18364869
Threat-driven modeling and verification of secure software using aspect-oriented Petri nets
Design-level vulnerabilities are a major source of security risks in software. To improve trustworthiness of software design, this paper presents a formal threat-driven approach, which explores explicit behaviors of security threats as the mediator between security goals and applications of security features. Security threats are potential attacks, i.e., misuses and anomalies that violate the security goals of systems' intended functions. Security threats suggest what, where, and how security features for threat mitigation should be applied. To specify the intended functions, security threats, and threat mitigations of a security design as a whole, we exploit aspect-oriented Petri nets as a unified formalism. Intended functions and security threats are modeled by Petri nets, whereas threat mitigations are modeled by Petri net-based aspects due to the incremental and crosscutting nature of security features. The unified formalism facilitates verifying correctness of security threats against intended functions and verifying absence of security threats from integrated functions and threat mitigations. As a result, our approach can make software design provably secured from anticipated security threats and, thus, reduce significant design-level vulnerabilities. We demonstrate our approach through a systematic case study on the threat-driven modeling and verification of a real-world shopping cart application.
41800471
Ensuring Consistent Use/Misuse Case Decomposition for Secure Systems
14135016
A Study on Illumination Invariant Face Recognition Methods Based on Multiple Eigenspaces
This paper presents two multiple illumination eigenspaces-based methods, RDEB and BPNNB, for solving the variable illumination problem of face recognition. The experiment shows that the methods have a high recognition ratio. In particular, BPNNB has outperformed the assumptive method which knows the illumination directions of faces and completes recognition in the specific eigenspace using eigenface method[2] for each face subset with a specific illumination direction.
11130686
An Aspect-Oriented Approach to Security Requirements Analysis
This paper presents an aspect-oriented approach to integrated elicitation of functional and security requirements based on use case-driven development. We identify security threats with respect to use cases and adopt threat mitigations for preventing or reducing security threats. To capture crosscutting nature of threats and mitigations, we specify them as aspects that encapsulate pointcuts and advice. A threat (mitigation) pointcut is a collection of join points in use cases at which the use cases are threatened (secured); whereas threat/mitigation advice describes how a threat can become an attack (can be mitigated). Eliciting threats and mitigations as aspects provides a structured way for separating functional and security concerns
11698669
Modeling and verifying multi-agent behaviors using predicate/transition nets
In a multi-agent system, how agents accomplish a goal task is usually specified by multi-agent plans built from basic actions (e.g. operators) of which the agents are capable. A critical problem with such an approach is how can the designer make sure the plans are reliable. To tackle this problem, this paper presents a formal approach for modeling and analyzing multi-agent behaviors using Predicate/Transition (PrT) nets, a high-level formalism of Petri nets. We construct a multi-agent model by representing agent capabilities as transitions. To verify a multi-agent PrT model, we adapt the planning graphs as a compact structure for the reachability analysis. We also demonstrate that, based on the PrT model, whether parallel actions specified in multi-agent plans can be executed in parallel and whether the plans guarantee the achievement of the goal can be verified by analyzing the dependency relations among the transitions.
11509547
Illumination invariant face recognition based on neural network ensemble
An illumination invariant face recognition method based on neural network ensemble architecture is proposed. Given a face image with an arbitrary illumination direction, it can complete recognition in a uniform way with high performance without knowing or estimating the illumination direction. Experimental result shows that the recognition ratio of the ensemble architecture is higher than the conventional approach that uses a single neural network to recognize faces of a specific illumination direction.
