Analysis of service-oriented computing systems

La computación basada en servicios (Service-Oriented Computing, SOC) se estableció como un paradigma ampliamente aceptado para el desarollo de sistemas de software flexibles, distribuidos y adaptables, donde las composiciones de los servicios realizan las tareas más complejas o de nivel más alto, frecuentemente tareas inter-organizativas usando los servicios atómicos u otras composiciones de servicios. En tales sistemas, las propriedades de la calidad de servicio (Quality of Service, QoS), como la rapídez de procesamiento, coste, disponibilidad o seguridad, son críticas para la usabilidad de los servicios o sus composiciones en cualquier aplicación concreta. El análisis de estas propriedades se puede realizarse de una forma más precisa y rica en información si se utilizan las técnicas de análisis de programas, como el análisis de complejidad o de compartición de datos, que son capables de analizar simultáneamente tanto las estructuras de control como las de datos, dependencias y operaciones en una composición. El análisis de coste computacional para la composicion de servicios puede ayudar a una monitorización predictiva así como a una adaptación proactiva a través de una inferencia automática de coste computacional, usando los limites altos y bajos como funciones del valor o del tamaño de los mensajes de entrada. Tales funciones de coste se pueden usar para adaptación en la forma de selección de los candidatos entre los servicios que minimizan el coste total de la composición, basado en los datos reales que se pasan al servicio. Las funciones de coste también pueden ser combinadas con los parámetros extraídos empíricamente desde la infraestructura, para producir las funciones de los límites de QoS sobre los datos de entrada, cuales se pueden usar para previsar, en el momento de invocación, las violaciones de los compromisos al nivel de servicios (Service Level Agreements, SLA) potenciales or inminentes. En las composiciones críticas, una previsión continua de QoS bastante eficaz y precisa se puede basar en el modelado con restricciones de QoS desde la estructura de la composition, datos empiricos en tiempo de ejecución y (cuando estén disponibles) los resultados del análisis de complejidad. Este enfoque se puede aplicar a las orquestaciones de servicios con un control centralizado del flujo, así como a las coreografías con participantes multiples, siguiendo unas interacciones complejas que modifican su estado. El análisis del compartición de datos puede servir de apoyo para acciones de adaptación, como la paralelización, fragmentación y selección de los componentes, las cuales son basadas en dependencias funcionales y en el contenido de información en los mensajes, datos internos y las actividades de la composición, cuando se usan construcciones de control complejas, como bucles, bifurcaciones y flujos anidados. Tanto las dependencias funcionales como el contenido de información (descrito a través de algunos atributos definidos por el usuario) se pueden expresar usando una representación basada en la lógica de primer orden (claúsulas de Horn), y los resultados del análisis se pueden interpretar como modelos conceptuales basados en retículos. ABSTRACT Service-Oriented Computing (SOC) is a widely accepted paradigm for development of flexible, distributed and adaptable software systems, in which service compositions perform more complex, higher-level, often cross-organizational tasks using atomic services or other service compositions. In such systems, Quality of Service (QoS) properties, such as the performance, cost, availability or security, are critical for the usability of services and their compositions in concrete applications. Analysis of these properties can become more precise and richer in information, if it employs program analysis techniques, such as the complexity and sharing analyses, which are able to simultaneously take into account both the control and the data structures, dependencies, and operations in a composition. Computation cost analysis for service composition can support predictive monitoring and proactive adaptation by automatically inferring computation cost using the upper and lower bound functions of value or size of input messages. These cost functions can be used for adaptation by selecting service candidates that minimize total cost of the composition, based on the actual data that is passed to them. The cost functions can also be combined with the empirically collected infrastructural parameters to produce QoS bounds functions of input data that can be used to predict potential or imminent Service Level Agreement (SLA) violations at the moment of invocation. In mission-critical applications, an effective and accurate continuous QoS prediction, based on continuations, can be achieved by constraint modeling of composition QoS based on its structure, known data at runtime, and (when available) the results of complexity analysis. This approach can be applied to service orchestrations with centralized flow control, and choreographies with multiple participants with complex stateful interactions. Sharing analysis can support adaptation actions, such as parallelization, fragmentation, and component selection, which are based on functional dependencies and information content of the composition messages, internal data, and activities, in presence of complex control constructs, such as loops, branches, and sub-workflows. Both the functional dependencies and the information content (described using user-defined attributes) can be expressed using a first-order logic (Horn clause) representation, and the analysis results can be interpreted as a lattice-based conceptual models.

