Fail-Safe Testing of Web Applications

This dissertation introduces an approach to generate tests to test fail-safe behavior for web applications. We apply the approach to a commercial web application. We build models for both behavioral and mitigation requirements. We create mitigation tests from an existing functional black box test suite by determining failure type and points of failure in the test suite and weaving required mitigation based on weaving rules to generate a test suite that tests proper mitigation of failures. A genetic algorithm (GA) is used to determine points of failure and type of failure that needs to be tested. Mitigation test paths are woven into the behavioral test at the point of failure based on failure specific weaving rules. A simulator was developed to evaluate choice of parameters for the genetic algorithm. We showed how to tune the fitness function and performed tuning experiments for GA to determine what values to use for exploration weight and prospecting weight. We found that higher defect densities make prospecting and mining more successful, while lower mitigation defect densities need more exploration. We compare efficiency and effectiveness of the approach. First, the GA approach is compared to random selection. The results show that the GA performance was better than random selection and that the approach was robust when the search space increased. Second, we compare the GA against four coverage criteria. The results of comparison show that test requirements generated by a genetic algorithm (GA) are more efficient than three of the four coverage criteria for large search spaces. They are equally effective. For small search spaces, the genetic algorithm is less effective than three of the four coverage criteria. The fourth coverage criteria is too weak and unable to find all defects in almost all cases. We also present a large case study of a mortgage system at one of our industrial partners and show how we formalize the approach. We evaluate the use of a GA to create test requirements. The evaluation includes choice of initial population, multiplicity of runs and a discussion of the cost of evaluating fitness. Finally, we build a selective regression testing approach based on types of changes (add, delete, or modify) that could occur in the behavioral model, the fault model, the mitigation models, the weaving rules, and the state-event matrix. We provide a systematic method by showing the formalization steps for each type of change to the various models.

Scalable and fault tolerant failure detection and consensus

Future extreme-scale high-performance computing systems will be required to work under frequent component failures. The MPI Forum's User Level Failure Mitigation proposal has introduced an operation, MPI_Comm_shrink, to synchronize the alive processes on the list of failed processes, so that applications can continue to execute even in the presence of failures by adopting algorithm-based fault tolerance techniques. This MPI_Comm_shrink operation requires a fault tolerant failure detection and consensus algorithm. This paper presents and compares two novel failure detection and consensus algorithms. The proposed algorithms are based on Gossip protocols and are inherently fault-tolerant and scalable. The proposed algorithms were implemented and tested using the Extreme-scale Simulator. The results show that in both algorithms the number of Gossip cycles to achieve global consensus scales logarithmically with system size. The second algorithm also shows better scalability in terms of memory and network bandwidth usage and a perfect synchronization in achieving global consensus.

Laser-to-radar sensing redundancy for resilient perception in adverse environmental conditions

This paper presents an approach to promote the integrity of perception systems for outdoor unmanned ground vehicles (UGV) operating in challenging environmental conditions (presence of dust or smoke). The proposed technique automatically evaluates the consistency of the data provided by two sensing modalities: a 2D laser range finder and a millimetre-wave radar, allowing for perceptual failure mitigation. Experimental results, obtained with a UGV operating in rural environments, and an error analysis validate the approach.

Resilient Navigation through Probabilistic Modality Reconfiguration

This paper proposes an approach to achieve resilient navigation for indoor mobile robots. Resilient navigation seeks to mitigate the impact of control, localisation, or map errors on the safety of the platform while enforcing the robot’s ability to achieve its goal. We show that resilience to unpredictable errors can be achieved by combining the benefits of independent and complementary algorithmic approaches to navigation, or modalities, each tuned to a particular type of environment or situation. In this paper, the modalities comprise a path planning method and a reactive motion strategy. While the robot navigates, a Hidden Markov Model continually estimates the most appropriate modality based on two types of information: context (information known a priori) and monitoring (evaluating unpredictable aspects of the current situation). The robot then uses the recommended modality, switching between one and another dynamically. Experimental validation with a SegwayRMP- based platform in an office environment shows that our approach enables failure mitigation while maintaining the safety of the platform. The robot is shown to reach its goal in the presence of: 1) unpredicted control errors, 2) unexpected map errors and 3) a large injected localisation fault.

