首页 > 最新文献

2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)最新文献

英文 中文
SIFT - A Component-Based Integration Architecture for Enterprise Analytics SIFT -基于组件的企业分析集成体系结构
D. Thurman, Justin Almquist, I. Gorton, A. Wynne, J. Chatterton
Architectures and technologies for enterprise application integration are relatively mature, resulting in a range of standards-based and proprietary COTS middleware technologies. However, in the domain of complex analytical applications, integration architectures are not so well understood. Analytical applications such as those used in scientific discovery and financial and intelligence analysis exert unique demands on their underlying architectures. These demands make existing COTS integration middleware less suitable for use in enterprise analytics environments. In this paper we describe SIFT (Scalable Information Fusion and Triage), an application architecture designed for integrating the various components that comprise enterprise analytics applications. SIFT exploits a common pattern for composing analytical components, and extends an existing messaging platform with dynamic configuration mechanisms and scaling capabilities. We demonstrate the use of SIFT to create a decision support platform for quality control based on large volumes of incoming delivery data. The strengths and weaknesses of the SIFT solution are discussed, and we conclude by describing where further work is required to create a complete solution applicable to a wide range of analytical application domains
企业应用程序集成的体系结构和技术相对成熟,从而产生了一系列基于标准和专有的COTS中间件技术。然而,在复杂的分析应用程序领域,集成体系结构并没有得到很好的理解。分析应用程序,例如用于科学发现、金融和情报分析的应用程序,对其底层架构提出了独特的要求。这些需求使得现有的COTS集成中间件不太适合在企业分析环境中使用。在本文中,我们描述了SIFT(可伸缩信息融合和分类),这是一种应用程序架构,用于集成组成企业分析应用程序的各种组件。SIFT利用了组合分析组件的通用模式,并使用动态配置机制和扩展功能扩展了现有的消息传递平台。我们演示了使用SIFT来创建一个基于大量传入交付数据的质量控制决策支持平台。讨论了SIFT解决方案的优点和缺点,并通过描述创建适用于广泛分析应用领域的完整解决方案所需的进一步工作来结束
{"title":"SIFT - A Component-Based Integration Architecture for Enterprise Analytics","authors":"D. Thurman, Justin Almquist, I. Gorton, A. Wynne, J. Chatterton","doi":"10.1109/ICCBSS.2007.35","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.35","url":null,"abstract":"Architectures and technologies for enterprise application integration are relatively mature, resulting in a range of standards-based and proprietary COTS middleware technologies. However, in the domain of complex analytical applications, integration architectures are not so well understood. Analytical applications such as those used in scientific discovery and financial and intelligence analysis exert unique demands on their underlying architectures. These demands make existing COTS integration middleware less suitable for use in enterprise analytics environments. In this paper we describe SIFT (Scalable Information Fusion and Triage), an application architecture designed for integrating the various components that comprise enterprise analytics applications. SIFT exploits a common pattern for composing analytical components, and extends an existing messaging platform with dynamic configuration mechanisms and scaling capabilities. We demonstrate the use of SIFT to create a decision support platform for quality control based on large volumes of incoming delivery data. The strengths and weaknesses of the SIFT solution are discussed, and we conclude by describing where further work is required to create a complete solution applicable to a wide range of analytical application domains","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125356171","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
MDSOA for Achieving Interoperability 实现互操作性的MDSOA
X. Larrucea, Gorka Benguria, Stefan Schuster
Summary form only given. This poster presents an experience, on gathering business needs in business models adapted to the business expert language and translating these needs into a service oriented architecture (SOA) in a systematic way. The poster introduces the current situation highlighting three interoperability problems: (1) Organisations do not use a standard, unified and widely adopted business process definition language. Organisations want a common understanding of the process where they are involved from different perspectives; (2) Information systems are implemented to address specific requirements, ignoring future integration needs by using proprietary formats, and ad-hoc communication strategies and protocols; and (3) Information systems do not, clearly, support the business processes. There is a gap between business process models and their information systems implementations. The approach shown in this poster is based on the usage of the SOA paradigm from a model