Orientador: Mauricio Ferreira Magalhães / Dissertação (mestrado) - Universidade Estadual de Campinas, Faculdade de Engenharia Eletrica e de Computação / Made available in DSpace on 2018-08-07T01:33:38Z (GMT). No. of bitstreams: 1 Duarte_RafaelLuiz_M.pdf: 1020338 bytes, checksum: 55a286156672abedc8e5b20a444d8a7c (MD5) Previous issue date: 2006 / Resumo: Para o provisionamento de conexões fim-a-fim em domínios ópticos é desejável uma solução de arquitetura que permita o estabelecimento automático destas conexões: A tecnologia GMPLS ofe­rece um plano de controle que especifica mecanismos que estendem o roteamento e a sinalização do mundo IP contribuindo para a configuração automática de conexões em domínios ópticos. Este traba­lho propõe uma arquitetura para o provisionamento de conexões fim-a-fim em redes ápticas GMPLS. Tal arquitetura é baseada na tecnologia Web services e permite o estabelecimento de dois tipos de conexões. A primeira, conhecida como SPC (Soft Permanent Connection), é utilizada pelo gerente do domínio óptico. O SPC conecta dois elementos de rede pertencentes ao mesmo domínio. A se­gunda, é uma conexão fim-a-fim na qual um usuário cliente pode enviar dados através de múltiplos domínios. Neste último caso, o cliente precisa negociar com cada domínio para verificar a disponibi­lidade de recursos. Para tal arquitetura foram criados módulos responsáveis pelo provisionamento e gerenciamento das conexões além da utilização do simulador GLASS para validação da arquitetura proposta / Abstract: For the provisioning of end-to-end connections in optical domains it is desirable to have an archi­tecture that supports the automatic establishment of such connections. The GMPLS technology offers a control plan that specifies mechanisms which extend the routing and the signalling of IP world con­tributing for the automatic configuration of end-to-end connections in optical domains. This work proposes an architecture for the provisioning of end-to-end connections in GMPLS optical networks. Such architecture is based on the Web services technology and allows the establishment of two kinds of connections. The first one, known as SPC (Soft Permanent Connection), is used by the manager of the optical domain. The SPC connects two network elements belonging to the same domain. The se­cond one is an end-to-end connection by which a given client can send data across multiple domains. In this last case the client needs to negotiate with each domain to verify the availability of resources. For such architecture we defined modules responsibIe for the provisioning and management of the connections. The GLASS simulator was used for validation ofthe proposed architecture / Mestrado / Engenharia de Computação / Mestre em Engenharia Elétrica

SERVICE oriented architecture (SOA) is an architectural style to structure software systems, fostering loose coupling and dynamic integration among the applications. The use of SOA and Web services to develop complex and large business processes demands more formal and systematic testing. In addition, characteristics of this type of software limit the straightforward application of traditional testing techniques. Model-based testing (MBT) is a promising approach to deal with these problems. This dissertation investigates how two modeling techniques, namely Finite State Machine (FSM) and Event Sequence Graph (ESG), can be used to support MBT of service-oriented applications. Both techniques model different aspects and can be applied in a complementary way. Initially, we define an MBT process for service-oriented applications that employs FSMs. Based on previous experience, we propose a model-based approach to test composite services using ESGs. This approach is holistic, once test suites are generated to cover both desired situations (positive testing) and unexpected behaviors (negative testing). Three experimental studies evaluate the proposed approach: (i) a case study, (ii) a cost analysis, and (iii) a study in industry. Testing tools are also presented to support its practical use / A Arquitetura orientada a serviço (SOA) é um estilo arquitetural para estruturar sistemas de software de modo que exista um baixo grau de acoplamento entre as aplicações e essas possam ser facilmente integradas de forma dinâmica. A incorporação de SOA e serviços Web em sistemas que modelam processos de negócios grandes e complexos contribui para a necessidade de testes mais formais e sistemáticos. Além disso, características próprias dessa nova classe