Non-stationary stochastic inventory lot-sizing with emission and service level constraints in a carbon cap-and-trade system

Firms worldwide are taking major initiatives to reduce the carbon footprint of their supply chains in response to the growing governmental and consumer pressures. In real life, these supply chains face stochastic and non-stationary demand but most of the studies on inventory lot-sizing problem with emission concerns consider deterministic demand. In this paper, we study the inventory lot-sizing problem under non-stationary stochastic demand condition with emission and cycle service level constraints considering carbon cap-and-trade regulatory mechanism. Using a mixed integer linear programming model, this paper aims to investigate the effects of emission parameters, product- and system-related features on the supply chain performance through extensive computational experiments to cover general type business settings and not a specific scenario. Results show that cycle service level and demand coefficient of variation have significant impacts on total cost and emission irrespective of level of demand variability while the impact of product's demand pattern is significant only at lower level of demand variability. Finally, results also show that increasing value of carbon price reduces total cost, total emission and total inventory and the scope of emission reduction by increasing carbon price is greater at higher levels of cycle service level and demand coefficient of variation. The analysis of results helps supply chain managers to take right decision in different demand and service level situations.

Impact of denial of service solutions on network quality of service

The Internet has become a universal communication network tool. It has evolved from a platform that supports best-effort traffic to one that now carries different traffic types including those involving continuous media with quality of service (QoS) requirements. As more services are delivered over the Internet, we face increasing risk to their availability given that malicious attacks on those Internet services continue to increase. Several networks have witnessed denial of service (DoS) and distributed denial of service (DDoS) attacks over the past few years which have disrupted QoS of network services, thereby violating the Service Level Agreement (SLA) between the client and the Internet Service Provider (ISP). Hence DoS or DDoS attacks are major threats to network QoS. In this paper we survey techniques and solutions that have been deployed to thwart DoS and DDoS attacks and we evaluate them in terms of their impact on network QoS for Internet services. We also present vulnerabilities that can be exploited for QoS protocols and also affect QoS if exploited. In addition, we also highlight challenges that still need to be addressed to achieve end-to-end QoS with recently proposed DoS/DDoS solutions. © 2010 John Wiley & Sons, Ltd.

Conceção e implementação de um programa de melhoria da qualidade: estudo de caso na Eurico Ferreira, S.A.

Os programas de melhoria contínua dos processos são cada vez mais a aposta das empresas para fazer face ao mercado. Através da implementação destes programas é possível conferir simplicidade e padronização aos processos e consequentemente reduzir os custos com desperdícios internos relacionados com a qualidade dos mesmos. As ferramentas de melhoria da qualidade e as ferramentas associadas ao Lean Thinking representam um pilar importante no sucesso de qualquer programa de melhoria contínua dos processos. Estas ferramentas constituem meios úteis na análise, controlo, organização de dados importantes para a correta tomada de decisão nas organizações. O presente projeto tem como principal objetivo a conceção e implementação de um programa de melhoria da qualidade na Eurico Ferreira, S.A., tendo por base a avaliação da satisfação do cliente e a aplicação dos 5S. Neste contexto, o trabalho teve como fundamentação teórica a Gestão da Qualidade, Lean Thinking e algumas ferramentas de ambas as matérias. Posteriormente foi selecionada a área de negócio da empresa a abordar. Após a seleção, realizou-se um diagnóstico inicial do processo identificando os diversos pontos de melhoria onde foram aplicadas algumas ferramentas do Lean Thinking, nomeadamente o Value Stream Mapping e a metodologia 5S. Com a primeira foi possível construir um mapa do estado atual do processo, no qual estavam representados todos os intervenientes assim como o fluxo de materiais e de informação ao longo do processo. A metodologia 5S permitiu atuar sobre os desperdícios, identificando e implementando diversas melhorias no processo. Concluiu-se que a implementação das ferramentas contribuiu eficientemente para a melhoria contínua da qualidade nos processos, tendo sido decisão da coordenação alargar o âmbito do projeto aos restantes armazéns do centro logístico da empresa. Pode afirmar-se com recurso à satisfação do cliente expressa através da evolução favorável do Service-level agreement que as ferramentas implementadas têm gerado resultados muito positivos no curto prazo.

