首页 > 最新文献

Software and Systems Modeling最新文献

英文 中文
User journey games: automating user-centric analysis 用户旅程游戏:自动进行以用户为中心的分析
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-03-14 DOI: 10.1007/s10270-024-01148-2
Paul Kobialka, S. Lizeth Tapia Tarifa, Gunnar R. Bergersen, Einar Broch Johnsen

The servitization of business is moving industry to business models driven by customer demand. Customer satisfaction is connected with financial rewards, forcing companies to invest in their users’ experience. User journeys describe how users maneuver through a service. Today, user journeys are typically modeled graphically, and lack formalization and analysis support. This paper proposes a formalization of user journeys as weighted games between the user and the service provider and a systematic data-driven method to derive these user journey games from system logs, using process mining techniques. As the derived games may contain cycles, we define an algorithm to transform user journeys games with cycles into acyclic weighted games, which can be model checked using to uncover potential challenges in a company’s interactions with its users and derive company strategies to guide users through their journeys. Finally, we propose a user journey sliding-window analysis to detect changes in the user journey over time by model checking a sequence of generated games. Our analysis pipeline has been evaluated on an industrial case study; it revealed design challenges within the studied service and could be used to derive actionable recommendations for improvement.

企业的服务化正在使行业转向由客户需求驱动的商业模式。客户满意度与经济回报息息相关,迫使企业投资于用户体验。用户旅程描述了用户如何通过服务进行操作。目前,用户旅程通常以图形建模,缺乏正规化和分析支持。本文提出将用户旅程正规化为用户与服务提供商之间的加权博弈,并提出一种系统化的数据驱动方法,利用流程挖掘技术从系统日志中推导出这些用户旅程博弈。由于推导出的博弈可能包含循环,我们定义了一种算法,可将包含循环的用户旅程博弈转化为非循环加权博弈,通过对这些博弈进行模型检查,可发现公司与用户互动中的潜在挑战,并推导出公司策略,以引导用户完成他们的旅程。最后,我们提出了用户旅程滑动窗口分析法,通过对生成的游戏序列进行模型检查,检测用户旅程随时间的变化。我们的分析管道已在一项工业案例研究中进行了评估;它揭示了所研究服务中存在的设计挑战,并可用于得出可行的改进建议。
{"title":"User journey games: automating user-centric analysis","authors":"Paul Kobialka, S. Lizeth Tapia Tarifa, Gunnar R. Bergersen, Einar Broch Johnsen","doi":"10.1007/s10270-024-01148-2","DOIUrl":"https://doi.org/10.1007/s10270-024-01148-2","url":null,"abstract":"<p>The servitization of business is moving industry to business models driven by customer demand. Customer satisfaction is connected with financial rewards, forcing companies to invest in their users’ experience. User journeys describe how users maneuver through a service. Today, user journeys are typically modeled graphically, and lack formalization and analysis support. This paper proposes a formalization of user journeys as weighted games between the user and the service provider and a systematic data-driven method to derive these user journey games from system logs, using process mining techniques. As the derived games may contain cycles, we define an algorithm to transform user journeys games with cycles into acyclic weighted games, which can be model checked using to uncover potential challenges in a company’s interactions with its users and derive company strategies to guide users through their journeys. Finally, we propose a user journey sliding-window analysis to detect changes in the user journey over time by model checking a sequence of generated games. Our analysis pipeline has been evaluated on an industrial case study; it revealed design challenges within the studied service and could be used to derive actionable recommendations for improvement.\u0000</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"74 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140152179","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A lightweight approach to nontermination inference using Constrained Horn Clauses 利用约束角分句进行非终止推理的轻量级方法
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-03-14 DOI: 10.1007/s10270-024-01161-5
Bishoksan Kafle, Graeme Gange, Peter Schachte, Harald Søndergaard, Peter J. Stuckey

Nontermination is an unwanted program property for some software systems, and a safety property for other systems. In either case, automated discovery of preconditions for nontermination is of interest. We introduce NtHorn, a fast lightweight nontermination analyser, which is able to deduce non-trivial sufficient conditions for nontermination. Using Constrained Horn Clauses (CHCs) as a vehicle, we show how established techniques for CHC program transformation and abstract interpretation can be exploited for the purpose of nontermination analysis. NtHorn is comparable in effectiveness to the state-of-the-art nontermination analysis tools, as measured on standard competition benchmark suites (consisting of integer manipulating programs), while typically solving problems faster by one order of magnitude.

