Modeling software with the model driven architecture (MDA) concept and unified modeling language (UML) has become a new trend for the objected-oriented systems analysis and design. Several CASE tools which embed MDA concept and UML have been introduced to facilitate the transformation from platform independent model (PIM, i.e., class diagram) to platform specific model (PSM) in order to enhance the efficiency of software development. In this work, we present a systematic methodology which integrates the concept of MDA and UML with CASE tool to refine the process of UML transformation. A personnel leave prototype system is implemented to illustrate the concepts, application, and advantages of the proposed methodology. With this approach, software developers can construct the PIM efficiently and thereby enhance the efficiency of system development.

Traditionally software testing is performed at the coding stage and is costly. Prior research indicated that if the errors can be found prior to the coding stage, the cost for fixing the errors can be reduced. Today, Unified Modeling Language (UML) has become a standard modeling language in object-oriented systems analysis and design. Over the past few years a considerable effort has been made in synthesizing UML, MDA (Model-Driven Architecture), and CASE tool to increase the productivity of the system development. Specifying the business logic constraints with Object Constraint Language (OCL) has become a main trend in this area. This study presents a methodology to specify the business logic constraint with OCL on the platform independent model during the systems analysis and design stage, then transform the OCL expressions into the code model and do the model testing simultaneously with a CASE tool. Three real-world cases and a CASE tool are used to test the usability (including the concepts, application, and advantages) of the proposed methodology. With this approach, software bugs related to business logic constraints can be found at the systems analysis and design stage and thereby reduce the cost of software testing and enhance the efficiency of system development.

This study presents a systematic methodology which integrated the model driven architecture with object-oriented technique to transform the platform independent model (PIM) into Web-based user interface (UI) platform specific model (PSM), and then into code model. A real-world case using the integrated techniques is presented and the Rational Rose is used to illustrate the concepts, application, and the advantages of using the proposed methodology. With this approach, the system developer can transform PIM into Web-based UI PSM and code automatically and thereby enhance the efficiency of system development.

Although nucleic acids primarily function as carriers of the genetic information in biology, their chemical versatility, replicability and programmability render them much more functions inside and outside of cells. Numerous nucleic acid catalysts (known as ribozymes and deoxyribozyme) and binding agents (known as aptamers) have been engineered through the combination of directed evolution and rational design. However, new technologies and theoretical frameworks are still in need to better engineer and utilize these functional nucleic acids in diagnostics and therapeutics. Aiming at engineering more powerful aptazyme-based genetic regulators, we first devised a scheme for direct selection of physiologically active ribozymes in mammalian cells. Model-driven analysis of the selection process showed that the stringency of the selection was strongly influenced by system variables such as degradation rate of un-reacted ribozymes. This analysis led to models that can be exploited to understand and predict the performance of aptazyme-based biosensors and genetic regulators. Several fundamental limitations of aptazymes-based systems were identified from the analyses of these models. As it became apparent that the signals generated by aptazymes need to be processed and amplified at molecular level to have satisfactory effects on the final readouts, we turned our focus to engineering nucleic acid-based signal processors using several newly invented schemes such as ‘entropy-driven DNA amplifier’ and ‘catalyzed DNA self-assembly.’ We first demonstrated a method to couple entropy-driven DNA amplifiers to allosteric deoxyribozymes, and then proved that the concept of catalyzed DNA self-assembly can be used to design efficient and versatile signal amplifiers for analytical applications on various platforms. These developments may potentially lead to sensitive, low-cost, and point-of-care diagnostic devices. Taken together, these works not only addressed several important issues regarding the engineering and application of nucleic acid catalysts, but also revealed a new theme in molecular engineering: In order to better engineer and utilize a part, one needs to characterize, model, and modify the system surrounding the part so that the potential of the part can be maximized. / text

It is widely accepted within the software engineering community that the support for integration is necessary for requirement models. Several methodologies, such as the role-based software development, that have appeared in the literature are relying on some kind of integration. However, current integration techniques and their tools support are insufficient. In this research, we discuss our solution to the problem. More precisely, we present a general integration approach for scenario-based models, particularly for UML Sequence Diagrams, based on the colimit construction known from category theory. In our approach, Sequence Diagrams are represented by SD-graphs, a special kind of typed graphs. The merge algorithm for SD-graphs is an extension of existing merge operations on sets and graphs. On the one hand, the merge algorithm ensures traceability and guarantees key theoretical properties (e.g., “everything is represented and nothing extra is acquired” during the merge). On the other hand, our formalization of Sequence Diagrams as SD-graphs retains the graphical nature of Sequence Diagrams, yet is amenable to algebraic manipulations. Another important property of our process is that our approach is applicable to other kinds of models as long as they can be represented by typed graphs. A prototype Sequence Diagram integration tool following the approach has been implemented. The tool is not only a fully functional integration tool, but also served as a test bed for our theory and provided feedback for our theoretical framework. To support the discovery and specification of model relationships, we also present a list of high-level merge patterns in this dissertation. We believe our theory and tool are beneficial to both academia and industry, as the initial evaluation has shown that the ideas presented in this dissertation represent promising steps towards the more rigorous management of requirement models. We also present an approach connecting model transformation with source transformation and allowing an existing source transformation language (TXL) to be used for model transformation. Our approach leverages grammar generators to ease the task of creating model transformations and inherits many of the strengths of the underlying transformation language (e.g., efficiency and maturity). / Thesis (Ph.D, Computing) -- Queen's University, 2009-08-28 13:03:08.607