A gestão de stocks do serviço de assistência técnica na área da eletromedicina

Dissertação apresentada ao Instituto Superior de Administração e Contabilidade do Porto para obtenção do Grau de Mestre em Logística Orientada por: Professora Doutora Maria Clara Rodrigues Bento Vaz Fernandes

Federated IaaS Resource Brokerage

This paper presents the CloudAnchor brokerage platform for the transaction of single provider as well as federated Infrastructure as a Service (IaaS) resources. The platform, which is a layered Multi-Agent System (MAS), provides multiple services, including (consumer or provider) business registration and deregistration, provider coalition creation and termination, provider lookup and invitation and negotiation services regarding brokerage, coalitions and resources. Providers, consumers and virtual providers, representing provider coalitions, are modelled by dedicated agents within the platform. The main goal of the platform is to negotiate and establish Service Level Agreements (SLA). In particular, the platform contemplates the establishment of brokerage SLA – bSLA – between the platform and each provider or consumer, coalition SLA – cSLA – between the members of a coalition of providers and resource SLA – rSLA – between a consumer and a provider. Federated resources are detained and negotiated by virtual providers on behalf of the corresponding coalitions of providers.

A new MDA-SOA based framework for intercloud interoperability

Cloud computing has been one of the most important topics in Information Technology which aims to assure scalable and reliable on-demand services over the Internet. The expansion of the application scope of cloud services would require cooperation between clouds from different providers that have heterogeneous functionalities. This collaboration between different cloud vendors can provide better Quality of Services (QoS) at the lower price. However, current cloud systems have been developed without concerns of seamless cloud interconnection, and actually they do not support intercloud interoperability to enable collaboration between cloud service providers. Hence, the PhD work is motivated to address interoperability issue between cloud providers as a challenging research objective. This thesis proposes a new framework which supports inter-cloud interoperability in a heterogeneous computing resource cloud environment with the goal of dispatching the workload to the most effective clouds available at runtime. Analysing different methodologies that have been applied to resolve various problem scenarios related to interoperability lead us to exploit Model Driven Architecture (MDA) and Service Oriented Architecture (SOA) methods as appropriate approaches for our inter-cloud framework. Moreover, since distributing the operations in a cloud-based environment is a nondeterministic polynomial time (NP-complete) problem, a Genetic Algorithm (GA) based job scheduler proposed as a part of interoperability framework, offering workload migration with the best performance at the least cost. A new Agent Based Simulation (ABS) approach is proposed to model the inter-cloud environment with three types of agents: Cloud Subscriber agent, Cloud Provider agent, and Job agent. The ABS model is proposed to evaluate the proposed framework.

A trust model for cloud computing environment

This paper presents a proposal for a management model based on reliability requirements concerning Cloud Computing (CC). The proposal was based on a literature review focused on the problems, challenges and underway studies related to the safety and reliability of Information Systems (IS) in this technological environment. This literature review examined the existing obstacles and challenges from the point of view of respected authors on the subject. The main issues are addressed and structured as a model, called "Trust Model for Cloud Computing environment". This is a proactive proposal that purposes to organize and discuss management solutions for the CC environment, aiming improved reliability of the IS applications operation, for both providers and their customers. On the other hand and central to trust, one of the CC challenges is the development of models for mutual audit management agreements, so that a formal relationship can be established involving the relevant legal responsibilities. To establish and control the appropriate contractual requirements, it is necessary to adopt technologies that can collect the data needed to inform risk decisions, such as access usage, security controls, location and other references related to the use of the service. In this process, the cloud service providers and consumers themselves must have metrics and controls to support cloud-use management in compliance with the SLAs agreed between the parties. The organization of these studies and its dissemination in the market as a conceptual model that is able to establish parameters to regulate a reliable relation between provider and user of IT services in CC environment is an interesting instrument to guide providers, developers and users in order to provide services and secure and reliable applications.

Palvelutasosopimus toimittajan hallinnnan työkaluna Case: IT-käyttötukipalvelu

Työn tavoitteena on selvittää palvelutasosopimuksella ja sen hallinnalla saatavaa hyötyä toimittajan hallinnassa. Tutkimusongelmaa on lähdetty selvittämään tutustumalla ensin lyhyesti toimittajan hallintaan ja laajemmin palvelutasosopimuksista ja niiden hallinnasta olemassa olevaan teoria-aineistoon. Tämän teoriapohjan perusteella palvelutasosopimuksia ja niiden hallintaa on tutkittu käytännössä case-yrityksen valossa, mahdollisimman realistiseen lopputulokseen pääsemiseksi. Palvelujen ulkoistaminen tulee tulevaisuudessa lisääntymään ja tätä kautta yritysten onnistuminen markkinoilla on yhä riippuvaisempaa niiden kyvystä hallita toimittajiaan. Palvelutasosopimukset ja prosessit niiden ympärillä ovat hyödyllisiä työkaluja toimittajan suorituksen valvonnassa ja kehittämisessä sekä toimittajasuhteen luotsaamisessa kohti kumppanuussuhdetta. Tämä edellyttää kuitenkin, että kauppakumppanit sisäistävät palvelutasosopimusten kautta saavutettavat hyödyt ja sitoutuvat koko palvelutason hallintaprosessiin.

