Skip to main content

Lars Grunske

Universität Stuttgart, Institut für Softwaretechnologie, Faculty Member

Followers

63

Following

12

Co-authors

6

Public Views

Interests

Uploads

Papers by Lars Grunske

A Graphical Specification of Model Transformations with Triple Graph Grammars

by Michael Lawley and Lars Grunske

Lecture Notes in Computer Science, 2005

Models and model transformations are the core concepts of OMG's MDA T M approach. Within this app... more Models and model transformations are the core concepts of OMG's MDA T M approach. Within this approach, most models are derived from the MOF and have a graph-based nature. In contrast, most of the current model transformations are specified textually. To enable a graphical specification of model transformation rules, this paper proposes to use triple graph grammars as declarative specification formalism. These triple graph grammars can be specified within the FUJABA tool and we argue that these rules can be more easily specified and they become more understandable and maintainable. To show the practicability of our approach, we present how to generate Tefkat rules from triple graph grammar rules, which helps to integrate triple graph grammars with a state of a art model transformation tool and shows the expressiveness of the concept.

Lightweight Adaptive Filtering for Efficient Learning and Updating of Probabilistic Models

2015 IEEE/ACM 37th IEEE International Conference on Software Engineering, 2015

Test data generation with a Kalman filter-based adaptive genetic algorithm

Journal of Systems and Software, 2014

Software testing is a crucial part of software development. It enables quality assurance, such as... more Software testing is a crucial part of software development. It enables quality assurance, such as correctness, completeness and high reliability of the software systems. Current state-of-the-art software testing techniques employ search-based optimisation methods, such as genetic algorithms to handle the difficult and laborious task of test data generation. Despite their general applicability, genetic algorithms have to be parameterised in order to produce results of high quality. Different parameter values may be optimal for different problems and even different problem instances. In this work, we introduce a new approach for generating test data, based on adaptive optimisation. The adaptive optimisation framework uses feedback from the optimisation process to adjust parameter values of a genetic algorithm during the search. Our approach is compared to a state of the art test data optimisation algorithm that does not adapt parameter values online, and a representative adaptive optimisation algorithm, outperforming both methods in a wide range of problems.

Dynamic QoS Management and Optimization in Service-Based Systems

by Giordano Tamburrelli and Lars Grunske

IEEE Transactions on Software Engineering, 2000

Service-based systems that are dynamically composed at run time to provide complex, adaptive func... more Service-based systems that are dynamically composed at run time to provide complex, adaptive functionality are currently one of the main development paradigms in software engineering. However, the Quality of Service (QoS) delivered by these systems remains an important concern, and needs to be managed in an equally adaptive and predictable way. To address this need, we introduce a novel, tool-supported framework for the development of adaptive service-based systems called QoSMOS (QoS Management and Optimisation of Service-based systems). QoSMOS can be used to develop service-based systems that achieve their QoS requirements through dynamically adapting to changes in the system state, environment and workload. QoSMOS service-based systems translate high-level QoS requirements specified by their administrators into probabilistic temporal logic formulae, which are then formally and automatically analysed to identify and enforce optimal system configurations. The QoSMOS self-adaptation mechanism can handle reliability-and performance-related QoS requirements, and can be integrated into newly developed solutions or legacy systems. The effectiveness and scalability of the approach are validated using simulations and a set of experiments based on an implementation of an adaptive service-based system for remote medical assistance.

Co-Evolution of Software Architecture and Fault Tree Models: An Explorative Case Study on a Pick and Place Factory Automation System

by Sinem Getir and Lars Grunske

Safety-critical systems are subject to rigorous safety analyses, e.g., hazard analyses. Fault tre... more Safety-critical systems are subject to rigorous safety analyses, e.g., hazard analyses. Fault trees are a deductive technique to derive the combination of faults which cause a hazard. There is a tight relationship between fault trees and system architecture as the components contain the faults and the component structure influences the fault combinations. In this paper, we describe an explorative case study on multiple evolution scenarios of a factory automation system. We report on the evolution steps on the system architecture models and fault trees and how the evolution steps in the different models relate to each other.

Generalizable safety annotations for specification of failure patterns

by Yiannis Papadopoulos and Lars Grunske

Software - Practice and Experience, 2010

Components in programmable systems often exhibit patterns of failure that are independent of func... more Components in programmable systems often exhibit patterns of failure that are independent of function or system context. In this paper, we show that it is possible to capture, and reuse where appropriate, such patterns for the purposes of system safety analysis. We describe a language that enables abstract specification of failure behaviour and define the syntax and semantics of this language. The language extends concepts originally defined in HiP-HOPS, a technique that enables a largely automated form of compositional system safety analysis. The paper describes how this language can be used to describe component failure patterns and demonstrates how it can be applied using a simple fuel system example. The approach is evaluated on a set of retrospective industrial case studies, where data-mining and reverse engineering techniques are applied in order to identify hidden patterns in legacy safety analyses. Results show clear potential for practical use of patterns in HiP-HOPS. We argue that careful specification and reuse of failure patterns in conjunction with a tool that automates Fault Tree and Failure Modes and Effects Analysis can help to simplify complex safety assessments. Copyright © 2010 John Wiley & Sons, Ltd.