Model driven development (MDD) is on the rise in software engineering and no more so than in the realm of real-time and embedded systems. Being able to leverage the code generation and validation techniques made available through MDD is worth exploring, and is the focus of much academic and industrial research. However given the iterative nature of MDD, the natural evolution of models causes test case generation to occur multiple times throughout a software modeling project. Currently, the existing process of regenerating test cases for a modified model of a system can be costly, inefficient, and even redundant. The focus of this research was to achieve an improved understanding of the impact of typical model evolution steps on both the execution of the model and its test cases, and how this impact can be mitigated by reusing previously generated test cases. In this thesis we use existing techniques for symbolic execution and test case generation to perform an analysis on example models and determine how evolution affects model artifacts; these findings were then used to classify evolution steps based on their impact. From these classifications, we were able to determine exactly how to perform updates to existing symbolic execution trees and test suites in order to obtain the resulting test suites using minimal computational resources whenever possible. The approach was implemented in a software plugin, IncreTesCaGen, that is capable of incrementally generating test cases for a subset of UML-RT models by leveraging the existing testing artifacts (symbolic execution trees and test suites), as well as presenting additional analysis results to the user. Finally, we present the results of an initial evaluation of our tool, which provides insight into the tool’s performance, the effects of model evolution on execution and test case generation, as well as design tips to produce optimal models for evolution. / Thesis (Master, Computing) -- Queen's University, 2012-09-26 14:18:50.838

Model Driven Development (MDD) is a paradigm introduced to overcome the complexities of modern software development. In MDD we use models as a primary artifact that is being developed, tested and refined, with code being a result of code generation. Analysis and verification of models is an important aspect of MDD paradigm, because they improve understanding of a developed system and enable discovery of faults early in the development. Even though many analysis methods exist (e.g., model checking, proof systems), they are not directly applicable in the context of industrial MDD tools such as IBM Rational Software Architect Real Time Edition (IBM RSA RTE). One of the main reasons for this inapplicability is the difference between modeling languages used in MDD tools (e.g. UML-RT language in IBM RSA RTE) and languages used in existing tools. These differences require an implementation of a transformation from a modeling language to an input language of a tool. UML-RT as well as other industrial MMD models, cannot be easily translated, if the target languages do not directly support key model features. To address this problem we follow a research direction that deviates from the standard approaches and instead of bringing MDD models to analysis tools, the approach brings analysis "closer" to MDD models. We introduce analysis of UML-RT models dedicated to this modeling language. To this end we use a formal internal representation of UML-RT models that preserves the important features of these models, such as hierarchical structures of components, asynchronous communication and action code. This provides us with formalized models using straightforward transformation. In addition, this approach enables the use of MDD-specific abstractions aiming to reduce the size of the state space necessary. To this end we introduce several MDD-specific types of abstractions for: data (using symbolic execution), structure and behavior. The work also includes model checking algorithms, which use the modular nature of UML-RT models. The proposed approach is implemented in a toolset that enables analysis directly of UML-RT models. We show the results of experiments with UML-RT models developed in-house and obtained from our industrial partner. / Thesis (Ph.D, Computing) -- Queen's University, 2014-06-24 17:58:05.973

Penetration testing is widely used in industry as a test method for web application security assessment. However, penetration testing is often performed late in a software development life cycle as an isolated task and usually requires specialized security experts. There is no well-defined test framework providing guidance and support to general testers who usually do not have in-depth security expertise to perform a systematic and cost-efficient penetration test campaign throughout a security-oriented software development life cycle. In this thesis, we propose a model-driven penetration test framework for web applications that consists of a penetration test methodology, a grey-box test architecture, a web security knowledge base, a test campaign model, and a knowledge-based PenTest workbench. The test framework enables general testers to perform a penetration test campaign in a model-driven approach that is fully integrated into a security-oriented software development life cycle. Security experts are still required to build up and maintain a web security knowledgebase for test campaigns, but the general testers are capable of developing and executing penetration test campaigns with reduced complexity and increased reusability in a systematic and cost-efficient approach. A prototype of the framework has been implemented and applied to three web applications: the benchmark WebGoat web application, a hospital adverse event management system (AEMS), and a palliative pain and symptom management system (PAL-IS). An evaluation of the test framework prototype based on the case studies indicates the potential of the proposed test framework to improve how penetration test campaigns are performed and integrated into a security-oriented software development life cycle.

Thesis (M.S.)--Brigham Young University. Dept. of Civil and Environmental Engineering, 2007. / Includes bibliographical references (p. 31-33).

Thesis (Ph. D.)--University of Alabama at Birmingham, 2009. / Additional advisors: Barrett Bryant, Aniruddha Gokhale, Marjan Mernik, Chengcui Zhang. Description based on contents viewed June 3, 2009; title from PDF t.p. Includes bibliographical references (p. 161-177).