Made available in DSpace on 2016-08-29T15:33:18Z (GMT). No. of bitstreams: 1 tese_5494_.pdf: 2904195 bytes, checksum: c6fded7753ec6bae38735ba2962dbb09 (MD5) Previous issue date: 2012-08-31 / The need to relate the various architectural domains captured in partial descriptions of an enterprise is addressed in virtually all enterprise modeling approaches. One of these domains, namely that of organizational behavior, has received significant attention in recent years in the context of business process modeling and management. Another important domain, that of organizational structure is strongly inter-related with the process domain. While the process domain focuses on how the business process activities are structured and performed, the organizational structure domain focuses on who performs these activities, i.e., which kinds of entities in an organization are capable of performing work. Given the strong connection between the organizational behavior and organizational resources, we argue that any comprehensive enterprise modeling technique should explicitly establish the relations between the modeling elements that represent organizational behavior, called here behavioral elements, and those used to represent the organizational resources (organizational actors) involved in these activities, called here active structure elements. Despite the importance of the relations between these architectural domains, many of the current enterprise architecture and business process modeling approaches lack support for the expressiveness of a number of important active structure allocation scenarios. This work aims to overcome these limitations by proposing a framework for active structure assignment that can be applied to enterprise architecture and business process modeling approaches. This framework enriches the expressiveness of existing techniques and supports the definition of precise active structure assignments. It is designed such that it should be applicable to a number of enterprise architecture and business process modeling languages, i.e., one should be able to use and apply different (enterprise and business process) modeling languages to the framework with minor changes.

Indiana University-Purdue University Indianapolis (IUPUI) / Systems Engineering is catching pace in many segments of product manufacturing industries. Model-Based Systems Engineering (MBSE) is the formalized application of modeling to perform systems engineering activities. In order to effectively utilize the complete potential of MBSE, a methodology consisting of appropriate processes, methods and tools is a key necessity. In the last decade, several MBSE projects have been implemented in industries varying from aerospace and defense to automotive, healthcare and transportation. The Systems Modeling Language (SysML) standard has been a key enabler of these projects at many companies. Although SysML is capable of providing a rich representation of any system through various viewpoints, the journey towards adopting SysML to realize the true potential of MBSE has been a challenge. Among all, one of the common roadblocks faced by systems engineers across industries has been the software engineering-based nature of SysML which leads to difficulties in grasping the modeling concepts for people that do not possess a software engineering background. As a consequence, developing a system (or a system of systems) architecture model using SysML has been a challenging task for many engineers even after a decade of its inception and multiple successive iterations of the language specification. Being a modeling language, SysML is method-agnostic, but its associated limitations outweigh the advantages. ARCADIA (Architecture Analysis and Design Integrated Approach) is a systems and software architecture engineering method based on architecture-centric and model-based engineering activities. If applied properly, ARCADIA allows for a very effective way to model the architecture of multi-domain systems, and overcome many of the limitations faced in traditional SysML implementation. This thesis evaluates the architecture development capabilities of ARCADIA/Capella versus SysML following the Object-Oriented Systems Engineering Method (OOSEM). The study focuses on the key equivalences and differences between the two MBSE solutions from a model development perspective and provides several criteria to evaluate their effectiveness for architecture development using a conceptual case of Adaptive Cruise Control (ACC). The evaluation is based on three perspectives namely, architecture quality, ability to support key process deliverables, and the overall methodology. Towards this end, an industry-wide survey of MBSE practitioners and thought leaders was conducted to identify several concerns in using models but also to validate the results of the study. The case study demonstrates how the ARCADIA/Capella approach addresses several challenges that are currently faced in SysML implementation. From a process point of view, ARCADIA/Capella and SysML equally support the provision of the key deliverable artifacts required in the systems engineering process. However, the candidate architectures developed using the two approaches show a considerable difference in various aspects such as the mapping of the form to function, creating functional architectures, etc. The ARCADIA/Capella approach allows to develop a ‘good’ system architecture representation efficiently and intuitively. The study also provides answers to several useful criteria pertaining to the overall candidate methodologies while serving as a practitioner’s reference in selecting the most suitable approach.