de software fazem com que técnicas de teste tradicionais não possam ser diretamente aplicadas. O teste baseado em modelo (TBM) apresenta-se como uma abordagem promissora que busca a resolução desses problemas. Esta tese investiga como duas técnicas de modelagem, Máquina de Estados Finitos (MEF) e Grafo de Sequência de Eventos (GSE), podem ser utilizadas para apoiar o TBM de aplicações orientadas a serviço. Essas técnicas modelam diferentes aspectos e podem ser aplicadas de forma complementar. Inicialmente, é definido um processo de TBM para aplicações orientadas a serviço que emprega MEFs. Com base na experiência adquirida, é proposta uma abordagem baseada em modelo para o teste de serviços compostos usando GSEs. Essa abordagem é holística uma vez que conjuntos de teste são gerados para cobrir tanto situações desejadas (teste positivo) quanto comportamentos inesperados (teste negativo). Três estudos experimentais avaliam a abordagem proposta: (i) um estudo de caso, (ii) uma análise de custo e (ii) um estudo na indústria. Ferramentas de teste também são apresentadas para apoiar o uso prático da abordagem proposta

Orientador: Eliane Martins / Dissertação (mestrado) - Universidade Estadual de Campinas, Instituto de Computação / Made available in DSpace on 2018-08-22T12:17:55Z (GMT). No. of bitstreams: 1 PalmaSalas_MarceloInvert_M.pdf: 1721846 bytes, checksum: a5c6a8727658455a92eade9c6c09e948 (MD5) Previous issue date: 2012 / Resumo: Devido a sua natureza distribuída e aberta, os Web Services geram novos desafios de segurança da informação. Esta tecnologia Web, desenvolvida pela W3C e OASIS, é susceptível a ataques de injeção e negação de serviços. Desta forma, o atacante pode coletar e manipular informação para procurar vulnerabilidades nos serviços. Nesse estudo analisamos o uso do injetor de falhas (IF) WSInject, para emular ataques com testes de segurança nos Web Services. A motivação para o uso de um injetor de falhas, ao invés do uso de vulnerabilities scanners, que são comumente usados na prática para testar a segurança, foi permitir melhor cobertura dos ataques. Em um estudo preliminar, usando um vulnerability scanner não comercial, foi possível determinar: (i) os serviços, bem como seus parâmetros e suas operações que seriam mais interessantes de utilizar durante a injeção de falhas, por terem sido os que apresentaram maior número de vulnerabilidades; (ii) um conjunto de regras para analisar os resultados dos testes de segurança. Esses resultados preliminares serviram de guia para os testes usando o injetor de falhas. As falhas foram injetadas em Web Services reais, sendo que alguns implementaram mecanismos de segurança de acordo com o padrão Web Services Security (WS-Security), como credenciais de segurança (Security Tokens) / Abstract: Due to its distributed and open nature, the Web Services give rise to new information security challenges. This technology, standardized by W3C and OASIS, is susceptible to both injection and denial of services (DoS) attacks. In this way, the attacker can collect and manipulate information in search of Web Services vulnerabilities. In this study we analyses the use of the WSInject fault injector, in order to emulate attacks with security tests on Web Services. The proposed approach makes use of WSInject Fault Injector to emulate attacks with Security Testing on Web Services. The motivation for using a fault injector, instead of vulnerabilities scanners, which are commonly used in practice for security testing, was to enable better coverage of attacks. In a preliminary study, using a non-commercial vulnerability scanner, it was possible to determine: (i) the Web Services to be tested as well as its parameters and operations more interesting to use during fault injection, by presenting the highest number of vulnerabilities; and (ii) a set of rules to analyze the results of security testing. These preliminary results served as a guide for the tests using the fault injector. The faults have been injected into real Web Services, and some of them have security mechanisms implemented, in compliance with the Web Services Security (WS-Security) with Security Tokens / Mestrado / Ciência da Computação / Mestre em Ciência da Computação