Bond strength and Raman analysis of the zirconia-feldspathic porcelain interface

The test groups were experimental zirconia, Zirkonzahn zirconia, and Schuetz zirconia. Blocks of partially sintered zirconia were cut into disks (n=20) and then veneered with a feldspathic porcelain. Half of the specimens from each group (n=10) were incubated in 37°C water for 24 hours, and the other half were thermocycled. All the specimens were then subjected to shear testing. The fractured areas were analyzed with optical stereomicroscopy and classified as adhesive, cohesive, or an adhesive-cohesive failure. Spectral patterns were examined to detect bands related to the zirconia and feldspathic porcelain phases. The shear strength data were submitted to 2-way ANOVA. Results No significant differences in shear bond strength were observed among the 3 groups, regardless of whether or not the specimens were thermocycled. Adhesive failures were the most prevalent types of failure (70%). Raman spectra were clearly distinguished for all the materials, which showed the presence of tetragonal and monoclinic phases. Conclusions The controlled production of the experimental zirconia did not influence the results of the bond strength. Raman analysis suggested a process of interdiffusion by the presence of peaks associated with the zirconia and feldspathic ceramics.

Mobile Incubation in Waved Albatross (Phoebastria irrorata): Associated Hatching Failure and Artificial Mitigation

Waved albatrosses often relocate their eggs during incubation by placing the egg between the tarsi and shuffling forward. This behavior frequently results in eggs becoming lodged between rocks, accounting for at least 10%, and perhaps as much as 80%, of breeding failures. Because albatross populations worldwide are currently threatened, artificial means of augmenting reproductive success may be necessary to mitigate losses caused by anthropogenic effects. We characterize the frequency and extent of egg movement; test several hypotheses related to microhabitat, timing, and incubation location to explain the behavior; and investigate the utility of repositioning lodged eggs in a location in which breeding birds might resume incubation. Egg rescue increased both the likelihood of continued incubation as well as the hatching rate in our experiment, and provides an efficient, low-cost management option for this species.

Success and failure of grassroots innovations for addressing climate change: the case of the Transition Movement

Grassroots innovations emerge as networks generating innovative solutions for climate change adaptation and mitigation. However, it is unclear if grassroots innovations can be successful in responding to climate change. Little evidence exists on replication, international comparisons are rare, and research tends to overlook discontinued responses in favour of successful ones. We take the Transition Movement as a case study of a rapidly spreading transnational grassroots network, and include both active and non-active local transition initiatives. We investigate the replication of grassroots innovations in different contexts with the aim to uncover general patterns of success and failure, and identify questions for future research. An online survey was carried out in 23 countries (N=276). The data analysis entailed testing the effect of internal and contextual factors of success as drawn from the existing literature, and the identification of clusters of transition initiatives with similar internal and contextual factor configurations. Most transition initiatives consider themselves successful. Success is defined along the lines of social connectivity and empowerment, and external environmental impact. We find that less successful transition initiatives might underestimate the importance of contextual factors and material resources in influencing success. We also find that their diffusion is linked to the combination of local-global learning processes, and that there is an incubation period during which a transition initiative is consolidated. Transition initiatives seem capable of generalising organisational principles derived from unique local experiences that seem to be effective in other local contexts. However, the geographical locations matter with regard to where transition initiatives take root and the extent of their success, and ‘place attachment’ may have a role in the diffusion of successful initatives. We suggest that longitudinal comparative studies can advance our understanding in this regard, as well as inform the changing nature of the definition of success at different stages of grassroots innovation development, and the dynamic nature of local and global linkages.

