Assessment of a Framework for Designing and Evaluating Security Sensitive Architecture

In the past several years, autonomous driving turned out to be a target for many technical players. Automated driving requires new and advanced mechanisms to provide safe functionality and the increased communication makes automated vehicles more vulnerable to attacks. Security is already well-established in some domains, such as the IT sector, and now spills over to Automotive. In order to not reinvent the wheel, existing security methods and tools can be evaluated and adapted to be applicable in other domains, such as Automotive. In the European H2020 ECSEL project SECREDAS, this approach is followed and existing methods, tools, protocols, best practices etc. are analyzed, combined and improved to be applicable in the field of connected vehicles. To provide modular and reusable designs, solutions are collected in form of design patterns. The SECREDAS design patterns describe solution templates to solve security, safety and privacy issues related to automated systems. The grouping and classification of design patterns is important to facilitate the selection process which is a challenging task and weak classification schemes can be a reason for a sparse application of security patterns, which represent a subgroup of design patterns. This work aims to assist automotive software and systems engineers in adopting and using technologies available on the market. The SECREDAS security patterns are based on existing technologies, so-called Common Technology Elements, and describe how and where to apply them in context of connected vehicles by making a reference to a generic architecture. This allows developers to easily find solutions to common problems and reduces the development effort by providing concrete, trustworthy solutions. The whole approach and classification scheme is illustrated based on one example security pattern.

Model-Driven Security (Mds) has emerged for more than a decade to propose sound Md methodologies for supporting secure systems development. Yet, there is still a big gap before making Mds more easily applicable, and adoptable by industry. Most current Mds approaches have not extensively dealt with multiple security concerns but rather a specific one, e.g. authorization. Besides, security patterns which are based on domain-independent, time-proven security knowledge and expertise, can be considered as reusable security bricks upon which sound and secure systems can be built. But security patterns are not applied as much as they could be because developers have problems in selecting them and applying them in the right places, especially at the design phase. In this position paper, we propose an exploratory Mds approach based on a System of aspect-oriented Security design Patterns (shortly called SoSPa) in which security design patterns are collected, specified as reusable aspect models to form a coherent system of them that guides developers in systematically selecting the right security design patterns for the job. Our Mds approach allows the selected security design patterns to be automatically composed with the target system model. The woven secure system model can then be used for (partial) code generation, including (configured) security infrastructures.

Patterns encapsulate experience and good practices that can be used for new designs. Analysis and design patterns are well established as a convenient and reusable way to build high-quality object-oriented software. Security patterns join the extensive knowledge accumulated about security with the structure provided by patterns to provide guidelines for secure system design and evaluation. A variety of security patterns has been developed for the construction of secure systems. We survey the security patterns developed by our group and a few other researchers. We apply these patterns through a secure system development method based on a hierarchical architecture whose layers define the scope of each security mechanism. We are building a catalog of security patterns that helps in defining the security mechanisms at each architectural level and at each development stage. In addition to their value for new system design, security patterns are useful to evaluate existing systems by analyzing if they include specific patterns or not. They are also useful to compare security standards and to verify that products comply with the standard. Finally, we have found security patterns very valuable for teaching security concepts and mechanisms.KeywordsAccess ControlSecure SystemDesign PatternSecurity ModelSecurity MechanismThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

© 2015 IEEE. Security patterns are well-known solutions to security-specific problems. They are often claimed to benefit designers without much security expertise. We have performed an empirical study to investigate whether the usage of security patterns by such an audience leads to a more secure design, or to an increased productivity of the designers. Our study involved 32 teams of master students enrolled in a course on software architecture, working on the design of a realisticallysized banking system. Irrespective of whether the teams were using security patterns, we have not been able to detect a difference between the two treatment groups. However, the teams prefer to work with the support of security patterns.