Model-Driven Safety Evaluation with State-Event-Based Component Failure Annotations

by Yiannis Papadopoulos, Bernhard Kaiser, and Lars Grunske

Over the past years, the paradigm of component-based software engineering has been established in... more Over the past years, the paradigm of component-based software engineering has been established in the construction of complex mission-critical systems. Due to this trend, there is a practical need for techniques that evaluate critical properties (such as safety, reliability, availability or performance) of these systems. In this paper, we review several high-level techniques for the evaluation of safety properties for component-based systems and we propose a new evaluation model (State Event Fault Trees) that extends safety analysis towards a lower abstraction level. This model possesses a state-event semantics and strong encapsulation, which is especially useful for the evaluation of component-based software systems. Finally, we compare the techniques and give suggestions for their combined usage.

An Outline of an Architecture-Based Method for Optimizing Dependability Attributes of Software-Intensive Systems

by Peter Lindsay, Yiannis Papadopoulos, and Lars Grunske

Dependability requirements such as safety and availability often conflict with one another making... more Dependability requirements such as safety and availability often conflict with one another making the development of dependable systems challenging. It is not always possible to design a system that fulfils all of its dependability requirements and consequently, it is necessary to identify conflicts early in the development process and to optimize the architectural design with regard to dependability and cost. This paper first provides an overview of fifteen different approaches to optimizing system designs at an architectural level. Then an abstract method is proposed that synthesises the main points of the different approaches to yield a generic approach that could be applied across a wide variety of different system attributes.

A comparative study into architecture-based safety evaluation methodologies using AADL's error annex and failure propagation models

… Symposium, 2008. HASE 2008. 11th IEEE, Jan 1, 2008

Early quality evaluation and support for decisions that affect quality characteristics are among ... more Early quality evaluation and support for decisions that affect quality characteristics are among the key incentives to formally specify the architecture of a software-intensive system. The Architecture Analysis and Description Language (AADL) with its Error Annex is a new and promising architecture modeling language that supports analysis of safety and other dependability properties. This paper reviews the key concepts that are introduced by the Error Annex, and compares it to the existing safety evaluation techniques regarding its ability in providing modeling, process and tool support. Based on this review and the comparison, its strengths and weaknesses are identified and possible improvements for the model-driven safety evaluation methodology based on AADL's Error Annex are highlighted.

Transformational patterns for the improvement of safety properties in architectural specification

… PROCEEDINGS OF THE SECOND, THIRD AND …, Jan 1, 2003

Timed behavior trees for failure mode and effects analysis of time-critical systems

Journal of Systems and Software, Jan 1, 2008

Behavior Trees are a graphical notation used for formalising functional requirements, and have be... more Behavior Trees are a graphical notation used for formalising functional requirements, and have been successfully applied to several industrial case studies. However, the standard notation does not support the concept of time, and consequently its application is limited to non-real-time systems. To overcome this limitation we extend the notation to timed Behavior Trees. We provide an operational semantics which is based on timed automata, and thus serves as a formal basis for the translation of timed Behavior Trees into the input notation ...

Formalizing architectural refactorings as graph transformation systems

… and Parallel/Distributed Computing, 2005 and …, Jan 1, 2005

Architectural refactorings are an appropriate technique for the development and improvement of ar... more Architectural refactorings are an appropriate technique for the development and improvement of architectural specifications. However, these refactorings are often applied manually. This paper presents a mapping of an architectural specification language to a hypergraph-based data structure. Thus, architectural refactorings can be formalized as hypergraph transformation rules and can be applied automatically.

Monitoring probabilistic properties

Proceedings of the the 7th joint meeting of the …, Jan 1, 2009

Monitoring allows for checking if a system fulfils its requirements at runtime. This is required ... more Monitoring allows for checking if a system fulfils its requirements at runtime. This is required for quality assurance purposes. Currently several approaches exist to monitor standard and timing properties. However, a current challenge is to provide a comprehensive approach for monitoring probabilistic properties, as they are used to formulate performance, reliability, safety, and availability requirements. The main problem of these probabilistic properties is that there is no binary acceptance condition. To overcome this problem, this paper describes a monitoring approach called ProMo that is based on acceptance sampling and sequential hypothesis testing. This approach is validated based on several experiments that have been performed on an example system which provides medical assistance in remote areas.