对于某些软件系统来说,非终止是一种不必要的程序属性,而对于其他系统来说,非终止则是一种安全属性。无论是哪种情况,自动发现非终止的先决条件都很有意义。我们介绍了一种快速轻量级非终止分析器 NtHorn,它能够推导出非终止的非难充分条件。我们以受限 Horn 子句(CHC)为载体,展示了如何利用 CHC 程序转换和抽象解释的成熟技术来进行非终止分析。根据标准竞赛基准套件(由整数操作程序组成)的测量,NtHorn 的有效性与最先进的非终止分析工具相当,而解决问题的速度通常要快一个数量级。
{"title":"A lightweight approach to nontermination inference using Constrained Horn Clauses","authors":"Bishoksan Kafle, Graeme Gange, Peter Schachte, Harald Søndergaard, Peter J. Stuckey","doi":"10.1007/s10270-024-01161-5","DOIUrl":"https://doi.org/10.1007/s10270-024-01161-5","url":null,"abstract":"<p>Nontermination is an unwanted program property for some software systems, and a safety property for other systems. In either case, automated discovery of preconditions for nontermination is of interest. We introduce <span>NtHorn</span>, a fast lightweight nontermination analyser, which is able to deduce non-trivial sufficient conditions for nontermination. Using Constrained Horn Clauses (CHCs) as a vehicle, we show how established techniques for CHC program transformation and abstract interpretation can be exploited for the purpose of nontermination analysis. <span>NtHorn</span> is comparable in effectiveness to the state-of-the-art nontermination analysis tools, as measured on standard competition benchmark suites (consisting of integer manipulating programs), while typically solving problems faster by one order of magnitude.\u0000</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"13 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-03-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140152181","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Modeling competences in enterprise architecture: from knowledge, skills, and attitudes to organizational capabilities 企业架构能力建模:从知识、技能和态度到组织能力
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-03-05 DOI: 10.1007/s10270-024-01151-7

Abstract

Competence-based approaches have received increased attention, as the demand for qualified people with the right combination of competences establishes itself as a major factor of organizational performance. This paper examines how competences can be incorporated into Enterprise Architecture modeling: (i) we identify a key set of competence-related concepts such as knowledge, skills, and attitudes, (ii) analyze and relate them using a reference ontology (grounded on the Unified Foundational Ontology), and (iii) propose a representation strategy for modeling competences and their constituent elements leveraging the ArchiMate language, discussing how the proposed models can fit in enterprise competence-based practices. Our approach is intended to cover two tasks relevant to the combined application of Enterprise Architecture and Competence Modeling: ‘zooming in’ on competences, revealing the relations between competences, knowledge, skills, attitudes and other personal characteristics that matter in organizational performance, and ‘zooming out’ of competences, placing them in the wider context of other personal competences and overall organizational capabilities. An assessment of the representation is offered in the form of an empirical survey.

