首页 > 最新文献

Proccedings of the 10th European Conference on Software Architecture Workshops最新文献

英文 中文
Handling multiple quality attributes trade-off in architecture-based self-adaptive systems 在基于体系结构的自适应系统中处理多个质量属性的权衡
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3010822
Sara Mahdavi-Hezavehi
Self-adaptive systems are capable of autonomously making runtime decisions in order to deal with uncertain circumstances. In architecture-based self-adaptive (ABSA) systems the feedback loop uses self-reflecting models to perform decision making and ultimately apply adaptation to the system. One aspect of this decision making mechanism is to handle systems' quality attributes trade-off. An ABSA system is required to address the potential impacts of adaptation on multiple quality attributes, and select the adaptation option which satisfies the quality attributes of the system the best. In this PhD project, we study and propose an architecture-based solution which uses runtime knowledge of the systems and its environment to handle quality attributes trade-off and decision making mechanism in presence of system's quality goals uncertainty. For validation, we will a) create and set up case studies in various domains, and b) use exemplars to benchmark our proposed method with existing approaches.
自适应系统能够自主地做出运行时决策,以处理不确定的情况。在基于体系结构的自适应(ABSA)系统中,反馈回路使用自反射模型来执行决策,并最终对系统应用自适应。该决策制定机制的一个方面是处理系统质量属性的权衡。ABSA系统需要考虑自适应对多个质量属性的潜在影响,并选择最能满足系统质量属性的自适应方案。在本博士项目中,我们研究并提出了一种基于体系结构的解决方案,该方案利用系统及其环境的运行时知识来处理存在系统质量目标不确定性的质量属性权衡和决策机制。为了验证,我们将a)在不同的领域中创建和建立案例研究,b)使用范例对我们提出的方法和现有方法进行基准测试。
{"title":"Handling multiple quality attributes trade-off in architecture-based self-adaptive systems","authors":"Sara Mahdavi-Hezavehi","doi":"10.1145/2993412.3010822","DOIUrl":"https://doi.org/10.1145/2993412.3010822","url":null,"abstract":"Self-adaptive systems are capable of autonomously making runtime decisions in order to deal with uncertain circumstances. In architecture-based self-adaptive (ABSA) systems the feedback loop uses self-reflecting models to perform decision making and ultimately apply adaptation to the system. One aspect of this decision making mechanism is to handle systems' quality attributes trade-off. An ABSA system is required to address the potential impacts of adaptation on multiple quality attributes, and select the adaptation option which satisfies the quality attributes of the system the best. In this PhD project, we study and propose an architecture-based solution which uses runtime knowledge of the systems and its environment to handle quality attributes trade-off and decision making mechanism in presence of system's quality goals uncertainty. For validation, we will a) create and set up case studies in various domains, and b) use exemplars to benchmark our proposed method with existing approaches.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129255853","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
An interface diversified honeypot for malware analysis 一个接口多样化的恶意软件分析蜜罐
Pub Date : 2016-11-28 DOI: 10.1145/2993412.2993417
S. Laurén, Sampsa Rauti, V. Leppänen
Defending information systems against advanced attacks is a challenging task; even if all the systems have been properly updated and all the known vulnerabilities have been patched, there is still the possibility of previously unknown zero day attack compromising the system. Honeypots offer a more proactive tool for detecting possible attacks. What is more, they can act as a tool for understanding attackers intentions. In this paper, we propose a design for a diversified honeypot. By increasing variability present in software, diversification decreases the number of assumptions an attacker can make about the target system.
