Towards Model-Driven Development of Access Control Policies for Web Applications

We introduce a UML-based notation for graphically modeling systems’ security aspects in a simple and intuitive way and a model-driven process that transforms graphical specifications of access control policies in XACML. These XACML policies are then translated in FACPL, a policy language with a formal semantics, and the resulting policies are evaluated by means of a Java-based software tool

Toward optimal implementation of cancer prevention and control programs in public health: A study protocol on mis-implementation

Abstract Background Much of the cancer burden in the USA is preventable, through application of existing knowledge. State-level funders and public health practitioners are in ideal positions to affect programs and policies related to cancer control. Mis-implementation refers to ending effective programs and policies prematurely or continuing ineffective ones. Greater attention to mis-implementation should lead to use of effective interventions and more efficient expenditure of resources, which in the long term, will lead to more positive cancer outcomes. Methods This is a three-phase study that takes a comprehensive approach, leading to the elucidation of tactics for addressing mis-implementation. Phase 1: We assess the extent to which mis-implementation is occurring among state cancer control programs in public health. This initial phase will involve a survey of 800 practitioners representing all states. The programs represented will span the full continuum of cancer control, from primary prevention to survivorship. Phase 2: Using data from phase 1 to identify organizations in which mis-implementation is particularly high or low, the team will conduct eight comparative case studies to get a richer understanding of mis-implementation and to understand contextual differences. These case studies will highlight lessons learned about mis-implementation and identify hypothesized drivers. Phase 3: Agent-based modeling will be used to identify dynamic interactions between individual capacity, organizational capacity, use of evidence, funding, and external factors driving mis-implementation. The team will then translate and disseminate findings from phases 1 to 3 to practitioners and practice-related stakeholders to support the reduction of mis-implementation. Discussion This study is innovative and significant because it will (1) be the first to refine and further develop reliable and valid measures of mis-implementation of public health programs; (2) bring together a strong, transdisciplinary team with significant expertise in practice-based research; (3) use agent-based modeling to address cancer control implementation; and (4) use a participatory, evidence-based, stakeholder-driven approach that will identify key leverage points for addressing mis-implementation among state public health programs. This research is expected to provide replicable computational simulation models that can identify leverage points and public health system dynamics to reduce mis-implementation in cancer control and may be of interest to other health areas

The role of learning on industrial simulation design and analysis

The capability of modeling real-world system operations has turned simulation into an indispensable problemsolving methodology for business system design and analysis. Today, simulation supports decisions ranging from sourcing to operations to finance, starting at the strategic level and proceeding towards tactical and operational levels of decision-making. In such a dynamic setting, the practice of simulation goes beyond being a static problem-solving exercise and requires integration with learning. This article discusses the role of learning in simulation design and analysis motivated by the needs of industrial problems and describes how selected tools of statistical learning can be utilized for this purpose

Adaptive Process Management in Cyber-Physical Domains

The increasing application of process-oriented approaches in new challenging cyber-physical domains beyond business computing (e.g., personalized healthcare, emergency management, factories of the future, home automation, etc.) has led to reconsider the level of flexibility and support required to manage complex processes in such domains. A cyber-physical domain is characterized by the presence of a cyber-physical system coordinating heterogeneous ICT components (PCs, smartphones, sensors, actuators) and involving real world entities (humans, machines, agents, robots, etc.) that perform complex tasks in the “physical” real world to achieve a common goal. The physical world, however, is not entirely predictable, and processes enacted in cyber-physical domains must be robust to unexpected conditions and adaptable to unanticipated exceptions. This demands a more flexible approach in process design and enactment, recognizing that in real-world environments it is not adequate to assume that all possible recovery activities can be predefined for dealing with the exceptions that can ensue. In this chapter, we tackle the above issue and we propose a general approach, a concrete framework and a process management system implementation, called SmartPM, for automatically adapting processes enacted in cyber-physical domains in case of unanticipated exceptions and exogenous events. The adaptation mechanism provided by SmartPM is based on declarative task specifications, execution monitoring for detecting failures and context changes at run-time, and automated planning techniques to self-repair the running process, without requiring to predefine any specific adaptation policy or exception handler at design-time

Microsimulation models incorporating both demand and supply dynamics

There has been rapid growth in interest in real-time transport strategies over the last decade, ranging from automated highway systems and responsive traffic signal control to incident management and driver information systems. The complexity of these strategies, in terms of the spatial and temporal interactions within the transport system, has led to a parallel growth in the application of traffic microsimulation models for the evaluation and design of such measures, as a remedy to the limitations faced by conventional static, macroscopic approaches. However, while this naturally addresses the immediate impacts of the measure, a difficulty that remains is the question of how the secondary impacts, specifically the effect on route and departure time choice of subsequent trips, may be handled in a consistent manner within a microsimulation framework. The paper describes a modelling approach to road network traffic, in which the emphasis is on the integrated microsimulation of individual trip-makers’ decisions and individual vehicle movements across the network. To achieve this it represents directly individual drivers’ choices and experiences as they evolve from day-to-day, combined with a detailed within-day traffic simulation model of the space–time trajectories of individual vehicles according to car-following and lane-changing rules and intersection regulations. It therefore models both day-to-day and within-day variability in both demand and supply conditions, and so, we believe, is particularly suited for the realistic modelling of real-time strategies such as those listed above. The full model specification is given, along with details of its algorithmic implementation. A number of representative numerical applications are presented, including: sensitivity studies of the impact of day-to-day variability; an application to the evaluation of alternative signal control policies; and the evaluation of the introduction of bus-only lanes in a sub-network of Leeds. Our experience demonstrates that this modelling framework is computationally feasible as a method for providing a fully internally consistent, microscopic, dynamic assignment, incorporating both within- and between-day demand and supply dynamic

Resilience Assignment Framework using System Dynamics and Fuzzy Logic.

This paper is concerned with the development of a conceptual framework that measures the resilience of the transport network under climate change related events. However, the conceptual framework could be adapted and quantified to suit each disruption’s unique impacts. The proposed resilience framework evaluates the changes in transport network performance in multi-stage processes; pre, during and after the disruption. The framework will be of use to decision makers in understanding the dynamic nature of resilience under various events. Furthermore, it could be used as an evaluation tool to gauge transport network performance and highlight weaknesses in the network. In this paper, the system dynamics approach and fuzzy logic theory are integrated and employed to study three characteristics of network resilience. The proposed methodology has been selected to overcome two dominant problems in transport modelling, namely complexity and uncertainty. The system dynamics approach is intended to overcome the double counting effect of extreme events on various resilience characteristics because of its ability to model the feedback process and time delay. On the other hand, fuzzy logic is used to model the relationships among different variables that are difficult to express in numerical form such as redundancy and mobility