摘要 基于能力的方法受到越来越多的关注,因为对具有适当能力组合的合格人员的需求已成为组织绩效的一个主要因素。本文探讨了如何将能力纳入企业架构建模:(i) 我们确定了一组与能力相关的关键概念,如知识、技能和态度;(ii) 使用参考本体(以统一基础本体为基础)对它们进行分析和关联;(iii) 提出了一种利用 ArchiMate 语言对能力及其构成要素进行建模的表示策略,并讨论了所提出的模型如何适合基于能力的企业实践。我们的方法旨在涵盖与企业架构和能力建模的联合应用相关的两项任务:"放大 "能力,揭示能力、知识、技能、态度和其他与组织绩效相关的个人特征之间的关系;以及 "缩小 "能力,将其置于其他个人能力和整体组织能力的大背景下。以实证调查的形式对代表性进行了评估。
{"title":"Modeling competences in enterprise architecture: from knowledge, skills, and attitudes to organizational capabilities","authors":"","doi":"10.1007/s10270-024-01151-7","DOIUrl":"https://doi.org/10.1007/s10270-024-01151-7","url":null,"abstract":"<h3>Abstract</h3> <p>Competence-based approaches have received increased attention, as the demand for qualified people with the right combination of competences establishes itself as a major factor of organizational performance. This paper examines how competences can be incorporated into Enterprise Architecture modeling: (i) we identify a key set of competence-related concepts such as knowledge, skills, and attitudes, (ii) analyze and relate them using a reference ontology (grounded on the Unified Foundational Ontology), and (iii) propose a representation strategy for modeling competences and their constituent elements leveraging the ArchiMate language, discussing how the proposed models can fit in enterprise competence-based practices. Our approach is intended to cover two tasks relevant to the combined application of Enterprise Architecture and Competence Modeling: ‘zooming in’ on competences, revealing the relations between competences, knowledge, skills, attitudes and other personal characteristics that matter in organizational performance, and ‘zooming out’ of competences, placing them in the wider context of other personal competences and overall organizational capabilities. An assessment of the representation is offered in the form of an empirical survey.</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"10 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-03-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140035352","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Circular systems engineering 循环系统工程
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-29 DOI: 10.1007/s10270-024-01154-4

Abstract

The perception of the value and propriety of modern engineered systems is changing. In addition to their functional and extra-functional properties, nowadays’ systems are also evaluated by their sustainability properties. The next generation of systems will be characterized by an overall elevated sustainability—including their post-life, driven by efficient value retention mechanisms. Current systems engineering practices fall short of supporting these ambitions and need to be revised appropriately. In this paper, we introduce the concept of circular systems engineering, a novel paradigm for systems sustainability, and define two principles to successfully implement it: end-to-end sustainability and bipartite sustainability. We outline typical organizational evolution patterns that lead to the implementation and adoption of circularity principles, and outline key challenges and research opportunities.

摘要 人们对现代工程系统的价值和适当性的认识正在发生变化。除了功能和功能外特性外,如今人们还根据系统的可持续性特性对其进行评估。在高效保值机制的驱动下,下一代系统的特点将是整体可持续性的提升,包括其使用寿命的延长。当前的系统工程实践无法支持这些雄心壮志,因此需要进行适当修改。在本文中,我们介绍了循环系统工程的概念--一种新的系统可持续性范式,并定义了成功实施这一范式的两个原则:端到端可持续性和双向可持续性。我们概述了导致实施和采用循环性原则的典型组织演变模式,并概述了主要挑战和研究机会。
{"title":"Circular systems engineering","authors":"","doi":"10.1007/s10270-024-01154-4","DOIUrl":"https://doi.org/10.1007/s10270-024-01154-4","url":null,"abstract":"<h3>Abstract</h3> <p>The perception of the value and propriety of modern engineered systems is changing. In addition to their functional and extra-functional properties, nowadays’ systems are also evaluated by their sustainability properties. The next generation of systems will be characterized by an overall elevated sustainability—including their post-life, driven by efficient value retention mechanisms. Current systems engineering practices fall short of supporting these ambitions and need to be revised appropriately. In this paper, we introduce the concept of circular systems engineering, a novel paradigm for systems sustainability, and define two principles to successfully implement it: end-to-end sustainability and bipartite sustainability. We outline typical organizational evolution patterns that lead to the implementation and adoption of circularity principles, and outline key challenges and research opportunities.</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"84 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140006337","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
FloBP: a model-driven approach for developing and executing IoT-enhanced business processes FloBP:开发和执行物联网增强型业务流程的模型驱动方法
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-28 DOI: 10.1007/s10270-024-01150-8
Arianna Fedeli, Fabrizio Fornari, Andrea Polini, Barbara Re, Victoria Torres, Pedro Valderas