Information technology (IT) is critical and valuable to our society. An important type of IT system is Supervisor Control And Data Acquisition (SCADA) systems. These systems are used to control and monitor physical industrial processes like electrical power supply, water supply and railroad transport. Since our society is heavily dependent on these industrial processes we are also dependent on the behavior of our SCADA systems. SCADA systems have become (and continue to be) integrated with other IT systems they are thereby becoming increasingly vulnerable to cyber threats. Decision makers need to assess the security that a SCADA system’s architecture offers in order to make informed decisions concerning its appropriateness. However, data collection costs often restrict how much information that can be collected about the SCADA system’s architecture and it is difficult for a decision maker to know how important different variables are or what their value mean for the SCADA system’s security. The contribution of this thesis is a modeling framework and a theory to support cyber security vulnerability assessments. It has a particular focus on SCADA systems. The thesis is a composite of six papers. Paper A describes a template stating how probabilistic relational models can be used to connect architecture models with cyber security theory. Papers B through E contribute with theory on operational security. More precisely, they contribute with theory on: discovery of software vulnerabilities (paper B), remote arbitrary code exploits (paper C), intrusion detection (paper D) and denial-of-service attacks (paper E). Paper F describes how the contribution of paper A is combined with the contributions of papers B through E and other operationalized cyber security theory. The result is a decision support tool called the Cyber Security Modeling Language (CySeMoL). This tool produces a vulnerability assessment for a system based on an architecture model of it. / Informationsteknik (IT) är kritiskt och värdefullt för vårt samhälle. En viktig typ av IT-system är de styrsystem som ofta kallas SCADA-system (från engelskans "Supervisor Control And Data Acquisition"). Dessa system styr och övervakar fysiska industriella processer så som kraftförsörjning, vattenförsörjning och järnvägstransport. Eftersom vårt samhälle är beroende av dessa industriella processer så är vi också beroende av våra SCADA-systems beteende. SCADA-system har blivit (och fortsätter bli) integrerade med andra IT system och blir därmed mer sårbara för cyberhot. Beslutsfattare behöver utvärdera säkerheten som en systemarkitektur erbjuder för att kunna fatta informerade beslut rörande dess lämplighet. Men datainsamlingskostnader begränsar ofta hur mycket information som kan samlas in om ett SCADA-systems arkitektur och det är svårt för en beslutsfattare att veta hur viktiga olika variabler är eller vad deras värden betyder för SCADA-systemets säkerhet. Bidraget i denna avhandling är ett modelleringsramverk och en teori för att stödja cybersäkerhetsutvärderingar. Det har ett särskilt focus på SCADA-system. Avhandlingen är av sammanläggningstyp och består av sex artiklar. Artikel A beskriver en mall för hur probabilistiska relationsmodeller kan användas för att koppla samman cybersäkerhetsteori med arkitekturmodeller. Artikel B till E bidrar med teori inom operationell säkerhet. Mer exakt, de bidrar med teori angående: upptäckt av mjukvarusårbarheter (artikel B), fjärrexekvering av godtycklig kod (artikel C), intrångsdetektering (artikel D) och attacker mot tillgänglighet (artikel E). Artikel F beskriver hur bidraget i artikel A kombineras med bidragen i artikel B till E och annan operationell cybersäkerhetsteori. Resultatet är ett beslutsstödsverktyg kallat Cyber Security Modeling Language (CySeMoL). Beslutsstödsverktyget producerar sårbarhetsutvärdering för ett system baserat på en arkitekturmodell av det. / <p>QC 20121018</p>