driven point of view: a model driven service oriented architecture (MDSOA) framework. Based on the MDA specification we have identified a metamodel for each of the three abstraction levels: (1) POP* (process, organisation, product) is selected as the metamodel to represent and exchange business processes. POP* is the unified enterprise modelling language (UEML) successor. POP* metamodel represents the starting point; (2) PIM4SOA (platform independent model for service oriented architecture) (Benguria et al., 2006) is a metamodel to represent service, process, information and quality of service elements; and (3) WSDL (Web service description language) and BPEL (business process execution language) are platform specific languages
只提供摘要形式。这张海报展示了一个经验,关于在适应业务专家语言的业务模型中收集业务需求,并以系统的方式将这些需求转换为面向服务的体系结构(SOA)。海报介绍了目前的情况,突出了三个互操作性问题:(1)组织没有使用标准、统一和广泛采用的业务流程定义语言。组织希望对从不同角度参与的过程有一个共同的理解;(2)信息系统的实现是为了满足特定的需求,而忽略了未来的集成需求,使用专有格式和自组织通信策略和协议;(3)信息系统显然不能支持业务流程。业务流程模型和它们的信息系统实现之间存在差距。这张海报中展示的方法是基于从模型驱动的角度对SOA范例的使用:模型驱动的面向服务的体系结构(MDSOA)框架。基于MDA规范,我们已经为三个抽象级别中的每一个定义了一个元模型:(1)选择POP*(过程、组织、产品)作为表示和交换业务过程的元模型。POP*是统一企业建模语言(UEML)的继承者。POP*元模型表示起点;(2) PIM4SOA(面向服务架构的平台独立模型)(Benguria et al., 2006)是表示服务、流程、信息和服务元素质量的元模型;(3) WSDL (Web服务描述语言)和BPEL(业务流程执行语言)是平台特定的语言
{"title":"MDSOA for Achieving Interoperability","authors":"X. Larrucea, Gorka Benguria, Stefan Schuster","doi":"10.1109/ICCBSS.2007.21","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.21","url":null,"abstract":"Summary form only given. This poster presents an experience, on gathering business needs in business models adapted to the business expert language and translating these needs into a service oriented architecture (SOA) in a systematic way. The poster introduces the current situation highlighting three interoperability problems: (1) Organisations do not use a standard, unified and widely adopted business process definition language. Organisations want a common understanding of the process where they are involved from different perspectives; (2) Information systems are implemented to address specific requirements, ignoring future integration needs by using proprietary formats, and ad-hoc communication strategies and protocols; and (3) Information systems do not, clearly, support the business processes. There is a gap between business process models and their information systems implementations. The approach shown in this poster is based on the usage of the SOA paradigm from a model driven point of view: a model driven service oriented architecture (MDSOA) framework. Based on the MDA specification we have identified a metamodel for each of the three abstraction levels: (1) POP* (process, organisation, product) is selected as the metamodel to represent and exchange business processes. POP* is the unified enterprise modelling language (UEML) successor. POP* metamodel represents the starting point; (2) PIM4SOA (platform independent model for service oriented architecture) (Benguria et al., 2006) is a metamodel to represent service, process, information and quality of service elements; and (3) WSDL (Web service description language) and BPEL (business process execution language) are platform specific languages","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116795681","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 8
Decision Support for Handling Mismatches between COTS Products and System Requirements 处理COTS产品与系统需求不匹配的决策支持
Abdallah Mohamed, G. Ruhe, A. Eberlein
In the process of selecting commercial off-the-shelf (COTS) products, it is inevitable to encounter mismatches between COTS products and system requirements. Mismatches occur when COTS attributes do not exactly match our requirements. Many of these mismatches are resolved after selecting a COTS product in order to improve its fitness with the requirements. This paper proposes a decision support approach that aims at addressing COTS mismatches during and after the selection process. Our approach can be integrated with existing COTS selection methods at two stages: (I) When evaluating COTS candidates: our approach is used to estimate the anticipated fitness of the candidates if their mismatches are resolved. This helps to base our COTS selection decisions on the fitness that the COTS candidates will eventually have if selected. (2) After selecting a COTS product: the approach suggests alternative plans for resolving the most appropriate mismatches using suitable actions, such that the most important risk, technical, and resource constraints are met. A case study from the e-services domain is used to illustrate the method and to discuss its added value