Outcome and patterns of failure after postoperative intensity modulated radiotherapy for locally advanced or high-risk oral cavity squamous cell carcinoma

Background To determine the outcome and patterns of failure in oral cavity cancer (OCC) patients after postoperative intensity modulated radiotherapy (IMRT) with concomitant systemic therapy. Methods All patients with locally advanced (AJCC stage III/IV) or high-risk OCC (AJCC stage II) who underwent postoperative IMRT at our institution between December 2006 and July 2010 were retrospectively analyzed. The primary endpoint was locoregional recurrence-free survival (LRRFS). Secondary endpoints included distant metastasis-free survival (DMFS), overall survival (OS), acute and late toxicities. Results Overall 53 patients were analyzed. Twenty-three patients (43%) underwent concomitant chemotherapy with cisplatin, two patients with carboplatin (4%) and four patients were treated with the monoclonal antibody cetuximab (8%). At a median follow-up of 2.3 (range, 1.1–4.6) years the 3-year LRRFS, DMFS and OS estimates were 79%, 90%, and 73% respectively. Twelve patients experienced a locoregional recurrence. Eight patients, 5 of which had both a flap reconstruction and extracapsular extension (ECE), showed an unusual multifocal pattern of recurrence. Ten locoregional recurrences occurred marginally or outside of the high-risk target volumes. Acute toxicity grades of 2 (27%) and 3 (66%) and late toxicity grades of 2 (34%) and 3 (11%) were observed. Conclusion LRRFS after postoperative IMRT is satisfying and toxicity is acceptable. The majority of locoregional recurrences occurred marginally or outside of the high-risk target volumes. Improvement of high-risk target volume definition especially in patients with flap reconstruction and ECE might transfer into better locoregional control.

Outcomes and patterns of failure in solitary plasmacytoma: a multicenter Rare Cancer Network study of 258 patients

PURPOSE: To assess the outcomes and patterns of failure in solitary plasmacytoma (SP). METHODS AND MATERIALS: The data from 258 patients with bone (n = 206) or extramedullary (n = 52) SP without evidence of multiple myeloma (MM) were collected. A histopathologic diagnosis was obtained for all patients. Most (n = 214) of the patients received radiotherapy (RT) alone; 34 received chemotherapy and RT, and 8 surgery alone. The median radiation dose was 40 Gy. The median follow-up was 56 months (range 7-245). RESULTS: The median time to MM development was 21 months (range 2-135), with a 5-year probability of 45%. The 5-year overall survival, disease-free survival, and local control rate was 74%, 50%, and 86%, respectively. On multivariate analyses, the favorable factors were younger age and tumor size <4 cm for survival; younger age, extramedullary localization, and RT for disease-free survival; and small tumor and RT for local control. Bone localization was the only predictor of MM development. No dose-response relationship was found for doses >30 Gy, even for larger tumors. CONCLUSION: Progression to MM remains the main problem. Patients with extramedullary SP had the best outcomes, especially when treated with moderate-dose RT. Chemotherapy and/or novel therapies should be investigated for bone or bulky extramedullary SP.

Probabilistic-based hurricane risk assessment and mitigation considering the potential impacts of climate change

Studies are suggesting that hurricane hazard patterns (e.g. intensity and frequency) may change as a consequence of the changing global climate. As hurricane patterns change, it can be expected that hurricane damage risks and costs may change as a result. This indicates the necessity to develop hurricane risk assessment models that are capable of accounting for changing hurricane hazard patterns, and develop hurricane mitigation and climatic adaptation strategies. This thesis proposes a comprehensive hurricane risk assessment and mitigation strategies that account for a changing global climate and that has the ability of being adapted to various types of infrastructure including residential buildings and power distribution poles. The framework includes hurricane wind field models, hurricane surge height models and hurricane vulnerability models to estimate damage risks due to hurricane wind speed, hurricane frequency, and hurricane-induced storm surge and accounts for the timedependant properties of these parameters as a result of climate change. The research then implements median insured house values, discount rates, housing inventory, etc. to estimate hurricane damage costs to residential construction. The framework was also adapted to timber distribution poles to assess the impacts climate change may have on timber distribution pole failure. This research finds that climate change may have a significant impact on the hurricane damage risks and damage costs of residential construction and timber distribution poles. In an effort to reduce damage costs, this research develops mitigation/adaptation strategies for residential construction and timber distribution poles. The costeffectiveness of these adaptation/mitigation strategies are evaluated through the use of a Life-Cycle Cost (LCC) analysis. In addition, a scenario-based analysis of mitigation strategies for timber distribution poles is included. For both residential construction and timber distribution poles, adaptation/mitigation measures were found to reduce damage costs. Finally, the research develops the Coastal Community Social Vulnerability Index (CCSVI) to include the social vulnerability of a region to hurricane hazards within this hurricane risk assessment. This index quantifies the social vulnerability of a region, by combining various social characteristics of a region with time-dependant parameters of hurricanes (i.e. hurricane wind and hurricane-induced storm surge). Climate change was found to have an impact on the CCSVI (i.e. climate change may have an impact on the social vulnerability of hurricane-prone regions).