Indiana University-Purdue University Indianapolis (IUPUI) / Systems Engineering is catching pace in many segments of product manufacturing industries. Model-Based Systems Engineering (MBSE) is the formalized application of modeling to perform systems engineering activities. In order to effectively utilize the complete potential of MBSE, a methodology consisting of appropriate processes, methods and tools is a key necessity. In the last decade, several MBSE projects have been implemented in industries varying from aerospace and defense to automotive, healthcare and transportation. The Systems Modeling Language (SysML) standard has been a key enabler of these projects at many companies. Although SysML is capable of providing a rich representation of any system through various viewpoints, the journey towards adopting SysML to realize the true potential of MBSE has been a challenge. Among all, one of the common roadblocks faced by systems engineers across industries has been the software engineering-based nature of SysML which leads to difficulties in grasping the modeling concepts for people that do not possess a software engineering background. As a consequence, developing a system (or a system of systems) architecture model using SysML has been a challenging task for many engineers even after a decade of its inception and multiple successive iterations of the language specification. Being a modeling language, SysML is method-agnostic, but its associated limitations outweigh the advantages. ARCADIA (Architecture Analysis and Design Integrated Approach) is a systems and software architecture engineering method based on architecture-centric and model-based engineering activities. If applied properly, ARCADIA allows for a very effective way to model the architecture of multi-domain systems, and overcome many of the limitations faced in traditional SysML implementation. This thesis evaluates the architecture development capabilities of ARCADIA/Capella versus SysML following the Object-Oriented Systems Engineering Method (OOSEM). The study focuses on the key equivalences and differences between the two MBSE solutions from a model development perspective and provides several criteria to evaluate their effectiveness for architecture development using a conceptual case of Adaptive Cruise Control (ACC). The evaluation is based on three perspectives namely, architecture quality, ability to support key process deliverables, and the overall methodology. Towards this end, an industry-wide survey of MBSE practitioners and thought leaders was conducted to identify several concerns in using models but also to validate the results of the study. The case study demonstrates how the ARCADIA/Capella approach addresses several challenges that are currently faced in SysML implementation. From a process point of view, ARCADIA/Capella and SysML equally support the provision of the key deliverable artifacts required in the systems engineering process. However, the candidate architectures developed using the two approaches show a considerable difference in various aspects such as the mapping of the form to function, creating functional architectures, etc. The ARCADIA/Capella approach allows to develop a ‘good’ system architecture representation efficiently and intuitively. The study also provides answers to several useful criteria pertaining to the overall candidate methodologies while serving as a practitioner’s reference in selecting the most suitable approach.

Systems Engineering is catching pace in many segments of product manufacturing industries. Model-Based Systems Engineering (MBSE) is the formalized application of modeling to perform systems engineering activities. In order to effectively utilize the complete potential of MBSE, a methodology consisting of appropriate processes, methods and tools is a key necessity. In the last decade, several MBSE projects have been implemented in industries varying from aerospace and defense to automotive, healthcare and transportation. The Systems Modeling Language (SysML) standard has been a key enabler of these projects at many companies. Although SysML is capable of providing a rich representation of any system through various viewpoints, the journey towards adopting SysML to realize the true potential of MBSE has been a challenge. Among all, one of the common roadblocks faced by systems engineers across industries has been the software engineering-based nature of SysML which leads to difficulties in grasping the modeling concepts for people that do not possess a software engineering background. As a consequence, developing a system (or a system of systems) architecture model using SysML has been a challenging task for many engineers even after a decade of its inception and multiple successive iterations of the language specification. Being a modeling language, SysML is method-agnostic, but its associated limitations outweigh the advantages. ARCADIA (Architecture Analysis and Design Integrated Approach) is a systems and software architecture engineering method based on architecture-centric and model-based engineering activities. If applied properly, ARCADIA allows for a very effective way to model the architecture of multi-domain systems, and overcome many of the limitations faced in traditional SysML implementation. This thesis evaluates the architecture development capabilities of ARCADIA/Capella versus SysML following the Object-Oriented Systems Engineering Method (OOSEM). The study focuses on the key equivalences and differences between the two MBSE solutions from a model development perspective and provides several criteria to evaluate their effectiveness for architecture development using a conceptual case of Adaptive Cruise Control (ACC). The evaluation is based on three perspectives namely, architecture quality, ability to support key process deliverables, and the overall methodology. Towards this end, an industry-wide survey of MBSE practitioners and thought leaders was conducted to identify several concerns in using models but also to validate the results of the study. The case study demonstrates how the ARCADIA/Capella approach addresses several challenges that are currently faced in SysML implementation. From a process point of view, ARCADIA/Capella and SysML equally support the provision of the key deliverable artifacts required in the systems engineering process. However, the candidate architectures developed using the two approaches show a considerable difference in various aspects such as the mapping of the form to function, creating functional architectures, etc. The ARCADIA/Capella approach allows to develop a ‘good’ system architecture representation efficiently and intuitively. The study also provides answers to several useful criteria pertaining to the overall candidate methodologies while serving as a practitioner’s reference in selecting the most suitable approach.