在选择商用现货产品的过程中,不可避免地会遇到商用现货产品与系统需求不匹配的问题。当COTS属性与我们的需求不完全匹配时,就会出现不匹配。在选择COTS产品之后,为了提高其对需求的适应性,许多这些不匹配都得到了解决。本文提出了一种决策支持方法,旨在解决在选择过程中和之后的COTS不匹配问题。我们的方法可以在两个阶段与现有的COTS选择方法相结合:(1)在评估候选COTS时:如果候选COTS的不匹配得到解决,我们的方法可以用来估计候选COTS的预期适应度。这有助于将COTS选择决策建立在COTS候选者最终将拥有的适合度的基础上。(2)在选择了COTS产品之后:该方法建议使用合适的行动来解决最合适的不匹配的替代计划,从而满足最重要的风险、技术和资源约束。本文用电子服务领域的一个案例来说明该方法并讨论其附加价值
{"title":"Decision Support for Handling Mismatches between COTS Products and System Requirements","authors":"Abdallah Mohamed, G. Ruhe, A. Eberlein","doi":"10.1109/ICCBSS.2007.13","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.13","url":null,"abstract":"In the process of selecting commercial off-the-shelf (COTS) products, it is inevitable to encounter mismatches between COTS products and system requirements. Mismatches occur when COTS attributes do not exactly match our requirements. Many of these mismatches are resolved after selecting a COTS product in order to improve its fitness with the requirements. This paper proposes a decision support approach that aims at addressing COTS mismatches during and after the selection process. Our approach can be integrated with existing COTS selection methods at two stages: (I) When evaluating COTS candidates: our approach is used to estimate the anticipated fitness of the candidates if their mismatches are resolved. This helps to base our COTS selection decisions on the fitness that the COTS candidates will eventually have if selected. (2) After selecting a COTS product: the approach suggests alternative plans for resolving the most appropriate mismatches using suitable actions, such that the most important risk, technical, and resource constraints are met. A case study from the e-services domain is used to illustrate the method and to discuss its added value","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127669763","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 27
Reconfiguring Workflows of Web Services 重新配置Web服务的工作流
R. Baird, M. Hepner, R. Gamble, M. T. Gamble
Workflow reconfiguration traditionally involves modifying workflow specifications to adapt to changing architectural conditions. Causes include the introduction of new services or the alteration of goals. Dynamic reconfiguration is currently achieved in workflow specifications employing Web services using techniques that modify endpoint bindings and control structures. Abstract specification of service endpoints delay the point at which the endpoint for a Web service is bound, and modifications to control structures can allow for a variety of complex workflows to be specified. These approaches work with limited changes. This paper defines an improved process of dynamically reconfiguring Web service workflows. Our double loop approach utilizes companion meta-data specifications and reconfiguration plans that are associated with workflow specifications. The approach maps external change requests to workflow actions to determine an appropriate reconfiguration plan without changing the workflow language. Dynamic reconfiguration concepts are reused from architecture reconfiguration research to offer a wider range of potential changes
传统上,工作流重构包括修改工作流规范以适应不断变化的体系结构条件。原因包括新服务的引入或目标的改变。动态重新配置目前是在工作流规范中使用Web服务实现的,这些服务使用修改端点绑定和控制结构的技术。服务端点的抽象规范延迟了绑定Web服务端点的点,并且对控制结构的修改可以允许指定各种复杂的工作流。这些方法的作用是有限的。本文定义了一个改进的动态重新配置Web服务工作流的过程。我们的双循环方法利用了与工作流规范相关的配套元数据规范和重新配置计划。该方法将外部变更请求映射到工作流操作,以在不更改工作流语言的情况下确定适当的重新配置计划。动态重新配置概念从架构重新配置研究中重用,以提供更广泛的潜在更改
{"title":"Reconfiguring Workflows of Web Services","authors":"R. Baird, M. Hepner, R. Gamble, M. T. Gamble","doi":"10.1109/ICCBSS.2007.30","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.30","url":null,"abstract":"Workflow reconfiguration traditionally involves modifying workflow specifications to adapt to changing architectural conditions. Causes include the introduction of new services or the alteration of goals. Dynamic reconfiguration is currently achieved in workflow specifications employing Web services using techniques that modify endpoint bindings and control structures. Abstract specification of service endpoints delay the point at which the endpoint for a Web service is bound, and modifications to control structures can allow for a variety of complex workflows to be specified. These approaches work with limited changes. This paper defines an improved process of dynamically reconfiguring Web service workflows. Our double loop approach utilizes companion meta-data specifications and reconfiguration plans that are associated with workflow specifications. The approach maps external change requests to workflow actions to determine an appropriate reconfiguration plan without changing the workflow language. Dynamic reconfiguration concepts are reused from architecture reconfiguration research to offer a wider range of potential changes","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130509391","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Data Model Transformation for Supporting Interoperability 支持互操作性的数据模型转换
