Event Systems and Access Control

We consider the interpretations of notions of access control (permissions, interdictions, obligations, and user rights) as run-time properties of information systems specified as event systems with fairness. We give proof rules for verifying that an access control policy is enforced in a system, and consider preservation of access control by refinement of event systems. In particular, refinement of user rights is non-trivial; we propose to combine low-level user rights and system obligations to implement high-level user rights

Abstract State Machines 1988-1998: Commented ASM Bibliography

An annotated bibliography of papers which deal with or use Abstract State Machines (ASMs), as of January 1998.Comment: Also maintained as a BibTeX file at http://www.eecs.umich.edu/gasm

Addressing performance requirements in the FDT-based design of distributed systems

The development of distributed systems is generally regarded as a complex and costly task, and for this reason formal description techniques such as LOTOS and ESTELLE (both standardized by the ISO) are increasingly used in this process. Our experience is that LOTOS can be exploited at many stages on the design trajectory, from requirements specification to implementation, but that the language elements do not allow direct formalization of performance requirements. To avoid duplication of effort by using two formalisms with distinct approaches, we propose a design method that incorporates performance constraints in an heuristic but effective manner

Application-Oriented Flow Control: Fundamentals, Algorithms and Fairness

This paper is concerned with flow control and resource allocation problems in computer networks in which real-time applications may have hard quality of service (QoS) requirements. Recent optimal flow control approaches are unable to deal with these problems since QoS utility functions generally do not satisfy the strict concavity condition in real-time applications. For elastic traffic, we show that bandwidth allocations using the existing optimal flow control strategy can be quite unfair. If we consider different QoS requirements among network users, it may be undesirable to allocate bandwidth simply according to the traditional max-min fairness or proportional fairness. Instead, a network should have the ability to allocate bandwidth resources to various users, addressing their real utility requirements. For these reasons, this paper proposes a new distributed flow control algorithm for multiservice networks, where the application's utility is only assumed to be continuously increasing over the available bandwidth. In this, we show that the algorithm converges, and that at convergence, the utility achieved by each application is well balanced in a proportionally (or max-min) fair manner

Spatial distribution of land type in regression models of pollutant loading

This paper proposes a method to improve landscape-pollution interaction regression models through the inclusion of a variable that describes the spatial distribution of a land type with respect to the pattern of runoff within a drainage catchment. The proposed index is used as an independent variable to enhance the strength, as quantified by R² values, of regression relationships between empirical observations of in-stream pollutant concentrations and land type by considering the spatial distribution of key land-type categories within the sample point’s drainage area. We present an index that adds a new dimension of explanatory power when used in conjunction with a variable describing the proportion of the land type. We demonstrate the usefulness of this index by exploring the relationship between nitrate ( - 3 NO ) and land type within 40 drainage sub-catchments in the Ipswich River watershed, Massachusetts. Nutrient loads associated with non-point source pollution paths are related to land type within the up-stream drainage catchments of sample sites. Past studies have focused on the quantity of particular land type within a sample point’s drainage catchment. Quantifying the spatial distribution of key land-type categories in terms of location on a runoff surface can improve our understanding of the relationship between sampled - 3 NO concentrations and land type. Regressions that employ the proportion of residential and agricultural land type within catchments provide a fair fit (R² = 0.67). However, we find that a regression adding a variable that indicates the spatial distribution of residential land improves the overall relationship between instream - 3 NO measurements and associated land types (R² = 0.712). We test the sensitivity of the results with respect to variations in the surface definition in order to determine the conditions under which the spatial index variable is useful

The Virtuous Cooperator: Modeling the Human in an Ecologically Endangered Age

A theological model of the human is needed to prompt responsible thinking about and acting within the physical world. Some basic components for modeling the human as a virtuous cooperator appear in the teachings of Thomas Aquinas. When appropriated cautiously and informed broadly by contemporary scientific findings, this model provides a promising way of thinking about humans in relation to other species and ecological systems, a framework for acting responsibly, and the motivation for making this behavior habitual

SUSTAINABILITY AS INTERGENERATIONAL FAIRNESS

This paper presents an economic model of sustainability defined as intergenerational fairness. Assuming that intergenerational fairness is an obligation of each generation, a recursive optimization problem is obtained. The problem has the advantage that uncertainty can readily be incorporated in the model and it can be solved numerically for a wide range of specifications. The possibility of tradeoffs between efficiency and sustainability are discussed. Under plausible conditions, it is show that a sustainability obligation is met only if there is the expectations of economic growth.Agribusiness,