检索结果-内蒙古大学图书馆

Queue 2017年第4期15卷

作者： Kwon, Albert Wilcox, James EECS Department MIT United States University of Washington Programming Languages and Software Engineering Lab United States

来源：评论

学校读者我要写书评

暂无评论

Device- And service profiles for integrated or systems based on open standards

Device- And service profiles for integrated or systems based...

引用

作者： Mildner, Alexander Janß, Armin Dell'Anna-Pudlik, Jasmin Merz, Paul Leucker, Martin Radermacher, Klaus UniTransferKlinik Lübeck Maria-Goeppert-Straße 1 Lübeck23562 Germany Institute for Software Engineering and Programming Languages University of Lübeck Germany Department of Medical Engineering Helmholtz-Institute for Biomedical Engineering RWTH Aachen University Germany

Integrated OR systems nowadays are closed and proprietary, so that the interconnection of components from third-party vendors is only possible with high time and cost effort. An integrated operating theatre with open interfaces, giving clinical operators the opportunity to choose individual medical devices from different manufacturers, is currently being developed in the framework of the BMBF (Federal Ministry of Education and Research) funded project *** [1]. Actual standards and concepts regarding technical feasibility and accreditation process do not cope with the requirements for modular integration based on an open standard. Therefore, strategies as well as service and device profiles to enable a procedure for risk management and certifiability are in the focus of the project work. Amongst others, a concept for User Interface Profiles (UI-Profiles) has been conceived in order to describe medical device functions and the entire user interface regarding Human-Machine-Interaction (HMI) characteristics with the aim to identify human-induced risks of central user interfaces. The use of standardized device and service profiles shall allow the manufacturers to integrate their medical devices in the *** network, without disclosing the medical devices' risk analysis and related confidential knowledge or proprietary information. © 2015 by Walter de Gruyter GmbH, Berlin/Boston 2015.

关键词： Usability engineering

来源：评论

学校读者我要写书评

暂无评论

A Modeling Framework for the Development of Provably Secure E-Commerce Applications

A Modeling Framework for the Development of Provably Secure ...

引用

International Conference on software engineering Advances (ICSEA)

作者： Nina Moebius Dominik Haneberg Wolfgang Reif Gerhard Schellhorn Institute of Computer Science Department of Software Engineering and Programming Languages University of Augsburg Augsburg Germany

Developing security-critical applications is very difficult and the past has shown that many applications turned out to be erroneous after years of usage. For this reason it is desirable to have a sound methodology for developing security-critical e-commerce applications. We present an approach to model these applications with the Unified Modeling Language (UML) [1] extended by a UML profile to tailor our models to security applications. Our intent is to (semi-) automatically generate a formal specification suitable for verification as well as an implementation from the model. Therefore we offer a development method seamlessly integrating semi-formal and formal methods as well as the implementation. This is a significant advantage compared to other approaches not dealing with all aspects from abstract models down to code. Based on this approach we can prove security properties on the abstract protocol level as well as the correctness of the protocol implementation in Java with respect to the formal model using the refinement approach. In this paper we concentrate on the modeling with UML and some details regarding the transformation of this model into the formal specification. We illustrate our approach on an electronic payment system called Mondex [10]. Mondex has become famous for being the target of the first ITSEC evaluation of the highest level E6 which requires formal specification and verification.

关键词： Unified modeling language Object oriented modeling Formal specifications Java Application software Smart cards Communication system security Cryptographic protocols Computer science software engineering

来源：评论

学校读者我要写书评

暂无评论

Generating formal specifications for security-critical applications - A model-driven approach

Generating formal specifications for security-critical appli...

