An extensible collaborative framework for monitoring software quality in critical systems

García-Valls, Marisol; Escribano-Barreno, Julio; García-Muñoz, Javier

doi:10.1016/j.infsof.2018.10.005

Cited by 5 publications

(3 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although some general purpose security guidelines for web based systems have appeared such as usage of end-to-end encrypted channels [6,17], certificate management [19], usage of appropriate browser policies [20,21], and many others; there is a lack of detailed analysis of particular software platforms used to develop servers. Collaborative and open source frameworks such as SonarQube have also been enhanced to support the improvement of the safety properties of the software [22] but still have not merged web interfacing in critical IoT software.…”

Section: Related Workmentioning

confidence: 99%

Improving Security of Web Servers in Critical IoT Systems through Self-Monitoring of Vulnerabilities

Song

García-Valls

2022

Sensors

Self Cite

View full text Add to dashboard Cite

IoT (Internet of Things) systems are complex ones that may comprise large numbers of sensing and actuating devices; and servers that store data and further configure the operation of such devices. Usually, these systems involve real-time operation as they are closely bound to particular physical processes. This real-time operation is often threatened by the security solutions that are put in place to alleviate the ever growing attack surface in IoT. This paper focuses on critical IoT domains where less attention has been paid to the web security aspects. The main reason is that, up to quite recently, web technologies have been considered unreliable and had to be avoided by design in critical systems. In this work, we focus on the server side and on how attacks propagate from server to client as vulnerabilities and from client to unprotected servers; we describe the concerns and vulnerabilities introduced by the intensive usage of web interfaces in IoT from the server templating engines perspective. In this context, we propose an approach to perform self monitoring on the server side, propagating the self monitoring to the IoT system devices; the aim is to provide rapid detection of security vulnerabilities with a low overhead that is transparent to the server normal operation. This approach improves the control over the vulnerability detection. We show a set of experiments that validate the feasibility of our approach.

show abstract

Section: Related Workmentioning

confidence: 99%

Improving Security of Web Servers in Critical IoT Systems through Self-Monitoring of Vulnerabilities

Song

García-Valls

2022

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

“…(2018), development of a simulation-based test environment for security-critical software; Khan et-al. (2011), Knowledge-Based System Modeling for Software Process Model Selection; García-Valls et-al. (2018), an extensible collaborative framework for monitoring software quality in critical systems and Babar et al, ES for a scalable software requirements prioritization process.…”

Section: Expert Systemsmentioning

confidence: 99%

Subjectivity reducing in software version criticality classification with the support of an expert system

Gatto

Sassi

2022

RSD

View full text Add to dashboard Cite

In the software version release management process, there is a need, on the part of human specialists, to classify the criticality of each software version. However, the subjectivity of this classification may be present according to the experience acquired by specialists over the years. To reduce subjectivity in the process, an Artificial Intelligence technique called Expert System (ES) can be applied to represent the knowledge of human specialists and use it in problem solving. Thus, the aim of this paper was to reduce the subjectivity in the criticality classification of the software version with the support of the Expert System. To this end, a questionnaire was developed with the objective of obtaining the criticality opinions classified as High, Medium and Low in each specialist's software version to assist in the preparation of the ES production rules. ES generated 17 production rules with a 100% confidence level applied to a production database. The results of the classification carried out by the ES corresponded to the classification carried out by the specialists in the production base, that is, the ES was able to represent their knowledge. Then, another questionnaire was applied to the specialists to verify the perception of satisfaction regarding the use of the ES with a result obtained of 4.8, considered satisfactory. It was concluded, then, that the ES supported the reduction of subjectivity in the classification of the criticality of software version.

show abstract

“…There are different design and development frameworks for critical systems that have to be applied considering not only the functional properties of the application-level logic, but also the non-functional properties of the whole software stack. Some frameworks exist like [38,63] that support web-based monitoring of critical software projects like the development of medical systems, including their set of libraries like the distribution middleware.…”

Section: Baselinementioning

confidence: 99%

An incomplete and biased survey on selected resource management for distributed applications as basis for interoperability of medical devices

Touahria

2018

Preprint

View full text Add to dashboard Cite

The popularity and wide spread of IoT technology has brought about a rich hardware infrastructure over which it is possible to run powerful applications that were not previously imagined. Among this infrastructure, there are the medical hardware that is progressively advancing but at a slower pace. Nevertheless, medical devices are more powerful now to run more sophisticated functions and applications and exchange big data with external systems in a secure and safe fashion. Towards the design of an architecture for interoperability of medical devices, this paper initially focuses on the background work that is taken by the author for this objective. The paper briefly describes the role of the software in the advances of medical systems and their possibilities for interoperability. It focuses attention on the distribution software layer that is responsible for connectivity, efficiency, and time-sensitivity in the basic operation of medical systems such as exchange of information and commands across devices and systems. The paper analyses a number of previous work on middleware (mostly performed at his research group and also in a broader research community), and pay especial attention to the middleware for web-based systems and how they relate to the development of distributed medical systems.

show abstract

An extensible collaborative framework for monitoring software quality in critical systems

Cited by 5 publications

References 13 publications

Improving Security of Web Servers in Critical IoT Systems through Self-Monitoring of Vulnerabilities

Improving Security of Web Servers in Critical IoT Systems through Self-Monitoring of Vulnerabilities

Subjectivity reducing in software version criticality classification with the support of an expert system

An incomplete and biased survey on selected resource management for distributed applications as basis for interoperability of medical devices

Contact Info

Product

Resources

About