abstract: With the growth of IT products and sophisticated software in various operating systems, I observe that security risks in systems are skyrocketing constantly. Consequently, Security Assessment is now considered as one of primary security mechanisms to measure assurance of systems since systems that are not compliant with security requirements may lead adversaries to access critical information by circumventing security practices. In order to ensure security, considerable efforts have been spent to develop security regulations by facilitating security best-practices. Applying shared security standards to the system is critical to understand vulnerabilities and prevent well-known threats from exploiting vulnerabilities. However, many end users tend to change configurations of their systems without paying attention to the security. Hence, it is not straightforward to protect systems from being changed by unconscious users in a timely manner. Detecting the installation of harmful applications is not sufficient since attackers may exploit risky software as well as commonly used software. In addition, checking the assurance of security configurations periodically is disadvantageous in terms of time and cost due to zero-day attacks and the timing attacks that can leverage the window between each security checks. Therefore, event-driven monitoring approach is critical to continuously assess security of a target system without ignoring a particular window between security checks and lessen the burden of exhausted task to inspect the entire configurations in the system. Furthermore, the system should be able to generate a vulnerability report for any change initiated by a user if such changes refer to the requirements in the standards and turn out to be vulnerable. Assessing various systems in distributed environments also requires to consistently applying standards to each environment. Such a uniformed consistent assessment is important because the way of assessment approach for detecting security vulnerabilities may vary across applications and operating systems. In this thesis, I introduce an automated event-driven security assessment framework to overcome and accommodate the aforementioned issues. I also discuss the implementation details that are based on the commercial-off-the-self technologies and testbed being established to evaluate approach. Besides, I describe evaluation results that demonstrate the effectiveness and practicality of the approaches. / Dissertation/Thesis / M.S. Computer Science 2014

Internet of Things (‘IoT’) systems are complex, asynchronous solutions often comprised of various software and hardware components developed in isolation of each other. These components function with different degrees of reliability and performance over an inherently unreliable network, the Internet. Many IoT systems are developed within silos that do not provide the ability to communicate or be interoperable with other systems and platforms. Literature exists on how these systems should be designed, how they should interoperate, and how they could be improved, but practice does not always consult literature. The work brings together a proposed reference architecture for the IoT and engineering practices for flow semantics found in existing literature with a commercial implementation of an IoT platform. It demonstrates that the proposed IoT reference architecture and flow-service-quality engineering practices when integrated together can produce a more robust system with increased functionality and interoperability. It shows how such practices can be implemented into a commercial solution, and explores the value provided to the system when implemented. This work contributes to the current understanding of how complex IoT systems can be developed to be more reliable and interoperable using reference architectures and flow semantics. The work highlights the value of integration of academic solutions with commercial implementations of complex systems.

This thesis deals with the creation of a BIM model using laser scanning. In the first part of the thesis, basic information about building information modeling (BIM) is described. The next section describes the process of creating a BIM model, from data acquisition to modeling or a particular building. The model was created in Revit.

I och med införandet av BIM-metodiken inom byggbranschen, har flera frågor fötts kring reformationen av arbetsmetodiken inom projekteringsprocessen. En av dessa är frågan om content; grafik - och informationsinnehållet i en BIM-modell.  Rapportens syfte har varit att, via analys av befintliga contenthanteringstrategier, frambringa rekommendationer för utformande av konsekventa arbetsmetodiker inom Revit-projekt. Mål- sättningen har varit att rekommendationerna skall bidra till förstärkning och vidareutveckling av ett företags hantering av Revit-content.  Arbetet inleddes med en serie intervjuer på arkitektföretaget Tengboms Stockholmskontor. Intervjuerna utfördes med representanter för olika Revit-baserade projekt. Av dessa valdes fyra projekt ut till mer detaljerade fallstudier, där syftet var att kartlägga vilka strategier Tengbom tillämpat i sina Revit-projekt. Parallellt med intervjuerna, utfördes en litteraturstudie där information om befintliga contenthanteringsstrategier inom övriga företag och organisationer, kunde förvärvas och analyseras. Resultatet av fallstudierna på Tengbom jämfördes med de teorier som framkommit via litteraturstudien. För- och nackdelar med olika strategier inom contenthantering analyserades med utgångspunkt i olika aspekter gällande utbildning inom Revit-projektering, samt modellering och hantering av content. Slutsatsen blev att Tengbom haft den i särklass mest hållbara strategin inom den inledande fasen av företagets BIM-implementering. Flera fördelar kunde även identifieras i de övriga contenthanteringsstrategierna som analyserats. Dessa kom att utgöra en gedigen grund för de vidare rekommendationer som arbetet resulterade i. / The introduction of the BIM-methodology in the building industry has awoken several questions regarding the reformation of work methods in the project planning process. One is the question about content; graphics and information inside a Building Information Model. The purpose of this report has been to analyze existing content managing strategies, in order to create recommendations for the forming of consequent work methods in Revit projects. The goal has been to adjust the recommendations for companies willing to further develop internal work methods in the field, particularly concerning the management of Revit content. Several interviews with representatives from different Revit projects at the architectural firm Tengbom in Stockholm were conducted. Four of the Revit projects, were chosen for a more detailed case study, in order to acquire information about the company’s strategies concerning content management. Simultaneously, a literary study was executed, through which information about existing content management strategies in other companies and organizations could be obtained and analyzed. The results of the case studies at Tengbom were compared with theories acquired from the existing strategies in content management. Benefits and disadvantages were analyzed, based on different aspects concerning modeling and management of Revit content and also the education of Revit use. The report concludes that Tengbom has applied the most sustainable strategies in the initial part of the company’s BIM implementation process. Several benefits were also found in the existing strategies, analyzed in the literary study. Together, the conclusions formed a solid base for further recommendations, made as a result of the study in this report.