Bispectral analysis (BIS) of the electroencephalogram (EEG) has been shown in retrospective studies to predict whether patients will move in response to skin incision. This prospective multicenter study was designed to evaluate the real-time utility of BIS in predicting movement response to skin incision using a variety of general anesthetic techniques. Three hundred patients from seven study sites received an anesthetic regimen expected to give an approximately 50% movement response at skin incision. EEG was continuously recorded via an Aspect B-500 monitor and BIS was calculated in real time from bilateral frontocentral channels displayed on the monitor. Half of the patients were randomized to a treatment group in which anesthetic drug doses were increased to produce a lower BIS. In the control group, BIS was recorded, but no action taken on the data displayed. A determination of movement in response to skin incision was made in the 2 min succeeding incision. Retrospective pharmacodynamic modeling was performed using STANPUMP to estimate effect-site concentrations of intravenously administered anesthetics. BIS values were significantly higher in the control group (66 +/- 19) versus the BIS-guided group, in which additional anesthesia was administered to produce a lower BIS (51 +/- 19). The movement response rate was significantly higher in the control group at 43% compared with 13% in the BIS-guided group, but response rates were low at sites which used larger doses of opioids. Logistic regression analysis showed that BIS, estimated opioid effect-site concentrations, and heart rate (in that order) were the best predictors of movement at skin incision. This study demonstrates that dosing anesthetic drugs to lower BIS values achieves a lower probability of movement in response to surgical stimulation. BIS is a significant predictor of patient response to incision, but the utility of the BIS depends on the anesthetic technique being used. When drugs such as propofol or isoflurane are used as the primary anesthetic, changes in BIS correlate with the probability of response to skin incision. When opioid analgesics are used, the correlation to patient movement becomes much less significant, so that patients with apparently "light" EEG profiles may not move or otherwise respond to incision. Therefore, the adjunctive use of opioid analgesics confounds the use of BIS as a measure of anesthetic adequacy when movement response to skin incision is used as the primary end point.

The feed value of sesame meal, a main agricultural by-product from the northern area of Gyeongsangbuk-do province, was assessed in Hanwoo steers. A total of twelve Hanwoo steers (average BW = 412.08 kg) were allocated into a Control (fed no sesame meal) or Treatment (fed sesame meal from 14.6 months of age) group, considering BW and ages, and the animals were fed for a total of 480 days. The final BW, total gain and ADG for the Control and Treatment groups were 741.17 kg and 762.67 kg, 331.84 kg and 347.84 kg, and 0.69 kg and 0.72 kg, respectively, showing better performances in sesame meal-fed animals. Feed requirements during the whole experimental period improved by feeding sesame meal (15.31 and 14.87 for Control and Treatment group, respectively). Hanwoo steers fed sesame meal also showed a 22.83 kg heavier cold carcass weight (424.17 kg and 447.00 kg in the Control and Treatment group, respectively), and 2.41% improved dressing percentages (58.60% and 57.22% for the Control and Treatment group, respectively). The area of the M. longissimus dorsi was 91.83 cm 2 and 88.33 cm 2 in the Control and Treatment group, respectively. The final yield of A and B grade meat were 50 : 50% and 33.3 : 66.7% from the Control and Treatment group, respectively. The average marbling score was 4.83 and 5.50, and the numeric values for quality grade was 2.17 and 2.67 for the Control and Treatment group, respectively, showing better beef quality in sesame meal-fed Hanwoo steers. In fact, there were two animals with beef quality 1 ++ in the sesame meal-fed group. The melting point of lipid extracted from the M. longissimus dorsi of Hanwoo steers was significantly (p<0.05) lower in the Treatment group (28.28℃) compared to the Control group (30.65℃). The composition of saturated fatty acids, C14:0 (myristic acid) and C16:0 (palmitic acid), were significantly lower in sesame meal-fed animals, 4.70% and 2.20% for myristic acid, and 30.55% and 27.12% for palmitic acid, in the Control and Treatment group, respectively. In contrast, there were no significant differences in C18:0 (stearic acid) composition between the groups. The composition of a representative unsaturated fatty acid, C18:1 (oleic acid), was significantly higher in Treatment animals (49.89%) than Control animals (44.29%) (p<0.05). The ratio of total monounsaturated fatty acids / saturated fatty acids; M/S) was 1.10 and 1.36 for the Control and Treatment groups, respectively, showing remarkably higher ratios in sesame meal-fed group. The content of glutamic acid, related to beef flavor, was significantly higher in the Treatment group (3.35 mg/100 g) compared to the Control group (1.88 mg/100g) (p<0.05). The tenderness score, evaluated by an eight-point scale in the panel test, and overall palatability (based on juiciness, flavor, oiliness, and umami) were significantly higher in the Treatment group (5.67 and 5.23, respectively) than the Control group (3.83 and 4.60, respectively) (p<0.05). In conclusion, the current results imply that sesame meal could serve as a good supplement for Hanwoo steers for producing high quality beef.

