Refactoring preserves security

Refactoring allows changing a program without changing its behaviour from an observer’s point of view. To what extent does this invariant of behaviour also preserve security? We show that a program remains secure under refactoring. As a foundation, we use the Decentralized Label Model (DLM) for specifying secure information flows of programs and transition system models for their observable behaviour. On this basis, we provide a bisimulation based formal definition of refactoring and show its correspondence to the formal notion of information flow security (noninterference). This permits us to show security of refactoring patterns that have already been practically explored

Report on the First International Workshop on Technical Debt Analytics (TDA 2016)

This report outlines the motivation and goals of the First International Workshop on Technical Debt Analytics (TDA 2016), presents the workshop programme, introduces the work accepted for presentation, and summarizes the major results and themes that emerged from the discussion and activities undertaken during the workshop

Engaging without over-powering: A case study of a FLOSS project

This is the post-print version of the published chapter. The original publication is available at the link below. Copyright @ 2010 IFIP International Federation for Information Processing.The role of Open Source Software (OSS) in the e-learning business has become more and more fundamental in the last 10 years, as long as corporate and government organizations have developed their educational and training programs based on OSS out-of-the-box tools. This paper qualitatively documents the decision of the largest UK e-learning provider, the Open University, to adopt the Moodle e-learning system, and how it has been successfully deployed in its site after a multi-million investment. A further quantitative study also provides evidence of how a commercial stakeholder has been engaged with, and produced outputs for, the Moodle community. Lessons learned from this experience by the stakeholders include the crucial factors of contributing to the OSS community, and adapting to an evolving technology. It also becomes evident how commercial partners helped this OSS system to achieve the transition from an “average” OSS system to a successful multi-site, collaborative and community-based OSS project

An XQuery-based Model Transformation Language

In this paper we propose a framework for model transformation in XQuery. Our proposal aims to provide the elements for using XQuery as a transformation language. With this aim, our framework provides a mechanism for automatically obtaining an XQuery library for a given meta-model. Meta-models are defined as XML schemas, and the XQuery library serves to query and create elements of an XML Schema. Transformations abstract from XML representation, in the sense of, elements from meta-models are encapsulated by XQuery functions. We have also studied how to use our framework for model validation. Source and target models and transformations are validated by considering constraints. The framework has been tested with a case study of transformation in UML, where the XML-based representation of models is achieved by the standardized language XMI

Linking Telecom Service High-level Abstract Models to Simulators based on Model Transformations: The IMS Case Study

Part 3: ManagementInternational audienceTelecommunication services are widespread and subject today to tensions on a competitive market. Telecommunication service design is more and more software oriented. To reduce time to market and cost of services, a service designer better need to simulate and evaluate his design earlier. The approach proposed in this paper is to reduce the abstraction gap between modeling and simulation phases using model transformation. But manual transformations are so far time consuming and error prone.As a trustworthy solution, model based techniques and associated transformations permit to systematically link service models with simulation phase before realization. We thus propose as a first contribution a meta-model dedicated to concepts of IP Multimedia Subsystem core network as a case study. Our meta-model constrains and defines such network entities to be used in the code generation, which is our second contribution. The implementation of a video conference service permits to illustrate our workbench

Bottom-up meta-modelling: An interactive approach

The final publication is available at Springer via http://dx.doi.org/10.1007/978-3-642-33666-9_2Proceedings of 15th International Conference, MODELS 2012, Innsbruck, Austria, September 30–October 5, 2012The intensive use of models in Model-Driven Engineering (MDE) raises the need to develop meta-models with different aims, like the construction of textual and visual modelling languages and the specification of source and target ends of model-to-model transformations. While domain experts have the knowledge about the concepts of the domain, they usually lack the skills to build meta-models. These should be tailored according to their future usage and specific implementation platform, which demands knowledge available only to engineers with great expertise in MDE platforms. These issues hinder a wider adoption of MDE both by domain experts and software engineers. In order to alleviate this situation we propose an interactive, iterative approach to meta-model construction enabling the specification of model fragments by domain experts, with the possibility of using informal drawing tools like Dia. These fragments can be annotated with hints about the intention or needs for certain elements. A meta-model is automatically induced, which can be refactored in an interactive way, and then compiled into an implementation meta-model using profiles and patterns for different platforms and purposes.This work was funded by the Spanish Ministry of Economy and Competitivity (project “Go Lite” TIN2011-24139) and the R&D programme of the Madrid Region (project “e-Madrid” S2009/TIC-1650