保护信息系统免受高级攻击是一项具有挑战性的任务;即使所有的系统都得到了适当的更新,所有已知的漏洞都得到了修补,仍然存在以前未知的零日攻击危及系统的可能性。蜜罐提供了一种更主动的工具来检测可能的攻击。更重要的是,它们可以作为理解攻击者意图的工具。在本文中,我们提出了一个多样化的蜜罐的设计。通过增加软件中存在的可变性,多样化减少了攻击者可以对目标系统做出的假设数量。
{"title":"An interface diversified honeypot for malware analysis","authors":"S. Laurén, Sampsa Rauti, V. Leppänen","doi":"10.1145/2993412.2993417","DOIUrl":"https://doi.org/10.1145/2993412.2993417","url":null,"abstract":"Defending information systems against advanced attacks is a challenging task; even if all the systems have been properly updated and all the known vulnerabilities have been patched, there is still the possibility of previously unknown zero day attack compromising the system. Honeypots offer a more proactive tool for detecting possible attacks. What is more, they can act as a tool for understanding attackers intentions. In this paper, we propose a design for a diversified honeypot. By increasing variability present in software, diversification decreases the number of assumptions an attacker can make about the target system.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121919972","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Towards an evaluation method for software ecosystem practices 面向软件生态系统实践的评估方法
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3003386
Simone da Silva Amorim, E. Almeida, J. McGregor, C. Chavez
Many software ecosystems have achieved success in recent years. Practices adopted by them are responsible for guiding their evolution and keeping the ecosystem health. However, there is not an accepted quality process model, framework or method for evaluating the essential practices that are commonly used in a software ecosystem. This paper proposes an evaluation method for software ecosystem practices and a research plan for developing such a method. We focus on the practices and metrics that can improve various facets of the ecosystem, and contributes to achieving good health for the ecosystem. These practices and metrics are modeled by three views of the ecosystem: community, business and technical. We illustrate an initial representation that summarizes the steps of the method and the identification of key areas that are relevant to the practices.
近年来,许多软件生态系统取得了成功。它们采取的做法负责指导它们的进化和保持生态系统的健康。然而,目前还没有一个公认的质量过程模型、框架或方法来评估软件生态系统中常用的基本实践。本文提出了一种软件生态实践的评价方法,并提出了开发该方法的研究计划。我们专注于能够改善生态系统各个方面的实践和指标,并有助于实现生态系统的良好健康。这些实践和指标由生态系统的三个视图建模:社区、业务和技术。我们举例说明了一个初步的表示,它总结了方法的步骤,并确定了与实践相关的关键领域。
{"title":"Towards an evaluation method for software ecosystem practices","authors":"Simone da Silva Amorim, E. Almeida, J. McGregor, C. Chavez","doi":"10.1145/2993412.3003386","DOIUrl":"https://doi.org/10.1145/2993412.3003386","url":null,"abstract":"Many software ecosystems have achieved success in recent years. Practices adopted by them are responsible for guiding their evolution and keeping the ecosystem health. However, there is not an accepted quality process model, framework or method for evaluating the essential practices that are commonly used in a software ecosystem. This paper proposes an evaluation method for software ecosystem practices and a research plan for developing such a method. We focus on the practices and metrics that can improve various facets of the ecosystem, and contributes to achieving good health for the ecosystem. These practices and metrics are modeled by three views of the ecosystem: community, business and technical. We illustrate an initial representation that summarizes the steps of the method and the identification of key areas that are relevant to the practices.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116477097","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Software ecosystems architectural health: challenges x practices 软件生态系统架构健康:挑战x实践
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3011881
Simone da Silva Amorim, J. McGregor, E. Almeida, C. Chavez
Over time many software ecosystems have achieved success. Several organizations are opening their software projects for external businesses, creating an multi-organizational government to development their software platform The software architecture has an important participation in this success. In this context, there are some studies describing architectural challenges for software ecosystems, but little research is investigating how these challenges are being faced by software ecosystems organizations. This paper presents an initial investigation how open source software (OSS) ecosystems have faced several architectural challenges. We conducted interviews with three architects of different OSS ecosystems and gathered some architectural practices to lead with challenges. We also analyzed how these architectural practices have influenced the software ecosystem health, introducing the concept of Software Ecosystems Architectural Health.
