A Framework For Classification Software Security Using Common Vulnerabilities And Exposures

The main research aim is to investigate what information is necessary to make a formal vulnerability pattern representation.This is done through the usage of formal Backus-Naur-Form syntax for the execution and presented with newly created vulnerability flow diagram.Some future works were also proposed to further enhance the elements in the secured soft-ware process framework.This thesis focuses on the research and development of the design, formalization and translation of the vulnerability classification pattern through a framework using common vulnerabilities and exposures data.To achieve this aim, the following work was carried out.First step is to create and conceptualized necessary meta-process.Second step is to specify the relationship between the classifiers and vulnerability classification pat-terns. This inclusive of the investigation of vulnerability classification objectives,processes,classifiers and focus domains among prominent framework.Final step is to construct the framework by establishing the formal presentation of the vulnerability classification algo-rithm.The validation process was conducted empirically using statistical method to assess the accuracy and consistency by using the precision and recall rate of the algorithm on five data sets each with 500 samples.The findings show a significant result with precision's error rate or p value is between 0.01 and 0.02 with error rate for recall's error rate is between 0.02 and 0.04.Another validation was conducted to verify the correctness of the classification by using expert opinions,and the results showed that the ambiguity of several cases were subdue. Formal-based classification framework with notation may increase accuracy and vi-sualization compared with hierarchy-tree only,but the conclusion remains tentative because of methodological limitation in the studies

Analysis and implementation of FMECA methodology – vacuum machine

The production of injection moulding components for the automotive market, meeting the highly demanding requirements of the industry, requires a continuous capacity of investment in the maintenance of the machine park. Although many companies perform this maintenance in a corrective lens, others already use the more sophisticated tools that have to avoid possible problems during the manufacturing process, ensuring levels of production and quality required by the automotive industry. This report presents the contributions obtained during an internship in a company of production of injected casting components for the automotive market and whose objective was to apply the methodology of analysis of the mode of failure, effects and criticality (FMECA – Failure mode effects and criticality analysis) to one of the company's most critical machines, the vacuum pressure die-casting machine Work begins with the understanding, in terms of operation and purpose, of the machine under analysis. Subsequently, and given its vital character for the high performance of the vacuum die-casting machine, an analysis is made of the type of failures that may occur in the vacuum equipment of the machine The FMECA methodology is applied to the vacuum equipment in order to identify its potential failure modes and to evaluate the effects that these failures may have on the foundry machine. The contributions resulting from the application of the FMECA methodology gave rise to a specific control plan for the detected problems and to a schedule and mandatory equipment maintenance.A produção de componentes de fundição injetada para o mercado automóvel, cumprindo com os requisitos altamente exigentes da indústria, requer uma capacidade contínua de investimento na manutenção do parque de máquinas. Embora sejam muitas as empresas que executam esta manutenção numa ótica corretiva, outras já recorrem a ferramentas mais sofisticadas que têm com objetivo evitar possíveis problemas durante o processo de fabrico, assegurando níveis de produção e qualidade exigidos pela indústria automóvel. Neste relatório apresentam-se as contribuições obtidas durante a realização de um estágio numa empresa de produção de componentes de fundição injetada para o mercado automóvel e que tinha como objetivo aplicar a metodologia de análise do modo de falhas, efeitos e criticidade (FMECA) a uma das máquinas mais críticas da empresa, a máquina de fundição sob pressão de vácuo. Iniciam-se os trabalhos com a compreensão, em termos de funcionamento e propósitos, da máquina em análise. Seguidamente, e dado seu caráter vital para o alto desempenho da máquina de fundição sob pressão de vácuo, faz-se uma análise do tipo de falhas que podem ocorrer nos equipamentos para vácuo da máquina. É aplicada a metodologia FMECA ao equipamento de vácuo por forma a identificar os seus potenciais modos de falha e avaliar os efeitos que estas falhas possam acarretar sobre a máquina de fundição. As contribuições resultantes da aplicação da metodologia FMECA deram origem a um plano de controle específico para os problemas detectados e a um calendário e manutenção obrigatória dos equipamentos