Obstructive jaundice is associated with high morbidity and mortality. Major complications such as pulmonary dysfunction, renal failure and sepsis are frequently encountered. Recent studies and observations suggest that the free oxygen radicals (FORs) produced in obstructive jaundice may play a significant role in the etiopathogenesis of acute renal failure (ARF). Thirty rats were divided into three groups, as sham, control and treatment groups containing 10 rats each. Laparatomy was performed on each animal in the control and treatment groups and common bile ducts were ligated. Common bile duct was observed but was not ligated for the rats in the sham group. Saline solution injection was begun on the first day of surgical procedure and repeated once a day during the following 5 days. The same procedure was performed with oxygen radical scavenger dimethyl sulfoxide (1.5 mg/kg/day i.p.) instead of saline in the treatment group. The rats were sacrificed on the 7th postoperative day. On the 7th postoperative day, the bilirubin, urea and creatinine levels of the control and treatment groups were significantly higher in comparison with the sham group (p < 0.01). Although there was no statistically significant difference between the bilirubin levels of the control and treatment groups (p > 0.05), the urea and creatinine levels in the treatment group were significantly lower (p < 0.01). On the 7th postoperative day, the erythrocyte superoxide dismutase (SOD) and glutathione peroxidase (GSH-Px) levels of the control and treatment groups were significantly lower than those of the sham group (p < 0.01), whereas renal and erythrocyte malondialdehyde (MDA) levels were significantly higher (p < 0.01). Although SOD and GSH-Px levels did not differ significantly between the treatment and control groups (p > 0.05), renal and erythrocyte MDA levels of the treatment group were significantly lower than those of the control group (p < 0.01). The histopathological scores were significantly higher in the control and treatment groups (p < 0.01); there was no significant difference between the control and treatment groups (p > 0.05). FORs seem to play a significant role in the etiopathogenesis of renal failure in obstructive jaundice. Antioxidant treatment may decrease oxidative damage due to FORs and may prevent renal failure.

Objective This study aimed to evaluate the effectiveness and safety of Fuzheng Xiaoji granule in patients with stage IIIC colorectal cancer. Methods A total of 150 patients with stage IIIC colorectal cancer treated in Shanghai Ruijin Hospital from January 2019 to January 2022 were selected. They were divided into treatment and control groups according to a 2 : 1 random number table. There were 100 cases in the treatment group and 50 cases in the control group. The treatment group was administered Fuzheng Xiaoji (FZXJ) granule, and the control group was administered the placebo orally. The primary endpoint was disease-free survival (DFS). In addition, after 6 months, the changes in Traditional Chinese Medicine (TCM) symptom score (fatigue, emotional depression, chest tightness, insomnia, anorexia, abdominal distension, abdominal pain, soreness and weakness in the waist and legs, chills, and dysphoria in the chest, palm, and soles) were compared. Results The DFS was 34.37 ± 2.91 months in the control group and 37.0 ± 1.08 months in the treatment group (p < 0.05). Compared with the control group, the treatment group showed less fatigue, abdominal distension, and soreness and weakness in the waist and legs (p < 0.05), significantly. The scores of emotional depression and anorexia decreased obviously, with a significant difference between the control and treatment groups (p < 0.01). There were no significant differences between the control and treatment groups in the incidence of chest tightness, insomnia, abdominal pain, chills, and dysphoria in the chest, palm, and soles (p > 0.05). Conclusion Fuzheng Xiaoji granule can improve patients' symptoms and prolong the DFS.

