Roberto Uzal

Integrating OCL expressions into RSL specifications

In this work, we go a step further in the integration of the RAISE specification language (RSL) and the unified modeling language (UML). On the basis of our previous work -where we showed how to derive an initial formal specification in RSL from a UML class diagram-we propose here the use of set of rules to transform object constraint language (OCL) expressions into RSL expressions. Class diagrams can be enhanced with annotated OCL invariants and the corresponding formalizations in RSL can be obtained. Property verification of the model described by the UML class diagram and OCL invariants can now take place on the derived RSL specification by using reasoning techniques supported by the RAISE method.

Model Based Evaluation of Cybersecurity Implementations

Evaluation of Cybersecurity implementations is an important issue that is increasingly being considered in the agenda of organisations. We present here a model for the evaluation of Cybersecurity requirements. We start by establishing a set of security requirements in the form of a hierarchical structure to obtain a requirement tree, as it is prescribed by the Logic Score of Preference (LSP) evaluation method. Security requirements have been taken from the ISO/IEC 27002 standard. This requirement tree and an aggregation structure, built into a later step, form our Cybersecurity evaluation model, which allows to obtain a numerical final result for each system under evaluation. These final indicators, ranging into the interval 0..100, clearly show the degree of compliance of the systems under evaluation with respect to the desired requisites.

A framework for the translation of extended workflow processes to Petri Net with Clocks

Workflow (Wf) has proven to be technology for the improvement of the businesses process. Interphase 1 of Wf allows the Wf processes definition (WPD). This definition does not have elements for the validation, in addition to the lack of temporal elements for time specifications. Our work approaches the theoretical frame for the WPD validation by means of Petri net with clocks (PNwC). This work presents, the correspondence between the WPD and a PNwC. The process definition analysis is made on the PNwC obtained by translation of the underlying process. The correspondence is specified by means of the RAISE specification language (RSL).