引用

International Workshop on software engineering for Secure Systems (SESS)

作者： Nina Moebius Kurt Stenzel Wolfgang Reif Department of Software Engineering and Programming Languages Institute of Computer Science University of Augsburg Augsburg Germany

ISBN: (纸本)9781424437252

The SecureMDD approach aims to generate both, a formal specification for verification and executable code, from UML diagrams. The UML models define the static as well as dynamic components of the system under development. This model-driven approach is focused on security-critical applications that are based on cryptographic protocols, especially Java Card applications. In this paper we describe the generation of the formal specification from the UML model which is then used as input for our interactive verification system KIV. The formal specification is based on abstract state machines and algebraic specifications. It allows to formulate and to prove application-specific security properties.

关键词： Formal specifications Object oriented modeling Unified modeling language Cryptographic protocols Java Security Application software software engineering Computer languages Computer science

来源：评论

学校读者我要写书评

暂无评论

A Case Study on Data Protection for a Cloud- and AI-based Homecare Medical Device

A Case Study on Data Protection for a Cloud- and AI-based Ho...

引用

2022 International Health Data Workshop, HEDA 2022

作者： Bende, Philipp Vovk, Olga Caraveo, David Pechmann, Ludwig Leucker, Martin University of Lübeck Institute for Software Engineering and Programming Languages Lübeck Germany Tallinn University of Technology School of Information Technologies Department of Health Technologies Tallinn Estonia UniTransferKlinik Lübeck GmbH Lübeck Germany

To improve the treatment of many diseases, continuous monitoring of the patient at home with the ability of doctors to interact with individual cases demands an increasing number of medical devices connected to the cloud. To support the doctor’s duties, such devices may benefit from AI-based diagnosis routines. In order for such devices to be approved and placed on the market, they need to comply with various legal, regulatory, economic, and social requirements. An integral part of these requirements is the protection of the patients’ data. In this paper, based on a current use case, we describe a workflow on how to identify risks and address their mitigations. To this end, we recall the relevant legal, regulatory, economic, and social data protection requirements. We pursue our findings on a Homecare OCT device that is intended to be used by elderly patients on a daily basis, by taking images of their eyes and sending them for further analysis to a cloud- and AI-based system. The patient’s ophthalmologist gets notified for further dedicated treatment depending on the result. To perform the risk management, we describe (i) the architecture of the homecare system, (ii) analyze its data flow, (iii) discuss several vectors of attack, and (iv) propose ways to mitigate the risks. © 2022 Copyright for this paper by its authors.

关键词： Risk management

来源：评论

学校读者我要写书评

暂无评论

A Case Study on Data Protection for a Cloud- and AI-Based Homecare Medical Device 43rd

A Case Study on Data Protection for a Cloud- and AI-Based...

引用

43rd International Conference on Application and Theory of Petri Nets and Concurrency , Petri Nets 2022

作者： Bende, Philipp Vovk, Olga Caraveo, David Pechmann, Ludwig Leucker, Martin Institute for Software Engineering and Programming Languages University of Lübeck Lübeck Germany School of Information Technologies Department of Health Technologies Tallinn University of Technology Tallinn Estonia UniTransferKlinik Lübeck GmbH Lübeck Germany

ISBN: (纸本)9783662681909

To improve the treatment of many diseases, continuous monitoring of the patient at home with the ability of doctors to interact with individual cases demands an increasing number of medical devices connected to the cloud. To support the doctor’s duties, such devices may benefit from AI-based diagnosis routines. In order for such devices to be approved and placed on the market, they need to comply with various legal, regulatory, economic, and social requirements. An integral part of these requirements is the protection of the patients’ data. In this paper, based on a current use case, we describe a workflow on how to identify risks and address their mitigations. To this end, we recall the relevant legal, regulatory, economic, and social data protection requirements. We pursue our findings on a Homecare OCT device that is intended to be used by elderly patients on a daily basis, by taking images of their eyes and sending them for further analysis to a cloud- and AI-based system. The patient’s ophthalmologist gets notified for further dedicated treatment depending on the result. We then compare the Homecare OCT device with a clinical OCT System in regard to various risks to patient data which arise when a medical system is used outside of a secure hospital environment. To perform the risk management, we describe (i) the architecture of both systems, (ii) analyze their data flow, (iii) discuss several vectors of attack, (iv) propose ways to mitigate the risks, and (v) discuss the handling of potential data breaches. © 2024, The Author(s), under exclusive license to Springer-Verlag GmbH, DE, part of Springer Nature.