随着时间的推移,许多软件生态系统取得了成功。一些组织正在为外部业务开放他们的软件项目,创建一个多组织的政府来开发他们的软件平台,软件架构在这一成功中起着重要的作用。在这种情况下,有一些研究描述了软件生态系统的架构挑战,但是很少有研究调查软件生态系统组织如何面对这些挑战。本文介绍了开源软件(OSS)生态系统如何面对几个架构挑战的初步调查。我们采访了三位不同OSS生态系统的架构师,并收集了一些架构实践来应对挑战。我们还分析了这些架构实践是如何影响软件生态系统健康的,并引入了软件生态系统架构健康的概念。
{"title":"Software ecosystems architectural health: challenges x practices","authors":"Simone da Silva Amorim, J. McGregor, E. Almeida, C. Chavez","doi":"10.1145/2993412.3011881","DOIUrl":"https://doi.org/10.1145/2993412.3011881","url":null,"abstract":"Over time many software ecosystems have achieved success. Several organizations are opening their software projects for external businesses, creating an multi-organizational government to development their software platform The software architecture has an important participation in this success. In this context, there are some studies describing architectural challenges for software ecosystems, but little research is investigating how these challenges are being faced by software ecosystems organizations. This paper presents an initial investigation how open source software (OSS) ecosystems have faced several architectural challenges. We conducted interviews with three architects of different OSS ecosystems and gathered some architectural practices to lead with challenges. We also analyzed how these architectural practices have influenced the software ecosystem health, introducing the concept of Software Ecosystems Architectural Health.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124198675","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Model-based development of sustainable cyber-physical systems including requirement formalization using the openModelica model-based development toolkit 基于模型的可持续网络物理系统开发,包括使用openModelica基于模型的开发工具包进行需求形式化
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3004843
P. Fritzson
Large-scale and increasingly software-defined systems in power and factory automation are very long-lived. Longevity requires sustainability - economically, environmentally and last but not least in terms of usability. Sustainability therefore requires continuous change. In this talk we look at handling requirements, models, and implementations in a model-driven formal way that lends itself to a more systematic change tracking than 'traditional' software development approaches and languages, but that also crosses boundaries of software-controlled physical equipment models (so-called cyber-physical systems), distributed digital control (networked systems) and software services. The industry is currently seeing a rapid development of cyber-physical system products. The systems that are developed have increasing demands of sustainability, dependability and usability. Moreover, lead time and cost efficiency continue to be essential for industry competitiveness. Extensive use of modeling and simulation - Model-Based Systems Engineering (MBSE) tools - throughout the value chain and system life-cycle is one of the most important ways to effectively target these challenges. Simultaneously there is an increased interest in open source tools that allow more control of tool features and support, and increased cooperation and shared access to knowledge and innovations between organizations. In this talk we briefly present technology and open source tooling for MBSE based on the Modelica and UML standards, supported by tools such as OpenModelica and Papyrus respectively. Modelica is a modern, strongly typed, declarative, equation-based, and object-oriented language for modeling and simulation of complex cyber-physical systems, whereas UML is a wide-spread industrial standard for software modeling. We present the OpenModelica open source MBSE environment including the ModelicaML Eclipse plug-in integrating Modelica and UML, covering the development process starting from business processes, via requirements, to models, which can be compiled to simulations or to product code. An important question is whether a particular system design fulfills or violates requirements that are imposed on the system under development. We give examples of case studies starting with natural-language requirements and show briefly how they are translated into models. Then, designs and verification scenarios are modeled, and simulation models are composed and simulated automatically. The simulation results produced can then be used to draw conclusions on requirement fulfillment. Other features of the environment are meta modeling for efficient model transformations, the Functional Mockup Interface for general tool integration, model-based optimization, as well as generation of parallel code for multi-core architectures.
电力和工厂自动化中的大规模和越来越多的软件定义系统是非常长寿的。长寿需要可持续性——经济上、环境上,最后但并非最不重要的是可用性。因此,可持续发展需要不断的变化。在这次演讲中,我们将以一种模型驱动的正式方式来处理需求、模型和实现,这种方式比“传统”的软件开发方法和语言更有利于系统的变化跟踪,但它也跨越了软件控制的物理设备模型(所谓的网络物理系统)、分布式数字控制(网络系统)和软件服务的边界。目前,信息物理系统产品正在快速发展。所开发的系统对可持续性、可靠性和可用性的要求越来越高。此外,交货时间和成本效率仍然是行业竞争力的关键。在整个价值链和系统生命周期中广泛使用建模和仿真——基于模型的系统工程(MBSE)工具,是有效应对这些挑战的最重要方法之一。同时,人们对开源工具的兴趣也在增加,这些工具允许对工具特性和支持进行更多的控制,并增加了组织之间的合作和对知识和创新的共享。在这次演讲中,我们简要介绍了基于Modelica和UML标准的MBSE的技术和开源工具,分别由OpenModelica和Papyrus等工具支持。Modelica是一种现代的、强类型的、声明式的、基于方程的、面向对象的语言,用于对复杂的网络物理系统进行建模和仿真,而UML是一种广泛传播的软件建模工业标准。我们展示了OpenModelica开源MBSE环境,包括集成Modelica和UML的ModelicaML Eclipse插件,涵盖了从业务流程开始的开发过程,通过需求,到模型,这些模型可以被编译为模拟或产品代码。一个重要的问题是,一个特定的系统设计是否满足或违反了强加在开发中的系统上的需求。我们给出了从自然语言需求开始的案例研究示例,并简要展示了如何将它们转换为模型。然后,对设计和验证场景进行建模,组成仿真模型并进行自动仿真。生成的模拟结果可以用来得出关于需求实现的结论。该环境的其他特性包括用于有效模型转换的元建模、用于通用工具集成的功能性建模接口、基于模型的优化以及用于多核架构的并行代码生成。