There is a wide gap between the users and the developers in terms of understanding an information system. The most important job scope of a system analyzer is to interview the users to fulfill the requirements and to produce the documentation in layman terms. Chaos theory, system dynamics, project management theory, etc. all tell the initial stage playing an important role during system development. If the users¡¦ requirements are not clearly understood, it will have a bitter consequence when the information system is online. Therefore, system analysis is the essential stage for changes and to understand the requirements of the users. Currently, approaches of system analysis are related to either database management or structured methodology. As for the acquisition of users¡¦ requirements, there are no clear steps and procedures. This has made the understanding of users¡¦ requirement more difficult. We hope that by using a tool of architecture, system analyzers can better comprehend users¡¦ requirements. Hence, we come up with the Architecture-Oriented-System-Analysis-Model (AOSAM) for analysis, design, implementation and testing of an information system. For this research, there are three portions: (1) the fundamental theory of the AOSAM, (2) the build up of the AOSAM, and (3) procedures of using the AOSAM. In this study, we find out AOSAM is able to combine structure with process during the system analysis stage. Furthermore, AOSAM also reaches three significant accomplishments: (1) system analysts grasp users¡¦ requirements firmly, (2) system designers easier to transform users¡¦ requirements to design documents, and (3) to reduce repeating System Development Life Cycle. In the future, we would like to advance the AOSAM to the area of user acceptability, integrated business information system, system design, etc.

Electronic medical records, in addition contributing to a hospital¡¦s overall electronic development and moving towards a paperless environment, also allow hospitals to share electronic medical information. To solve the problem of different medical information systems that hamper information sharing, the Executive Yuan Heath Department Commission has requested the assistance of the Taiwan Association for Medical Information to establish a standard Electronic Medical Record Template, in hopes that there is a national unified Electronic Medical Record Template that also uses the international medical information standard, so that all hospital¡¦s information is accessible, allowing for easy sharing of electronic medical records. The administration department also supports in recommending and creating related steps of incentive, to encourage professional electronic medical record researchers making up a standard internet medical information exchange mechanism, with a goal of achieving national medical information exchange. Though the Executive Yuan Heath Department Commission had a nice scheme, but the standard Electronic Medical Record Template established by Taiwan Association for Medical Information is nothing more than a Form Structure Diagram what is far from the software architecture discipline. This research aims to re-define the electronic medical record system, adopting a software architecture modeling approach. Through Structure Element Diagram, Structure Element Service Diagram, Structure Behavior Coalescence Diagram, and Sequence Diagram as four gold rules, we are able to build up any electronic medical record system architecture. Besides providing medical information personnel a more definite electronic medical record system, this research aids hospitals quickly attain an effective electronic medical record system.

Continuously changing system configurations and attack methods make information system risk management using traditional methods a formidable task. Traditional qualitative approaches usually lack sufficient measurable detail on which to base confident, cost-effective decisions. Traditional quantitative approaches are burdened with the requirement to collect an abundance of detailed asset value and historical incident data and to apply complex calculations to measure the data precisely in work environments where there are limited resources to collect and process it. To ensure that safeguards (controls) are implemented to protect against a majority of known threats, industry leaders are requiring information processing systems to comply with security standards. The National Institute of Standards and Technology (NIST) Federal Information Risk Management Framework (RMF) and the associated suite of guidance documents describe the minimum security requirements for non-national-security federal information and information systems as mandated by the Federal Information Security Management Act (FISMA), enacted into law on December 17, 2002, as Title III of the E-Government Act of 2002. This study proposes using the Pathfinder procedure to mathematically model an information system FISMA-required security control state and an actual information system security control state. A comparison of these two security control states using the proposed method will generate a quantitative measure of the status of compliance of the actual system with the FISMA-required standard. The quantitative measures generated should provide information sufficient to plan risk mitigation strategy, track system compliance to standard, and allow for the discussion of system compliance with the FISMA-required standard in terms easily understood by participants at various levels of an organization without requiring all to have detailed knowledge of the internals of the security standard or the targeted system. The ability to clearly articulate system compliance status and risk mitigation requirements is critical to gaining the support of upper-level management whose responsibility it is to allocate funds sufficient to support government security programs.