Service Oriented Architecture (SOA) is an architectural paradigm that allows building of infrastructures for diverse application interaction and integration via services across different platforms, domains of technology and locations. SOA differs from traditional architectures, as it focuses on integrating capabilities that are distributed and implemented using a mixture of technologies. SOA provides a set of methodologies and strategies to accomplish interoperability and integration among different technology stacks.   Vattenfall is the fifth the largest energy supplier within Europe. Having operational systems in different countries brings the challenge of integrating all these distributed systems and this integration is a vital requirement for Vattenfall. The company is currently using Microsoft proprietary products to achieve integration across different technological platform, but requires a better integration infrastructure which is easily extensible and cost effective.   This thesis investigates the impact of implementing Service Oriented Architecture (SOA) using open source or proprietary software products within Vattenfall, from technological and financial perspectives. For this purpose, different technical and non-technical function blocks are identified which are essential for the implementation of SOA. These function blocks are mapped with SOA solutions provided by Red Hat’s JBoss Open Source SOA Platform and Microsoft’s SOA Platform. After mapping, a vendor specific technical and non-technical comparative analysis is carried out based on the function blocks, highlighting the strengths and weaknesses of each vendor.   Finally, an evaluation scheme is purposed based on the technical comparative analysis of vendors, SOA solution cost and SOA competence required. The results from this evaluation scheme are used to recommend the best solution vendor for Vattenfall Nordic. Moreover, this evaluation scheme can also be used to facilitate management in arriving at an appropriate decision about implementation of SOA, while remaining within their requirements and constraints.

Abstract Choreography modelling, as a service-oriented architecture specific technique, is increasingly present in embedded systems development domain. This technique specifies a flow of interactions between participants' services from the global or neutral point of view while the specified models represent an integral part of the overall software architecture. Choreography modelling languages that are currently used in embedded systems domain, however, are not expressive enough to capture the choreography-relevant information in this domain. For this reason, choreography specifications are often lacking information or include ambiguous information. This allows misinterpretation of the specified choreography models and leads to difficulties in communication among stakeholders that use those models. The objective of this research is to advance the design of choreography modelling languages by identifying the information content that is relevant in embedded systems domain and by designing a choreography modelling language that supports that information content. To achieve this objective, this research adopted the design science research framework and five individual studies were conducted within this framework. These studies used methods such as the interviews with practitioners, company specific documents and open standards to understand the challenges in industry, systematic literature review to collect the existing scientific knowledge about the utilization of choreography in embedded systems and the focus groups to evaluate the designed language. Based on these study results, the information content that is relevant for choreography modelling in embedded systems domain was identified and then supported with the design of choreography modelling language. The design of the choreography modelling language is evaluated in academic and industry context. The evaluation in academic context is realized by language implementation while the evaluation in industry is realized with industry experts. Language evaluation showed increased expressiveness of the designed language and indicated on possible benefits from its use in testing and protocol development area. These benefits include the reduction of development time and errors in the testing phase while the reduction of maintenance burden and performance improvement can be expected in the protocol development area. / Tiivistelmä Koreografinen mallintaminen on enenevässä määrin käytetty tekniikka sulautettujen järjestelmien palvelukeskeisten arkkitehtuurien määrittelyssä. Tämän mallintamisen avulla pystytään määrittämään palveluiden ja osallistujien välisten vuorovaikutusten virtaa globaalilla tasolla kun taas määritellyt