{"title":"Model-based development of sustainable cyber-physical systems including requirement formalization using the openModelica model-based development toolkit","authors":"P. Fritzson","doi":"10.1145/2993412.3004843","DOIUrl":"https://doi.org/10.1145/2993412.3004843","url":null,"abstract":"Large-scale and increasingly software-defined systems in power and factory automation are very long-lived. Longevity requires sustainability - economically, environmentally and last but not least in terms of usability. Sustainability therefore requires continuous change. In this talk we look at handling requirements, models, and implementations in a model-driven formal way that lends itself to a more systematic change tracking than 'traditional' software development approaches and languages, but that also crosses boundaries of software-controlled physical equipment models (so-called cyber-physical systems), distributed digital control (networked systems) and software services. The industry is currently seeing a rapid development of cyber-physical system products. The systems that are developed have increasing demands of sustainability, dependability and usability. Moreover, lead time and cost efficiency continue to be essential for industry competitiveness. Extensive use of modeling and simulation - Model-Based Systems Engineering (MBSE) tools - throughout the value chain and system life-cycle is one of the most important ways to effectively target these challenges. Simultaneously there is an increased interest in open source tools that allow more control of tool features and support, and increased cooperation and shared access to knowledge and innovations between organizations. In this talk we briefly present technology and open source tooling for MBSE based on the Modelica and UML standards, supported by tools such as OpenModelica and Papyrus respectively. Modelica is a modern, strongly typed, declarative, equation-based, and object-oriented language for modeling and simulation of complex cyber-physical systems, whereas UML is a wide-spread industrial standard for software modeling. We present the OpenModelica open source MBSE environment including the ModelicaML Eclipse plug-in integrating Modelica and UML, covering the development process starting from business processes, via requirements, to models, which can be compiled to simulations or to product code. An important question is whether a particular system design fulfills or violates requirements that are imposed on the system under development. We give examples of case studies starting with natural-language requirements and show briefly how they are translated into models. Then, designs and verification scenarios are modeled, and simulation models are composed and simulated automatically. The simulation results produced can then be used to draw conclusions on requirement fulfillment. Other features of the environment are meta modeling for efficient model transformations, the Functional Mockup Interface for general tool integration, model-based optimization, as well as generation of parallel code for multi-core architectures.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115382496","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Setting up architectural SW health builds in a new product line generation 在新一代产品线中设置架构软件运行状况构建
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3003392
B. Boss, Christian Tischer, Sreejith Krishnan, Arun Nutakki, V. Gopinath
Setting up a new product line generation in a mature domain, typically does not start from scratch but takes into consideration the architecture and assets of the former product line generation. Being able to accommodate legacy and 3rd party code is one of the major product line qualities to be met. On the other side, product line qualities like reusability, maintainability and alterability, i.e. being able to cope up with a large amount of variability, with configurability and fast integratability are major drivers. While setting up a new product line generation and thus a new corresponding architecture, we this time focused on architectural software (SW) health and tracking of architectural metrics from the very beginning. Taking the definition of "architecture being a set of design decisions" [18] literally, we attempt to implement an architectural check for every design decision taken. Architectural design decisions in our understanding do not only - and even not mainly - deal with the definition of components and their interaction but with patterns and rules or anti-patterns. The rules and anti-patterns, "what not to do" or more often also "what not to do any more", is even more important in setting up a new product line generation because developers are not only used to the old style of developing and the old architecture, but also still have to develop assets for both generations. In this article we describe selected architectural checks that we have implemented, the layered architecture check and the check for usage of obsolete services. Additionally we discuss selected architectural metrics: the coupling coefficient metrics and the instability metrics. In the summary and outlook we describe our experiences and still open topics in setting up architectural SW health checks for a large-scale product line. The real-world examples are taken from the domain of Engine Control Unit development at Robert Bosch GmbH.
