Formal verification of PLC programs using the B Method

PLCs (acronym for Programmable Logic Controllers) perform control operations, receiving information from the environment, processing it and modifying this same environment according to the results produced. They are commonly used in industry in several applications, from mass transport to petroleum industry. As the complexity of these applications increase, and as various are safety critical, a necessity for ensuring that they are reliable arouses. Testing and simulation are the de-facto methods used in the industry to do so, but they can leave flaws undiscovered. Formal methods can provide more confidence in an application s safety, once they permit their mathematical verification. We make use of the B Method, which has been successfully applied in the formal verification of industrial systems, is supported by several tools and can handle decomposition, refinement, and verification of correctness according to the specification. The method we developed and present in this work automatically generates B models from PLC programs and verify them in terms of safety constraints, manually derived from the system requirements. The scope of our method is the PLC programming languages presented in the IEC 61131-3 standard, although we are also able to verify programs not fully compliant with the standard. Our approach aims to ease the integration of formal methods in the industry through the abbreviation of the effort to perform formal verification in PLCs

CALV3 - Uma linguagem específica de domínio para segurança em sistemas corporativos: um estudo de caso sistemático na indústria

The academic community and software industry have shown, in recent years, substantial interest in approaches and technologies related to the area of model-driven development (MDD). At the same time, continues the relentless pursuit of industry for technologies to raise productivity and quality in the development of software products. This work aims to explore those two statements, through an experiment carried by using MDD technology and evaluation of its use on solving an actual problem under the security context of enterprise systems. By building and using a tool, a visual DSL denominated CALV3, inspired by the software factory approach: a synergy between software product line, domainspecific languages and MDD, we evaluate the gains in abstraction and productivity through a systematic case study conducted in a development team. The results and lessons learned from the evaluation of this tool within industry are the main contributions of this work

PUPSI :uma proposta de processo unificado para políticas de segurança da informação

The way to deal with information assets means nowadays the main factor not only for the success but also for keeping the companies in the global world. The number of information security incidents has grown for the last years. The establishment of information security policies that search to keep the security requirements of assets in the desired degrees is the major priority for the companies. This dissertation suggests a unified process for elaboration, maintenance and development of information security policies, the Processo Unificado para Políticas de Segurança da Informação - PUPSI. The elaboration of this proposal started with the construction of a structure of knowledge based on documents and official rules, published in the last two decades, about security policies and information security. It's a model based on the examined documents which defines the needed security policies to be established in the organization, its work flow and identifies the sequence of hierarchy among them. It's also made a model of the entities participating in the process. Being the problem treated by the model so complex, which involves all security policies that the company must have. PUPSI has an interative and developing approach. This approach was obtained from the instantiation of the RUP - Rational Unified Process model. RUP is a platform for software development object oriented, of Rational Software (IBM group). Which uses the best practice known by the market. PUPSI got from RUP a structure of process that offers functionality, diffusion capacity and comprehension, performance and agility for the process adjustment, offering yet capacity of adjustment to technological and structural charges of the market and the company

Recurso de interface captcha: segurança e usabilidade na distinção entre humano e máquina

Com o intuito de impedir que computadores enviem mensagens automáticas se passando por usuários reais, desenvolvedores tem utilizado o recurso de interface CAPTCHA para distinguir o preenchimento de dados e submissões realizadas por humanos e por máquinas. Este trabalho apresenta as principais modalidades de CAPTCHAs e discute as implicações na usabilidade. Para tanto, foram aplicados questionários e realizados testes de usabilidade em três modalidades de CAPTCHA. Verificou-se que, embora os usuários tenham consciência da importância do uso do CAPTCHA como ferramenta de segurança, percebeu-se que tal recurso compromete a usabilidade, gerando insatisfação e em alguns casos, a desistência da realização da tarefa

Sistemas computacionais espaço-temporais para toma de decisão em questões ambientais relacionadas à indústria de petróleo e gás