mallit kuvaavat ohjelmistoarkkitehtuurin keskeisiä osakokonaisuuksia. Tällä hetkellä sulautettujen järjestelmien koreografiseen mallintamiseen käytetyt kielet eivät ole tarpeeksi ilmaisuvoimaisia kattaakseen alalla tarvittavien mallien oleelliset tietosisällöt. Tästä syystä koreografiamalleista puuttuu usein oleellisia tietoja tai tietosisällöt eivät ole yksiselitteisiä. Tämä johtaa koreografiamallien tietosisältöjen virheelliseen tulkintaan, joka taas aiheuttaa haasteita malleja hyödyntävien sidosryhmien välisessä vuorovaikutuksessa. Tämän tutkimuksen tavoitteena on edistää koreografiamallinnuksessa käytettävien kielten suunnittelua tunnistamalla ne tietosisällöt, jotka ovat oleellisia sulautetuille järjestelmille sekä suunnitella kieli, joka tukee oleellisia tietosisältöjä. Tavoitteen saavuttamiseksi sovellettiin "design science" (suunnittelun tutkimus) tutkimusmenetelmää, jolla toteutettiin viisi tapaustutkimusta. Näissä tutkimuksissa hyödynnettiin teollisuuden asiantuntijoiden haastatteluita, yrityskohtaisia dokumentteja ja avoimia standardeja, joiden avulla pystyttiin ymmärtämään teollisuuden kohtaamia haasteita tutkimusalueella. Systemaattisen kirjallisuuskatsauksen avulla kerättiin yhteen olemassa oleva tieteellinen tietämys koreografian käytöstä sulautetuissa järjestelmissä. Kehitetyn kielen sopivuutta teolliseen tuotekehitykseen arvioitiin asiantuntiaryhmille järjestetyissä työpajoissa. Saatujen tutkimustulosten valossa koreografiamallinnuksessa tarvittavat oleelliset tietosisällöt sulautettujen järjestelmien alueella pystyttiin määrittämään sekä kehittämään tietosisältöä tukeva koreografian mallinnuskieli. Kehitetty mallinnuskieli on arvioitu akateemisessa kontekstissa toteuttamalla koreografian mallinnuskieli. Teollisessa ympäristössä arvioinnin ovat suorittaneet teollisuuden asiantuntijat. Arviointien tuloksena voidaan todeta, että kehitetyllä mallinnuskielellä on parempi ilmaisuvoima kuin aiemmin käytössä olleilla kielillä. Lisäksi saatiin viitteitä kielen soveltuvuudesta testauksessa ja protokollien kehityksessä. Kieltä soveltamalla saavutettiin lyhempi kehitysaika ja vähennettiin virheitä testausvaiheessa. Lisäksi protokollan kehityksen osuudessa oletetaan ylläpidon kuormittavuuden vähenevän ja suorituskyvyn paranevan.

L'intelligence ambiante est considérée comme l'une des évolutions majeures de l'informatique ubiquitaire. Elle vise la mise en œuvre des environnements ambiants ou des espaces intelligents permettant d'améliorer la vie quotidienne des utilisateurs, leur bien-être et leur sécurité. Un environnement ambiant dispose d'une multitude d'équipements (capteurs, actionneurs), fournissant des services ubiquitaires atomiques qui sont distribués et de nature hétérogène. Ces services atomiques disponibles dans ce type d'environnement, ne répondent pas directement ou complètement à toutes les exigences et les besoins des utilisateurs. Par ailleurs, ces services de haut niveau peuvent impliquer l'interaction de services ubiquitaires appartenant et/ou contrôlés par différentes structures ou domaines (i.e. environnement multi-domaine). Dans ces travaux de thèse, on a étudié les problématiques reliées à l'agrégation des services ubiquitaires atomiques dans des coopérations et des compositions dans un environnement ambiant multi-domaine afin de répondre à des besoins utilisateurs. Cette étude concerne l'interopérabilité sémantique et comportementale des compositions de services ainsi que leurs spécifications dans un modèle formel basé sur la logique constructive BCDL0. Cette thèse a contribuée par la réalisation d'un canevas sémantique permettant la conception et la vérification formelles des processus coopératifs dans l'assistant à la preuve Isabelle/HOL. Le canevas sémantique proposé consiste en une ontologie de coopération extensible et un langage de spécification de services fiable (Sound) ainsi que des modules de mise en correspondance vers des infrastructures cibles / Ambient Intelligence is considered as the major application domain of ubiquitous computing. It aims at implementing intelligent environments to improve the daily activities, the well-being and the safety of users. An ambient environment has a multitude of devices (sensors, actuators), providing atomic ubiquitous services which are distributed and heterogeneous. These atomic services available in these environments, do not directly or fully meet all the requirements and the needs of users. Moreover, these high-level services may involve the interaction of ubiquitous