在成熟的领域中建立新的产品线生成,通常不需要从头开始,而是要考虑以前产品线生成的体系结构和资产。能够容纳遗留代码和第三方代码是要满足的主要产品线质量之一。另一方面,产品线的质量,如可重用性、可维护性和可变性,即能够应对大量的可变性、可配置性和快速集成性,是主要的驱动因素。在建立新的产品线和相应的新架构的同时,我们这次从一开始就关注架构软件(SW)的健康和对架构指标的跟踪。按照“架构是一组设计决策”的定义[18],我们试图为所采取的每个设计决策实现架构检查。在我们的理解中,架构设计决策不仅——甚至不是主要——处理组件及其交互的定义,还处理模式和规则或反模式。规则和反模式,“不能做什么”,或者更经常的是“不能再做什么”,在建立新一代产品线时更加重要,因为开发人员不仅习惯了旧的开发风格和旧的架构,而且还必须为这两代人开发资产。在本文中,我们将描述已实现的选定体系结构检查、分层体系结构检查和过时服务使用检查。此外,我们还讨论了选定的体系结构度量:耦合系数度量和不稳定性度量。在总结和展望中,我们描述了我们在为大型产品线设置架构软件运行状况检查方面的经验和仍然开放的主题。真实世界的例子取自罗伯特博世有限公司的发动机控制单元开发领域。
{"title":"Setting up architectural SW health builds in a new product line generation","authors":"B. Boss, Christian Tischer, Sreejith Krishnan, Arun Nutakki, V. Gopinath","doi":"10.1145/2993412.3003392","DOIUrl":"https://doi.org/10.1145/2993412.3003392","url":null,"abstract":"Setting up a new product line generation in a mature domain, typically does not start from scratch but takes into consideration the architecture and assets of the former product line generation. Being able to accommodate legacy and 3rd party code is one of the major product line qualities to be met. On the other side, product line qualities like reusability, maintainability and alterability, i.e. being able to cope up with a large amount of variability, with configurability and fast integratability are major drivers. While setting up a new product line generation and thus a new corresponding architecture, we this time focused on architectural software (SW) health and tracking of architectural metrics from the very beginning. Taking the definition of \"architecture being a set of design decisions\" [18] literally, we attempt to implement an architectural check for every design decision taken. Architectural design decisions in our understanding do not only - and even not mainly - deal with the definition of components and their interaction but with patterns and rules or anti-patterns. The rules and anti-patterns, \"what not to do\" or more often also \"what not to do any more\", is even more important in setting up a new product line generation because developers are not only used to the old style of developing and the old architecture, but also still have to develop assets for both generations. In this article we describe selected architectural checks that we have implemented, the layered architecture check and the check for usage of obsolete services. Additionally we discuss selected architectural metrics: the coupling coefficient metrics and the instability metrics. In the summary and outlook we describe our experiences and still open topics in setting up architectural SW health checks for a large-scale product line. The real-world examples are taken from the domain of Engine Control Unit development at Robert Bosch GmbH.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128309043","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
On the use of security principles and practices for architecting cyber-physical systems 使用安全原则和实践架构网络物理系统
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3007553
Deepak Krishna, Vikas Kumar Jha, Mohammad Sharaf, H. Muccini
Context: Security has become a major concern for modern Cyber-Physical Systems (CPS), due to their distributed, sensing, actuating, and always connected nature. A considerable number of security principles and practices have been defined by the security communities and are being implemented in architecting secure CPS. Objective: The main question we are looking for an answer in this work is on how security principles have been used while architecting secure CPS. Method: We conducted a systematic literature review by searching four major scientific databases, resulting in 1591 candidate studies and eventually retaining 32 primary studies included for data collection after applying inclusion and exclusion criteria. Results: 81% of the studies use architectural patterns in designing systems. Among the security principles used integrity is an attribute that is implemented in systems most frequently (53%) followed by confidentiality (43%) and availability (37%).Often these principles are applied in combination with each other. More than 31% of design implementation do not consider any architectural styles while implementing security in CPS. Only 9% of studies suggests security is applied ubiquitously across all relevant CPS components. Conclusions: Our analysis shows that the traditional practice to only add security as an additional layer/component into the CPS is still in place, as opposed to the real need to ensure the security of all relevant components. There is a lack of uniformity in the application of security principles in designing CPS.