Regression testing can be systematically applied at the software architecture level in order to reduce the cost of retesting modified systems, and also to assess the regression testability of the evolved system. With the advent of model-based specification and analysis of software architectures, regression testing at the architectural level can be handled by analyzing how the architectural model evolves when moving from an initial to a subsequent version. This paper analyzes how model differencing, a recent research topic in the model-based community, can be employed for implementing model-based architecture-level regression testing.

Scaling up software architecture analysis

In this paper, we develop a specification-based, process-aware, Intrusion Detection System (IDS) for complex Industrial Control Systems (ICSs). Complex ICSs are distributed and hierarchical control systems built on top of local control loops which are the system's elementary building blocks. Process-aware attacks are sophisticated cyberattacks that aim to compromise the safety of the controlled physical process.Our approach aims to link safety specifications and security properties. Thus, we use international and industry standards specifications concerning local safety, global safety and networks of the industrial process, in order to obtain security properties. The obtained security properties are cybersecurity related requirements. They are translated into security patterns in order to be runtime monitored by our network IDS. This latter relies on a distributed monitoring framework, capturing network traffic between the local loops and the distributed control level, as well as between distributed control and supervisory control. We implemented and evaluated our IDS on a real ICS. We experimentally show that our IDS detects a large spectrum of attacks. We also show that our distributed IDS is scalable since its detection response time as a function of the number of monitored security patterns, is linear. A demonstrator comprising code extracts is made available.

The effects of probiotic administration were studied in an experiment, using 120 newborn calves. Calves were randomly assigned to two experimental groups (sixty calves for each group) and probiotic (0.25 g h(-1) day(-1)) was added in their daily milk intake until 90 days of age. After the first week, all calves (including control group) received starter ration containing 21.0% crude protein and 3.0% crude fat. Body weight gain, body height and general health condition of all calves were observed at day 30, 60 and 90. Also condition of feces was examined daily and the occurrence of diarrhea was recorded throughout the experiment. Mean values of weight gain during three successive months for treatment and control groups were 57.52 and 50.58 kg, respectively. Body weight gained was not significantly different for first and second mo between treatment and control groups (16.9 and 33.87 vs. 14.49 and 33.07 for fist and second months in treatment and control groups, respectively). However, these values were significantly different (p < 0.001) between treatment (57.52) and control (50.58) groups third months of age. Diarrhea was observed in 35 calves of control group, which was higher than 11 cases in calves treated with probiotic (p < 0.001). The body height values of control and treatment groups in three successive months were 5.49, 10.82 and 15.00 cm for control and 5.44, 9.25 and 15.75 cm for treatment groups in first, second and third mo, respectively, which showed no significant difference between two groups during this study. The results of this study indicated that present probiotic compound have beneficial effects, especially on the third month of age in rearing calves.

Software performance based on performance models can be applied at early phases of the software development cycle to characterize the quantitative behavior of software systems. We propose an approach based on queueing networks models for performance prediction of software systems at the software architecture level, specified by UML. Starting from annotated UML Use Case, Activity and Deployment diagrams we derive a performance models based on multichain and multiclass Queueing Networks (QN). The UML model is annotated according to the UML Profile for Schedulability, Performance and Time Specification. The proposed algorithm translates the annotated UML specification into QN performance models, which can then be analyzed using standard solution techniques. Performance results are reported back at the software architecture level in the UML diagrams. As our approach can be fully automated and uses standard UML annotations, it can be integrated with other performance modeling approaches. Specifically, we discuss how this QN-based approach can be integrated with an existing simulation-based performance modeling tool.

