Evaluating the effectiveness of Z: The claims made about CICS and where we go from here

There have been few genuine success stories about industrial use of formal methods. Perhaps the best known and most celebrated is the use of Z by IBM (in collaboration with Oxford University's Programming Research Group) during the development of CICS/ESA (version 3.1). This work was rewarded with the prestigious Queen's Award for Technological Achievement in 1992 and is especially notable for two reasons: 1) because it is a commercial, rather than safety- or security-critical, system and 2) because the claims made about the effectiveness of Z are quantitative as well as qualitative. The most widely publicized claims are: less than half the normal number of customer-reported errors and a 9% savings in the total development costs of the release. This paper provides an independent assessment of the effectiveness of using Z on CICS based on the set of public domain documents. Using this evidence, we believe that the case study was important and valuable, but that the quantitative claims have not been substantiated. The intellectual arguments and rationale for formal methods are attractive, but their widespread commercial use is ultimately dependent upon more convincing quantitative demonstrations of effectiveness. Despite the pioneering efforts of IBM and PRG, there is still a need for rigorous, measurement-based case studies to assess when and how the methods are most effective. We describe how future similar case studies could be improved so that the results are more rigorous and conclusive.

An architectural approach to autonomics and self-management of automotive embedded electronic systems

Embedded electronic systems in vehicles are of rapidly increasing commercial importance for the automotive industry. While current vehicular embedded systems are extremely limited and static, a more dynamic configurable system would greatly simplify the integration work and increase quality of vehicular systems. This brings in features like separation of concerns, customised software configuration for individual vehicles, seamless connectivity, and plug-and-play capability. Furthermore, such a system can also contribute to increased dependability and resource optimization due to its inherent ability to adjust itself dynamically to changes in software, hardware resources, and environment condition. This paper describes the architectural approach to achieving the goals of dynamically self-configuring automotive embedded electronic systems by the EU research project DySCAS. The architecture solution outlined in this paper captures the application and operational contexts, expected features, middleware services, functions and behaviours, as well as the basic mechanisms and technologies. The paper also covers the architecture conceptualization by presenting the rationale, concerning the architecture structuring, control principles, and deployment concept. In this paper, we also present the adopted architecture V&V strategy and discuss some open issues in regards to the industrial acceptance.

Private purpose trusts: a reform proposal

Argues for the introduction of statutory reform to enable valid private purpose trusts to be created by those wishing to make testamentary gifts for non-charitable purposes, with no human beneficiary. Examines the rationale employed in cases where the validity of a private purpose trust has been upheld despite the absence of a human beneficiary. Considers the approaches adopted by five offshore jurisdictions when introducing purpose trust legislation. Identifies key features to be included in any new purpose trust legislation introduced in the UK.

Understanding changes in cardiovascular pathophysiology

Cardiovascular pathophysiological changes, such as hypertension and enlarged ventricles, reflect the altered functions of the heart and its circulation during ill-health. This article examines the normal and altered anatomy of the cardiac valves, the contractile elements and enzymes of the myocardium, the significance of the different factors associated with cardiac output, and the role of the autonomic nervous system in the heart beat. It also explores how certain diseases alter these functions and result in cardiac symptoms. Nurses can benefit from knowledge of these specific changes, for example, by being able to ask relevant questions in order to ascertain the nature of a patients condition, by being able to take an effective patient history and by being able to read diagnostic results, such as electrocardiograms and cardiac enzyme results. All this will help nurses to promote sound cardiac care based on a physiological rationale.

The food multimix concept: potential of an innovative food based approach on nutritional status in pregnant women in resource-poor communities

RATIONALE & OBJECTIVES: The food multimix (FFM)concept states that limited food resources can be combined using scientific knowledge to meet nutrient needs of vulnerable groups at low cost utilizing the ‘nutrient strengths’ of individual or candidate foods in composite recipes within a cultural context. METHODS: The method employed the food-to-food approach for recipe development using traditional food ingredients. Recipes were subjected to proximate and micronutrient analysis and optimized to meet at tleast 40% of recommended daily intakes. End products including breads, porridge and soup were developed. RESULTS: FMM products were employed in a feeding trial among 120 healthy pregnant women in Gauteng, South Africa resulting in improvements in serum iron levels from baseline values of 14.59 (=/-7.67) umol/L and 14.02 (=/-8.13) umol/L for control and intervention groups (p=0.71), to 16.03 (=/-5.67) umol/L and 18.66 (=/-9.41) umol/L (p=0.19). The increases from baseline to post-intervention were however statistically significant within groups. Similarly Mean Cell Volume values improved from baseline as well as serum ferritin and transferritin levels. CONCLUSION: The FMM concept has potential value in feeding programs for vulnerable groups including pregnant and lactating mothers.

Synthesis and enzymatic evaluation of the guanosine analogue 2-amino-6-mercapto-7-methylpurine ribonucleoside (MESG): insights into the phosphorolysis reaction mechanism based on the blueprint transition state: SN1 or SN2?

A modified experimental procedure for the synthesis of MESG (2-amino-6-mercapto-7-methylpurine ribonucleoside) 1 has been successfully performed and its full characterization is presented. High resolution ESI(+)-MSMS indicates both the nucleoside bond cleavage as the main fragmentation in the gas phase and a possible SN1 mechanism. Ab initio transition state calculations based on the blue print transition state support this mechanistic rationale and discard an alternative SN2 mechanism. Assays using purine nucleoside phosphorylase (PNP) enzyme (human and M. tuberculosis sources) indicate its efficiency in the phosphorolysis of MESG and allow the quantitative determination of inorganic phosphate in real time assay.