Idag används BIM, byggnadsinformationsmodellering, i fler och fler nybyggnadsprojekt och det finns mängder med information att inhämta om detta både i tryckta tidskrifter och på internet. En obesvarad fråga är dock hur arbetsgången ser ut när BIM ska användas i ombyggnadsprojekt. Informationen som går att finna om detta är begränsad trots att ombyggnadsprojekt utgör en betydande del av byggverksamheten, såväl i Sverige som internationellt. Målet med denna rapport är därför att undersöka hur ombyggnadsprojekt i dagsläget utförs med BIM som arbetssätt. Processen att arbeta med BIM har undersökts i detalj för att klargöra hur den ser ut idag och för att identifiera den problematik som just ombyggnationer medför. Denna undersökning har genomförts i två pågående projekt enligt en gemensam analysmodell för att klargöra skillnader och likheter. För att klargöra arbetsprocessen så har ett flertal intervjuer med inblandade i projekten genomförts. Genom ett enkätutskick till båda projekten så har ett jämförbart underlag även tagits fram. Projektens modeller har också undersökts för att klargöra deras detaljeringsnivå. Den stora problematik som identifierats med ombyggnadsprojekt är att eftersom arbetet sker mot befintliga byggnadsdelar måste dessa kontrolleras och hanteras. Av denna anledning behöver därför många gånger en inmätning av dessa göras för att kontrollera och komplettera det underlag som finns tillgängligt eller för att skapa ett helt nytt. Detta är en tidig del i processen och något som måste göras innan ett vidare arbete med att upprätta en modell kan utföras. Gemensamt för båda projekten har varit att använda sig av modellen för att samgranska olika discipliners material med syftet att upptäcka och på så sätt minimera antalet kollisioner i produktionen. Analysen har visat på ganska stora skillnader i arbetssätt beroende på projektens förutsättningar. Den största skillnaden är att det i ett av projekten finns ett intresse ifrån beställaren att en modell ska levereras, för att senare kunna användas i förvaltningen. Beställarens intresse har resulterat i att BIM har använts i större utsträckning i det projektet med bland annat kostnader kopplade till modellen. Något som har framkommit är också att arbetssättet BIM måste standardiseras, möjligtvis genom att företaget tar fram en BIM-manual som kan användas i alla projekt som ska använda sig av BIM. Erfarenhetsåterföring efter genomförda projekt måste även ske för att denna manual ska vara aktuell. / Currently BIM (Building Information Modeling) is used to a higher extent in new construction projects and there is a lot of information to gather about this both in magazines and online. An unanswered question is how the workflow looks like when BIM is used in reconstruction projects. The information that can be found about this is limited despite the fact that reconstruction projects represent a significant proportion of the construction business, both in Sweden and internationally. The aim of this report is to examine how reconstruction projects currently is carried out with BIM. The BIM process has been studied in detail to clarify the current situation and to identify the problems that reconstruction adds. The study was conducted on two ongoing projects in accordance to a common analytical model to clarify the similarities and differences between them. In order to clarify the work process several interviews has been conducted with the project personnel. Through a questionnaire, a survey of both projects has been performed. Project models have also been studied to clarify their level of detail. The major problem that has been identified with reconstruction projects is that the work is carried out on existing building elements that have to be verified. For this reason a detail survey often must be done to verify and add to existing drawing and documentations. The survey is an early part of the process and something that must be done before any further work to establish a model can be done. Common to both projects is the use of the model to coordinate the various disciplines content in order to minimize the number of collisions in the production. The analysis has shown quite significant differences in methods depending on project conditions. The main difference is that in one of the projects the client wants to use the model in the property management and therefore a model must be delivered. The client’s interest led to a wider use of BIM in the project, including costs connected to the objects in the model. Something that has become clear is that BIM as a work tool must be standardized, possibly through a BIM manual drafted by the company, which can be used in all projects that will make use of BIM. Feedback with lessons learned must be added to the manual for it to stay updated.