关键词： Decision support systems

来源：评论

学校读者我要写书评

暂无评论

Runtime Verification of Autonomous Systems Utilizing Digital Twins as a Service 5

Runtime Verification of Autonomous Systems Utilizing Digital...

引用

5th IEEE International Conference on Autonomic Computing and Self-Organizing Systems Companion, ACSOS-C 2024

作者： Kristensen, Morten Haahr Bonizzi, Alberto Gomes, Claudio Hansen, Simon Thrane Isasa, Carlos Iven, Hannes Kamburjan, Eduard Larsen, Peter Gorm Leucker, Martin Talasila, Prasad Tang, Valdemar Trojgard Tonetta, Stefano Vosteen, Lars B. Wright, Thomas Aarhus University Department of Electrical and Computer Engineering Denmark Fondazione Bruno Kessler Italy University of Luxembourg Interdisciplinary Centre for Security Reliability and Trust Luxembourg Institute for Software Engineering and Programming Languages Universität zu Lübeck Germany University of Oslo Department of Informatics Norway

ISBN: (纸本)9798350389760

Autonomous Systems (AS) enable systems to adapt to drastic and unprecedented environmental changes, a capability that can be enhanced through the utilization of Digital Twins (DTs). However, the additional capabilities of AS come at the cost of explainability, as the expanding adaptation space complicates the reasoning about the system's behavior. For certain types of systems, it is crucial to ensure that specific properties are upheld despite the system's autonomous behavior. To facilitate the monitoring of these properties, we propose the use of Runtime Verification (RV). This tutorial demonstrates the integration of RV tools into the Digital Twins as a Service (DTaaS) platform to monitor and verify the behavior of AS in real-time. By exploring various methods to incorporate RV tools within a DT context, the tutorial aims to advance the application of RV technologies in autonomic computing and self-adaptive system design. Specifically, we demonstrate how the behavior of a self-configuring DT can be verified utilizing RV. This is accomplished through the DTaaS platform, which supports seamless deployment of DT-based AS. © 2024 IEEE.

关键词： Adaptive systems

来源：评论

学校读者我要写书评

暂无评论

WIP: An Engaging Undergraduate Intro to Model Checking in software engineering Using TLA+

WIP: An Engaging Undergraduate Intro to Model Checking in So...

引用

Frontiers in Education (FIE) Conference

作者： Konstantin Läufer Gunda Mertin George K. Thiruvathukal Department of Computer Science Software and Systems Laboratory Loyola University Chicago Institute for Software Engineering and Programming Languages University of Lübeck

ISBN: (数字)9798350351507

ISBN: (纸本)9798350363067

Background: In this Innovative Practice Work in Progress, we present our initial efforts to integrate formal methods, with a focus on model-checking specifications written in Temporal Logic of Actions $(\text{TLA}^{+})$ , into computer science education, targeting undergraduate juniors/seniors and graduate students. Many safety-critical systems and services crucially depend on correct and reliable behavior. Formal methods can play a key role in ensuring correct and safe system behavior, yet remain underutilized in educational and industry contexts. Aims: We aim to (1) qualitatively assess the state of formal methods in computer science programs, (2) construct level-appropriate examples that could be included midway into one's undergraduate studies, (3) demonstrate how to address successive “failuresy” through progressively stringent safety and liveness requirements, and (4) establish an ongoing framework for assessing interest and relevance among students. Methods: We detail our pedagogical strategy for embedding $\text { TLA }^{+}$ into an intermediate course on formal methods at our institution. After starting with a refresher on mathematical logic, students specify the rules of simple puzzles in $\text { TLA }^{+}$ and use its included model checker (known as TLC) to find a solution. We gradually escalate to more complex, dynamic, event-driven systems, such as the control logic of a microwave oven, where students will study safety and liveness requirements. We subsequently discuss explicit concurrency, along with thread safety and deadlock avoidance, by modeling bounded counters and buffers. Results: Our initial findings suggest that through careful curricular design and choice of examples and tools, it is possible to inspire and cultivate a new generation of software engineers proficient in formal methods. Conclusions: Our initial efforts suggest that 84% of our students had a positive experience in our formal methods course. Our future plans include a longitudi