Laparoscopy approach to cholecystectomy has shortened the recovery period, reducing discharge times from 1 to 3 days to same-day discharge. We hypothesize that the use of more than one modality to prevent postoperative pain may be more efficacious than single modality. Patients were randomized to a treatment (n = 24) or control (n = 25) group and studied using a prospective, double-blind design. Preoperatively, at 45 min before induction of anesthesia, the treatment group received an intramuscular (IM) bolus injection of meperidine 0.6 mg/kg and ketorolac 0.5 mg/kg. The control group received two bolus IM injections of placebo (normal saline). Ten minutes before incision, local anesthesia (treatment group) or saline (control group) was infiltrated into the skin of each patient. Anesthetic management, postoperative pain, and nausea treatment were standardized. Pain and nausea assessment were done 1 h preoperatively, 0, 0.5, 1, 2, 3, and 4 h postoperatively, at discharge, and 10, 24, and 48 h postoperatively. Patients were discharged by scoring criteria. Postoperatively, significantly more patients in the treatment group were without pain on arrival in the postanesthesia care unit (PACU), 12/21 (57.1%) vs 1/24 (4.2%) in the control group (P < 0.001). Similarly, the severity of pain was sixfold less in the treatment group than in the control group. The incidence of nausea in the PACU was significantly less in the treatment group; 4.7% vs 29.5% in the control group (P < 0.05). Patients from the treatment group satisfied Postanesthesia Discharge Score significantly earlier than those in the control group (281 +/- 12 min vs 375 +/- 19 min; P < 005). The concomitant use of local anesthetic and nonsteroidal antiinflammatory and opioid drugs proved to be highly effective in our patients, resulting in faster recovery and discharge. (Anesth Analg 1996;82:44-51)

The aims of the present study were to investigate the effect of altrenogest treatment from 109 to 112 days of gestation in combination with double intramuscularly�of PGF2alpha administrations�at 113 days of gestation on the variation of farrowing in sows and its side effects on the sow colostrum yield, colostrum IgG, newborn piglet characteristics and piglet survival rate until seven days of postnatal life. In total, 193�sows were randomly allocated according to parity number into two groups, i.e. control (n = 95) and treatment (n = 98). The control sows were allowed to farrow naturally. The treatment sows were orally administered 20 mg per day of altrenogest for 4 days from 109 to 112 days of gestation and were administered PGF2alpha twice on day 113 of gestation. Individual body weight at birth and at 24 h after birth of piglets in all the litters were determined in both control (n = 1,609) and treatment (n = 1,707) groups. Colostrum consumption of all the piglets and colostrum yield of sows were estimated. Colostrum IgG at 0, 6 and 24 h postpartum and serum progesterone before and after farrowing were determined. Piglet survival rate until 3 days and 7 days of postnatal life were evaluated. On average, total number of piglets born and number of piglets born alive per litter were 17.0 ? 3.1 and 15.4 ? 3.0, respectively. The proportion of sows farrowed before 114 days of gestation in control was higher than treatment groups (8.4% and 2.0%, respectively, P = 0.05) and 92.8% of sows in the treatment group farrow on day 114 of gestation. The proportion of sows farrowed during working hours in control was lower than treatment groups (50.5% and 65.3%, respectively, P = 0.038). The percentage of stillborn piglets per litter did not differ significantly between in control and treatment groups (4.5% and 4.6%, respectively). Colostrum yield of sows did not differ between treatment and control group (5.28 ? 0.12 kg�and 5.52 ? 0.13 kg, respectively, P = 0.174). However, colostrum intake of piglets in the treatment was lower than control groups (357.0�? 6.6 g and 381.2 ? 7.0 g, respectively, P = 0.012). Colostrum IgG in the control was higher than treatment groups (41.2 ? 1.1 and 37.3 ? 1.0 mg per ml, respectively, P = 0.013). In conclusion, altrenogest treatment from 109 to 112 days and double PGF2alpha administrations on day 113 of gestation can reduce early parturition and can control gestation length in sows. No deleterious effect of this protocol on either the incidence of stillbirths or sow colostrum yield were detected. However, the piglet colostrum intake and colostrum IgG in the treatment groups were lower than control. Thus, intensive care of newborn piglets in the treatment group should be considered.