"There are two critical points in every aerial flight—its beginning and its end." — Alexander Graham Bell, 1906. From beginning till the end, the safety critical software plays a vital role in avionics and hence its development and its certification are indispensable. “RTCA DO-178B- Software Considerations in Airborne Systems and Equipment Certification” provides the normative guidelines to develop such systems. In particular, this standard provides the safety protocol and processes that should be followed to achieve safe systems. The safety guideline of DO178B emphasizes more on better documentation, communication and visibility into actual process. For realizing the guidelines of DO178B, a well-defined and collectively accepted (at least at the development team–level) interpretationof the protocol and processes is needed. To achieve such interpretation, a well-defined modeling language that models the process with safety construct is essential. The Object Management Group’s Software and System Process Engineering Metamodel SPEM 2.0 standard provides specification for modeling software and systems development processes. SPEM2.0, however, is a general purpose language and does notprovide sufficient coverage in terms of language constructs to address safety concerns. This thesis proposes S-SPEM, an extension of the SPEM2.0 to allow users to specify safety-oriented processes for the development of safety critical systems in the context of RTCA DO 178B. The DO178B is analyzed to capture the safety related process elements and SPEM 2.0 is extended to include those safety concepts. Moreover, to simulate and validate the modeled processes, S-SPEMconcepts are mapped onto XML Process Definition Language (XPDL) concepts and a transformation algorithm is sketched. Finally, a case-study will illustrate theusage and effectiveness of the proposed extension.

Este trabalho tem como objetivo propor um modelo para a criação e organização de um processo fabril de produção de software. Para atingir este objetivo foram mapeadas 11 empresas de produção de software com características fabris, 6 brasileiras (o autor deste trabalho não possui uma autorização forma para divulgar o nome das empresas) e 5 estrangeiras (as japonesas Hitachi, Toshiba, NEC, Fujtsu e a americana SDC). Salienta-se que os dados utilizados neste trabalho sobre as empresas estrangeiras foram extraídos de CUSUMANO (1991). É importante salientar que todas as fábricas brasileiras que se propuseram a participar do estudo de caso possuem certificação de qualidade em processos comprovada (CMMI e/ou ISO). Após a apresentação dos casos é realizada uma comparação entre os processos fabris brasileiros e estrangeiros. Uma aderência do processo de produção de software mapeados nas empresas ao modelo proposto, também, é desenvolvida no trabalho. Por fim, 01 caso real apresentando o comportamento do modelo proposto na criação de um processo fabril, também, se caracteriza como um dos pontos a ser destacado. / This work has as objective to propose a model to create and to organize a production process with factory software characteristic. To reach this objective 11 software production companies were mapped, 6 Brazilian (the author of this work doesn\'t possess an authorization to publish the name of the companies) and 5 foreigners (Hitachi, Toshiba, NEC, Fujtsu and SDC). The data used in this work, on the foreign companies were extracted of CUSUMANO (1991). All the Brazilian factories that participate of this case study possess quality certification in processes (CMMI and/or ISO). After the presentation of the cases a comparison between the Brazilian factories and the foreigners\' factories is developed. An adherence of the software production process mapped in the companies to the proposed model, also, is showed in the work. A real case presenting the behavior of the model proposed in the creation software production process, also, is characterized in the text (12 cases in the total).