关键词： Computer science Open Access Model checking System recovery software Safety Logic Reliability Proposals software engineering

来源：评论

学校读者我要写书评

暂无评论

Uvlhub: A Feature Model Data Repository Using Uvl and Open Science Principles

SSRN

引用

SSRN 2023年

作者： Romero-Organvidez, David Galindo, José A. Sundermann, Chico Horcas, Jose-Miguel Benavides, David Department of Computer Languages and Systems University of Seville Spain Institute of Software Engineering and Programming Languages Ulm University Germany CAOSD ITIS Software University of Málaga Spain

Feature models are the de facto standard for modelling variabilities and commonalities. Concrete models in different domains exist;however, many are in private or sparse repositories or belong to discontinued projects. The dispersion of knowledge of feature models hinders the study and reuse of these artefacts in different studies. The Universal Variability Language (UVL) is a community effort textual feature model language that promotes a common way of serialising feature models independently of concrete tools. Open science principles promote transparency, accessibility, and collaboration in scientific research. Although some attempts exist to promote feature model sharing, the existing solutions lack open science principles by design. In addition, existing and public feature models are described using formats not always supported by current tools. This paper presents UVLHUB, a repository of feature models in UVL format. UVLHUB provides a front end that facilitates the search, upload, storage, and management of feature model datasets, improving the capabilities of discontinued proposals. Furthermore, the tool communicates with Zenodo providing a permanent save of datasets and following open science principles. UVLHUB includes existing datasets and is readily available to include new data and functionalities in the future. It is maintained by three active universities in variability modelling. © 2023, The Authors. All rights reserved.

关键词： Concretes

来源：评论

学校读者我要写书评

暂无评论

Leveraging Applications of Formal Methods, Verification, and Validation 1

引用

丛书名： Communications in Computer and Information Science

1000年

作者： Reiner Hähnle Jens Knoop Tiziana Margaria Dietmar Schreiner Bernhard Steffen

ISBN: (数字)9783642347818

ISBN: (纸本)9783642347801

This volume contains a selection of revised papers that were presented at the software Aspects of Robotic Systems, SARS 2011 Workshop and the Machine Learning for System Construction, MLSC 2011 Workshop, held during October 17-18 in Vienna, Austria, under the auspices of the International Symposium Series on Leveraging Applications of Formal Methods, Verification, and Validation, ISoLA. The topics covered by the papers of the SARS and the MLSC workshop demonstrate the breadth and the richness of the respective fields of the two workshops stretching from robot programming to languages and compilation techniques, to real-time and fault tolerance, to dependability, software architectures, computer vision, cognitive robotics, multi-robot-coordination, and simulation to bio-inspired algorithms, and from machine learning for anomaly detection, to model construction in software product lines to classification of web service interfaces. In addition the SARS workshop hosted a special session on the recently launched KOROS project on collaborating robot systems that is borne by a consortium of researchers of the faculties of architecture and planning, computer science, electrical engineering and information technology, and mechanical and industrial engineering at the Vienna University of Technology. The four papers devoted to this session highlight important research directions pursued in this interdisciplinary research project.

关键词： Artificial Intelligence Data Mining and Knowledge Discovery software engineering Computation by Abstract Devices Information Storage and Retrieval Pattern Recognition

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：