Submitted by Fabio Sobreira Campos da Costa (fabio.sobreira@ufpe.br) on 2017-08-23T12:28:22Z No. of bitstreams: 2 license_rdf: 811 bytes, checksum: e39d27027a6cc9cb039ad269a5db8e34 (MD5) mscthesis.pdf: 1321634 bytes, checksum: 3581d9f09a696a6700ee6a0c0fafc1ba (MD5) / Made available in DSpace on 2017-08-23T12:28:22Z (GMT). No. of bitstreams: 2 license_rdf: 811 bytes, checksum: e39d27027a6cc9cb039ad269a5db8e34 (MD5) mscthesis.pdf: 1321634 bytes, checksum: 3581d9f09a696a6700ee6a0c0fafc1ba (MD5) Previous issue date: 2016-07-29 / CNPQ / O uso de códigos monolíticos permite com maior facilidade que um atacante consiga escalar privilégios e a partir de então ter autoridade para executar qualquer tipo de ação maliciosa. O Princípio da Separação de Privilégios propõem mitigar essas vulnerabilidades transformando a estrutura do código monolítico e numa estrutura distribuída que se comunica através de canais interprocessos,desta forma os domínios de cada parte estarão isolados dificultando a escalação deprivilégios. Entretanto o uso incauto destes canais de comunicação interprocessos tem sido alvo de novos ataques que exploram tanto as fraquezas dos canais de comunicação quanto as interfaces mal definidas destes processos particionados. Como proposta de mitigar a escalação de privilégio proveniente da exploração destes canais de comunicação este trabalho propõem uma ferramenta de gerenciamento de processos compartimentalizados e seus canais de comunicação interprocesso. A solução apresentada neste trabalho é chamada de Secure-CompApp. Foi avaliado o impacto da solução sobre a performance das aplicações compartimentalizadas e este estudo mostra que a diminuição de performance é justificada por maiores garantias de segurança rastreabilidade oferecida pela solução Secure-CompApp. / Application with any kind of bug or any point with memory leak represent an opportunity for an attacker engage. In the case of some applications implemented with monolithic code, this allows an attacker to escalate privileges of a user easily. The Principle of Least Privilege (PoLP) proposes to mitigate these vulnerabilities transforming the structure of the monolithic code in a distributed structure that communicate through interprocess channels, so the domains of each part will be isolated, making it difficult to privilege escalation. However the incautious use of these interprocess communication channels has been the target of new attacks that exploit the weaknesses of communication channels and the ill-defined interfaces of these partitioned processes. As a proposal to mitigate the privilege escalation from the exploitation of these communication channels this paper proposes a management tool for compartmentalized processes and its interprocess communication channels. The Secure-CompApp is a reference monitor for compartmentalized applications, this is the solution introduced in this paper. The impact of the solution on the performance of compartmentalized applications was evaluated and this study shows that the decrease of performance is justified by the greater guarantees of security and traceability offered by the Secure-CompApp.