services owned and/or controlled by different structures or domains (i.e. multi-domain environment). In this work, we studied the problems related to the aggregation of atomic ubiquitous services in cooperations and compositions in an ambient multi-domain environment in order to meet users' needs. This study concerns the semantic and behavioral interoperability of high-level composite services and their formal specification. This latter, is based on the Basic Constructive Description Logic, namely, BCDL0 formal model. This work contributes by realizing a semantic framework for the design and formal verification of cooperative processes in the interactive theorem prover Isabelle/HOL. The proposed semantic framework consists of an extensible cooperation ontology, a sound formal specification language of ubiquitous services and a components for mapping the formally proved cooperatives processes to the targeted infrastructures

The primary influence on project results is human effort, therefore the most essential tool for effort management and focus is communication. Communication in Project Management is characterized by its complexity however it may be analysed from two perspectives; communication tools and human factor. The main objective of this work is to identify problematic areas of internal communication in Project Management and the design of corrective measures that will mitigate or eliminate these problems. This work is based on research in a dynamic environment and comprehensive project program, which is an excellent example and material for definition of such areas. The theoretical section lists the topics of project management and communication; each topic affects specific features that are part of the program or directly related (SOA, agile management, conflict parties business, ICT, etc.). The practical part acquaints readers with the concept of sociological research and defines a hypotheses and set of methods that were used in this research. Further, it contains a description of the program in which research was undertaken and the results of such analysis with recommendations on what measurements should be implemented to improve communication and its effectiveness.

This thesis focuses on design of document exchange solution used between Stavební spořitelna České spořitelny a.s. (SSČS) and its external sales network, which is outdated and doesn't meet the needs of SSČS or sales network. The thesis also includes the identification of suitable basic principles used in the service-oriented architecture (SOA) concept and their application in design solutions. The aim of the thesis is a conceptual solution design, based on the principles of SOA and the following technological design of changes in existing environment, so that on this basis could be created a functional and technical specification for suppliers of these applications. Stated objective is achieved through an initial analysis of the current environment, which identifies the possibilities of existing applications, and identifies weaknesses in the process that will be changed in the new solution. The analysis covers as the environment of external sales network as the related environment in SSČS, which together figure in the process of documentation exchange. As the results of the analysis and based on theoretical knowledge and consultation with experts in the field of SOA is then formulated a proposed solution at the conceptual level, which is further elaborated in the description of the proposed changes in individual components of the new solution. The outputs of this thesis will serve SSČS both in terms of describing the existing and the new environment, and as an input for the specifications of the proposed amendments to the supplier concerned applications. Structure of the thesis consists of introduction, devoted to the characterization of SSČS and providing an initial framework for solved domain. This is followed by a description and the analysis of external sales network, particularly in terms of application equipment and communication flows, followed by a description of the environment in SSČS, which contains the components processing sent documents. Next part of thesis is devoted to the formulation of the basic concepts of SOA and selection of appropriate principles that are followed in the subsequent section to draft the solution itself, first at the conceptual level, followed by a detailed description of the necessary changes. Everything is then evaluated in the final part.

