Daniel Eduardo Riesco

A technique based on the OMG metamodel and OCL for the definition of object-oriented metrics applied to UML models

Summary form only given. The development of wide software systems is an activity that consumes great quantities of time and resources. Even with the increase of the automation in the software development activities, the resources stay scarce. As a consequence of this, there is a big interest in the metrics of software due to its potential for a better, more efficient use of the resources. Tools help and assist in the planning and in the estimation of the complexity of the applications to develop during different stage of a process. We describe a technique to define metrics using the OMG (Object Management Group) standard specification. The semantic in each metrics is specified formally with OCL (Object Constraint Language) based on OMG metamodels. For their concrete specification, we establish a series of steps that allows define uniformly each metric in the different RUP models. Furthermore, the present paper shows the use of metrics defined using this technique and the relation between data obtained from the application of the metrics to thirteen object oriented systems. They encompass projects from the capture of requirements until its implementation, showing the metrics applied in different stage of the deployment.

Including workflow concurrent modelling in an extension of the UML activity diagram metamodel

Summary form only given. A workflow is a business process whose execution is controlled in an automated fashion by a workflow management system (wms). A model of the process to be enacted is supplied to the wms through a specification known as process definition. The format of such definition has been standardized by the workflow management coalition (wfmc) with the purpose of satisfying the need of interaction and connectivity between process definition tools and different workflow systems. The workflow process definition standard is specified by a metamodel and the workflow process definition language (wpdl). Both are isomorphic. In business process modelling, the UML standard notation supports less details than the wfmc standard. A wpdl process definition may contain more information than UML activity diagrams. Therefore, a process specification based on activity diagrams does not satisfy the wfmc standard. We propose the integration of the wfmc and the UML standard, and provide a view of how this integration can be achieved through the extension of the UML activity diagram. The extension proposed neither modifies nor restricts the original UML standard. A model built with this extension is easily translated to the wpdl. We show the extension of the UML activity diagram to include the concepts of concurrency and synchronization of workflow processes. In this way, the process definition in UML activity diagram may be interpreted by any wms.

Model Based Evaluation of Cybersecurity Implementations

Evaluation of Cybersecurity implementations is an important issue that is increasingly being considered in the agenda of organisations. We present here a model for the evaluation of Cybersecurity requirements. We start by establishing a set of security requirements in the form of a hierarchical structure to obtain a requirement tree, as it is prescribed by the Logic Score of Preference (LSP) evaluation method. Security requirements have been taken from the ISO/IEC 27002 standard. This requirement tree and an aggregation structure, built into a later step, form our Cybersecurity evaluation model, which allows to obtain a numerical final result for each system under evaluation. These final indicators, ranging into the interval 0..100, clearly show the degree of compliance of the systems under evaluation with respect to the desired requisites.