Trusted product lines

This thesis describes research undertaken into the application of software product line approaches to the development of high-integrity, embedded real-time software systems that are subject to regulatory approval/certification. The motivation for the research arose from a real business need to reduce cost and lead time of aerospace software development projects. The thesis hypothesis can be summarised as follows: It is feasible to construct product line models that allow the specification of required behaviour within a reference architecture that can be transformed into an effective product implementation, whilst enabling suitable supporting evidence for certification to be produced. The research concentrates on the following four main areas: 1. Construction of an argument framework in which the application of product line techniques to high-integrity software development can be assessed and critically reviewed. 2. Definition of a product-line reference architecture that can host components containing variation. 3. Design of model transformations that can automatically instantiate products from a set of components hosted within the reference architecture. 4. Identification of verification approaches that may provide evidence that the transformations designed in step 3 above preserve properties of interest from the product line model into the product instantiations. Together, these areas form the basis of an approach we term “Trusted Product Lines”. The approach has been evaluated and validated by deployment on a real aerospace project; the approach has been used to produce DO-178B/ED-12B Level A applications of over 300 KSLOC in size. The effect of this approach on the software development process has been critically evaluated in this thesis, both quantitatively (in terms of cost and relative size of process phases) and qualitatively (in terms of software quality). The “Trusted Product Lines” approach, as described within the thesis, shows how product line approaches can be applied to high-integrity software development, and how certification evidence created and arguments constructed for products instantiated from the product line. To the best of our knowledge, the development and effective application of product line techniques in a certification environment is novel and unique

Security Information Sharing in Smart Grids: Persisting Security Audits to the Blockchain

This article belongs to the Special Issue Advanced Cybersecurity Services DesignWith the transformation in smart grids, power grid companies are becoming increasingly dependent on data networks. Data networks are used to transport information and commands for optimizing power grid operations: Planning, generation, transportation, and distribution. Performing periodic security audits is one of the required tasks for securing networks, and we proposed in a previous work autoauditor, a system to achieve automatic auditing. It was designed according to the specific requirements of power grid companies, such as scaling with the huge number of heterogeneous equipment in power grid companies. Though pentesting and security audits are required for continuous monitoring, collaboration is of utmost importance to fight cyber threats. In this paper we work on the accountability of audit results and explore how the list of audit result records can be included in a blockchain, since blockchains are by design resistant to data modification. Moreover, blockchains endowed with smart contracts functionality boost the automation of both digital evidence gathering, audit, and controlled information exchange. To our knowledge, no such system exists. We perform throughput evaluation to assess the feasibility of the system and show that the system is viable for adaptation to the inventory systems of electrical companies.This work has been supported by National R&D Projects TEC2017-84197-C4-1-R, TIN2017-84844-C2-1-R, by the Comunidad de Madrid project CYNAMON P2018/TCS-4566 and co-financed by European Structural Funds (ESF and FEDER), and by the Consejo Superior de Investigaciones Científicas (CSIC) under the project LINKA20216 ("Advancing in cybersecurity technologies", i-LINK+ program)

LIFEDATA - a framework for traceable active learning projects

Active Learning has become a popular method for iteratively improving data-intensive Artificial Intelligence models. However, it often presents a significant challenge when dealing with large volumes of volatile data in projects, as with an Active Learning loop. This paper introduces LIFEDATA, a Python- based framework designed to assist developers in implementing Active Learning projects focusing on traceability. It supports seamless tracking of all artifacts, from data selection and labeling to model interpretation, thus promoting transparency throughout the entire model learning process and enhancing error debugging efficiency while ensuring experiment reproducibility. To showcase its applicability, we present two life science use cases. Moreover, the paper proposes an algorithm that combines query strategies to demonstrate LIFEDATA’s ability to reduce data labeling effort

A Blockchain-Based Framework for Distributed Agile Software Testing Life Cycle

A blockchain-based framework for distributed agile software testing life cycle is an innovative approach that uses blockchain technology to optimize the software testing process. Previously, various methods were employed to address communication and collaboration challenges in software testing, but they were deficient in aspects such as trust, traceability, and security. Additionally, a significant cause of project failure was the non-completion of unit testing by developers, leading to delayed testing. This paper integration of blockchain technology in software testing resolves critical concerns related to transparency, trust, coordination, and communication. We have proposed a blockchain based framework named as TestingPlus. TestingPlus framework utilizes blockchain technology to provide a secure and transparent platform for acceptance testing and payment verification. By leveraging smart contracts on a private Ethereum blockchain, TestingPlus can help to ensure that both the testing team and the development team are working towards a common goal and are compensated fairly for their contributions.Comment: 4 figures, 12 page

Blockchain Technology Based Supply Chain Systems and Supply Chain Performance: A Resource-Based View

Blockchain technology (BCT) is set to transform firms’ present ways of managing supply chains. This thesis explores how the efforts by firms to integrate BCT into their supply chain systems and activities, can enable certain supply chain capabilities and subsequently, improve supply chain performance. Using an abductive research approach, qualitative content analyses of 126 cases of firms’ efforts in BCT-based supply chain systems (BCT-SCS) across multiple industries are conducted to identify the BCT-enabled supply chain capabilities and their performance outcomes. Findings reveal that the present BCT-SCS efforts are mainly oriented towards improving the operational-level capabilities namely, information sharing and coordination capabilities rather than strategic-level capabilities namely, integration and collaboration capabilities. The predominant performance outcomes resulting from these capabilities along with the BCT-SCS are quality compliance and improvement, process improvement, flexibility, reduced cost, and reduced process time. However, the performance outcomes vary with industry type, based on the risks that the industry faces. Based on the study’s findings, an integrated framework of research propositions is presented to facilitate future empirical research

The Strategic Supply Chain Management in the Digital Era, Tactical vs Strategic

The perspective of procurement and supply chain management is changing dramatically; traditionally, it was seen as a support function; however, the procurement function is receiving increased attention and investment as an essential contributor to the strategic success and a business enabler. While an end-to-end digital supply chain is an opportunity as it unleashes the next level of strategic growth and involves minimal investment in infrastructure, it is still a challenge to optimize and transform. Furthermore, the recent pandemics and geopolitical disruptions of Covid-19, the Ukraine-Russian war, Brexit and the US-China trade war; have structurally changed the global economy and revealed a new risk assessment that will result in the re-introduction of buffers, boundaries across industries and a partial return to regionalization with sort of de-globalization in which existing just-in-time getting replaced by just-in-case strategy

Managing Distribution Logistics Using Enterprise Systems

To meet the shipping deadlines of dynamic product demands efficiently, the operations and shipping systems in an enterprise must be nimble and responsive enough to delight customers. Organizations have implemented enterprise systems (ESs) to integrate their supply chain processes such as customer order receipt, logistics planning, manufacturing, and dispatch of products. This paper explores the distribution logistics function of manufacturing organizations utilizing ES technology to investigate the goods dispatch process. Three case studies are conducted in manufacturing companies that have implemented ESs to examine how these systems support the management practices and strategies in shipping out operations. Findings reveal that ES tools aid information flow for tracking shipment orders, optimization of product packaging, and achieving on-time deliveries. Though firms are sometimes constrained in materials and availability of physical products for dispatch, the underlying ES technology provides the analytical and knowledge-leveraging support to spur the distribution logistics processes efficiently