Exercise capacity, physical activity patterns and outcomes six years after cardiac rehabilitation in patients with heart failure.

OBJECTIVE To determine the short- and long-term effects of an intensive, concentrated rehabilitation programme in patients with chronic heart failure. DESIGN Randomized controlled trial, with one-month and six-year evaluations. SETTING Residential rehabilitation centre in Switzerland. SUBJECTS Fifty patients with chronic heart failure, randomized to exercise or control groups. INTERVENTIONS A rehabilitation programme lasting one month, including educational sessions, a low-fat diet, and 2 hours of individually prescribed exercise daily. MAIN MEASURES Exercise test responses, health outcomes and physical activity patterns. RESULTS Peak Vo(2) increased 21.4% in the exercise group during the rehabilitation programme (P<0.05), whereas peak Vo(2) did not change among controls. After the six-year follow-up period, peak Vo(2) was only slightly higher than that at baseline in the trained group (7%, NS), while peak Vo(2) among controls was unchanged. During long-term follow-up, 9 and 12 patients died in the exercise and control groups, respectively (P = 0.63). At six years, physical activity patterns tended to be higher in the exercise group; the mean energy expenditure values over the last year were 2,704 +/- 1,970 and 2,085 +/- 1,522 kcal/week during recreational activities for the exercise and control groups, respectively. However, both groups were more active compared to energy expenditure prior to their cardiac event (P<0.001). CONCLUSIONS Six years after participation in a residential rehabilitation programme, patients with chronic heart failure had slightly better outcomes than control subjects, maintained exercise capacity and engaged in activities that exceed the minimal amount recommended by guidelines for cardiovascular health.

Definitive intensity modulated radiotherapy in locally advanced hypopharygeal and laryngeal squamous cell carcinoma: mature treatment results and patterns of locoregional failure.

PurposeTo assess clinical outcomes and patterns of loco-regional failure (LRF) in relation to clinical target volumes (CTV) in patients with locally advanced hypopharyngeal and laryngeal squamous cell carcinoma (HL-SCC) treated with definitive intensity modulated radiotherapy (IMRT) and concurrent systemic therapy.MethodsData from HL-SCC patients treated from 2007 to 2010 were retrospectively evaluated. Primary endpoint was loco-regional control (LRC). Secondary endpoints included local (LC) and regional (RC) controls, distant metastasis free survival (DMFS), laryngectomy free survival (LFS), overall survival (OS), and acute and late toxicities. Time-to-event endpoints were estimated using Kaplan-Meier method, and univariate and multivariate analyses were performed using Cox proportional hazards models. Recurrent gross tumor volume (RTV) on post-treatment diagnostic imaging was analyzed in relation to corresponding CTV (in-volume, > 95% of RTV inside CTV; marginal, 20¿95% inside CTV; out-volume, < 20% inside CTV).ResultsFifty patients (stage III: 14, IVa: 33, IVb: 3) completed treatment and were included in the analysis (median follow-up of 4.2 years). Three-year LRC, DMFS and overall survival (OS) were 77%, 96% and 63%, respectively. Grade 2 and 3 acute toxicity were 38% and 62%, respectively; grade 2 and 3 late toxicity were 23% and 15%, respectively. We identified 10 patients with LRF (8 local, 1 regional, 1 local¿+¿regional). Six out of 10 RTVs were fully included in both elective and high-dose CTVs, and 4 RTVs were marginal to the high-dose CTVs.ConclusionThe treatment of locally advanced HL-SCC with definitive IMRT and concurrent systemic therapy provides good LRC rates with acceptable toxicity profile. Nevertheless, the analysis of LRFs in relation to CTVs showed in-volume relapses to be the major mode of recurrence indicating that novel strategies to overcome radioresistance are required.

