Self-Adaptive Role-Based Access Control for Business Processes

© 2017 IEEE. We present an approach for dynamically reconfiguring the role-based access control (RBAC) of information systems running business processes, to protect them against insider threats. The new approach uses business process execution traces and stochastic model checking to establish confidence intervals for key measurable attributes of user behaviour, and thus to identify and adaptively demote users who misuse their access permissions maliciously or accidentally. We implemented and evaluated the approach and its policy specification formalism for a real IT support business process, showing their ability to express and apply a broad range of self-adaptive RBAC policies

Modelling and analyzing adaptive self-assembling strategies with Maude

Building adaptive systems with predictable emergent behavior is a challenging task and it is becoming a critical need. The research community has accepted the challenge by introducing approaches of various nature: from software architectures, to programming paradigms, to analysis techniques. We recently proposed a conceptual framework for adaptation centered around the role of control data. In this paper we show that it can be naturally realized in a reflective logical language like Maude by using the Reflective Russian Dolls model. Moreover, we exploit this model to specify and analyse a prominent example of adaptive system: robot swarms equipped with obstacle-avoidance self-assembly strategies. The analysis exploits the statistical model checker PVesta

Infrastructure transitions toward sustainability: a complex adaptive systems perspective

To ensure infrastructure assets are procured and maintained by government on behalf of citizens, appropriate policy and institutional architecture is needed, particularly if a fundamental shift to more sustainable infrastructure is the goal. The shift in recent years from competitive and resource-intensive procurement to more collaborative and sustainable approaches to infrastructure governance is considered a major transition in infrastructure procurement systems. In order to better understand this transition in infrastructure procurement arrangements, the concept of emergence from Complex Adaptive Systems (CAS) theory is offered as a key construct. Emergence holds that micro interactions can result in emergent macro order. Applying the concept of emergence to infrastructure procurement, this research examines how interaction of agents in individual projects can result in different industry structural characteristics. The paper concludes that CAS theory, and particularly the concept of ‘emergence’, provides a useful construct to understand infrastructure procurement dynamics and progress towards sustainability

A call for resilience index for health and social systems in Africa

This repository item contains a single issue of Issues in Brief, a series of policy briefs that began publishing in 2008 by the Boston University Frederick S. Pardee Center for the Study of the Longer-Range Future. This paper is part of the Africa 2060 Project, a Pardee Center program of research, publications and symposia exploring African futures in various aspects related to development on continental and regional scales. The views expressed in this paper are strictly those of the author and should not be assumed to represent the views of the Frederick S. Pardee Center for the Study of the Longer-Range Future or of Boston University.This policy brief explores the concept of resilience as it applies to health and social systems in Africa, and suggests that development of a multi-dimensional resilience index may help to understand and formulate policy in settings of complex emergencies. This paper is part of the Africa 2060 Project, a Pardee Center program of research, publications and symposia exploring African futures in various aspects related to development on continental and regional scales