342298
Nonlinear information aggregation via evidential reasoning in multiattribute decision analysis under uncertainty
In many decision situations, it is inevitable to deal with both quantitative and qualitative information under uncertainty. Evidence-based reasoning within a multiple criteria decision analysis framework provides an alternative way of handling such information systematically and consistently. In this paper, the evidential reasoning (ER) approach is introduced, which is based on a recursive ER algorithm that, in essence, constitutes a nonlinear information aggregation process. To facilitate the application of the ER approach and as an indispensable part of its development, the nonlinear features of the ER information aggregation process need to be thoroughly investigated and properly understood. This forms the theme of this paper where the nonlinear features are explored by examining typical reasoning patterns in aggregating harmonic, quasi-harmonic, and contradictory decision information. This analytical investigation provides insights into the recursive nature of the ER approach as well as valuable experience that could be useful to other researchers and practitioners interested in developing and applying operation research/artificial intelligence (OR/AI)-based approaches for decision analysis under uncertainty. The analytical study is complemented by the numerical studies of two application examples. The analysis of a quality assessment problem for motor engines is aimed to show the step-by-step process of implementing the ER approach and to illustrate its nonlinear features in a real-life decision situation. The study of a more complex assessment problem in ship design is intended to demonstrate the potential of the ER approach and its supporting software for dealing with general decision problems.
46223238
Environmental impact assessment using the evidential reasoning approach
Environmental impact assessment (EIA) problems are often characterised by a large number of identified environmental factors that are qualitative in nature and can only be assessed on the basis of human judgments, which inevitably involve various types of uncertainties such as ignorance and fuzziness. So, EIA problems need to be modelled and analysed using methods that can handle uncertainties. The evidential reasoning (ER) approach provides such a modelling framework and analysis method. In this paper the ER approach will be applied to conduct EIA analysis for the first time. The environmental impact consequences are characterized by a set of assessment grades that are assumed to be collectively exhaustive and mutually exclusive. All assessment information, quantitative or qualitative, complete or incomplete, and precise or imprecise, is modelled using a unified framework of a belief structure. The original ER approach with a recursive ER algorithm will be introduced and a new analytical ER algorithm will be investigated which provides a means for using the ER approach in decision situations where an explicit ER aggregation function is needed such as in optimisation problems. The ER approach will be used to aggregate multiple environmental factors, resulting in an aggregated distributed assessment for each alternative policy. A numerical example and its modified version are studied to illustrate the detailed implementation process of the ER approach and demonstrate its potential applications in EIA.
37194320
The evidential reasoning approach for multi-attribute decision analysis under interval uncertainty
Abstract The evidential reasoning (ER) approach is a method for multiple attribute decision analysis (MADA) under uncertainties. It improves the insightfulness and rationality of a decision making process by using a belief decision matrix (BDM) for problem modelling and the Dempster–Shafer (D–S) theory of evidence for attribute aggregation. The D–S theory provides scope and flexibility to deal with interval uncertainties or local ignorance in decision analysis, which is not explored in the original ER approach and will be investigated in this paper. Firstly, interval uncertainty will be defined and modelled in the ER framework. Then, an extended ER algorithm, IER, is derived, which enables the ER approach to deal with interval uncertainty in assessing alternatives on an attribute. It is proved that the original ER algorithm is a special case of the IER algorithm. The latter is demonstrated using numerical examples.
28175373
Mesh editing with poisson-based gradient field manipulation
In this paper, we introduce a novel approach to mesh editing with the Poisson equation as the theoretical foundation. The most distinctive feature of this approach is that it modifies the original mesh geometry implicitly through gradient field manipulation. Our approach can produce desirable and pleasing results for both global and local editing operations, such as deformation, object merging, and smoothing. With the help from a few novel interactive tools, these operations can be performed conveniently with a small amount of user interaction. Our technique has three key components, a basic mesh solver based on the Poisson equation, a gradient field manipulation scheme using local transforms, and a generalized boundary condition representation based on local frames. Experimental results indicate that our framework can outperform previous related mesh editing techniques.
7484569
The design of intelligent workflow monitoring with agent technology
In recent years, workflow technology has been widely used in business process management. With the increased complexity, uncertainty and risks in business operations, workflow monitoring is gaining growing attention in business process controlling and supervision. However, monitoring functions provided in traditional workflow systems lack flexibility, and provide little support for managing complex and dynamical changes in business process. In this paper, we propose a novel workflow monitoring approach, in which various intelligent agents work together to perform flexible monitoring tasks in an autonomous and collaborative way. By using customized monitoring plan and proactive monitoring process, the workflow monitoring activities can be executed flexibly and efficiently. The application of intelligent agents for such flexible, adaptive and collaborative workflow monitoring is investigated through an intelligent monitoring system in securities trading.