Several studies have shown that the main problem in the construction industry is low productivity. Therefore, this study focuses on developing a proposal through a methodology that can increase productivity in the construction of buildings. The proposed methodology is Virtual Design and Construction (VDC), which has 4 pillars: Building Information Modeling (BIM), Integrated Concurrent Engineering (ICE), metrics and Project Production Management (PPM). However, the article mainly develops BIM and ICE sessions. In addition, in the ICE sessions, "work executors"will be added, so that the information is fed back by both parties, specialist engineers and work executors. Finally, the proposal will be applied in a multi-family building project in the city of Lima - Peru, in order to obtain improvement results.

I undersökningen genomförs en del av klimatdeklarationen på ett studieobjekt som fortfarande är i tidigt skede. För att sedan se hur den framtagna metoden potentiellt kan förändra en byggnad för att få ner koldioxidutsläppet till atmosfären. Detta görs av anledning av Boverkets riktlinjer angående klimatdeklarationer och de lagstadga gränsvärden som kommer införas inom snar framtid. Den här undersökningen ska ge företag möjlighet att börja klimatdeklarationen i tidigt planeringsskede, för att kunna göra förändringar baserat på klimatdata.  Arbetsmetoden som tas fram, är en Buildings Information Modeling (BIM) baserad klimatdeklaration. Med hjälp av Dynamo som brygga, kompletteras Revit med Excel. Excel agerar beräkningsmotor. Utbyte av datamängder mellan Revit och Excel hanteras av Dynamo. Klimatdeklarationen blir då tillgänglig i både Revit och Excel. Processen är utförd så att förändringar i klimatdeklarationen ska vara enkelt under projektets gång.  Resultatet av undersökningen är en metod för att göra klimatdeklarationer på ett effektivt sätt. Arkitektur och Byggnadsvård AB, som hållits uppdaterade av arbetes progress, kommer att analysera metoden för att se hur de kan komma att använda den för klimatdeklarationer. Det kommer att bero på utseendet på kommande projekt då beställares krav ser olika ut. Med stöd av arbetsmetoden, kan Arkitektur och Byggnadsvård AB väcka intresse för klimatfrågan, genom att utforma en miljöguide till olika beställare. Samt att använda arbetsmetoden som helhet i de projekt som ska klimatdeklareras enligt lag.  I undersökningen kommer man fram till att klimatdeklaration via Dynamo är möjligt. Den påvisar att det är värdefullt att klimatdeklarera i tidigt skede, då förändringarna som gjorts resulterar i en minskning på 31 ton CO2 – ekvivalenter till atmosfären. Vilket är koldioxidutsläppet som man sparar in genom att göra olika förändringar. Den största vinsten, är att gå från betongvägg till KL – trävägg.  Arkitektur och Byggnadsvård AB kommer att utveckla metoden för att potentiellt använda den i deras framtida projekt. / In the study, part of the climate declaration is carried out on a study object that is still at an early stage. This is done to see how the developed method can potentially change a building to bring down carbon dioxide emissions into the atmosphere. This is due to the Boverket guidelines regarding climate declarations and new statutory limit values, ​​that soon will be introduced. This study will give companies the opportunity to start the climate declaration at an early planning stage and to be able to make changes based on facts. The working method that is developed is a Building information modeling (BIM) based climate declaration. Using Dynamo as a bridge, Revit is supplemented with Excel. Excel acts as a calculation engine. Exchange of data sets between Revit and Excel is handled by Dynamo. The climate declaration will then be available in both Revit and Excel. The process is carried out so that project changes must be easy to maintain and visible in the climate declaration. The result of the survey is a method for making a climate declaration in an effective way. Arkitektur och Byggnadsvård AB, which has been updated regarding progress, will analyze the method to see how they can use it for climate declarations in projects. This will depend on format of coming projects, as the client's requirements are different. With support of the working method, Arkitektur och Byggnadsvård AB can raise interest in the climate issue, by designing an environmental guide for different customers. And to use the working method as a whole where projects are obligated by law to produce a climate declaration.  The survey concludes that a climate declaration through Dynamo is possible. It shows that changed values at an early-stage results in a reduction of 31 tons of CO2 - equivalents to the atmosphere. The biggest gain, is to go from concrete wall to CLT - wooden wall. Arkitektur och Byggnadsvård AB will develop the method to potentially use it in their future projects.

