Formal verification and testing of software architectural models

Ensuring the correctness of software has been the major motivation in software research, constituting a Grand Challenge. Due to its impact in the final implementation, one critical aspect of software is its architectural design. By guaranteeing a correct architectural design, major and costly flaws can be caught early on in the development cycle. Software architecture design has received a lot of attention in the past years, with several methods, techniques and tools developed. However, there is still more to be done, such as providing adequate formal analysis of software architectures. On these regards, a framework to ensure system dependability from design to implementation has been developed at FIU (Florida International University). This framework is based on SAM (Software Architecture Model), an ADL (Architecture Description Language), that allows hierarchical compositions of components and connectors, defines an architectural modeling language for the behavior of components and connectors, and provides a specification language for the behavioral properties. The behavioral model of a SAM model is expressed in the form of Petri nets and the properties in first order linear temporal logic.^ This dissertation presents a formal verification and testing approach to guarantee the correctness of Software Architectures. The Software Architectures studied are expressed in SAM. For the formal verification approach, the technique applied was model checking and the model checker of choice was Spin. As part of the approach, a SAM model is formally translated to a model in the input language of Spin and verified for its correctness with respect to temporal properties. In terms of testing, a testing approach for SAM architectures was defined which includes the evaluation of test cases based on Petri net testing theory to be used in the testing process at the design level. Additionally, the information at the design level is used to derive test cases for the implementation level. Finally, a modeling and analysis tool (SAM tool) was implemented to help support the design and analysis of SAM models. The results show the applicability of the approach to testing and verification of SAM models with the aid of the SAM tool.^

Analysis of Housing Partnerships using the Balanced Scorecard framework

Housing Partnerships (HPs) are collaborative arrangements that assist communities in the delivery of affordable housing by combining the strengths of the public and private sectors. They emerged in several states, counties, and cities in the eighties as innovative solutions to the challenges in affordable housing resulting from changing dynamics of delivery and production. ^ My study examines HPs with particular emphasis upon the identification of those factors associated with the successful performance of their mission of affordable housing. I will use the Balanced Scorecard (BSC) framework in this study. The identification of performance factors facilitates a better understanding of how HPs can be successful in achieving their mission. The identification of performance factors is significant in the context of the current economic environment because HPs can be viewed as innovative institutional mechanisms in the provision of affordable housing. ^ The present study uses a mixed methods research approach, drawing on data from the IRS Form 990 tax returns, a survey of the chief executives of HPs, and other secondary sources. The data analysis is framed according to the four perspectives of BSC: the financial, customer, internal business, and learning and growth. Financially, revenue diversification affects the financial health of HPs and overall performance. Although HPs depend on private and government funding, they also depend on service fees to carry out their mission. From a customer perspective, the HPs mainly serve low and moderate income households, although some serve specific groups such as seniors, homeless, veterans, and victims of domestic violence. From an internal business perspective, HPs’ programs are oriented toward affordable housing needs, undertaking not only traditional activities such as construction, loan provision, etc., but also advocacy and educational programs. From an employee and learning growth perspective, the HPs are small in staff size, but undertake a range of activities with the help of volunteers. Every part of the HP is developed to maximize resources, knowledge, and skills in order to assist communities in the delivery of affordable housing and related needs. Overall, housing partnerships have played a key role in affordable housing despite the housing market downturn since 2006. Their expenses on affordable housing activities increased despite the decrease in their revenues.^

AIDS workplace *policy adoption and implementation in local government: An analysis of departmental variation