Sisäisen toimittajan palvelutasosopimuksen kehittäminen ja toimitusvarmuuden parantaminen, CASE: oy Shell ab

Tämän tutkielman tarkoituksena on tehostaa toimitusketjua kehittämällä palvelutasosopimusta ja parantamalla toimitusvarmuutta toimittajan ja oy Shell ab:n välillä. Työssä perehdytään näiden kahden yrityksen väliseen sopimukseen ja toimitusvarmuutta kuvaavaan mittariin nimeltä Supplier OTIF. Nykytila arvioidaan molempien osalta ja mahdollisia parantavia toimenpiteitä tuodaan esille. Tämä tutkimus perustuu yrityksessä työskentelyn ohella haastatteluihin, kyselyihin sekä omiin havaintoihin eri osastoilla. Työn teoriaosuudessa tarkastellaan ostosopimuksen yleisintä kaupallista sisältöä. Lisäksi paneudutaan palveluyrityksen käytäntöihin, tulkitaan palveluyrityksen suorituskykyä ja sen mittaamista tunnuslukujen avulla. Tutkimus osoittaa, että niin palvelutasosopimus kuin toimitusvarmuuskin eivät ole riittävällä tasolla case-yrityksessä. Erityisesti osapuolien välistä yhteistyötä ja tiedonjakoa on parannettava tavoitteiden saavuttamiseksi. Työssä esiteltyjen kehitys- ja parannusehdotusten osittainen käyttöönotto aikaansai toimitusketjun tehokkaamman toiminnan. Case-yrityksen tuleekin harkita lisätoimenpiteiden käyttöönottoa. Toiminnan sekä yhteistyön parantaminen yhä edelleen jää case-yrityksen ja toimittajien yhteisesti tulevaisuudessa tehtävien ratkaisujen varaan.

Taloushallinnon palvelukeskuksen perustaminen julkiselle sektorille ja sen haasteet

Tutkielman tarkoituksena oli selvittää taloushallinnon palvelukeskuksen perustamista julkiselle sektorille sekä suunnitteluvaiheen ja toiminnan alkuvaiheen mahdollisia kriittisiä seikkoja. Tavoitteena oli selvittää, kuinka ne voidaan minimoida, jotta hankkeesta tulee onnistunut. Lisäksi tutkielmassa käytiin läpi seikkoja, jotka ovat johtaneet palvelukeskuksien perustamiseen, palvelukeskuksille asetettuja tavoitteita sekä lyhyesti palvelukeskuksen ja sen asiakkaiden välistä palvelusopimusta. Tutkielma toteutettiin laadullisena tutkimuksena keräämällä aineistoa julkisella sektorilla toimivista taloushallinnon palvelukeskuksista. Sen lisäksi suoritettiin haastatteluita kunnallisessa palvelukeskuksessa sekä sen asiakasorganisaatiossa. Tulokset osoittivat, että palvelukeskuksen perustamiseen ja toiminnan alkuvaiheeseen liittyvät riskit ovat julkisen sektorin palvelukeskuksissa pitkälti samoja. Tutkimus osoittaa, että minimoidakseen riskit, tulee palvelukeskuksen perustamiseen käyttää riittävästi aikaa, jotta haasteellisimmat seikat ehditään huomioimaan sekä arvioimaan lisäresurssien tarve oikein.