The capability to integrate Internet of Things (IoT) technologies into business processes (BPs) has emerged as a transformative paradigm, offering unprecedented opportunities for organisations to enhance their operational efficiency and productivity. Interacting with the physical world and leveraging real-world data to make more informed business decisions is of greatest interest, and the idea of IoT-enhanced BPs promises to automate and improve business activities and permit them to adapt to the physical environment of execution. Nonetheless, combining these two domains is challenging, and it requires new modelling methods that do not increase notation complexity and provide independent execution between the process and the underlying device technology. In this work, we propose FloBP, a model-driven engineering approach separating concerns between the IoT and BPs, providing a structured and systematic approach to modelling and executing IoT-enhanced BPs. Applying the separation of concerns through an interdisciplinary team is needed to ensure that the approach covers all necessary process aspects, including technological and modelling ones. The FloBP approach is based on modelling tools and a microservices architecture to deploy BPMN models, and it facilitates integration with the physical world, providing flexibility to support multiple IoT device technologies and their evolution. A smart canteen scenario describes and evaluates the approach’s feasibility and its possible adoption by various stakeholders. The performed evaluation concludes that the application of FloBP facilitates the modelling and development of IoT-enhanced BPs by sharing and reusing knowledge among IoT and BP experts.

将物联网(IoT)技术整合到业务流程(BP)中的能力已成为一种变革模式,为企业提高运营效率和生产力提供了前所未有的机遇。与物理世界互动并利用真实世界的数据做出更明智的业务决策是人们最感兴趣的问题,而物联网增强型业务流程的想法有望实现业务活动的自动化和改进,并使其能够适应执行过程中的物理环境。然而,将这两个领域结合起来具有挑战性,它需要新的建模方法,既不增加符号的复杂性,又能在流程和底层设备技术之间提供独立的执行。在这项工作中,我们提出了 FloBP,这是一种模型驱动的工程方法,将物联网和业务流程之间的关注点分离开来,为物联网增强型业务流程的建模和执行提供了一种结构化和系统化的方法。需要通过跨学科团队来实现关注点的分离,以确保该方法涵盖所有必要的流程方面,包括技术和建模方面。FloBP 方法基于建模工具和微服务架构来部署 BPMN 模型,它促进了与物理世界的集成,为支持多种物联网设备技术及其演进提供了灵活性。一个智能食堂场景描述并评估了该方法的可行性以及各利益相关方采用该方法的可能性。所进行的评估得出结论,FloBP 的应用通过在物联网和 BP 专家之间共享和重用知识,促进了物联网增强型 BP 的建模和开发。
{"title":"FloBP: a model-driven approach for developing and executing IoT-enhanced business processes","authors":"Arianna Fedeli, Fabrizio Fornari, Andrea Polini, Barbara Re, Victoria Torres, Pedro Valderas","doi":"10.1007/s10270-024-01150-8","DOIUrl":"https://doi.org/10.1007/s10270-024-01150-8","url":null,"abstract":"<p>The capability to integrate Internet of Things (IoT) technologies into business processes (BPs) has emerged as a transformative paradigm, offering unprecedented opportunities for organisations to enhance their operational efficiency and productivity. Interacting with the physical world and leveraging real-world data to make more informed business decisions is of greatest interest, and the idea of IoT-enhanced BPs promises to automate and improve business activities and permit them to adapt to the physical environment of execution. Nonetheless, combining these two domains is challenging, and it requires new modelling methods that do not increase notation complexity and provide independent execution between the process and the underlying device technology. In this work, we propose <i>FloBP</i>, a model-driven engineering approach separating concerns between the IoT and BPs, providing a structured and systematic approach to modelling and executing IoT-enhanced BPs. Applying the separation of concerns through an interdisciplinary team is needed to ensure that the approach covers all necessary process aspects, including technological and modelling ones. The <i>FloBP</i> approach is based on modelling tools and a microservices architecture to deploy BPMN models, and it facilitates integration with the physical world, providing flexibility to support multiple IoT device technologies and their evolution. A smart canteen scenario describes and evaluates the approach’s feasibility and its possible adoption by various stakeholders. The performed evaluation concludes that the application of <i>FloBP</i> facilitates the modelling and development of IoT-enhanced BPs by sharing and reusing knowledge among IoT and BP experts.</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"23 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140006637","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A technique for discovering BPMN collaboration diagrams 发现 BPMN 协作图的技术
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-28 DOI: 10.1007/s10270-024-01153-5

Abstract

The process mining domain is actively supported by techniques and tools addressing the discovery of single-participant business processes. In contrast, approaches for discovering collaboration models out of distributed data stored by multiple interacting participants are lacking. In this context, we propose a novel technique for discovering collaboration models from sets of event logs that include data about participants’ interactions. The technique discovers each participant’s process through already available algorithms introduced by the process mining community. Then, it analyzes the logs to extract information on the exchange of messages to automatically combine the discovered processes into a collaboration model representing the distributed system’s behavior and providing analytics on the interactions. The technique has been implemented in a tool evaluated via several experiments on different application domains.