背景:由于现代网络物理系统(CPS)的分布式、传感、驱动和始终连接的性质,安全性已成为其主要关注的问题。安全社区已经定义了相当多的安全原则和实践,并正在构建安全的CPS中实现。目标:我们在这项工作中寻找答案的主要问题是,在构建安全的CPS时如何使用安全原则。方法:通过检索4个主要的科学数据库,进行系统的文献综述,通过应用纳入和排除标准,最终获得1591项候选研究,最终保留32项主要研究纳入数据收集。结果:81%的研究在设计系统时使用了架构模式。在使用的安全原则中,完整性是系统中最常实现的属性(53%),其次是机密性(43%)和可用性(37%)。通常这些原则相互结合应用。超过31%的设计实施在CPS中实施安全性时没有考虑任何架构风格。只有9%的研究表明,所有相关的CPS组件都普遍应用了安全性。结论:我们的分析表明,仅将安全性作为附加层/组件添加到CPS中的传统做法仍然存在,而不是真正需要确保所有相关组件的安全性。在CPS设计中,安全原则的应用缺乏一致性。
{"title":"On the use of security principles and practices for architecting cyber-physical systems","authors":"Deepak Krishna, Vikas Kumar Jha, Mohammad Sharaf, H. Muccini","doi":"10.1145/2993412.3007553","DOIUrl":"https://doi.org/10.1145/2993412.3007553","url":null,"abstract":"Context: Security has become a major concern for modern Cyber-Physical Systems (CPS), due to their distributed, sensing, actuating, and always connected nature. A considerable number of security principles and practices have been defined by the security communities and are being implemented in architecting secure CPS. Objective: The main question we are looking for an answer in this work is on how security principles have been used while architecting secure CPS. Method: We conducted a systematic literature review by searching four major scientific databases, resulting in 1591 candidate studies and eventually retaining 32 primary studies included for data collection after applying inclusion and exclusion criteria. Results: 81% of the studies use architectural patterns in designing systems. Among the security principles used integrity is an attribute that is implemented in systems most frequently (53%) followed by confidentiality (43%) and availability (37%).Often these principles are applied in combination with each other. More than 31% of design implementation do not consider any architectural styles while implementing security in CPS. Only 9% of studies suggests security is applied ubiquitously across all relevant CPS components. Conclusions: Our analysis shows that the traditional practice to only add security as an additional layer/component into the CPS is still in place, as opposed to the real need to ensure the security of all relevant components. There is a lack of uniformity in the application of security principles in designing CPS.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"183 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124617391","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A study about architectural requirements in a transition from product to software platform 从产品到软件平台过渡过程中的架构需求研究
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3003388
A. Gusmão, C. D. Souza, R. Reis, A. Lima
Software ecosystems gained attention from the industry by establishing a network of users, partners, and service providers. Several companies are interested in establishing their own ecosystems due to the business advantages they bring. However, it is not clear how a company should go about doing this. This paper describes a case study about the transition from a software product to a software platform aimed at supporting an ecosystem. A software platform is responsible for managing an ecosystem's extensions, therefore its software architecture is essential to facilitate the establishment of an ecosystem. This transition is supported by a set of architectural requirements for a software platform that we introduce. We also discuss the required changes in the software product architecture to support a platform.
软件生态系统通过建立用户、合作伙伴和服务提供商的网络,获得了业界的关注。由于生态系统带来的商业优势,一些公司对建立自己的生态系统很感兴趣。然而,目前还不清楚一家公司应该如何做到这一点。本文描述了一个案例研究,关于从软件产品到软件平台的过渡,旨在支持一个生态系统。软件平台负责管理生态系统的扩展,因此其软件架构对于促进生态系统的建立至关重要。我们引入的软件平台的一组体系结构需求支持这种转换。我们还讨论了软件产品体系结构中支持平台所需的更改。
{"title":"A study about architectural requirements in a transition from product to software platform","authors":"A. Gusmão, C. D. Souza, R. Reis, A. Lima","doi":"10.1145/2993412.3003388","DOIUrl":"https://doi.org/10.1145/2993412.3003388","url":null,"abstract":"Software ecosystems gained attention from the industry by establishing a network of users, partners, and service providers. Several companies are interested in establishing their own ecosystems due to the business advantages they bring. However, it is not clear how a company should go about doing this. This paper describes a case study about the transition from a software product to a software platform aimed at supporting an ecosystem. A software platform is responsible for managing an ecosystem's extensions, therefore its software architecture is essential to facilitate the establishment of an ecosystem. This transition is supported by a set of architectural requirements for a software platform that we introduce. We also discuss the required changes in the software product architecture to support a platform.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130728340","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
A rule-based approach for evolution of AADL models based on changes in functional requirements 基于功能需求变化的AADL模型演化的基于规则的方法
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3004846
Arda Goknil, I. Kurtev, K. V. D. Berg
The increasing complexity of software systems makes change management costly and time consuming. To ensure the cost-effective system longevity and endurance, it is crucial to apply change management in the early stages of software development. In this paper, we introduce a rule-based approach to make software architecture evolving based on counter examples provided by a model checker for violated, changing functional requirements. The approach works on software architecture in AADL and is based on verifying functional requirements using Maude model checker. Our goal is to provide guidelines to the architect about potential changes. Using an industrial example, we show how our approach helps in determining changes to produce a new version of the architecture.