Gorka Benguria, X. Larrucea
One of the main barriers for interoperability today, is the proliferation of different standards and proprietary formats for the exchange of information among the organizations willing to interoperate. But how can the different standards and formats be reconciled? Traditionally, code based mapping techniques have been performed to reconcile standards and formats, but recently a new approach has appeared for dealing with this situation; it is known as model transformation. Model transformation techniques support the engineer in the definition of formal translation rules which allow communication between incompatible components. This paper presents two of these techniques, MTF (model transformation framework) and ATL (Atlas transformation language) and compares them with the traditional approach
当今互操作性的主要障碍之一是,在愿意互操作的组织之间,用于交换信息的不同标准和专有格式的激增。但是如何协调不同的标准和格式呢?传统上,基于代码的映射技术用于协调标准和格式,但最近出现了一种处理这种情况的新方法;它被称为模型转换。模型转换技术支持工程师定义允许不兼容组件之间通信的正式转换规则。本文介绍了其中的两种技术,MTF(模型转换框架)和ATL (Atlas转换语言),并与传统方法进行了比较
{"title":"Data Model Transformation for Supporting Interoperability","authors":"Gorka Benguria, X. Larrucea","doi":"10.1109/ICCBSS.2007.12","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.12","url":null,"abstract":"One of the main barriers for interoperability today, is the proliferation of different standards and proprietary formats for the exchange of information among the organizations willing to interoperate. But how can the different standards and formats be reconciled? Traditionally, code based mapping techniques have been performed to reconcile standards and formats, but recently a new approach has appeared for dealing with this situation; it is known as model transformation. Model transformation techniques support the engineer in the definition of formal translation rules which allow communication between incompatible components. This paper presents two of these techniques, MTF (model transformation framework) and ATL (Atlas transformation language) and compares them with the traditional approach","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115031208","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
Towards a Unified Catalogue of Non-Technical Quality Attributes to Support COTS-Based Systems Lifecycle Activities 迈向非技术质量属性的统一目录,以支持基于cots的系统生命周期活动
J. Carvallo, Xavier Franch, C. Quer
Several activities of the COTS-based systems lifecycle are supported not only by the analysis of their technical quality but also (and sometimes mostly) by considering how they fulfill some non-technical quality features considered relevant (licensing, reputation, costs and similar issues). Whilst many catalogues of technical quality features exist, it is not the case for non-technical ones, which are often managed in an ad-hoc form. In a recent work, we proposed a catalogue of non-technical quality features, designed to integrate smoothly into the ISO/IEC 9126-1 standard. In this paper, we detail the process used for the composition of the catalogue, which embraces the inclusion of several non-technical quality features already identified in the literature as well as others which have emerged form our own experience in industrial COTS components selection processes. We also outline some potential applications of the resulting catalogue, intended to support several activities of the COTS-based systems lifecycle. Finally, we describe a COTS selection process carried out in a telecommunications company
基于cots的系统生命周期的几个活动不仅通过对其技术质量的分析得到支持,而且(有时主要是)通过考虑它们如何实现一些被认为相关的非技术质量特征(许可、声誉、成本和类似问题)得到支持。虽然存在许多技术质量特征的目录,但非技术特征的情况并非如此,它们通常以特别的形式进行管理。在最近的一项工作中,我们提出了一个非技术质量特征的目录,旨在顺利地集成到ISO/IEC 9126-1标准中。在本文中,我们详细介绍了用于组成目录的过程,其中包含了一些已经在文献中确定的非技术质量特征,以及我们在工业COTS组件选择过程中的经验中出现的其他特征。我们还概述了结果目录的一些潜在应用,旨在支持基于cots的系统生命周期的几个活动。最后,我们描述了在一家电信公司进行COTS选择的过程