O objetivo do presente trabalho é apresentar uma proposta de sistema computacional para verificação do estado de funcionamento de escadas rolantes por meio de comunicação sem fio. O sistema computacional proposto neste trabalho é composto de uma interface instalada diretamente no painel de controle da escada rolante com o objetivo de coletar informações que permitam identificar o estado de funcionamento desses equipamentos e transmiti-las para um computador remoto por meio de uma estrutura de rede sem fio construída sob o padrão Bluetooth. O sistema proposto possibilita que a inspeção periódica do estado de funcionamento seja feita sem a interrupção do serviço ao público, a qual ocorre somente quando a leitura de dados informar alguma não conformidade ou em períodos pré-estabelecidos pelo fabricante, para troca de peças por fadiga. Dessa forma, possibilita-se um ganho de qualidade e produtividade das equipes de manutenção, as quais poderão realizar uma quantidade maior de inspeções com menor tempo de execução do trabalho e um aumento do tempo de disponibilidade das escadas rolantes aos usuários. O presente trabalho apresenta a arquitetura básica de hardware e software desenvolvidos e discute questões de segurança e confiabilidade do sistema proposto, os ganhos de produtividade para as equipes de manutenção, bem como o aumento do tempo de disponibilidade dos serviços prestados por escadas e esteiras rolantes frente a indicadores mundiais de qualidade de serviço. / The objective of the present work is to present a proposal of computer system for verification of the state of operation of escalator through communication without thread. The computer system proposed in this work it is composed of an interface installed directly in the panel of control of the escalator with the objective of collecting information that allow to identify the state of operation of those equipments and to transmit them for a remote computer through a net structure without thread built under the pattern Bluetooth. The proposed system makes possible that the periodic inspection of the operation state is made without the interruption of the service to the public, which only happens when the reading of data informs some non conformity or in periods established by the manufacturer, for change of pieces for fatigue. In that way, it is made possible a quality earnings and productivity of the maintenance teams, which can accomplish a larger amount of inspections with smaller time of execution of the work and an increase of the time of readiness of the escalator to the users. The present work presents the basic architecture of hardware and software developed and it discusses subjects of safety and reliability of the proposed system, the productivity earnings for the maintenance teams, as well as the increase of the time of readiness of the services rendered by escalator front to world indicators of service quality.

When an error occurs in an IT system that is vital for the production of a major industry, the consequences can be great. To quickly identify and correct errors is important as a stop in a system can lead to a break in production, which is costly for the industry. Our task in this thesis has been to develop a system for ÅF that facilitates the debugging process of the system Paperline. The system's target audience is ÅF-call personnel that provides support for Paperline 24 hours a day if something goes wrong. The system consists of a Windows service, a database and a web application and is developed mainly with the techniques C#.NET, MVC 5, Google Charts, Javascript, HTML, CSS, and Entity Framework. The result of the thesis is a deployed system that facilitates the debugging process by retrieving, interpreting and presenting the log messages that PaperLine produces. The system is used by the call personnel at ÅF to easily perform troubleshooting work in Paperline. / När ett fel inträffar i ett IT-system som är vitalt för produktionsprocessen i en stor industri kan följderna vara stora. Att snabbt identifiera och åtgärda felen är viktigt eftersom ett stillastående system kan innebära stillastående produktion vilket är kostsamt för industrin. Vår uppgift i detta exjobb har varit att, för ÅF, utveckla ett system som underlättar felsökningsarbetet av systemet Paperline. Systemets målgrupp är ÅFs jourpersonal som 24 timmar om dygnet ansvarar för support av Paperline då något går fel. Systemet består av en Windows-tjänst, en databas och en webbapplikation och är utvecklat huvudsakligen med teknikerna C#.NET, MVC 5, Google Charts, Javascript, HTML, CSS och Entity Framework. Resultatet av exjobbet är ett driftsatt system som underlättar felsökningsarbetet genom att hämta, tolka och presentera de logginlägg som Paperline producerar. Systemet används av jourgruppen på ÅF för att enkelt utföra felsökningsarbete i Paperline.

Quality Monitor is application, which automatically analyzes software projects forquality and makes quality assessment reports. This thesis project aims to instantiate Quality Monitor for a large real-world .Net project and to extend Quality Monitor by considering other data sources than just source code. This extended analysis scope includes bug reports, features, and time reports besides .Net assemblies (code) as artifacts. Different tools were investigated for the analysis of code, bug reports, features and time reports. The analysis of .Net assemblies was implemented as none of the existing tools under evaluation met all requirements. The analysis of .Net assemblies was successfully completed; it allows the extraction data necessary for creating Call and Control Flow graphs. These graphs are used for calculating additional metrics allowing for an improved assessment of quality of the project. Implementation of .Net assembly reader was tested using large real world industrial project. Other data sources were analyzed theoretically, but excluded for further implementation. Altogether the thesis includes an analysis of possible Quality Monitor extensions including their requirements, design, and (partially) their implementation and evaluation.