摘要 流程挖掘领域得到了用于发现单个参与者业务流程的技术和工具的积极支持。相比之下,从多个交互参与者存储的分布式数据中发现协作模型的方法还很缺乏。在这种情况下,我们提出了一种从包含参与者交互数据的事件日志集中发现协作模型的新技术。该技术通过流程挖掘社区推出的现有算法发现每个参与者的流程。然后,它分析日志,提取信息交换信息,自动将发现的进程组合成一个协作模型,代表分布式系统的行为,并提供交互分析。该技术已在一个工具中实现,并通过在不同应用领域的多次实验进行了评估。
{"title":"A technique for discovering BPMN collaboration diagrams","authors":"","doi":"10.1007/s10270-024-01153-5","DOIUrl":"https://doi.org/10.1007/s10270-024-01153-5","url":null,"abstract":"<h3>Abstract</h3> <p>The process mining domain is actively supported by techniques and tools addressing the discovery of single-participant business processes. In contrast, approaches for discovering collaboration models out of distributed data stored by multiple interacting participants are lacking. In this context, we propose a novel technique for discovering collaboration models from sets of event logs that include data about participants’ interactions. The technique discovers each participant’s process through already available algorithms introduced by the process mining community. Then, it analyzes the logs to extract information on the exchange of messages to automatically combine the discovered processes into a collaboration model representing the distributed system’s behavior and providing analytics on the interactions. The technique has been implemented in a tool evaluated via several experiments on different application domains.</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"68 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140006542","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Report on the state of the SoSyM journal (2023 summary) SoSyM 期刊状况报告(2023 年摘要)
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-19 DOI: 10.1007/s10270-024-01152-6
Stéphanie Challita, Benoit Combemale, Huseyin Ergin, Jeff Gray, Bernhard Rumpe, Martin Schindler
{"title":"Report on the state of the SoSyM journal (2023 summary)","authors":"Stéphanie Challita, Benoit Combemale, Huseyin Ergin, Jeff Gray, Bernhard Rumpe, Martin Schindler","doi":"10.1007/s10270-024-01152-6","DOIUrl":"https://doi.org/10.1007/s10270-024-01152-6","url":null,"abstract":"","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"29 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140885140","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Ontology-based security modeling in ArchiMate ArchiMate 中基于本体的安全建模
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-16 DOI: 10.1007/s10270-024-01149-1
Ítalo Oliveira, Tiago Prince Sales, João Paulo A. Almeida, Riccardo Baratella, Mattia Fumagalli, Giancarlo Guizzardi

Enterprise Risk Management involves the process of identification, evaluation, treatment, and communication regarding risks throughout the enterprise. To support the tasks associated with this process, several frameworks and modeling languages have been proposed, such as the Risk and Security Overlay (RSO) of ArchiMate. An ontological investigation of this artifact would reveal its adequacy, capabilities, and limitations w.r.t. the domain of risk and security. Based on that, a language redesign can be proposed as a refinement. Such analysis and redesign have been executed for the risk elements of the RSO grounded in the Common Ontology of Value and Risk. The next step along this line of research is to address the following research problems: What would be the outcome of an ontological analysis of security-related elements of the RSO? That is, can we identify other semantic deficiencies in the RSO through an ontological analysis? Once such an analysis is provided, can we redesign the security elements of the RSO accordingly, in order to produce an improved artifact? Here, with the aid of the Reference Ontology for Security Engineering (ROSE) and the ontological theory of prevention behind it, we address the remaining gap by proceeding with an ontological analysis of the security-related constructs of the RSO. The outcome of this assessment is an ontology-based redesign of the ArchiMate language regarding security modeling. In a nutshell, we report the following contributions: (1) an ontological analysis of the RSO that identifies six limitations concerning security modeling; (2) because of the key role of the notion of prevention in security modeling, the introduction of the ontological theory of prevention in ArchiMate; (3) a well-founded redesign of security elements of ArchiMate; and (4) ontology-based security modeling patterns that are logical consequences of our proposal of redesign due to its underlying ontology of security. As a form of evaluation, we show that our proposal can describe risk treatment options, according to ISO 31000. Finally, besides presenting multiple examples, we proceed with a real-world illustrative application taken from the cybersecurity domain.