Service Oriented Architecture (SOA) together with Enterprise Architecture (EA) has became a main essence on the way to improve an alignment between business and IT representatives. The result of this alignment should be an increased efficiency of delivering IT projects in the company. Last decade it was the number one declined word in many companies. But most of them found out that SOA did not bring them expected results. The thesis deals with the methodology of building information systems and information and communication technology (IS/ICT) in SOA environment. It is a part of the research plan of the Department of Information Technologies of University of Economics in Prague. The main objective of the thesis is to extend the methodological framework MeFIS2 to add methodical pattern "Building IS in service-oriented architecture environment". In the analytical part of the thesis are presented and analyzed selected methodologies and standards focused on service orientation with aim to assist in the implementation of SOA into companies. A large amount of such methodologies and standards have been unveiled what leaded to a confusing information labyrinth. It's one of the reasons why standardization organizations gradually began to issue additional standards and methodologies to assist in the proper implementation of SOA into companies. The main part of work is to extend methodological framework MeFIS, so that it can be used to create a methodological pattern for building IS/ICT in SOA environment. The result of this section is to achieve the main goal to create a methodological pattern "Building IS in service-oriented architecture environment". In the practical part is the proposed methodological pattern applied in the real case study in the environment of telecommunication operator.

Aujourd’hui, la production est souvent multi-site car les entreprises se recentrent sur leurs cœurs de métiers. Dans ce contexte, la gestion des projets est une tâche difficile car il faut prendre en compte la distribution de la décision et l’hétérogénéité qui peut exister entre les différentes applications de production des partenaires. Les Systèmes Multi-Agents, et notamment le modèle SCEP (Superviseur, Client, Environnement, Producteur), apportent une solution satisfaisante au problème de la distribution de la décision, en instaurant une coopération entre des agents responsables de la gestion des projets client et des agents représentant les sites de production distants. Néanmoins, ce modèle présente des limites à cause de sa faible capacité à communiquer et à coopérer avec des modèles et des systèmes de gestion hétérogènes ainsi qu’à sa difficulté à localiser les nouveaux partenaires. Dans ce mémoire, nous proposons une architecture distribuée et interopérable SCEP-SOA intégrant les concepts du modèle SCEP et ceux du modèle SOA (Service Oriented Architecture) qui offre des mécanismes de mise en relation des partenaires et permet des communications entre des systèmes et des applications hétérogènes. Pour garantir la bonne compréhension des informations échangées entre les partenaires, l’architecture SCEP-SOA met en œuvre une stratégie d’interopérabilité sémantique basée sur l’intégration des ontologies. Cette stratégie s’articule autour d’une ontologie globale et commune utilisée pour l’échange des informations, et des mécanismes de correspondances entre cette ontologie globale et les ontologies locales des partenaires. Cette architecture est illustrée sur un cas d’étude où l’on se focalise sur l’interopérabilité entre des applications dédiées à la planification des projets de fabrication multi-sites. / Today, the production is often multi-site because companies focus on their core competencies. In this context, projects’ management is a difficult task because it must take into account the distribution of the decision and the heterogeneity which can exist between the various production applications of the partners. The Multi-agents systems, in particular the SCEP model (Supervisor, Customer, Environment, Producer), offer a satisfactory solution for the decision distribution problem, by establishing a cooperation between agents responsible of the management of the customer projects and agents representing the remote production sites. Nevertheless, this model presents limits because of its weak ability to communicate and to cooperate with heterogeneous models and management systems, as well as in its difficulty to localize new partners. In this dissertation, we propose a distributed and interoperable architecture, SCEP-SOA, which integrates concepts of the SCEP model and SOA (Service Oriented Architecture) which offers mechanisms for putting in relation various partners and allows communication between heterogeneous systems and applications. To insure the good understanding of the information exchanged between the partners, the SCEP-SOA architecture implements a strategy of semantic interoperability based on the integration of ontologies. This strategy is based on the use of a shared global ontology for information exchange, and on mechanisms of mappings between the global ontology and the partners’ local ontologies. This architecture is illustrated by a study case in which we focus on the interoperability between applications dedicated to the planning of manufacturing multi-sites projects