The area between São Bento do Norte and Macau cities, located in the northern coast of the Rio Grande do Norte State is submitted to intense and constant processes of littoral and aeolian transport, causing erosion, alterations in the sediments balance and modifications in the shoreline. Beyond these natural factors, the human interference is huge in the surroundings, composed by sensitive places, due to the existence of the Guamaré Petroliferous Pole, RN, the greater terrestrial oil producing in Brazil, besides the activities of the salt companies and shrimp farms. This socioeconomic-environmental context justifies the elaboration of strategies of environmental monitoring of that coastal area. In the environmental monitoring of coastal strips, submitted to human impacts, the use of multi-sources and multitemporal data integrated through a Spatio- Temporal Database that allows the multiuser friendly access. The objective was to use the potential of the computational systems as important tools the managers of environmental monitoring. The stored data in the form of a virtual library aid in making decisions from the related results and presented in different formats. This procedure enlarges the use of the data in the preventive attendance, in the planning of future actions and in the definition of new lines of researches on the area, in a multiscale approach. Another activity of this Thesis consisted on the development of a computational system to automate the process to elaborate Oil-Spill Environmental Sensitivity Maps, based on the temporal variations that some coastal ecosystems present in the sensibility to the oil. The maps generated in this way, based on the methodology proposed by the Ministério do Meio Ambiente, supply more updated information about the behavior of the ecosystem, as a support to the operations in case of oil spill. Some parameters, such as the hydrodynamic data, the declivity of the beach face, types of resources in risk (environmental, economical, human or cultural) and use and occupation of the area are some of the essential basic information in the elaboration of the sensitivity maps, which suffer temporal alterations.In this way, the two computational systems developed are considered support systems to the decision, because they provide operational subsidies to the environmental monitoring of the coastal areas, considering the transformations in the behavior of coastal elements resulting from temporal changes related the human and/or natural interference of the environment

Litoestratigrafia e deformação cenzóica na região de Icapuí, Ceará, e implicações para a estruturação de campos de petróleo na borda ocidental da bacia Potiguar(NE do Brasil)