This is an empirical study whose purpose was to examine the process of innovation adoption as an adaptive response by a public organization and its subunits existing under varying degrees of environmental uncertainty. Meshing organization innovation research and contingency theory to form a theoretical framework, an exploratory case study design was undertaken in a large, metropolitan government located in an area with the fourth highest prevalence rate of HIV/AIDS in the country. A number of environmental and organizational factors were examined for their influence upon decision making in the adoption/non-adoption as well as implementation of any number of AIDS-related policies, practices, and programs.^ The major findings of the study are as follows. For the county government itself (macro level), no AIDS-specific workplace policies have been adopted. AIDS activities (AIDS education, AIDS Task Force, AIDS Coordinator, etc.), adopted county-wide early in the epidemic, have all been abandoned. Worker infection rates, in the aggregate and throughout the epidemic have been small. As a result, absent co-worker conflict (isolated and negligible), no increase in employee health care costs, no litigation regarding discrimination, and no major impact on workforce productivity, AIDS has basically become a non-issue at the strategic core of the organization. At the departmental level, policy adoption decisions varied widely. Here the predominant issue is occupational risk, i.e., both objective as well as perceived. As expected, more AIDS-related activities (policies, practices, and programs) were found in departments with workers known to have significant risk for exposure to the AIDS virus (fire rescue, medical examiner, police, etc.). AIDS specific policies, in the form of OSHA's Bloodborn Pathogen Standard, took place primarily because they were legislatively mandated. Union participation varied widely, although not necessarily based upon worker risk. In several departments, the union was a primary factor bringing about adoption decisions. Additional factors were identified and included organizational presence of AIDS expertise, availability of slack resources, and the existence of a policy champion. Other variables, such as subunit size, centralization of decision making, and formalization were not consistent factors explaining adoption decisions. ^

A deontic analysis of inter -organizational control requirements

This research focuses on the design and verification of inter-organizational controls. Instead of looking at a documentary procedure, which is the flow of documents and data among the parties, the research examines the underlying deontic purpose of the procedure, the so-called deontic process, and identifies control requirements to secure this purpose. The vision of the research is a formal theory for streamlining bureaucracy in business and government procedures. ^ Underpinning most inter-organizational procedures are deontic relations, which are about rights and obligations of the parties. When all parties trust each other, they are willing to fulfill their obligations and honor the counter parties’ rights; thus controls may not be needed. The challenge is in cases where trust may not be assumed. In these cases, the parties need to rely on explicit controls to reduce their exposure to the risk of opportunism. However, at present there is no analytic approach or technique to determine which controls are needed for a given contracting or governance situation. ^ The research proposes a formal method for deriving inter-organizational control requirements based on static analysis of deontic relations and dynamic analysis of deontic changes. The formal method will take a deontic process model of an inter-organizational transaction and certain domain knowledge as inputs to automatically generate control requirements that a documentary procedure needs to satisfy in order to limit fraud potentials. The deliverables of the research include a formal representation namely Deontic Petri Nets that combine multiple modal logics and Petri nets for modeling deontic processes, a set of control principles that represent an initial formal theory on the relationships between deontic processes and documentary procedures, and a working prototype that uses model checking technique to identify fraud potentials in a deontic process and generate control requirements to limit them. Fourteen scenarios of two well-known international payment procedures—cash in advance and documentary credit—have been used to test the prototype. The results showed that all control requirements stipulated in these procedures could be derived automatically.^

A Comparative Analysis of Corporate Finance in the United States and Japan From 1880 to 1930

This study explained the diversity of corporate financial practices in two nations. Existing studies have emphasized the reliance on equity finance in U.S. firms and bank loans in Japanese firms. In fact, patterns of corporate finance were much more complex. Financial institutions, which were created by national economic policy and regulation, affected corporate financial practices, but corporate financial practices often differed from what policymakers expected. Differences in corporate financial practices between nations also reflected differences in the mixture of industries in each nation. Many factors such as the amount of fixed capital, the process of production, the level of risk, the degree of innovation, and the importance of the industry in the national economy affected corporate financial practices. In addition, corporate financial practices within each nation differed from firm to firm due to managers’ considerations about stock ownership, which would affect their control power; corporate finance was closely related to control over management through ownership. To explain these complexities of corporate financial practices, the study linked corporate finance with the development of financial institutions in the United States and in Japan. While financial institutions affected corporate financial practices, the response of the firms to financial institutions and opportunities were diverse. The study also attempted to grasp variations in corporate financial practices by dealing with companies in three sectors: railroads, public utilities, and manufacturing. Finally, the study examined the structure of firm ownership. Contradictory to the widely held belief that U.S. firms distributed securities more widely to the public than did Japanese firms, many large American firms remained closely held, while some Japanese counterparts built publicly-held corporations.