Este trabalho tem como objetivo propor um modelo para a criação e organização de um processo fabril de produção de software. Para atingir este objetivo foram mapeadas 11 empresas de produção de software com características fabris, 6 brasileiras (o autor deste trabalho não possui uma autorização forma para divulgar o nome das empresas) e 5 estrangeiras (as japonesas Hitachi, Toshiba, NEC, Fujtsu e a americana SDC). Salienta-se que os dados utilizados neste trabalho sobre as empresas estrangeiras foram extraídos de CUSUMANO (1991). É importante salientar que todas as fábricas brasileiras que se propuseram a participar do estudo de caso possuem certificação de qualidade em processos comprovada (CMMI e/ou ISO). Após a apresentação dos casos é realizada uma comparação entre os processos fabris brasileiros e estrangeiros. Uma aderência do processo de produção de software mapeados nas empresas ao modelo proposto, também, é desenvolvida no trabalho. Por fim, 01 caso real apresentando o comportamento do modelo proposto na criação de um processo fabril, também, se caracteriza como um dos pontos a ser destacado. / This work has as objective to propose a model to create and to organize a production process with factory software characteristic. To reach this objective 11 software production companies were mapped, 6 Brazilian (the author of this work doesn\'t possess an authorization to publish the name of the companies) and 5 foreigners (Hitachi, Toshiba, NEC, Fujtsu and SDC). The data used in this work, on the foreign companies were extracted of CUSUMANO (1991). All the Brazilian factories that participate of this case study possess quality certification in processes (CMMI and/or ISO). After the presentation of the cases a comparison between the Brazilian factories and the foreigners\' factories is developed. An adherence of the software production process mapped in the companies to the proposed model, also, is showed in the work. A real case presenting the behavior of the model proposed in the creation software production process, also, is characterized in the text (12 cases in the total).

Malgré les avantages économiques de l’informatique en nuage (ou cloud computing) pour les entreprises et ses multiples applications envisagées, il subsiste encore des obstacles pour son adoption à grande échelle. La sécurité des données sauvegardées et traitées dans le nuage arrive en tête des préoccupations des décideurs des directions des systèmes d'information. De ce fait, l'objectif principal de nos travaux de recherche lors de cette thèse de doctorat est de poser des bases solides pour une utilisation sûre et sécurisée du nuage. Dans un premier lieu, l’externalisation des processus métiers vers le nuage permet aux entreprises de réduire les couts d’investissement et de maitriser les couts d’exploitation de leurs systèmes d’information ; Elle permet aussi de promouvoir la réutilisation des parties (ou fragments) de ses processus métiers en tant que service cloud, éventuellement par des concurrents directs, afin de faciliter le développement de nouvelles applications orientés services ‘SOA’, ainsi la collaboration à l’échelle du nuage. Néanmoins, le fait de révéler la provenance d’un fragment réutilisé est considérée comme une brèche dans la vie privée et risque d’être dommageable pour l’entreprise propriétaire de ce fragment. Les techniques d’anonymisation des données ont fait leurs preuves dans le domaine des bases de données. Notre principale contribution dans cette partie est la proposition d’un protocole basée sur l’anonymisation des fragments de processus métiers afin de garantir à la fois, la vie privée de leurs propriétaires et la disponibilité de ces fragments pouvant être réutilisés dans le nuage. Les systèmes d’authentification biométriques permettent une authentification des individus avec une garantit suffisante. Néanmoins, le besoin en ressources informatiques ‘calcul et stockage’ de ces systèmes et le manque de compétences au sein des organismes freinent considérablement leurs utilisations à grande échelle. Le nuage offre la possibilité d’externaliser à la fois le calcul et le stockage des données biométriques à moindre cout et de proposer une authentification biométrique en tant que service. Aussi, l’élasticité du nuage permet de répondre aux pics des demandes d’authentifications aux heures de pointes. Cependant, des problèmes de sécurité et de confidentialité des données biométriques sensibles se posent, et par conséquent doivent être traité afin de convaincre les institutions et organismes à utiliser des fragments externes d'authentification biométriques dans leurs processus métiers. Notre principale contribution dans cette partie est un protocole léger ‘coté client’ pour une externalisation (sur un server distant) de la comparaison des données biométriques sans révéler des informations qui faciliteraient une usurpation d’identité par des adversaires. Le protocole utilise une cryptographie légère basée sur des algorithmes de hachage et la méthode de 'groupe de tests combinatoires', permettant une comparaison approximative entre deux données biométriques. Dans la dernière partie, nous avons proposé un protocole sécurisé permettant la mutualisation d’un Hyperviseur (Outil permettant la corrélation