This thesis deals with the sedimentological/stratigraphic and structural evolution of the sedimentary rocks that occur in the NW continental border of the Potiguar Basin. These rocks are well exposed along coastal cliffs between the localities of Lagoa do Mato and Icapuí, Ceará State (NE Brazil). The sedimentological/stratigraphic study involved, at the outcrop scale, detailed facies descriptions, profile mapping of the vertical succession of different beds, and columnar sections displaying inferred lateral relationships. The approach was complemented by granulometric and petrographic analyses, including the characterization of heavy mineral assemblages. The data set allowed to recognize two kinds of lithological units, a carbonate one of very restricted occurrence at the base of the cliffs, and three younger, distinct siliciclastic units, that predominate along the cliffs, in vertical and lateral extent. The carbonate rocks were correlated to the late Cretaceous Jandaíra Formation, which is covered by the siliciclastic Barreiras Formation. The Barreiras Formation occurs in two distinct structural settings, the usual one with nondeformed, subhorizontal strata, or as tilted beds, affected by strong deformation. Two lithofacies were recognized, vertically arranged or in fault contacts. The lower facies is characterized by silty-argillaceous sandstones with low-angle cross bedding; the upper facies comprises medium to coarse grained sandstones, with conglomeratic layers. The Tibau Formation (medium to coarse-grained sandstones with argillite intercalations) occurs at the NW side of the studied area, laterally interlayered with the Barreiras Formation. Eolic sediments correlated to the Potengi Formation overly the former units, either displaying an angular unconformity, or simply an erosional contact (stratigraphic unconformity). Outstanding structural features, identified in the Barreiras Formation, led to characterize a neocenozoic stress field, which generated faults and folds and/or reactivated older structures in the subjacent late cretaceous (to paleogene, in the offshore basin) section. The structures recognized in the Barreiras Formation comprise two distinct assemblages, namely a main extensional deformation between the localities of Ponta Grossa and Redonda, and a contractional style (succeeded by oblique extensional structures) at Vila Nova. In the first case, the structural assemblage is dominated by N-S (N±20°Az) steep to gently-dipping extensional faults, displaying a domino-style or listric geometry with associated roll-over structures. This deformation pattern is explained by an E-W/WNW extension, contemporaneous with deposition of the upper facies of the Barreiras Formation, during the time interval Miocene to Pleistocene. Strong rotation of blocks and faults generated low-angle distensional faults and, locally, subvertical bedding, allowing to estimate very high strain states, with extension estimates varying between 40% up to 200%. Numerous detachment zones, parallel to bedding, help to acommodate this intense deformation. The detachment surfaces and a large number of faults display mesoscopic features analoguous to the ones of ductile shear zones, with development of S-C fabrics, shear bands, sigmoidal clasts and others, pointing to a hydroplastic deformation regime in these cases. Local occurrences of the Jandaíra limestone are controled by extensional faults that exhume the pre-Barreiras section, including an earlier event with N-S extension. Finally, WNWtrending extensional shear zones and faults are compatible with the Holocene stress field along the present continental margin. In the Vila Nova region, close to Icapuí, gentle normal folds with fold hinges shallowly pluging to SSW affect the lower facies of the Barreiras Formation, displaying an incipient dissolution cleavage associated with an extension lineation at high rake (a S>L fabric). Deposition of the upper facies siliciclastics is controlled by pull-apart graben structures, bordered by N-NE-trending sinistral-normal shear zones and faults, characterizing an structural inversion. Microstructures are compatible with tectonic deformation of the sedimentary pile, burried at shallow depths. The observed features point to high pore fluid pressures during deformation of the sediments, producing hydroplastic structures through mechanisms of granular flow. Such structures are overprinted by microfractures and microfaults (an essentially brittle regime), tracking the change to microfracturing and frictional shear mechanisms accompanying progressive dewatering and sediment lithification. Correlation of the structures observed at the surface with those present at depth was tested through geophysical data (Ground Penetrating Radar, seismics and a magnetic map). EW and NE-trending lineaments are observed in the magnetic map. The seismic sections display several examples of positive flower structures which affect the base of the cretaceous sediments; at higher stratigraphic levels, normal components/slips are compatible with the negative structural inversion characterized at the surface. Such correlations assisted in proposing a structural model compatible with the regional tectonic framework. The strong neogenepleistocene deformation is necessarily propagated in the subsurface, affecting the late cretaceous section (Açu and Jandaíra formations), wich host the hydrocarbon reservoirs in this portion of the Potiguar Basin. The proposed structural model is related to the dextral transcurrent/transform deformation along the Equatorial Margin, associated with transpressive terminations of E-W fault zones, or at their intersections with NE-trending lineaments, such as the Ponta Grossa-Fazenda Belém one (the LPGFB, itself controlled by a Brasiliano-age strike-slip shear zone). In a first step (and possibly during the late Cretaceous to Paleogene), this lineament was activated under a sinistral transpressional regime (antithetic to the main dextral deformation in the E-W zones), giving way to the folds in the lower facies of the Barreiras Formation, as well as the positive flower structures mapped through the seismic sections, at depth. This stage was succeeded (or was penecontemporaneous) by the extensional structures related to a (also sinistral) transtensional movement stage, associated to volcanism (Macau, Messejana) and thermal doming processes during the Neogene-Pleistocene time interval. This structural model has direct implications to hydrocarbon exploration and exploitation activities at this sector of the Potiguar Basin and its offshore continuation. The structure of the reservoirs at depth (Açu Formation sandstones of the post-rift section) may be controlled (or at least, strongly influenced) by the deformation geometry and kinematics characterized at the surface. In addition, the deformation event recognized in the Barreiras Formation has an age close to the one postulated for the oil maturation and migration in the basin, between the Oligocene to the Miocene. In this way, the described structural cenario represents a valid model to understand the conditions of hydrocarbon transport and acummulation through space openings, trap formation and destruction. This model is potentially applicable to the NW region of the Potiguar Basin and other sectors with a similar structural setting, along the brazilian Equatorial Atlantic Margin

Segurança e eficácia da técnica de biopsia pulmonar transtorácica percutânea para avaliação histopatológica do parênquima pulmonar de ovinos clinicamente sadios