A Deontic Analysis of Inter-Organizational Control Requirements

This research focuses on the design and verification of inter-organizational controls. Instead of looking at a documentary procedure, which is the flow of documents and data among the parties, the research examines the underlying deontic purpose of the procedure, the so-called deontic process, and identifies control requirements to secure this purpose. The vision of the research is a formal theory for streamlining bureaucracy in business and government procedures. Underpinning most inter-organizational procedures are deontic relations, which are about rights and obligations of the parties. When all parties trust each other, they are willing to fulfill their obligations and honor the counter parties’ rights; thus controls may not be needed. The challenge is in cases where trust may not be assumed. In these cases, the parties need to rely on explicit controls to reduce their exposure to the risk of opportunism. However, at present there is no analytic approach or technique to determine which controls are needed for a given contracting or governance situation. The research proposes a formal method for deriving inter-organizational control requirements based on static analysis of deontic relations and dynamic analysis of deontic changes. The formal method will take a deontic process model of an inter-organizational transaction and certain domain knowledge as inputs to automatically generate control requirements that a documentary procedure needs to satisfy in order to limit fraud potentials. The deliverables of the research include a formal representation namely Deontic Petri Nets that combine multiple modal logics and Petri nets for modeling deontic processes, a set of control principles that represent an initial formal theory on the relationships between deontic processes and documentary procedures, and a working prototype that uses model checking technique to identify fraud potentials in a deontic process and generate control requirements to limit them. Fourteen scenarios of two well-known international payment procedures -- cash in advance and documentary credit -- have been used to test the prototype. The results showed that all control requirements stipulated in these procedures could be derived automatically.

Formal verification and testing of software architectural models

Ensuring the correctness of software has been the major motivation in software research, constituting a Grand Challenge. Due to its impact in the final implementation, one critical aspect of software is its architectural design. By guaranteeing a correct architectural design, major and costly flaws can be caught early on in the development cycle. Software architecture design has received a lot of attention in the past years, with several methods, techniques and tools developed. However, there is still more to be done, such as providing adequate formal analysis of software architectures. On these regards, a framework to ensure system dependability from design to implementation has been developed at FIU (Florida International University). This framework is based on SAM (Software Architecture Model), an ADL (Architecture Description Language), that allows hierarchical compositions of components and connectors, defines an architectural modeling language for the behavior of components and connectors, and provides a specification language for the behavioral properties. The behavioral model of a SAM model is expressed in the form of Petri nets and the properties in first order linear temporal logic. This dissertation presents a formal verification and testing approach to guarantee the correctness of Software Architectures. The Software Architectures studied are expressed in SAM. For the formal verification approach, the technique applied was model checking and the model checker of choice was Spin. As part of the approach, a SAM model is formally translated to a model in the input language of Spin and verified for its correctness with respect to temporal properties. In terms of testing, a testing approach for SAM architectures was defined which includes the evaluation of test cases based on Petri net testing theory to be used in the testing process at the design level. Additionally, the information at the design level is used to derive test cases for the implementation level. Finally, a modeling and analysis tool (SAM tool) was implemented to help support the design and analysis of SAM models. The results show the applicability of the approach to testing and verification of SAM models with the aid of the SAM tool.

Sedimentological analysis of eight cores from the Amundsen Sea

Recent palaeoglaciological studies on the West Antarctic shelf have mainly focused on the wide embayments of the Ross and Amundsen seas in order to reconstruct the extent and subsequent retreat of the West Antarctic Ice Sheet (WAIS) since the Last Glacial Maximum (LGM). However, the narrower shelf sectors between these two major embayments have remained largely unstudied in previous geological investigations despite them covering extensive areas of the West Antarctic shelf. Here, we present the first systematic marine geological and geophysical survey of a shelf sector offshore from the Hobbs Coast. It is dominated by a large grounding zone wedge (GZW), which fills the base of a palaeo-ice stream trough on the inner shelf and marks a phase of stabilization of the grounding line during general WAIS retreat following the last maximum ice-sheet extent in this particular area (referred to as the Local Last Glacial Maximum, 'LLGM'). Reliable age determination on calcareous microfossils from the infill of a subglacial meltwater channel eroded into the GZW reveals that grounded ice had retreated landward of the GZW before ~20.88 cal. ka BP, with deglaciation of the innermost shelf occurring prior to ~12.97 cal. ka BP. Geophysical sub-bottom information from the inner-, mid- and outer shelf indicates grounded ice extended to the shelf edge prior to the formation of the GZW. Assuming the wedge was deposited during deglaciation, we infer the timing of maximum grounded ice extent occurred before ~20.88 cal. ka BP. This could suggest that the WAIS retreat from the outer shelf was already underway during or even prior to the global LGM (~23-19 cal. ka BP). Our new findings give insights into the regional deglacial behaviour of this understudied part of the West Antarctic shelf and at the same time support early deglaciation ages recently presented for adjacent drainage sectors of the WAIS. If correct, these findings contrast with the hypothesis that initial deglaciation of Antarctic Ice Sheets occurred synchronously at ~19 cal. ka BP.

