Thomas Wright

{"title":"Diagrammatic physical robot models.","authors":"Alvaro Miyazawa, Sharar Ahmadi, Ana Cavalcanti, James Baxter, Mark Post, Pedro Ribeiro, Jon Timmis, Thomas Wright","doi":"10.1007/s10270-025-01270-9","DOIUrl":"10.1007/s10270-025-01270-9","url":null,"abstract":"Simulation is a favoured technique in robotics. It is, however, costly, in terms of development time, and its usability is limited by the lack of standardisation and portability of simulators. We present RoboSim, a diagrammatic tool-independent domain-specific language to model robotic platforms and their controllers. It can be regarded as a profile of UML/SysML enriched with time primitives, differential equations, and a mathematical semantics. Our previous work on RoboSim described a notation to specify control software. In this paper, we present a novel notation to describe physical models: block diagrams that can be linked to the platform-independent software model to characterise how services required by the software are realised by actuators and sensors. Behaviours are specified by differential equations, and simulations and mathematical models of the whole system can be generated automatically. Our main contributions are a modular and extensible diagrammatic notation that supports the explicit specification of physical behaviours; a set of validation rules that identify well-formed models; a model-to-model transformation from RoboSim to an input format accepted by several simulators; and a formal semantics for mathematical reasoning.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"24 5","pages":"1549-1593"},"PeriodicalIF":3.2,"publicationDate":"2025-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC12460476/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"145187401","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Extract, model, refine: improved modelling of program verification tools through data enrichment. 提取、建模、细化：通过数据充实改进程序验证工具的建模。

IF 3.2 3区计算机科学

Software and Systems Modeling Pub Date : 2025-01-01 Epub Date: 2025-01-08 DOI: 10.1007/s10270-024-01232-7

Sophie Lathouwers, Yujie Liu, Vadim Zaytsev

{"title":"Extract, model, refine: improved modelling of program verification tools through data enrichment.","authors":"Sophie Lathouwers, Yujie Liu, Vadim Zaytsev","doi":"10.1007/s10270-024-01232-7","DOIUrl":"10.1007/s10270-024-01232-7","url":null,"abstract":"In software engineering, models are used for many different things. In this paper, we focus on program verification, where we use models to reason about the correctness of systems. There are many different types of program verification techniques which provide different correctness guarantees. We investigate the domain of program verification tools and present a concise megamodel to distinguish these tools. We also present a data set of 400+ program verification tools. This data set includes the category of verification tool according to our megamodel, practical information such as input/output format, repository links and more. The practical information, such as last commit date, is kept up to date through the use of APIs. Moreover, part of the data extraction has been automated to make it easier to expand the data set. The categorisation enables software engineers to find suitable tools, investigate alternatives and compare tools. We also identify trends for each level in our megamodel. Our data set, publicly available at https://doi.org/10.4121/20347950, can be used by software engineers to enter the world of program verification and find a verification tool based on their requirements. This paper is an extended version of https://doi.org/10.1145/3550355.3552426.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"24 4","pages":"1293-1313"},"PeriodicalIF":3.2,"publicationDate":"2025-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC12289842/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"144734932","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A model template for reachability-based containment checking of imprecise observations in timed automata 基于可达性的定时自动机不精确观测包含性检查模型模板

IF 2 3区计算机科学

Software and Systems Modeling Pub Date : 2024-09-19 DOI: 10.1007/s10270-024-01205-w

Sascha Lehmann, Sibylle Schupp

{"title":"A model template for reachability-based containment checking of imprecise observations in timed automata","authors":"Sascha Lehmann, Sibylle Schupp","doi":"10.1007/s10270-024-01205-w","DOIUrl":"https://doi.org/10.1007/s10270-024-01205-w","url":null,"abstract":"Verifying safety requirements by model checking becomes increasingly important for safety-critical applications. For the validity of such proof in practice, the model needs to capture the actual behavior of the real system, which could be tested by containment checks of real observation traces. Basic equivalence checks, however, are not applicable if the system is only partially or imprecisely observable, if the model abstracts from explicit states with symbolic semantics, or if the checks are not expressible in the logics supported by a model checker. In this article, we solve the problem of observation containment checking in timed automata via reachability checking on tester systems. We introduce the logic SRL (sequence reachability logic) to express observations as sequences of delayed reachability properties. Through SBLL (introduced by Aceto et al.) as intermediate logic, we synthesize a set of matcher model templates for partial and imprecise observations and further extend these templates for the case of limited state accessibility in a model. For the obtained matching traces, we define the back-transformation into the original model domain and formally prove the correctness of the transformation. We implemented the observation matching approach, and apply it to a set of 7 demo and 3 case study models with different levels of observability. The results show that all positive and negative observations are correctly classified, and that the most advanced matcher model instance still offers average run times between 0.1 and 1 s in all but 3 scenarios.","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"52 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-09-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142267116","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A system-theoretic assurance framework for safety-driven systems engineering 安全驱动系统工程的系统理论保证框架

IF 2 3区计算机科学

Software and Systems Modeling Pub Date : 2024-09-13 DOI: 10.1007/s10270-024-01209-6

Alexander Ahlbrecht, Jasper Sprockhoff, Umut Durak

{"title":"A system-theoretic assurance framework for safety-driven systems engineering","authors":"Alexander Ahlbrecht, Jasper Sprockhoff, Umut Durak","doi":"10.1007/s10270-024-01209-6","DOIUrl":"https://doi.org/10.1007/s10270-024-01209-6","url":null,"abstract":"The complexity of safety-critical systems is continuously increasing. To create safe systems despite the complexity, the system development requires a strong integration of system design and safety activities. A promising choice for integrating system design and safety activities are model-based approaches. They can help to handle complexity through abstraction, automation, and reuse and are applied to design, analyze, and assure systems. In practice, however, there is often a disconnect between the model-based design and safety activities. At the same time, there is often a delay until recent approaches are available in model-based frameworks. As a result, the advantages of the models are often not fully utilized. Therefore, this article proposes a framework that integrates recent approaches for system design (model-based systems engineering), safety analysis (system-theoretic process analysis), and safety assurance (goal structuring notation). The framework is implemented in the systems modeling language (SysML), and the focus is placed on the connection between the safety analysis and safety assurance activities. It is shown how the model-based integration enables tool assistance for the systematic creation, analysis, and maintenance of safety artifacts. The framework is demonstrated with the system design, safety analysis, and safety assurance of a collision avoidance system for aircraft. The model-based nature of the design and safety activities is utilized to support the systematic generation, analysis, and maintenance of safety artifacts.\u0000","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"21 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-09-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"142226233","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0