企业风险管理涉及整个企业风险的识别、评估、处理和沟通过程。为了支持与这一过程相关的任务,人们提出了一些框架和建模语言,如 ArchiMate 的风险与安全叠加(RSO)。对这一工具的本体论研究将揭示其在风险和安全领域的适当性、能力和局限性。在此基础上,可以提出语言的重新设计作为改进。针对以价值与风险共同本体为基础的《风险与安全标准》的风险要素,已经进行了此类分析和重新设计。下一步的研究方向是解决以下研究问题:对《条例》中与安全相关的要素进行本体分析的结果会是什么?也就是说,我们能否通过本体分析发现《标准》中的其他语义缺陷?一旦有了这样的分析结果,我们能否据此重新设计《标准说明》的安全要素,从而制作出改进的人工制品?在此,我们借助安全工程参考本体(ROSE)及其背后的本体论预防理论,通过对《标准说明》中与安全相关的构造进行本体论分析,来弥补尚存的不足。评估的结果是对 ArchiMate 语言的安全建模进行了基于本体的重新设计。简而言之,我们报告了以下贡献:(1) 对《RSO》进行了本体分析,确定了有关安全建模的六个局限性;(2) 由于预防概念在安全建模中的关键作用,在 ArchiMate 中引入了预防本体理论;(3) 对 ArchiMate 的安全元素进行了有理有据的重新设计;(4) 基于本体的安全建模模式,这些模式是我们重新设计建议的逻辑结果,因为它的基础是安全本体。作为一种评估形式,我们表明我们的建议可以根据 ISO 31000 描述风险处理方案。最后,除了介绍多个示例外,我们还从网络安全领域的实际应用出发进行说明。
{"title":"Ontology-based security modeling in ArchiMate","authors":"Ítalo Oliveira, Tiago Prince Sales, João Paulo A. Almeida, Riccardo Baratella, Mattia Fumagalli, Giancarlo Guizzardi","doi":"10.1007/s10270-024-01149-1","DOIUrl":"https://doi.org/10.1007/s10270-024-01149-1","url":null,"abstract":"<p>Enterprise Risk Management involves the process of identification, evaluation, treatment, and communication regarding risks throughout the enterprise. To support the tasks associated with this process, several frameworks and modeling languages have been proposed, such as the <i>Risk and Security Overlay</i> (RSO) of ArchiMate. An ontological investigation of this artifact would reveal its adequacy, capabilities, and limitations w.r.t. the domain of risk and security. Based on that, a language redesign can be proposed as a refinement. Such analysis and redesign have been executed for the risk elements of the RSO grounded in the <i>Common Ontology of Value and Risk</i>. The next step along this line of research is to address the following research problems: What would be the outcome of an ontological analysis of security-related elements of the RSO? That is, can we identify other semantic deficiencies in the RSO through an ontological analysis? Once such an analysis is provided, can we redesign the security elements of the RSO accordingly, in order to produce an improved artifact? Here, with the aid of the <i>Reference Ontology for Security Engineering</i> (ROSE) and the ontological theory of prevention behind it, we address the remaining gap by proceeding with an <i>ontological analysis</i> of the security-related constructs of the RSO. The outcome of this assessment is an ontology-based redesign of the ArchiMate language regarding security modeling. In a nutshell, we report the following contributions: (1) an ontological analysis of the RSO that identifies six limitations concerning security modeling; (2) because of the key role of the notion of prevention in security modeling, the introduction of the ontological theory of prevention in ArchiMate; (3) a well-founded redesign of security elements of ArchiMate; and (4) ontology-based security modeling patterns that are logical consequences of our proposal of redesign due to its underlying ontology of security. As a form of evaluation, we show that our proposal can describe risk treatment options, according to ISO 31000. Finally, besides presenting multiple examples, we proceed with a real-world illustrative application taken from the cybersecurity domain.\u0000</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"30 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"139768140","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Toward an ontology for EA modeling and EA model quality 为 EA 建模和 EA 模型质量建立本体论
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-03 DOI: 10.1007/s10270-023-01146-w
Jan A. H. Schoonderbeek, Henderik A. Proper