et la gestion des événements issus du SI) hébergé dans le nuage entre plusieurs utilisateurs. La solution proposée utilise à la fois, le chiffrement homomorphique et la réécriture de règles de corrélation afin de garantir la confidentialité les évènements provenant des SI des différents utilisateurs. Cette thèse a été réalisée à l'Université Paris Descartes (groupe de recherche diNo du LIPADE) avec le soutien de la société SOMONE et l'ANRT dans le cadre d'une convention CIFRE. / Cloud computing has become one of the fastest growing segments of the IT industry. In such open distributed computing environments, security is of paramount concern. This thesis aims at developing protocols and techniques for private and reliable outsourcing of design and compute-intensive tasks on cloud computing infrastructures. The thesis enables clients with limited processing capabilities to use the dynamic, cost-effective and powerful cloud computing resources, while having guarantees that their confidential data and services, and the results of their computations, will not be compromised by untrusted cloud service providers. The thesis contributes to the general area of cloud computing security by working in three directions. First, the design by selection is a new capability that permits the design of business processes by reusing some fragments in the cloud. For this purpose, we propose an anonymization-based protocol to secure the design of business processes by hiding the provenance of reused fragments. Second, we study two di_erent cases of fragments' sharing : biometric authentication and complex event processing. For this purpose, we propose techniques where the client would only do work which is linear in the size of its inputs, and the cloud bears all of the super-linear computational burden. Moreover, the cloud computational burden would have the same time complexity as the best known solution to the problem being outsourced. This prevents achieving secure outsourcing by placing a huge additional overhead on the cloud servers. This thesis has been carried out in Université Paris Descartes (LIPADE - diNo research group) and in collaboration with SOMONE under a Cifre contract. The convergence of the research fields of those teams led to the development of this manuscrit.

Made available in DSpace on 2014-12-17T15:47:58Z (GMT). No. of bitstreams: 1 WandersonCS_DISSERT.pdf: 4290121 bytes, checksum: 50ada3cdab9dc8f8edb8464d66f255e9 (MD5) Previous issue date: 2011-02-23 / This dissertation presents a model-driven and integrated approach to variability management, customization and execution of software processes. Our approach is founded on the principles and techniques of software product lines and model-driven engineering. Model-driven engineering provides support to the specification of software processes and their transformation to workflow specifications. Software product lines techniques allows the automatic variability management of process elements and fragments. Additionally, in our approach, workflow technologies enable the process execution in workflow engines. In order to evaluate the approach feasibility, we have implemented it using existing model-driven engineering technologies. The software processes are specified using Eclipse Process Framework (EPF). The automatic variability management of software processes has been implemented as an extension of an existing product derivation tool. Finally, ATL and Acceleo transformation languages are adopted to transform EPF process to jPDL workflow language specifications in order to enable the deployment and execution of software processes in the JBoss BPM workflow engine. The approach is evaluated through the modeling and modularization of the project management discipline of the Open Unified Process (OpenUP) / Este trabalho apresenta uma abordagem dirigida por modelos para ger?ncia de variabilidades em processos de software, assim como sua implanta??o em sistemas de workflow. A abordagem ? fundamentada nos princ?pios e t?cnicas de linhas de produto de software e engenharia dirigida por modelos. Engenharia dirigida por modelos fornece suporte para a especifica??o de processos de software e sua transforma??o em especifica??es de fluxo de trabalho. T?cnicas de linhas de produto de software permitem a ger?ncia autom?tica de variabilidades de elementos do processo e fragmentos. Al?m disso, em nossa abordagem, tecnologias de workflows permitem a execu??o do processo em motores de workflow. Para avaliar a viabilidade abordagem, a implementamos utilizando tecnologias existentes de engenharia dirigida por modelos. Os processos de software s?o especificados usando Eclipse Processo Framework (EPF). O gerenciamento autom?tico das variabilidades de processos de software foi implementado como uma extens?o de uma ferramenta de deriva??o produtos j? existente. Finalmente, as linguagens de transforma??o ATL e Acceleo s?o adotadas para transformar o processo EPF para a linguagem de especifica??es de fluxo de trabalho jPDL, a fim de permitir a implanta??o e execu??o de processos de software no motor de workflow JBoss BPM. A abordagem ? avaliada atrav?s da modelagem e modulariza??o da disciplina de gerenciamento de projetos do processo aberto Unificado (OpenUP)