Probabilistic timed behavior trees

… of the 6th international conference on …, Jan 1, 2007

Dynamic QoS management and optimisation in service-based systems

Software …, Jan 1, 2010

Service-based systems that are dynamically composed at run time to provide complex, adaptive func... more Service-based systems that are dynamically composed at run time to provide complex, adaptive functionality are currently one of the main development paradigms in software engineering. However, the Quality of Service (QoS) delivered by these systems remains an important concern, and needs to be managed in an equally adaptive and predictable way. To address this need, we introduce a novel, tool-supported framework for the development of adaptive service-based systems called QoSMOS (QoS Management and Optimisation of Service-based systems). QoSMOS can be used to develop service-based systems that achieve their QoS requirements through dynamically adapting to changes in the system state, environment and workload. QoSMOS service-based systems translate high-level QoS requirements specified by their administrators into probabilistic temporal logic formulae, which are then formally and automatically analysed to identify and enforce optimal system configurations. The QoSMOS self-adaptation mechanism can handle reliability-and performance-related QoS requirements, and can be integrated into newly developed solutions or legacy systems. The effectiveness and scalability of the approach are validated using simulations and a set of experiments based on an implementation of an adaptive service-based system for remote medical assistance.

Specification and evaluation of safety properties in a component-based software engineering process

Component-Based Software …, Jan 1, 2005

Over the past years, component-based software engineering has become an established paradigm in t... more Over the past years, component-based software engineering has become an established paradigm in the area of complex software intensive systems. However, many techniques for analyzing these systems for critical properties currently do not make use of the component orientation. In particular, safety analysis of component-based systems is an open field of research. In this chapter we investigate the problems arising and define a set of requirements that apply when adapting the analysis of safety properties to a component-based software engineering process. Based on these requirements some important component-oriented safety evaluation approaches are examined and compared.

Automatic generation of analyzable failure propagation models from component-level failure annotations

Quality Software, 2005.(QSIC 2005). …, Jan 1, 2005

Model-driven and component-based software engineering methodologies are currently key factors for... more Model-driven and component-based software engineering methodologies are currently key factors for the successful construction of complex software systems. To effectively apply these methodologies to mission-and safety-critical systems, component-based models should also support hazard analysis techniques and enable the automatic construction of safety cases. This paper outlines a technique, which annotates components with modular failure mode assumptions, described in the Failure Propagation Transformation Notation (FPTN) and generates an analyzable failure propagation model for the complete system. Based on this technique, a model-based safety evaluation is possible, which enables the automatic generation of safety cases based on system models. Consequently, a consistency between the safety case and the system model can be ensured, even if the system's architecture is changed.

Towards an integration of standard component-based safety evaluation techniques with saveCCM

Quality of Software Architectures, Jan 1, 2006

To deliver complex functionalities in a cost effective manner, embedded software should ideally b... more To deliver complex functionalities in a cost effective manner, embedded software should ideally be developed with standardized interoperable components. At the same time, most of these embedded systems must be demonstrably safe and reliable. This paper aims to extend SaveCCM, a modelling language for component-based embedded systems, with standard safety evaluation models. Based on this extension, failure and hazard probabilities can be estimated early in the development process and can be used to check if a system can fulfil its safety requirements. The procedure of the safety evaluation is demonstrated with the case study of a computer assisted braking system.

Safety analysis of an airbag system using probabilistic FMEA and probabilistic counterexamples

… of Systems, 2009. …, Jan 1, 2009

Failure mode and effects analysis (FMEA) is a technique to reason about possible system hazards t... more Failure mode and effects analysis (FMEA) is a technique to reason about possible system hazards that result from system or system component failures. Traditionally, FMEA does not take the probabilities with which these failures may occur into account. Recently, this shortcoming was addressed by integrating stochastic model checking techniques into the FMEA process. A further improvement is the integration of techniques for the generation of counter examples for stochastic models, which we propose in this paper. Counter examples facilitate the redesign of a potentially unsafe system by providing information which components contribute most to the failure of the entire system. The usefulness of this novel approach to the FMEA process is illustrated by applying it to the case study of an airbag system provided by our industrial partner, the TRW Automotive GmbH.

Model-driven safety evaluation with state-event-based component failure annotations

Component-Based Software …, Jan 1, 2005

Over the past years, the paradigm of component-based software engineering has been established in... more Over the past years, the paradigm of component-based software engineering has been established in the construction of complex mission-critical systems. Due to this trend, there is a practical need for techniques that evaluate critical properties (such as safety, reliability, availability or performance) of these systems. In this paper, we review several high-level techniques for the evaluation of safety properties for component-based systems and we propose a new evaluation model (State Event Fault Trees) that extends safety analysis towards a lower abstraction level. This model possesses a state-event semantics and strong encapsulation, which is especially useful for the evaluation of component-based software systems. Finally, we compare the techniques and give suggestions for their combined usage.