Models have long since been used, in different shapes and forms, to understand, communicate about, and (re)shape, the world around us; including many different social, economic, biological, chemical, physical, and digital aspects. This is also the case in the context of enterprise architecture (EA), where we see a wide range of models in many different shapes and forms being used as well. Researchers in EA modeling usually introduce their own lexicon, and perspective of what a model actually is, while accepting (often implicitly) the accompanying ontological commitments. Similarly, practitioners of EA modeling implicitly also commit to (different) ontologies, resulting in models that have an uncertain ontological standing. This is because, for the subject domain of enterprise architecture models (as opposed to the content of such models), no single ontology has gained major traction. As a result, studies into aspects of enterprise architecture models, such as “model quality” and “return on modeling effort”, are fragmented, and cannot readily be compared or combined. This paper proposes a comprehensive applied ontology, specifically geared to enterprise architecture modeling. Ontologies represent structured knowledge about a particular subject domain. It allows for study into, and reasoning about, that subject domain. Our ontology is derived from a theory of modeling, while clarifying concepts such as “enterprise architecture model”, and introduces novel concepts such as “model audience” and “model objective”. Furthermore, the relevant interrelations between these different concepts are identified and defined. The resulting ontology for enterprise architecture models is represented in OntoUML, and shown to be consistent with the foundational ontology for modeling, Unified Foundational Ontology.

长期以来,模型一直以不同的形式被用于理解、交流和(重新)塑造我们周围的世界,包括社会、经济、生物、化学、物理和数字等诸多方面。在企业架构(EA)方面也是如此,我们可以看到许多不同形态和形式的模型也被广泛使用。EA 建模研究人员通常会引入他们自己的词汇表,并从不同角度解释模型的实际含义,同时接受(通常是隐含的)随之而来的本体论承诺。同样,EA 建模的实践者也会隐含地对(不同的)本体论做出承诺,从而导致模型的本体论地位不确定。这是因为,就企业架构模型的主题领域(而非此类模型的内容)而言,还没有一种本体论获得广泛认可。因此,对企业架构模型各方面的研究,如 "模型质量 "和 "建模努力的回报",都是支离破碎的,无法轻易进行比较或合并。本文提出了一种专门针对企业架构建模的综合应用本体。本体代表了特定主题领域的结构化知识。它允许对该主题领域进行研究和推理。我们的本体论源自建模理论,同时明确了 "企业架构模型 "等概念,并引入了 "模型受众 "和 "模型目标 "等新概念。此外,还确定并定义了这些不同概念之间的相关相互关系。由此产生的企业架构模型本体用 OntoUML 表示,并证明与建模的基础本体 "统一基础本体 "是一致的。
{"title":"Toward an ontology for EA modeling and EA model quality","authors":"Jan A. H. Schoonderbeek, Henderik A. Proper","doi":"10.1007/s10270-023-01146-w","DOIUrl":"https://doi.org/10.1007/s10270-023-01146-w","url":null,"abstract":"<p>Models have long since been used, in different shapes and forms, to understand, communicate about, and (re)shape, the world around us; including many different social, economic, biological, chemical, physical, and digital aspects. This is also the case in the context of enterprise architecture (EA), where we see a wide range of models in many different shapes and forms being used as well. Researchers in EA modeling usually introduce their own lexicon, and perspective of what a model actually is, while accepting (often implicitly) the accompanying ontological commitments. Similarly, practitioners of EA modeling implicitly also commit to (different) ontologies, resulting in models that have an uncertain ontological standing. This is because, for the subject domain of enterprise architecture models (as opposed to the content of such models), no single ontology has gained major traction. As a result, studies into aspects of enterprise architecture models, such as “model quality” and “return on modeling effort”, are fragmented, and cannot readily be compared or combined. This paper proposes a comprehensive applied ontology, specifically geared to enterprise architecture modeling. Ontologies represent structured knowledge about a particular subject domain. It allows for study into, and reasoning about, that subject domain. Our ontology is derived from a theory of modeling, while clarifying concepts such as “enterprise architecture model”, and introduces novel concepts such as “model audience” and “model objective”. Furthermore, the relevant interrelations between these different concepts are identified and defined. The resulting ontology for enterprise architecture models is represented in OntoUML, and shown to be consistent with the foundational ontology for modeling, Unified Foundational Ontology.</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"1 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"139679209","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A framework for embedded software portability and verification: from formal models to low-level code 嵌入式软件可移植性和验证框架:从形式模型到低级代码
IF 2 3区 计算机科学 Q3 COMPUTER SCIENCE, SOFTWARE ENGINEERING Pub Date : 2024-02-01 DOI: 10.1007/s10270-023-01144-y
Renata Martins Gomes, Bernhard Aichernig, Marcel Baunach