Mobile computing devices, in particular smartphones are powered from Lithium-ion batteries, which are limited in capacity. With the increasing popularity of mobile systems, various text input methods have been developed to improve user experience and performance. Briefly, text input method is a user interface that can be used to compose an electronic mail, configure mobile Virtual Private Network, and carryout bank transactions and online purchases. Efficient energy management in these systems requires an extensive knowledge of where and how the energy is being used. This thesis investigates the energy consumption of text input methods on various smartphones. Hence, the authors modeled the energy consumption profile of text input methods on smartphones and analyze the energy usage benchmarks of the battery. This thesis presents a systematic technique to conduct application specific measurements. The data analysis showed substantial variations in the energy consumptions of various text input methods on a smartphone. / The main objective of this research is to find a systematic and measurement based method to evaluate the energy efficiency of the selected text input methods used on smartphones namely: SwiftKey, Swype, and Zimpl. Using Power Monitor equipment and MATLAB, the energy consumption log files of the text input methods were collected for each of the smartphones, and analyzed. This research introduces an optimized technique to carry-out application specific test on smartphones. It is hoped that the thesis will be beneficial to smartphone battery manufacturers and developers of text input techniques on how to make users’ smartphone battery last longer.

Ingeniero Civil / El proyecto Montes del Plata consiste en la construcción de una planta de celulosa de última generación ubicada en Punta Pereira, Uruguay. El proyecto cuenta con un terminal portuario, constituido por un muelle con dos sitios de atraque de bloques de hormigón, los cuales están apoyados en una base de apoyo compuesta por material granular. La alta turbiedad del Río de La Plata impide la colocación de protecciones costeras de manera convencional y también el nivelamiento de las bases de apoyo. Debido a esto surge la necesidad de utilizar el sistema XPM, el cual es capaz de realizar ambas tareas con exactitud y sin visibilidad. El eXcavator Position Monitor (XPM) es un sistema que se implementa en una retroexcavadora estándar, el cual permite el control y monitoreo del dragado y depósito de material bajo el agua. Este sistema está compuesto por una computadora, sensores y también un sistema GPS de gran precisión (DGPS-RTK), los cuales entregan la información necesaria para modelar los movimientos de la excavadora y el fondo marino. De esta manera es posible operar la excavadora sin tener una visión de esta. El objetivo del presente trabajo es realizar un estudio del sistema XPM y presentar su aplicación en terreno. Para ello se estudió el funcionamiento y el comportamiento del sistema en terreno y también la eficiencia de su trabajo. El estudio incluye los costos del sistema para poder compararlo con otros métodos y evaluar la conveniencia de su uso. De lo observado en terreno y de los costos obtenidos, se concluyó que el sistema XPM puede realizar en forma precisa y eficiente los trabajos de colocación de coraza (protecciones costeras) y que tiene un menor costo en comparación con la colocación utilizando grúas. Finalmente se evaluó la posibilidad incorporar esta tecnología en nuestro país.