Fundação de Amparo à Pesquisa do Estado de São Paulo (FAPESP)

Processamento e interpretação de dados 2D e 3D de GPR :aplicações no imageamento de feições kársticas e estruturas de dissolução no campo de petróleo de Fazenda Belém-CE

In Fazenda Belém oil field (Potiguar Basin, Ceará State, Brazil) occur frequently sinkholes and sudden terrain collapses associated to an unconsolidated sedimentary cap covering the Jandaíra karst. This research was carried out in order to understand the mechanisms of generation of these collapses. The main tool used was Ground Penetrating Radar (GPR). This work is developed twofold: one aspect concerns methodology improvements in GPR data processing whilst another aspect concerns the geological study of the Jandaíra karst. This second aspect was strongly supported both by the analysis of outcropping karst structures (in another regions of Potiguar Basin) and by the interpretation of radargrams from the subsurface karst in Fazenda Belém. It was designed and tested an adequate flux to process GPR data which was adapted from an usual flux to process seismic data. The changes were introduced to take into account important differences between GPR and Reflection Seismic methods, in particular: poor coupling between source and ground, mixed phase of the wavelet, low signal-to-noise ratio, monochannel acquisition, and high influence of wave propagation effects, notably dispersion. High frequency components of the GPR pulse suffer more pronounced effects of attenuation than low frequency components resulting in resolution losses in radargrams. In Fazenda Belém, there is a stronger need of an suitable flux to process GPR data because both the presence of a very high level of aerial events and the complexity of the imaged subsurface karst structures. The key point of the processing flux was an improvement in the correction of the attenuation effects on the GPR pulse based on their influence on the amplitude and phase spectra of GPR signals. In low and moderate losses dielectric media the propagated signal suffers significant changes only in its amplitude spectrum; that is, the phase spectrum of the propagated signal remains practically unaltered for the usual travel time ranges. Based on this fact, it is shown using real data that the judicious application of the well known tools of time gain and spectral balancing can efficiently correct the attenuation effects. The proposed approach can be applied in heterogeneous media and it does not require the precise knowledge of the attenuation parameters of the media. As an additional benefit, the judicious application of spectral balancing promotes a partial deconvolution of the data without changing its phase. In other words, the spectral balancing acts in a similar way to a zero phase deconvolution. In GPR data the resolution increase obtained with spectral balancing is greater than those obtained with spike and predictive deconvolutions. The evolution of the Jandaíra karst in Potiguar Basin is associated to at least three events of subaerial exposition of the carbonatic plataform during the Turonian, Santonian, and Campanian. In Fazenda Belém region, during the mid Miocene, the Jandaíra karst was covered by continental siliciclastic sediments. These sediments partially filled the void space associated to the dissolution structures and fractures. Therefore, the development of the karst in this region was attenuated in comparison to other places in Potiguar Basin where this karst is exposed. In Fazenda Belém, the generation of sinkholes and terrain collapses are controlled mainly by: (i) the presence of an unconsolidated sedimentary cap which is thick enough to cover completely the karst but with sediment volume lower than the available space associated to the dissolution structures in the karst; (ii) the existence of important structural of SW-NE and NW-SE alignments which promote a localized increase in the hydraulic connectivity allowing the channeling of underground water, thus facilitating the carbonatic dissolution; and (iii) the existence of a hydraulic barrier to the groundwater flow, associated to the Açu-4 Unity. The terrain collapse mechanisms in Fazenda Belém occur according to the following temporal evolution. The meteoric water infiltrates through the unconsolidated sedimentary cap and promotes its remobilization to the void space associated with the dissolution structures in Jandaíra Formation. This remobilization is initiated at the base of the sedimentary cap where the flow increases its abrasion due to a change from laminar to turbulent flow regime when the underground water flow reaches the open karst structures. The remobilized sediments progressively fill from bottom to top the void karst space. So, the void space is continuously migrated upwards ultimately reaching the surface and causing the sudden observed terrain collapses. This phenomenon is particularly active during the raining season, when the water table that normally is located in the karst may be temporarily located in the unconsolidated sedimentary cap