Palvelutasosta sopiminen VMI-toimintamallissa

Työn tavoitteena on tutkia mitä osa-alueita liittyy palvelutasosopimukseen VMI-mallissa ja mitä asioita tulisi huomioida palvelutasosta sovittaessa, jotta VMI-toimintamalli onnistuisi mahdollisimman hyvin. Käsittelemme VMI:n palvelutason sopimisessa huomioitavia asioita yleisesti. Tutkimus ei keskity yksittäisiin VMI-variaatioihin tai tiettyihin toimintaympäristöihin. Varastonohjausjärjestelmän osalta tutkimuksessa on käsitelty ainoastaan (s,S)-varastonohjausjärjestelmää. Vaikka eri toimintaympäristöissä ja VMI:n variaatioissa VMI-sopimuksen ja palvelutason osalta huomioitavat asiat vaihtelevat tilannekohtaisesti, ovat työssä esitetyt näkökulmat ja käytetyt esimerkit sellaisia, että ne antavat suunnan ja viitekehyksen huomioitaville asioille kaikissa toimintaympäristöissä ja VMI:n variaatioissa.

Ulkoistettujen toimintojen valvonta – empiirinen analyysi

Pro Gradu -tutkielman tavoitteena on tutkia ulkoistettujen toimintojen valvontaa sekä toimintoihin kohdistuvan valvonnan eroja yrityksissä. Lisäksi tutkitaan, miten hyvin ulkoistukseen liittyvät mittarit toimivat. Tutkimuksessa pyritään selvittämään ulkoistamiseen liittyvien riskien toteutumisia sekä selvittämään valvonnan vaikutusta palvelun laatuun. Tutkimuksen tekoon vaikutti ulkoistamisten lisääntyminen sekä ulkoistettujen toimintojen valvontaan keskittyvien tutkimuksien puuttuminen. Aiemmin tehdyissä tutkimuksissa ei ole käsitelty toimintojen valvontaa. Empiirisessä tutkimuksessa tarkastellaan seitsemän eri toimialalla toimivan yrityksen ulkoistettuja toimintoja. Aineistokeruu tutkimukseen on toteutettu haastatteluina. Tutkimustulosten perusteella voidaan todeta yritysten valvonnan perustuvan sopimuksessa määriteltyihin mittareihin, joiden koetaan mittaavan haluttuja asioita. Toimintojen valvonnassa ei yrityksien välillä ole olennaisia eroja. Yritykset ovat pääsääntöisesti huomioineet ulkoistukseen liittyvät riskit riskienhallinnassaan. Yritykset kokevat valvonnan tehostamisen vaikuttavan palvelun laatuun.

Quality of outsourced IT services in different degrees of offshoring

The Finnish IT service market can be described to be at a turning point. The clients are ever more interested on services delivered from offshore but certain issues keep them cautious. There is a lack of knowledge on what implications different degrees of offshoring have on service quality. Although there has been significant amount of research related to both service quality and offshoring, several questions are unanswered, terminology remains ambivalent and research findings are inconsistent. The study focuses on the interception of these two fields. The purpose of the study is to learn more about service quality in different degrees of offshoring. At the same time it aims to contribute in narrowing the research gaps. The degree of offshoring can be divided to three delivery modes: onshore, collaboration and offshore. The study takes a mixed method approach where the quantitative and qualitative phases are executed sequentially. First data was gathered from incident management system. Resolution time in different degrees of offshoring was analyzed with Kruskal-Wallis and Jonckheere-Terpstra tests. In addition, the compliance to Service Level Agreement (SLA) in different degrees of offshoring was examined with cross tabulation. The findings from the quantitative analysis suggested that the services with offshore delivery mode perform the best in terms of promptness and SLA compliance. However, several issues were found related to the data and for that reason, the findings should be considered with prudence. After the quantitative analysis, the study moved on to qualitative data collection and analysis. Four semi-structured interviews were held. The interviewees represented different organizational roles and had experiences from different delivery modes. Several themes were covered in the interviews, including: the concept of quality, the subjectivity or objectivity of service quality, expectations and prejudices towards offshore deliveries, quality produced in India, proactiveness of offshore resources, quality indicators and the scarcity of collaborative deliveries. Several conclusions can be made from the empirical research. Firstly, the quality in different delivery modes was found to be controversial topic. Secondly, in the collaborative delivery covered in the study, the way tasks and resources are allocated seem to cause issues. On the other hand inexperienced offshore resources are assigned to the delivery and on the other hand only routine tasks are assigned to the resources. This creates a self-enforcing loop that results in low motivation, low ownership and high employee turnover in offshore. Nevertheless, this issue is not characteristic only to collaborative deliveries but rather allocation of tasks and resources. Moreover, prejudices were identified to affect the perceived service quality in non-predictable way. The research also demonstrated that there is a need in focal company for further data gathering and analysis.

Allocation optimale des ressources pour les applications et services de grille de calcul

Mémoire numérisé par la Division de la gestion de documents et des archives de l'Université de Montréal