Towards Automating the Construction & Maintenance of Attack Trees: a Feasibility Study

Security risk management can be applied on well-defined or existing systems; in this case, the objective is to identify existing vulnerabilities, assess the risks and provide for the adequate countermeasures. Security risk management can also be applied very early in the system's development life-cycle, when its architecture is still poorly defined; in this case, the objective is to positively influence the design work so as to produce a secure architecture from the start. The latter work is made difficult by the uncertainties on the architecture and the multiple round-trips required to keep the risk assessment study and the system architecture aligned. This is particularly true for very large projects running over many years. This paper addresses the issues raised by those risk assessment studies performed early in the system's development life-cycle. Based on industrial experience, it asserts that attack trees can help solve the human cognitive scalability issue related to securing those large, continuously-changing system-designs. However, big attack trees are difficult to build, and even more difficult to maintain. This paper therefore proposes a systematic approach to automate the construction and maintenance of such big attack trees, based on the system's operational and logical architectures, the system's traditional risk assessment study and a security knowledge database.Comment: In Proceedings GraMSec 2014, arXiv:1404.163

Modeling of Traceability Information System for Material Flow Control Data.

This paper focuses on data modeling for traceability of material/work flow in information layer of manufacturing control system. The model is able to trace all associated data throughout the product manufacturing from order to final product. Dynamic data processing of Quality and Purchase activities are considered in data modeling as well as Order and Operation base on lots particulars. The modeling consisted of four steps and integrated as one final model. Entity-Relationships Modeling as data modeling methodology is proposed. The model is reengineered with Toad Data Modeler software in physical modeling step. The developed model promises to handle fundamental issues of a traceability system effectively. It supports for customization and real-time control of material in flow in all levels of manufacturing processes. Through enhanced visibility and dynamic store/retrieval of data, all traceability usages and applications is responded. Designed solution is initially applicable as reference data model in identical lot-base traceability system

A critical analysis of the X.400 model of message handling systems

The CCITT X.400 model of store and forward Message Handling Systems (MHS) serves as a common basis for the definition of electronic mail services and protocols both within CCITT and ISO. This paper presents an analysis of this model and its related recommendations from two perspectives. First the concepts of service, protocol and interface are discussed together with their application to this model; second the positioning within ISO's reference model for Open Systems Interconnection (OSI) is commented on

Implementing intelligent asset management systems (IAMS) within an industry 4.0 manufacturing environment

9th IFAC Conference on Manufacturing Modelling, Management and Control, MIM 2019; Berlin; Germany; 28 August 2019 through 30 August 2019. Publicado en IFAC-PapersOnLine 52(13), p. 2488-2493This paper aims to define the different considerations and results obtained in the implementation in an Intelligent Maintenance System of a laboratory designed based on basic concepts of Industry 4.0. The Intelligent Maintenance System uses asset monitoring techniques that allow, on-line digital modelling and automatic decision making. The three fundamental premises used for the development of the management system are the structuring of information, value identification and risk management

Design of a shared whiteboard component for multimedia conferencing

This paper reports on the development of a framework for multimedia applications in the domain of tele-education. The paper focuses on the protocol design of a specific component of the framework, namely a shared whiteboard application. The relationship of this component with other components of the framework is also discussed. A salient feature of the framework is that it uses an advanced ATM-based network service. The design of the shared whiteboard component is considered representative for the design as a whole, and is used to illustrate how a flexible protocol architecture utilizing innovative network functions and satisfying demanding user requirements can be developed

A semantic-based platform for the digital analysis of architectural heritage

This essay focuses on the fields of architectural documentation and digital representation. We present a research paper concerning the development of an information system at the scale of architecture, taking into account the relationships that can be established between the representation of buildings (shape, dimension, state of conservation, hypothetical restitution) and heterogeneous information about various fields (such as the technical, the documentary or still the historical one). The proposed approach aims to organize multiple representations (and associated information) around a semantic description model with the goal of defining a system for the multi-field analysis of buildings

Eco-innovative Method to Improve the Distribution Phase of Product

The integration of the environmental dimension is crucial in industrial activity. Designers should integrate the new environmental constraints to adapt their approaches and methodologies in the framework of eco-innovation of industrial products and consumer goods. This paper proposes a new method integrating ecological aspects into the innovation process composed of three main stages: an analysis and structuring of the product, the formalization of the problem and the resolution phase. According to the structuring and the design objectives, actions can be selected and allow to guide the design to the most relevant modification to perform on the product. An illustration of the approach is applied on the optimization of the environmental impacts related to the logistical aspects