软件系统日益增加的复杂性使得变更管理成本高昂且耗时。为了确保系统的寿命和耐久性,在软件开发的早期阶段应用变更管理是至关重要的。在本文中,我们介绍了一种基于规则的方法,使软件架构基于模型检查器提供的反例来发展,以满足违反的、不断变化的功能需求。该方法适用于AADL中的软件体系结构,并基于使用Maude模型检查器验证功能需求。我们的目标是为架构师提供关于潜在变更的指导方针。通过一个工业示例,我们展示了我们的方法如何帮助确定变更以生成新版本的体系结构。
{"title":"A rule-based approach for evolution of AADL models based on changes in functional requirements","authors":"Arda Goknil, I. Kurtev, K. V. D. Berg","doi":"10.1145/2993412.3004846","DOIUrl":"https://doi.org/10.1145/2993412.3004846","url":null,"abstract":"The increasing complexity of software systems makes change management costly and time consuming. To ensure the cost-effective system longevity and endurance, it is crucial to apply change management in the early stages of software development. In this paper, we introduce a rule-based approach to make software architecture evolving based on counter examples provided by a model checker for violated, changing functional requirements. The approach works on software architecture in AADL and is based on verifying functional requirements using Maude model checker. Our goal is to provide guidelines to the architect about potential changes. Using an industrial example, we show how our approach helps in determining changes to produce a new version of the architecture.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133601575","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Towards the essentials of architecture documentation for avoiding architecture erosion 针对架构文档的要点,以避免架构侵蚀
Pub Date : 2016-11-28 DOI: 10.1145/2993412.3004844
Sebastian Gerdes, Stefanie Jasser, Matthias Riebisch, Sandra Schröder, Mohamed Soliman, T. Stehle
Software architecture documentation is essential for preventing architecture erosion that is a major concern of sustainable software systems. However, the high effort for elaboration and maintenance of architecture documentation hinders its acceptance in practice. Most state-of-the-art research methods assume comprehensive architecture documentation. By reducing architecture documentation to those aspects that are most important for architecture erosion, we want to achieve more acceptance for architecture documentation especially in agile projects. This reduction, however, has effects on architecture-related activities during software design and implementation.
软件架构文档对于防止架构侵蚀是必不可少的,而架构侵蚀是可持续软件系统的主要关注点。然而,对于架构文档的精化和维护的高度努力阻碍了它在实践中的接受。大多数最先进的研究方法都假定有全面的架构文档。通过将体系结构文档减少到那些对体系结构侵蚀最重要的方面,我们希望实现对体系结构文档的更多接受,特别是在敏捷项目中。然而,这种减少对软件设计和实现期间与体系结构相关的活动有影响。
{"title":"Towards the essentials of architecture documentation for avoiding architecture erosion","authors":"Sebastian Gerdes, Stefanie Jasser, Matthias Riebisch, Sandra Schröder, Mohamed Soliman, T. Stehle","doi":"10.1145/2993412.3004844","DOIUrl":"https://doi.org/10.1145/2993412.3004844","url":null,"abstract":"Software architecture documentation is essential for preventing architecture erosion that is a major concern of sustainable software systems. However, the high effort for elaboration and maintenance of architecture documentation hinders its acceptance in practice. Most state-of-the-art research methods assume comprehensive architecture documentation. By reducing architecture documentation to those aspects that are most important for architecture erosion, we want to achieve more acceptance for architecture documentation especially in agile projects. This reduction, however, has effects on architecture-related activities during software design and implementation.","PeriodicalId":409631,"journal":{"name":"Proccedings of the 10th European Conference on Software Architecture Workshops","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116667874","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
期刊
Proccedings of the 10th European Conference on Software Architecture Workshops
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1