Since their creation, CubeSats have become a valuable educational tool for university science and engineering programs. Unfortunately, while aerospace companies invest resources to develop verification and validation methodologies based on larger-scale aerospace projects, university programs tend to focus resources on spacecraft development. This paper looks at two different types of methodologies in an attempt to improve CubeSat reliability: generating software requirements and utilizing system and software architecture modeling. Both the Consortium Requirements Engineering (CoRE) method for software requirements and the Monterey Phoenix modeling language for architecture modeling were tested for usability in the context of PolySat, Cal Poly's CubeSat research program. In the end, neither CoRE nor Monterey Phoenix provided the desired results for improving PolySat's current development procedures. While a modified version of CoRE discussed in this paper does allow for basic software requirements to be generated, the resulting specification does not provide any more granularity than PolySat's current institutional knowledge. Furthermore, while Monterey Phoenix is a good tool to introduce students to model-based systems engineering (MBSE) concepts, the resulting graphs generated for a PolySat specific project were high-level and did not find any issues previously discovered through trial and error methodologies. While neither method works for PolySat, the aforementioned results do provide benefits for university programs looking to begin developing CubeSats.

Les plateformes carbonatées sont typiquement caractérisées par une architecture sédimentaire et stratigraphique complexe qui s’exprime à une échelle qui peut dépasser le simple affleurement. Ce travail est centré sur les dépôts Barrémien (Crétacé inférieur) de la falaise de Gresse-en-Vercors (sud-est de la France) qui nous procure une fenêtre d’observation à l’échelle de la sismique à travers une bordure de plateforme – analogue des réservoirs du Moyen Orient - idéale pour étudier en continu et à grande échelle le développement des plateformes carbonatées. Cette falaise de 500 m de haut pour 25 km de long permet d’étudier la transition entre les dépôts de peu profonds de la plateforme et ceux du bassin. De nouvelles données biostratigraphiques montrent que la série de plate-forme de Gesse-en-Vercors est essentiellement Barrémien inférieur. Quatre séquences stratigraphiques ont été définies, avec deux épisodes complets de plateforme, séparés par trois « drowning ». Les nouvelles données numériques hautes résolutions (nuage de points LIDAR et photos géoréférencées hautes résolutions) acquises par hélicoptère permettent la réalisation d’un DEM 3D haute résolution pour l’ensemble de l’affleurement. L’intégration des observations stratigraphiques et du DEM dans gOcad abouti à la création d’un modèle 3D en continu de l’architecture stratigraphique et de la répartition des facies de l’affleurement qui peu être utilisé pour interprétations stratigraphiques et sédimentologiques. Le modèle géologique qui en résulte démontre que les données numériques d’affleurement et la modélisation géologique en 3D sont des outils pertinents pour tester la caractérisation des affleurements carbonatés et les modèles conceptuels de système de plateformes carbonatées. Il permet d’appréhender les variations subtiles de profils sédimentaires et d’établir une mosaïque de facies à haute résolution tout au long de la plateforme à l’échelle de la sismique. Cette approche est particulièrement critique en ce qui concerne la caractérisation 3D des clinoformes et des cortèges de dépôts sédimentaires dans un modèle non cylindrique tel que la plateforme carbonaté : par exemple, un prisme de bas niveau apparent ou des lobes distaux qui « onlappent » en 2D correspondent en réalité à des progradations en contexte de haut niveau en 3D. / Carbonate platforms are characterized by complex sedimentary and stratigraphic architectures that can be expressed at length scale exceeding single outcrops. This work focuses on the Barremian (Lower Cretaceous) deposits of the Gresse-en-Vercors cliff (southeastern France) that provide a seismic-scale slice though a platform margin - analogous to Middle East reservoirs - ideal to study large scale carbonate platform developments in continuous. The cliffs are 500 m high and extend for 25 km along depositional dip, straddling the transition from shallow water platform to deeper basin. New biostratigraphical data shows that the Vercors platform is mainly Lower Barremian. Four stratigraphic sequences were defined, with two complete platform stages, separated by three drowning events.New high-resolution numerical data (LIDAR point-set and high-resolution georeferenced photos) obtained by helicopter survey, allowed the realization of a 3D high-resolution DEM over the entire outcrops. Integrating the stratigraphic observations and the DEM in gOcad result in a continuous 3D stratigraphic architecture and facies model of the carbonate outcrop that can be used for stratigraphic and sedimentological interpretations. The resulting geological model demonstrates that outcrop numerical data and 3D geological modeling are pertinent tools for improving carbonate outcrop characterization and conceptual models of carbonate platform systems. It allows to establish subtle sedimentary profiles and high resolution facies mosaic along seismic scale platform trend. This approach is particularly critical for the 3D characterization of clinoforms and stratigraphic system tracts in non-cylindrical carbonate systems: for example, apparent low stand wedge or distal onlapping lobes in 2D are in reality prograding high stand systems in 3D.