Porting software to new target architectures is a common challenge, particularly when dealing with low-level functionality in drivers or OS kernels that interact directly with hardware. Traditionally, adapting code for different hardware platforms has been a manual and error-prone process. However, with the growing demand for dependability and the increasing hardware diversity in systems like the IoT, new software development approaches are essential. This includes rigorous methods for verifying and automatically porting Real-Time Operating Systems (RTOS) to various devices. Our framework addresses this challenge through formal methods and code generation for embedded RTOS. We demonstrate a hardware-specific part of a kernel model in Event-B, ensuring correctness according to the specification. Since hardware details are only added in late modeling stages, we can reuse most of the model and proofs for multiple targets. In a proof of concept, we refine the generic model for two different architectures, also ensuring safety and liveness properties. We then showcase automatic low-level code generation from the model. Finally, a hardware-independent factorial function model illustrates more potential of our approach.

将软件移植到新的目标架构是一项常见的挑战,尤其是在处理与硬件直接交互的驱动程序或操作系统内核中的底层功能时。传统上,为不同硬件平台调整代码是一个手动且容易出错的过程。然而,随着对可靠性要求的不断提高,以及物联网等系统中硬件多样性的不断增加,新的软件开发方法变得至关重要。这包括将实时操作系统(RTOS)验证和自动移植到各种设备的严格方法。我们的框架通过嵌入式实时操作系统的形式化方法和代码生成来应对这一挑战。我们在 Event-B 中演示了内核模型中特定于硬件的部分,确保了规范的正确性。由于硬件细节仅在建模后期添加,我们可以针对多个目标重复使用大部分模型和证明。在概念验证中,我们针对两种不同的架构完善了通用模型,同时确保了安全性和有效性。然后,我们展示了根据模型自动生成底层代码的过程。最后,与硬件无关的因子函数模型展示了我们方法的更多潜力。
{"title":"A framework for embedded software portability and verification: from formal models to low-level code","authors":"Renata Martins Gomes, Bernhard Aichernig, Marcel Baunach","doi":"10.1007/s10270-023-01144-y","DOIUrl":"https://doi.org/10.1007/s10270-023-01144-y","url":null,"abstract":"<p>Porting software to new target architectures is a common challenge, particularly when dealing with low-level functionality in drivers or OS kernels that interact directly with hardware. Traditionally, adapting code for different hardware platforms has been a manual and error-prone process. However, with the growing demand for dependability and the increasing hardware diversity in systems like the IoT, new software development approaches are essential. This includes rigorous methods for verifying and automatically porting Real-Time Operating Systems (RTOS) to various devices. Our framework addresses this challenge through formal methods and code generation for embedded RTOS. We demonstrate a hardware-specific part of a kernel model in Event-B, ensuring correctness according to the specification. Since hardware details are only added in late modeling stages, we can reuse most of the model and proofs for multiple targets. In a proof of concept, we refine the generic model for two different architectures, also ensuring safety and liveness properties. We then showcase automatic low-level code generation from the model. Finally, a hardware-independent factorial function model illustrates more potential of our approach.</p>","PeriodicalId":49507,"journal":{"name":"Software and Systems Modeling","volume":"2 1","pages":""},"PeriodicalIF":2.0,"publicationDate":"2024-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"139670254","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
Software and Systems Modeling
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1