Finite element analysis predicts experimental failure patterns in vertebral bodies loaded via intervertebral discs up to large deformation

Vertebral compression fracture is a common medical problem in osteoporotic individuals. The quantitative computed tomography (QCT)-based finite element (FE) method may be used to predict vertebral strength in vivo, but needs to be validated with experimental tests. The aim of this study was to validate a nonlinear anatomy specific QCT-based FE model by using a novel testing setup. Thirty-seven human thoracolumbar vertebral bone slices were prepared by removing cortical endplates and posterior elements. The slices were scanned with QCT and the volumetric bone mineral density (vBMD) was computed with the standard clinical approach. A novel experimental setup was designed to induce a realistic failure in the vertebral slices in vitro. Rotation of the loading plate was allowed by means of a ball joint. To minimize device compliance, the specimen deformation was measured directly on the loading plate with three sensors. A nonlinear FE model was generated from the calibrated QCT images and computed vertebral stiffness and strength were compared to those measured during the experiments. In agreement with clinical observations, most of the vertebrae underwent an anterior wedge-shape fracture. As expected, the FE method predicted both stiffness and strength better than vBMD (R2 improved from 0.27 to 0.49 and from 0.34 to 0.79, respectively). Despite the lack of fitting parameters, the linear regression of the FE prediction for strength was close to the 1:1 relation (slope and intercept close to one (0.86 kN) and to zero (0.72 kN), respectively). In conclusion, a nonlinear FE model was successfully validated through a novel experimental technique for generating wedge-shape fractures in human thoracolumbar vertebrae.

Dying in hospital: medical failure or natural outcomes?

The purpose of this study was to describe patterns of medical and nursing practice in the care of patients dying of oncological and hematological malignancies in the acute care setting in Australia. A tool validated in a similar American study was used to study the medical records of 100 consecutive patients who died of oncological or hematological malignancies before August 1999 at The Canberra Hospital in the Australian Capital Territory. The three major indicators of patterns of end-of-life care were documentation of Do Not Resuscitate (DNR) orders, evidence that the patient was considered dying, and the presence of a palliative care intention. Findings were that 88 patients were documented DNR, 63 patients' records suggested that the patient was dying, and 74 patients had evidence of a palliative care plan. Forty-six patients were documented DNR 2 days or less prior to death and, of these, 12 were documented the day of death. Similar patterns emerged for days between considered dying and death, and between palliative care goals and death. Sixty patients had active treatment in progress at the time of death. The late implementation of end-of-life management plans and the lack of consistency within these plans suggested that patients were subjected to medical interventions and investigations up to the time of death. Implications for palliative care teams include the need to educate health care staff and to plan and implement policy regarding the management of dying patients in the acute care setting. Although the health care system in Australia has cultural differences when compared to the American context, this research suggests that the treatment imperative to prolong life is similar to that found in American-based studies.

Linking the fifth pillar to the first in the UN Decade of Action

The UN Decade of Action outlines five pillars of activity within a safe system framework to achieve the goal of slowing and then reversing the global growth in road traffic fatalities, especially in low-income and middle-income countries. The first four pillars - road safety management, safer roads and mobility, safer vehicles, and safer road users – have a strong focus on prevention of road traffic crashes and mitigation of energy exchange when a crash occurs. The fifth pillar – post-crash response – is far more specific, focusing only on crash victims in the event of a safe system failure. The victims appear to be relevant to the first four pillars only insofar as their numbers can be used to evaluate the success of road safety programs and identify the target groups and contributing factors. This paper argues that a better understanding of the lived experience of long term disability from traffic crashes has the potential to provide a feedback loop from the fifth pillar to the first. Research conducted in Thailand with male crash victims with spinal injury demonstrates that patterns of attribution and social and cultural factors have important implications for road safety management and for interventions aimed at influencing behaviour. In addition, the mobility constraints experienced by people with long term disability can point to systemic issues that might otherwise go unnoticed. The UN Decade of Action can benefit from a more thorough exploration of the experiences and circumstances of people with long term disability as the result of a road traffic crash. Rather than being evidence of the failure of the safe system, they can inform the development of more effective road safety management on low-income and middle-income countries.