{"title":"Towards a Unified Catalogue of Non-Technical Quality Attributes to Support COTS-Based Systems Lifecycle Activities","authors":"J. Carvallo, Xavier Franch, C. Quer","doi":"10.1109/ICCBSS.2007.43","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.43","url":null,"abstract":"Several activities of the COTS-based systems lifecycle are supported not only by the analysis of their technical quality but also (and sometimes mostly) by considering how they fulfill some non-technical quality features considered relevant (licensing, reputation, costs and similar issues). Whilst many catalogues of technical quality features exist, it is not the case for non-technical ones, which are often managed in an ad-hoc form. In a recent work, we proposed a catalogue of non-technical quality features, designed to integrate smoothly into the ISO/IEC 9126-1 standard. In this paper, we detail the process used for the composition of the catalogue, which embraces the inclusion of several non-technical quality features already identified in the literature as well as others which have emerged form our own experience in industrial COTS components selection processes. We also outline some potential applications of the resulting catalogue, intended to support several activities of the COTS-based systems lifecycle. Finally, we describe a COTS selection process carried out in a telecommunications company","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132860223","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 12
The Impact of Certification Criteria on Integrated COTS-Based Systems 认证标准对综合cots系统的影响
M. Kelkar, R. Perry, R. Gamble, A. Walvekar
While COTS products can be made secure and reliable within a individual domains, they may introduce security vulnerabilities when integrated with other components due to different security expectations. These problematic interactions within an integrated system can be hidden among the multiple, contributing policy types. Furthermore, security certification criteria governing the integrated system can introduce conflicts with local component policies. Security policies and certification criteria lack a common representation. Security policies use various formats and levels of granularity without comparable attributes. Certification criteria are often text-based checklists. We outline a policy configuration model to represent security policies in a format which can manifest conflicting properties across policy specifications. The model defines security policies according to fundamental attributes of property assertions, observable behaviors, mechanisms, constraints, communication and interaction expectations, dependencies on other policies, system configuration, and component state. We extend model expression concepts to incorporate requirements based on common certification criteria
虽然COTS产品可以在单个域中变得安全可靠,但是由于不同的安全期望,当与其他组件集成时,它们可能会引入安全漏洞。集成系统中的这些有问题的交互可以隐藏在多个有贡献的策略类型中。此外,管理集成系统的安全认证标准可能会引入与本地组件策略的冲突。安全策略和认证标准缺乏共同的表示。安全策略使用各种格式和粒度级别,没有可比较的属性。认证标准通常是基于文本的检查表。我们概述了一个策略配置模型,以一种可以在策略规范中显示冲突属性的格式来表示安全策略。该模型根据属性断言的基本属性、可观察的行为、机制、约束、通信和交互期望、对其他策略的依赖、系统配置和组件状态来定义安全策略。我们扩展了模型表达概念,以结合基于通用认证标准的需求
{"title":"The Impact of Certification Criteria on Integrated COTS-Based Systems","authors":"M. Kelkar, R. Perry, R. Gamble, A. Walvekar","doi":"10.1109/ICCBSS.2007.42","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.42","url":null,"abstract":"While COTS products can be made secure and reliable within a individual domains, they may introduce security vulnerabilities when integrated with other components due to different security expectations. These problematic interactions within an integrated system can be hidden among the multiple, contributing policy types. Furthermore, security certification criteria governing the integrated system can introduce conflicts with local component policies. Security policies and certification criteria lack a common representation. Security policies use various formats and levels of granularity without comparable attributes. Certification criteria are often text-based checklists. We outline a policy configuration model to represent security policies in a format which can manifest conflicting properties across policy specifications. The model defines security policies according to fundamental attributes of property assertions, observable behaviors, mechanisms, constraints, communication and interaction expectations, dependencies on other policies, system configuration, and component state. We extend model expression concepts to incorporate requirements based on common certification criteria","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114940314","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
On the validation of API execution-sequence to assess the correctness of application upon COTS upgrades deployment 通过对API执行顺序的验证来评估应用程序在COTS升级部署中的正确性
A. Pasala, Srinivasa Rao, Arnab Dutta Gupta, Srinivas Gunturu
