Semantics and Verification of UML Activity Diagrams for Workflow Modelling

This thesis defines a formal semantics for UML activity diagrams that is suitable for workflow modelling. The semantics allows verification of functional requirements using model checking. Since a workflow specification prescribes how a workflow system behaves, the semantics is defined and motivated in terms of workflow systems. As workflow systems are reactive and coordinate activities, the defined semantics reflects these aspects. In fact, two formal semantics are defined, which are completely different. Both semantics are defined directly in terms of activity diagrams and not by a mapping of activity diagrams to some existing formal notation. The requirements-level semantics, based on the Statemate semantics of statecharts, assumes that workflow systems are infinitely fast w.r.t. their environment and react immediately to input events (this assumption is called the perfect synchrony hypothesis). The implementation-level semantics, based on the UML semantics of statecharts, does not make this assumption. Due to the perfect synchrony hypothesis, the requirements-level semantics is unrealistic, but easy to use for verification. On the other hand, the implementation-level semantics is realistic, but difficult to use for verification. A class of activity diagrams and a class of functional requirements is identified for which the outcome of the verification does not depend upon the particular semantics being used, i.e., both semantics give the same result. For such activity diagrams and such functional requirements, the requirements-level semantics is as realistic as the implementation-level semantics, even though the requirements-level semantics makes the perfect synchrony hypothesis. The requirements-level semantics has been implemented in a verification tool. The tool interfaces with a model checker by translating an activity diagram into an input for a model checker according to the requirements-level semantics. The model checker checks the desired functional requirement against the input model. If the model checker returns a counterexample, the tool translates this counterexample back into the activity diagram by highlighting a path corresponding to the counterexample. The tool supports verification of workflow models that have event-driven behaviour, data, real time, and loops. Only model checkers supporting strong fairness model checking turn out to be useful. The feasibility of the approach is demonstrated by using the tool to verify some real-life workflow models

An integer programming based approach for diagnosing workflows

Workflow analysis is indispensable to capture modeling errors in workflow designs. While in the past several analysis approaches for workflows have been defined, these approaches do not give precise feedback, making it hard for a designer to pinpoint the exact cause of modeling errors. In this paper we introduce a novel approach for analyzing and diagnosing workflows based on integer programming (IP). Each workflow model is translated into a set of IP constraints. Faulty control flow connectors can be easily detected using the approach by relaxing the corresponding constraints. We show that this approach is correct, and illustrate it with realistic examples where the CPLEX tool is used to solve the IP formulations. Moreover, the approach is flexible and can be extended to handle a variety of new constraints, as well as to support new workflow patterns. Its features complement those of existing approaches

Comparing Refinements for Failure and Bisimulation Semantics

Refinement in bisimulation semantics is defined differently from refinement in failure semantics: in bisimulation semantics refinement is based on simulations between labelled transition systems, whereas in failure semantics refinement is based on inclusions between decorated traces systems. There exist however pairs of refinements, for bisimulation and failure semantics respectively, that have almost the same properties. Furthermore, each refinement in bisimulation semantics implies its counterpart in failure semantics, and conversely each refinement in failure semantics implies its counterpart in bisimulation semantics defined on the canonical form of the compared processes

Correlation energies beyond the random-phase approximation: ISTLS applied to spherical atoms and ions

The inhomogeneous Singwi, Tosi, Land and Sjolander (ISTLS) correlation energy functional of Dobson, Wang and Gould [PRB {\bf 66} 081108(R) (2008)] has proved to be excellent at predicting correlation energies in semi-homogeneous systems, showing promise as a robust `next step' fifth-rung functional by using dynamic correlation to go beyond the limitations of the direct random-phase approximation (dRPA), but with similar numerical scaling with system size. In this work we test the functional on fourteen spherically symmetric, neutral and charged atomic systems and find it gives excellent results (within 2mHa/$e^-$ except Be) for the absolute correlation energies of the neutral atoms tested, and good results for the ions (within 4mHa/$e^-$). In all cases it performs better than the dRPA. When combined with the previous successes, these new results point to the ISTLS functional being a prime contender for high-accuracy, benchmark DFT correlation energy calculations

Does Disclosure of Performance Information Influence Street-level Bureaucrats' Enforcement Style?

Governments use different regulatory instruments to ensure that businesses owners or "inspectees" comply with rules and regulations. One tool that is increasingly applied is disclosing inspectees' performance information to other stakeholders. Disclosing performance information has consequences for street-level bureaucrats because it increases the visibility of their day-to-day work. Using a survey (n =507) among Dutch inspectors of the Netherlands Food and Consumer Product Safety Authority, this article shows that the disclosure of performance information has an impact on enforcement style at the street level. Findings show that perceived disclosed performance information positively enhances all three dimensions of street-level bureaucrats' enforcement style (legal, facilitation, and accommodation). This effect is strongest for facilitation and accommodation and weakest for the legal style. Perceived resistance by inspectees partly explains this effect. Contrary to expectations, more perceived disclosure does not result in more but in less perceived resistance of inspectees by street-level bureaucrats