Generic Model Refactorings

Many modeling languages share some common concepts and principles. For example, Java, MOF, and UML share some aspects of the concepts\ud of classes, methods, attributes, and inheritance. However, model\ud transformations such as refactorings specified for a given language\ud cannot be readily reused for another language because their related\ud metamodels may be structurally different. Our aim is to enable a\ud flexible reuse of model transformations across various metamodels.\ud Thus, in this paper, we present an approach allowing the specification\ud of generic model transformations, in particular refactorings, so\ud that they can be applied to different metamodels. Our approach relies\ud on two mechanisms: (1) an adaptation based mainly on the weaving\ud of aspects; (2) the notion of model typing, an extension of object\ud typing in the model-oriented context. We validated our approach by\ud performing some experiments that consisted of specifying three well\ud known refactorings (Encapsulate Field, Move Method, and Pull Up Method)\ud and applying each of them onto three different metamodels (Java,\ud MOF, and UML)

Towards the systematic construction of domain-specific transformation languages

The final publication is available at Springer via http://dx.doi.org/10.1007/978-3-319-09195-2-13Proceedings of 10th European Conference, ECMFA 2014, Held as Part of STAF 2014, York, UK, July 21-25, 2014General-purpose transformation languages, like ATL or QVT, are the basis for model manipulation in Model-Driven Engineering (MDE). However, as MDE moves to more complex scenarios, there is the need for specialized transformation languages for activities like model merging, migration or aspect weaving, or for specific domains of wide use like UML. Such domain-specific transformation languages (DSTLs) encapsulate transformation knowledge within a language, enabling the reuse of recurrent solutions to transformation problems. Nowadays, many DSTLs are built in an ad-hoc manner, which requires a high development cost to achieve a full-featured implementation. Alternatively, they are realised by an embedding into general-purpose transformation or programming languages like ATL or Java. In this paper, we propose a framework for the systematic creation of DSTLs. First, we look into the characteristics of domain-specific transformation tools, deriving a categorization which is the basis of our framework. Then, we propose a domain-specific language to describe DSTLs, from which we derive a ready-to-run workbench which includes the abstract syntax, concrete syntax and translational semantics of the DSTL.This work has been funded by the Spanish Ministry of Economy and Competitivity with project “Go Lite” (TIN2011-24139

Deltadijken dragen bij aan ‘robuust’ systeem

Verhoging en versterking van dijken is niet het enige mogelijke antwoord op extreem hoge afvoeren van rivieren. Men kan ook kijken naar de 'robuustheid' van het systeem: is een gebied als geheel - en dus niet alleen de dijk - voorbereid op het vele water? En welke rol kunnen deltadijken daarbij spelen

Waarom Deltadijken bijdragen aan een robuust systeem

Klimaatverandering vraagt om een klimaatbestendige gebiedsinrichting. Voor gebieden met een overstromingsrisico betekent dit vaak dat dijken moeten worden versterkt en/of verhoogd. Daarnaast komt er met Meerlaagsveiligheid meer aandacht voor ruimtelijke ordening en rampenbeheersing. Kennis voor Klimaat (KvK) onderzoekt maatregelen die het overstromingsrisico reduceren. Deze maatregelen moeten passen in een strategie voor de lange termijn, die rekening houdt met onzekerheden. De deltadijk is zo’n maatregel. Deltadijken blijken niet alleen het risico van overstromingen te reduceren, maar ook de robuustheid van een gebied voor hoge rivierafvoeren te vergroten