Various regression test selection strategies have been developed to establish the correctness of software systems upon deployment of COTS upgrades. These strategies recommend a smaller regression test suite to be re-executed. We present a process that identifies the patch impact on the system and localizes the source of potential errors without executing the system test suite. The impact is analyzed based on verifying the behavior of affected COTS API execution-sequences. An API execution-sequence is called affected when one or more of the altered functions of the COTS upgrade are part of COTS API execution-sequence that interfaces with application components. A wrapper-based passive test oracle has been developed to check the correctness of the behavior of these execution-sequences. The changed behavior of these execution-sequences reflects the patch impact. A case study has been conducted and the results are encouraging
已经开发了各种回归测试选择策略,以在部署COTS升级时建立软件系统的正确性。这些策略建议重新执行较小的回归测试套件。我们提出了一个过程,它可以识别补丁对系统的影响,并在不执行系统测试套件的情况下定位潜在错误的来源。通过验证受影响的COTS API执行序列的行为来分析影响。当COTS升级的一个或多个改变的功能是与应用程序组件接口的COTS API执行序列的一部分时,API执行序列被称为受影响的。开发了一个基于包装的被动测试oracle来检查这些执行序列的行为是否正确。这些执行序列的行为变化反映了补丁的影响。进行了个案研究,结果令人鼓舞
{"title":"On the validation of API execution-sequence to assess the correctness of application upon COTS upgrades deployment","authors":"A. Pasala, Srinivasa Rao, Arnab Dutta Gupta, Srinivas Gunturu","doi":"10.1109/ICCBSS.2007.23","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.23","url":null,"abstract":"Various regression test selection strategies have been developed to establish the correctness of software systems upon deployment of COTS upgrades. These strategies recommend a smaller regression test suite to be re-executed. We present a process that identifies the patch impact on the system and localizes the source of potential errors without executing the system test suite. The impact is analyzed based on verifying the behavior of affected COTS API execution-sequences. An API execution-sequence is called affected when one or more of the altered functions of the COTS upgrade are part of COTS API execution-sequence that interfaces with application components. A wrapper-based passive test oracle has been developed to check the correctness of the behavior of these execution-sequences. The changed behavior of these execution-sequences reflects the patch impact. A case study has been conducted and the results are encouraging","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115177303","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Verification and Validation of (Real Time) COTS Products using Fault Injection Techniques 使用故障注入技术的(实时)COTS产品的验证和确认
R. Barbosa, N. Silva, J. Durães, H. Madeira
With the goal of reducing time to market and project costs, the current trend of real time business and mission critical systems is evolving from the development of custom made applications to the use of commercial off the shelf (COTS) products. Obviously, the same confidence and quality of the custom made software components is expected from the commercial applications. In most cases, such products (COTS) are not designed with stringent timing and/or safety requirements as priorities. Thus, to decrease the gap between the use of custom made components and COTS components, this paper presents a methodology for evaluating COTS products in the scope of dependable, real time systems, through the application of fault injection techniques at key points of the software engineering process. By combining the use of robustness testing (fault injection at interface level) with software fault injection (using educated fault injection operators), a COTS component can be assessed in the context of the system it will belong to, with special emphasis given to timing and safety constraints that are usually imposed by the target real time dependable environment. In the course of this work, three case studies have been performed to assess the methodology using realistic scenarios that used common COTS products. Results for one case study are presented
以减少上市时间和项目成本为目标,实时业务和关键任务系统的当前趋势正在从开发定制应用程序发展到使用商业现货(COTS)产品。显然,商业应用程序期望定制软件组件具有相同的信心和质量。在大多数情况下,此类产品(COTS)在设计时没有优先考虑严格的时间和/或安全要求。因此,为了缩小定制组件与COTS组件之间的差距,本文提出了一种方法,通过在软件工程过程的关键点上应用故障注入技术,在可靠、实时的系统范围内评估COTS产品。通过结合鲁棒性测试(接口级的故障注入)和软件故障注入(使用受过教育的故障注入操作员)的使用,可以在其所属系统的上下文中评估COTS组件,并特别强调通常由目标实时可靠环境施加的时间和安全约束。在这项工作的过程中,已经执行了三个案例研究,使用使用普通COTS产品的实际场景来评估方法。给出了一个案例研究的结果