The effectiveness of corporate Web in small and médiumsized business: an analysis of Web Usability

Internet and the Web have changed the way that companies communicate with their publics, improving relations between them. Also providing substantial benefits for organizations. This has led to small and medium enterprises (SMEs) to develop corporate sites to establish relationships with their audiences. This paper, applying the methodology of content analysis, analyzes the main factors and tools that make the Websites usable and intuitive sites that promote better relations between SMEs and their audiences. Also, it has developed an index to measure the effectiveness of Webs from the perspective of usability. The results indicate that the Websites have, in general, appropriate levels of usability.

From "ecological tourism" to "ecotourism": lexical analysis of an emerging tourism

From ecological tourism to ecotourism: lexical analysis of an emerging tourism. This article deals with the lexicon created in connection with a recent form of tourism: the ecological tourism or ecotourism. The rise of this type of tourism encourages the creation of new concepts and products that are named with new words and expressions with different procedures of formation. From the name itself ecotourism, then expressed as the acronym ecotourism, we analyze the formation of other related words, as well as their formal variation and use. For this, we have worked with a specific corpus of electronic tourist texts and different digital sources and databases.

Reducing child conduct disordered behaviour and improving parent mental health in disadvantaged families: a 12 month follow-up and cost analysis of a parenting intervention

The effectiveness of the Incredible Years Basic parent programme (IYBP) in reducing child conduct problems and improving parent competencies and mental health was examined in a 12-month follow-up. Pre- to post-intervention service use and related costs were also analysed. A total of 103 families and their children (aged 32–88 months), who previously participated in a randomised controlled trial of the IYBP, took part in a 12-month follow-up assessment. Child and parent behaviour and well-being were measured using psychometric and observational measures. An intention-to-treat analysis was carried out using a one-way repeated measures ANOVA. Pairwise comparisons were subsequently conducted to determine whether treatment outcomes were sustained 1 year post-baseline assessment. Results indicate that post-intervention improvements in child conduct problems, parenting behaviour and parental mental health were maintained. Service use and associated costs continued to decline. The results indicate that parent-focused interventions, implemented in the early years, can result in improvements in child and parent behaviour and well-being 12 months later. A reduced reliance on formal services is also indicated.

Energy systems analysis of transboundary river basins in a nexus approach: the Sava river basin study case

Resource management policies are frequently designed and planned to target specific needs of particular sectors, without taking into account the interests of other sectors who share the same resources. In a climate of resource depletion, population growth, increase in energy demand and climate change awareness, it is of great importance to promote the assessment of intersectoral linkages and, by doing so, understand their effects and implications. This need is further augmented when common use of resources might not be solely relevant at national level, but also when the distribution of resources ranges over different nations. This dissertation focuses on the study of the energy systems of five south eastern European countries, which share the Sava River Basin, using a water-food(agriculture)-energy nexus approach. In the case of the electricity generation sector, the use of water is essential for the integrity of the energy systems, as the electricity production in the riparian countries relies on two major technologies dependent on water resources: hydro and thermal power plants. For example, in 2012, an average of 37% of the electricity production in the SRB countries was generated by hydropower and 61% in thermal power plants. Focusing on the SRB, in terms of existing installed capacities, the basin accommodates close to a tenth of all hydropower capacity while providing water for cooling to 42% of the net capacity of thermal power currently in operation in the basin. This energy-oriented nexus study explores the dependency on the basin’s water resources of the energy systems in the region for the period between 2015 and 2030. To do so, a multi-country electricity model was developed to provide a quantification ground to the analysis, using the open-source software modelling tool OSeMOSYS. Three main areas are subject to analysis: first, the impact of energy efficiency and renewable energy strategies in the electricity generation mix; secondly, the potential impacts of climate change under a moderate climate change projection scenario; and finally, deriving from the latter point, the cumulative impact of an increase in water demand in the agriculture sector, for irrigation. Additionally, electricity trade dynamics are compared across the different scenarios under scrutiny, as an effort to investigate the implications of the aforementioned factors in the electricity markets in the region.