System integration is a key enabler to maximize information value in an engineering context. The valuable information is normally represented by information models which play a decisive role in the implementation of system integration. The information models are designed to efficiently and effectively capture, process and communicate information among different functional and business units. However, use of the information models in implementing system integration is challenged by insufficient support from current settings of modeling architectures. This situation calls for new strategies to ease the use of information models. To address this challenge, this study presents a new twofold solution: Model driven system integration. It includes 1) a modeling architecture to guide the development of information models and 2) an integrated implementation process to guide the use of information models. Thus, this work improves practical applicability of an information model in its entire modeling lifecycle. The results contribute not only to the performance of modeling practices but also to improved understanding of information modeling in system integration. Implementation contexts and implementation models are introduced to develop an implementation-oriented modeling architecture. Further, the potential of information models as a knowledge base to sup-port implementation practices is identified. To concretely discuss behaviors and structures of information models, this study adopts ISO 10303 and the related standards as major references of existing information models. Case studies on model driven system integration validate this research in scenarios concerning kinematic modeling, kinematic error modeling, cutting tools classification and product catalogue modeling. Model driven system integration exhibits high efficiency in implementation, enhanced interoperability and increased value of information models. / <p>QC 20170519</p> / MPQP - Model driven process and quality planning / FBOP - Feature Based Process Planning / DFBB - Digital factory building blocks

<p>U ovom radu su istraživane semantičke veb tehnologije i njihova<br />primena u elektroenergetskim sistemima. Analizirani su CIM<br />standardi usvojeni od strane IEC-a (61970-501 i 61970-552) i njihova<br />ograničenja, razmatrana postojeća CIM metodologija zasnovana na<br />ovim standardima i dati predlozi za unapređenje ove metodologije<br />u skladu sa tekućim dostignućima u polju semantičkih veb<br />tehnologija. Istovremeno je razmatrana modularnost veb aplikacija<br />baziranih na CIM modelu podataka sa stanovišta semantičkog veba i<br />dat predlog modularne arhitekture veb aplikacija koja se oslanja na<br />CIM semantiku.</p> / <p>This paper explores the semantic web technologies and their application<br />in power systems. It also analyzes CIM standards adopted by IEC (61970-<br />501 and 61970-552) and their limitations, assesses the existing CIM<br />methodology based on these standards and provides suggestions for<br />improving this methodology in accordance with the current achievements<br />in the field of semantic web technologies. At the same time, the modularity<br />of web applications based on the CIM data model was considered from the<br />semantic web standpoint and the proposal of a modular web application<br />architecture based on the CIM semantics was given.</p>

Zunehmende Vernetzung und gesteigerte Flexibilität in Planungs- und Produktionsprozessen sind die notwendigen Antworten auf die gesteigerten Anforderungen an die Industrie in Bezug auf Agilität und Einführung von Mehrwertdiensten. Dafür ist eine stärkere Digitalisierung aller Prozesse und Vernetzung mit den Informationshaushalten von Partnern notwendig. Heutige Informationssysteme sind jedoch nicht in der Lage, die Anforderungen eines solchen integrierten, verteilten Informationsraums zu erfüllen. Ein vielversprechender Kandidat ist jedoch Linked Data, das aus dem Bereich des Semantic Web stammt. Aus diesem Ansatz wurde Linked Enterprise Data entwickelt, welches die Werkzeuge und Prozesse so erweitert, dass ein für die Industrie nutzbarer und flexibler Informationsraum entsteht. Kernkonzept dabei ist, dass die Informationen aus den Spezialwerkzeugen auf eine semantische Ebene gehoben, direkt auf Datenebene verknüpft und für Abfragen sicher bereitgestellt werden. Dazu kommt die Erfüllung industrieller Anforderungen durch die Bereitstellung des Revisionierungswerkzeugs R43ples, der Integration mit OPC UA über OPCUA2LD, der Anknüpfung an industrielle Systeme (z.B. an COMOS), einer Möglichkeit zur Modelltransformation mit SPARQL sowie feingranularen Informationsabsicherung eines SPARQL-Endpunkts. / Increasing collaboration in production networks and increased flexibility in planning and production processes are responses to the increased demands on industry regarding agility and the introduction of value-added services. A solution is the digitalisation of all processes and a deeper connectivity to the information resources of partners. However, today’s information systems are not able to meet the requirements of such an integrated, distributed information space. A promising candidate is Linked Data, which comes from the Semantic Web area. Based on this approach, Linked Enterprise Data was developed, which expands the existing tools and processes. Thus, an information space can be created that is usable and flexible for the industry. The core idea is to raise information from legacy tools to a semantic level, link them directly on the data level even across organizational boundaries, and make them securely available for queries. This includes the fulfillment of industrial requirements by the provision of the revision tool R43ples, the integration with OPC UA via OPCUA2LD, the connection to industrial systems (for example to COMOS), a possibility for model transformation with SPARQL as well as fine granular information protection of a SPARQL endpoint.