{"title":"Verification and Validation of (Real Time) COTS Products using Fault Injection Techniques","authors":"R. Barbosa, N. Silva, J. Durães, H. Madeira","doi":"10.1109/ICCBSS.2007.45","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.45","url":null,"abstract":"With the goal of reducing time to market and project costs, the current trend of real time business and mission critical systems is evolving from the development of custom made applications to the use of commercial off the shelf (COTS) products. Obviously, the same confidence and quality of the custom made software components is expected from the commercial applications. In most cases, such products (COTS) are not designed with stringent timing and/or safety requirements as priorities. Thus, to decrease the gap between the use of custom made components and COTS components, this paper presents a methodology for evaluating COTS products in the scope of dependable, real time systems, through the application of fault injection techniques at key points of the software engineering process. By combining the use of robustness testing (fault injection at interface level) with software fault injection (using educated fault injection operators), a COTS component can be assessed in the context of the system it will belong to, with special emphasis given to timing and safety constraints that are usually imposed by the target real time dependable environment. In the course of this work, three case studies have been performed to assess the methodology using realistic scenarios that used common COTS products. Results for one case study are presented","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121726898","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 26
Reconciling Agility and Discipline in COTS Selection Processes 协调COTS选择过程中的敏捷性和纪律性
F. Navarrete, P. Botella, Xavier Franch
Currently, information systems are mainly built by integrating or customizing commercial off-the-shelf (COTS) components acquired or licensed from the marketplace. The processes necessary to steer a suitable acquisition are different from traditional software development processes. Among them, we are interested in the process of selection of COTS components. COTS selection requires discipline to coordinate the selection team and the set of new activities that are necessary to support a successful selection. The Capability Maturity Model (CMM) contains important guidelines for process improvement, and specifies "what" we must have into account to achieve the disciplined processes (among others things). On the other hand, agile methods are playing nowadays an important role in software engineering practices, because they are specifying "how" the software practices must be addressed to attain agility and improvement in the software processes. The contribution of this work is to propose a framework to reconcile agile and discipline-based approaches in the COTS selection domain, by including agile practices into the 5 levels of CMMI for COTS acquisition
目前,信息系统主要是通过集成或定制从市场获得或许可的商业现货(COTS)组件来构建的。引导合适的收购所需的过程不同于传统的软件开发过程。其中,我们感兴趣的是COTS组件的选择过程。COTS选择需要规程来协调选择团队和支持成功选择所必需的一组新活动。能力成熟度模型(Capability Maturity Model, CMM)包含了过程改进的重要指导方针,并指定了我们必须考虑的“什么”来实现规范的过程(以及其他事情)。另一方面,敏捷方法如今在软件工程实践中扮演着重要的角色,因为它们规定了软件实践必须“如何”处理才能在软件过程中获得敏捷性和改进。这项工作的贡献是提出了一个框架,通过将敏捷实践纳入COTS获取的CMMI的5个级别,来协调COTS选择领域中的敏捷方法和基于规程的方法
{"title":"Reconciling Agility and Discipline in COTS Selection Processes","authors":"F. Navarrete, P. Botella, Xavier Franch","doi":"10.1109/ICCBSS.2007.29","DOIUrl":"https://doi.org/10.1109/ICCBSS.2007.29","url":null,"abstract":"Currently, information systems are mainly built by integrating or customizing commercial off-the-shelf (COTS) components acquired or licensed from the marketplace. The processes necessary to steer a suitable acquisition are different from traditional software development processes. Among them, we are interested in the process of selection of COTS components. COTS selection requires discipline to coordinate the selection team and the set of new activities that are necessary to support a successful selection. The Capability Maturity Model (CMM) contains important guidelines for process improvement, and specifies \"what\" we must have into account to achieve the disciplined processes (among others things). On the other hand, agile methods are playing nowadays an important role in software engineering practices, because they are specifying \"how\" the software practices must be addressed to attain agility and improvement in the software processes. The contribution of this work is to propose a framework to reconcile agile and discipline-based approaches in the COTS selection domain, by including agile practices into the 5 levels of CMMI for COTS acquisition","PeriodicalId":326403,"journal":{"name":"2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2007-02-26","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130083511","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 13
期刊
2007 Sixth International IEEE Conference on Commercial-off-the-Shelf (COTS)-Based Software Systems (ICCBSS'07)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1