Les systèmes actuels deviennent chaque jour de plus en plus complexe; à la distribution s’ajoutent les contraintes temps réel. Les méthodes classiques en charge de garantir la sûreté de fonctionnement, comme le test, l’injection de fautes ou les méthodes formelles ne sont plus suffisantes à elles seules. Afin de pouvoir traiter les éventuelles erreurs lors de leur apparition dans un système distribué donné, nous désirons mettre en place un programme, surveillant ce système, capable de lancer une alerte lorsque ce dernier s’éloigne de ses spécifications ; un tel programme est appelé superviseur (ou moniteur). Le fonctionnement d’un superviseur consiste simplement à interpréter un ensemble d’informations provenant du système sous forme de message, que l’on qualifiera d’évènement, et d’en déduire un diagnostic. L’objectif de cette thèse est de mettre un place un superviseur distribué permettant de vérifier en temps réel des propriétés temporelles. En particulier nous souhaitons que notre moniteur soit capable de vérifier un maximum de propriétés avec un minimum d’information. Ainsi notre outil est spécialement conçu pour fonctionner parfaitement même si l’observation est imparfaite, c’est-à-dire, même si certains évènements arrivent en retard ou s’ils ne sont jamais reçus. Nous avons de plus cherché à atteindre cet objectif de manière distribuée pour des raisons évidentes de performance et de tolérance aux fautes. Nous avons ainsi proposé un protocole distribuable fondé sur l’exécution répartie d’un réseau de Petri temporisé. Pour vérifier la faisabilité et l’efficacité de notre approche, nous avons mis en place une implémentation appelée Minotor qui s’est révélée avoir de très bonnes performances. Enfin, pour montrer l’expressivité du formalisme utilisé pour exprimer les spécifications que l’on désire vérifier, nous avons détaillé un ensemble de propriétés sous forme de réseaux de Petri à double sémantique introduite dans cette thèse (l’ensemble des transitions étant partitionné en deux catégories de transitions, chacune de ces parties ayant sa propre sémantique). / Current systems are becoming every day more and more complex, being both distributed and real-timed. Conventional methods responsible for guaranteeing dependability, such as testing, fault injection or formal methods are no longer sufficient. In order to process any errors when they appear in a given distributed system, we want to implement a software monitoring it and capable of launching an alert when the system does not respect anymore its specification. Such a program is called monitor. A monitor interpret information received from the system as messages (these messages are called events) and propose a diagnosis. The objective of this thesis is to set in place a monitor for a distributed real-time verification of temporal properties. In particular we want our monitor to be able to check up a maximum of properties with a minimum of information. Thus, our tools are designed to work perfectly even if the observation is imperfect, that is to say, even if some events are late or never received. We have also managed to achieve this goal through a highly distributed protocol. To verify the feasibility and effectiveness of our approach, we have established an implementation called Minotor who was found to have very good performance. Finally, we detailed a set of properties, expressed in our formalism, to show it’s expressiveness.

The TRIUMF view screen system encompases a set of devices which individually image, and produce measurements of, the transverse profile of an accelerated electron beam. A control system is an essential component of the overall diagnostic device. The system requirements were compiled from those produced by the TRIUMF laboratory and from those based on the needs of the individual diagnostic devices. Based on the requirements, a control system was designed and implemented with a combination of industrial electrical and mechanical hardware, and a variety of software components. One component of the image reconstruction algorithm was validated with experimental data; the accuracy and precision of beam profile measurements was evaluated through simulation studies. Although it was not possible to demonstrate the satisfaction of requirements relating to alignment, it was shown that all other requirements were satisfied. / Graduate / 0798 / 0752 / 0605

Magister Curationis - MCur / The objectives of this study were to determine midwives’ knowledge in performing foetal heart rate monitoring, to assess midwives’ abilities in the interpretation of foetal heart rate patterns according to their years of clinical experience as a registered midwife.

Web services have become a prominent paradigm for building of both inter and intra-enterprise business processes. These processes are composed from existing Web services based on defined requirements. Standards and techniques have been developed to aid in the dynamic composition of services. However, these approaches are limited when it comes to the handling of unexpected events. This dissertation presents the results of experiments that investigated numerous problems related to Web service composition processes. Based on the investigation, a fault taxonomy was formulated. Faults were grouped into three broad categories, each representing a distinct problem stage. The investigation into faults gave rise to the issue of fault recovery and continued process execution. A list of requirements for self-healing Web service composition was identified, while a new self-healing cycle was exploited based on the MAPE cycle (Monitor, Analyzer, Planner, Executive). The proposed self-healing composition cycle consists of three modules: Plan Generation Module, Plan Execution Module and Failure Analysis Module. The plan execution module, consisting of the execution and run-time monitoring phases, and the failure analysis module, consisting of the analysis and sensemaking phases, were found to be vital to self-healing Web service composition. Self healing Web service composition and the goal of self-healing were achieved through the use of Hierarchical Task Network (HTN) planning systems. / Dissertation (MSc)--University of Pretoria, 2009. / Computer Science / unrestricted