Threat analysis of IoT networks using artificial neural network intrusion detection system

The Internet of things (IoT) is still in its infancy and has attracted much interest in many industrial sectors including medical fields, logistics tracking, smart cities and automobiles. However, as a paradigm, it is susceptible to a range of significant intrusion threats. This paper presents a threat analysis of the IoT and uses an Artificial Neural Network (ANN) to combat these threats. A multi-level perceptron, a type of supervised ANN, is trained using internet packet traces, then is assessed on its ability to thwart Distributed Denial of Service (DDoS/DoS) attacks. This paper focuses on the classification of normal and threat patterns on an IoT Network. The ANN procedure is validated against a simulated IoT network. The experimental results demonstrate 99.4% accuracy and can successfully detect various DDoS/DoS attacks.

Research-based spin-offs as agents of knowledge dissemination: evidence from the analysis of innovation networks

The paper addresses the role played by research-based spin-offs (RBSOs) as knowledge dissemination mechanisms, through their position in knowledge networks. For this purpose the paper analyses the formal networks established by the Portuguese RBSOs in the context of publicly funded research, technology and pre-commercial product development projects, and investigates their configuration along two levels. At organisational level, in order to understand whether RBSOs extend their reach beyond the academic sphere; and if they do, whether they relate with similar firms or connect to organisations located downstream in the knowledge value chain, and which is their position in networks involving both research organisations and other firms. At spatial level, in order to understand whether RBSOs extend their reach beyond the region where they are created, thus potentially acting as connectors between diverse regions. The analysis starts from the population of RBSOs created in Portugal until 2007 (387) and identifies those that have established formal technological relationships as part of projects funded by all the programmes launched in the period 1993-2012. As a result, the analysis encompasses 192 collaborative projects and involves 82 spin-offs and 281 partners, of which only 20% are research organisations, the remaining being other firms and a variety of other user organisations. The results, although still preliminary, provide some insights into the knowledge networking behaviour of the RBSOs. As expected, research organisations are a central actor in spin-offs’ networks, being the sole partner for some of them. But half of the RBSOs have moved beyond the academic sphere, being frequently a central element in tripartite technological relationships between research and other organisations and occupying an intermediation position in the network, thus potentially acting as facilitators in knowledge circulation and transformation. Also as expected, RBSOs are predominantly located in the main metropolitan areas and tend to relate with organisations similarly located. But while geographical proximity emerges as important in the choice of partners, in about half of the cases, RBSOs knowledge networks have extended beyond regional boundaries. Given their central position in the network this suggests a role as connectors across regions that will be explored in subsequent research.

Research-based spin-offs as agents of knowledge dissemination: evidence from the analysis of innovation networks

The paper addresses the role played by research-based spin-offs (RBSOs) as knowledge dissemination mechanisms, through their position in knowledge networks. For this purpose the paper analyses the formal networks established by Portuguese RBSOs, in the context of publicly funded research, technology and pre-commercial product development projects, and investigates their configuration across two levels. At organisational level, in order to understand whether RBSOs extend their reach beyond the academic sphere; and if they do, whether they connect to organisations located downstream in the knowledge value chain, and which is their position in networks involving both research organisations and other firms. At spatial level, in order to understand whether RBSOs extend their reach beyond the region where they are created, thus potentially acting as connectors between diverse regions. The analysis starts from the population of RBSOs created in Portugal until 2007 (327 firms) and identifies those that have established formal technological relationships, as part of projects funded by all the relevant programmes launched in the period 1993-2012. As a result, the analysis encompasses 192 collaborative projects and involves 82 spin-offs and 281 partners, of which only 20% are research organisations, the remaining being other firms and a variety of other downstream organisations. The results, although still preliminary, provide some insights into the knowledge networking behaviour of the RBSOs. As expected, research organisations are a central actor in spin-offs’ networks, being the sole partner for some of them. But half of the RBSOs have moved beyond the academic sphere, being frequently a central element in tripartite technological relationships between research and other organisations, and occupying an intermediation position in the network, thus potentially acting as facilitators in knowledge circulation and transformation. Also as expected, RBSOs are predominantly located in the main metropolitan areas and tend to relate with organisations similarly located. But while geographical proximity emerges as important in the choice of partners, in about half of the cases, RBSOs knowledge networks have extended beyond regional boundaries. Given their central position in the network, this suggests a role as connectors across regions that will be explored in subsequent research.