A model-driven approach to survivability requirements assessment for critical systems

Bernardi, Simona ; Dranca, Lacramioara ; Merseguer, José (Universidad de Zaragoza)

Resumen: Survivability is a crucial property for those systems – such as critical infrastructures or military Command and Control Information Systems – that provide essential services, since the latter must be operational even when the system is compromised due to attack or faults. This article proposes a model-driven method and a tool –MASDES– to assess the survivability requirements of critical systems. The method exploits the use of (1) (mis)use case technique and UML profiling for the specification of the survivability requirements and (2) Petri nets and model checking techniques for the requirement assessment. A survivability assessment model is obtained from an improved specification of misuse cases, which encompasses essential services, threats and survivability strategies. The survivability assessment model is then converted into a Petri net model for verifying survivability properties through model checking. The MASDES tool has been developed within the Eclipse workbench and relies on Papyrus tool for UML. It consists of a set of plug-ins that enable (1) to create a survivability system view using UML and profiling techniques and (2) to verify survivability properties. In particular, the tool performs model transformations in two steps. First, a model-to-model transformation generates, from the survivability view, a Petri net model and properties to be checked in a tool-independent format. Second, model-to-text transformations produce the Petri net specifications for the model checkers. A military Command and Control Information Systems has been used as a case study to apply the method and to evaluate the MASDES tool, within an iterative-incremental software development process.

Idioma: Inglés

DOI: 10.1177/1748006X15626017

Año: 2016

Publicado en: Proceedings of the Institution of Mechanical Engineers. Part O, Journal of risk and reliability 230, 5 (2016), 485-501
ISSN: 1748-006X

Factor impacto JCR: 1.084 (2016)

Categ. JCR: ENGINEERING, INDUSTRIAL rank: 33 / 44 = 0.75 (2016) - Q3 - T3
Categ. JCR: ENGINEERING, MULTIDISCIPLINARY rank: 43 / 85 = 0.506 (2016) - Q3 - T2
Categ. JCR: OPERATIONS RESEARCH & MANAGEMENT SCIENCE rank: 54 / 83 = 0.651 (2016) - Q3 - T2

Factor impacto SCIMAGO: 0.554 - Safety, Risk, Reliability and Quality (Q2)

Financiación: info:eu-repo/grantAgreement/ES/DGA/T27
Financiación: info:eu-repo/grantAgreement/EC/H2020/644869/EU/Developing Data-Intensive Cloud Applications with Iterative Quality Enhancements/DICE
Financiación: info:eu-repo/grantAgreement/ES/MINECO/TIN2011-24932
Financiación: info:eu-repo/grantAgreement/ES/MINECO/TIN2013-46238-C4-1-R

Tipo y forma: Artículo (PostPrint)

Área (Departamento): Área Lenguajes y Sistemas Inf. (Dpto. Informát.Ingenie.Sistms.)