(Informative) D-Case D-Case [1] D-Case ( DEOS: 2014) D-Case GSN (Goal Structuring Notation)[2] D-Case GSN [2] [2] D-Case D-Case [2] [3] D-Case GSN D-C

Size: px

Start display at page:

Download "(Informative) D-Case D-Case [1] D-Case ( DEOS: 2014) D-Case GSN (Goal Structuring Notation)[2] D-Case GSN [2] [2] D-Case D-Case [2] [3] D-Case GSN D-C"

えみこやぎ
5 years ago
Views:

1 !"#$%&&'()*+)',$'-$.#/#,0*1)2)+3$4,5),##6),5$-'6$7/#,$83&+#9& D-Case * 1 DEOS D-Case * *1 version 1.0 *2 : ( matsuno.yutaka@nihon-u.ac.jp) ( takai@is.naist.ac.jp) c Yutaka Matsuno, Toshinori Takai

2 (Informative) D-Case D-Case [1] D-Case ( DEOS: 2014) D-Case GSN (Goal Structuring Notation)[2] D-Case GSN [2] [2] D-Case D-Case [2] [3] D-Case GSN D-Case GSN ( ) 1 D-Case 2 D-Case 3 D-Case XML Schema 4 1 D-Case (Normative) D-Case 1 UML ( ) (Informative) 1.1 id id string id ( ), ( Goal): ( Strategy): ( Context): * 1 *1 GSN Community Standard [2] 8 1

3 1 D-Case (Informative) ( Evidence Solution): ( Undeveloped): Evidence GSN Community Standard[2] Solution Evidence DEOS Evidence 2 D-Case Editor( *2 ) G 1, S 1, E 1 id System is Dependable 1.2 *2 2

4 2 (Informative) (Supported by) : (In Context Of) : 3 (Informative) 1, (Normative) D-Case (Normative) 3

5 2 (Normative) OMG SACM(Structured Assurance Case Metamodel)[4] 4 Astah/GSN undeveloped undeveloped 4 Astah/GSN Undeveloped (Informative) 2 D-Case 2.1, 2.2, 2.3, 2.4 4

6 2.1 GSN D-Case (Normative) GSN[2] D-Case D-Case [3] D-Case id flag : bool D-Case GSN [2] ( Justification): ( Assumption): ( Module): ( Contract): 5 D-Case Editor (Inter-module notation) 5 GSN [2] (Informative) D-Case ( Monitor): ( Action): ( External): ( Pattern): ( Responsibility): id : string 5

7 : string : string (Inter-module notation) D-Case D-Case Editor ( 6) 6 D-Case (Informative) GSN, GSN ( 3, 4) 3 GSN, D-Case G St Ct Ev U J As Md Mo Ac Ex P (G) (St) (Ct) (Ev) (U) (J) (As) (Md) (Mo) (Ac) (Ex) (P) D-Case [3] GSN 6

8 4 GSN, D-Case G St Ct Ev U J As Md Mo Ac Ex P (G) (St) (Ct) (Ev) (U) (J) (As) (Md) (Mo) (Ac) (Ex) (P) 1 GSN (Normative) T ::= (g, ) (g, e) (g, st, (T 1,..., T n )) g st e ( ) GSN ( ) (g, ) g GSN (g, e) g e GSN (g, st, (T 1,..., T n )) g st GSN T 1,..., T n 2.2 (Normative) D-Case [2] (Parameter) (Multiplicity) (Loop) (Choice) 2 GSN P (Normative) d ::= ϵ [x : τ = v] P ::= α (g,, d) (g, e, d) (g, st, (P 1,..., P n ), d) (g, st, c[i, j](p 1,..., P n ), d) (g, st, m[i, j](p ), d) µα.p [x : τ = v] x : τ v (g, st, c)[i, j](p 1,..., P n ), d) P 1,..., P n i k j k g st 7

9 (g, st, m[i, j](p ), d) i k j k P g st µα.p P α µα.p P 1 P 2 ( 7) P 1 P 2 (g,, [x : τ = ]) (g, e, [x : τ = ]) (g, st, (P 1,..., P n ),[x : τ = ]) v (g[v/x],, [x : τ = v]) v (g[v/x], e[v/x], [x : τ = v]) v (g[v/x], st[v/x], (P 1 [v/x],..., P n [v/x]), [x : τ = v]) (g, st, c[i, j](p 1,..., P n ), d) {s 1,...,s k } (g, st, (P s1,..., P sk ), d) (g, st, m[i, j](p ), d) k (g, st, (P,..., P ), d) (P repeats k times) µα.p µ P [µα.p/α] µα.p 7 P 1 P 2 (Normative) D-Case GSN : i, j: Subtype i, j : D-Case Editor [3] (Informative) P 1 = (g 1, st 1, m[1, 3]((g 2, e 2, [F unctionname : string = ]))) g 1 = System is dependable, st 1 = Argument over functions, g 2 = [ ] is dependable, e 2 = Evidence for [ ]. P 1 D-Case Editor 8 P (Normative) GSN M (Normative): M ::= (T, f) T GSN f f true GSN T T ::= (g, ) (g, e) (g, st, (T 1,..., T n )) M ref(m) away(m.g) 8

10 8 (Informative) 9 (Informative) 9

11 ref(m) away(m.g) [2] away goal M g GSN away goal flag true M (Normative) M = {M 1,..., M n }. Inter-module notation[2]i M Control Flow Graph (Normative) I = (M, cr ) cr M 2 M 1 M 1, M 2 M M 1 cr M 2 I M 1 cr M 2 I cr M 1 M 2 GSN M 1 M 2 cr M 1 M 2 GSN (Informative) M dependability = (T 1, f 1 ), M security = (T 2, f 2 ) T 1 = (g 1, st 1, ((g 2, e 2 ), M security.g 3 )) T 2 = (g 3, e 3 ) T 1 T 2 10 T 1 G 3 away goal( ) T 2 G 1 10 GSN T 1 (M dependability ) T 2 (M security )(Informative) ( ) M = {M dependability, M security } Inter-module notation M 1 M 2 10

12 11 M dependability M security Inter-module notation(informative) 2.4 GSN (Normative) D-Case GSN GSN GSN(defeasible GSN, dgsn) GSN [5] 3 GSN T (defeasible GSN, dgsn)(normative) T ::= (G, ) (G, (A 1,..., A n )) A ::= E (ST, (T 1,..., T m )) G ::= (g, presumption) (g, except) ST ::= (st, pro) (st, con) E ::= (e, pro) (e, con) T GSN A GSN G ST E g st e 1 1 GSN 11

13 1. 2. presumption except 3. pro con 4. pro con 12 dgsn presumption except dgsn presumption presumption pro con dgsn pro pro con dgsn pro GSN ((G1, presumption), ((S1, pro), (((G2, presumption), (Sn1, pro)), ((G3, presumption), (Sn2, pro)))), ((S2, pro), (((G4, presumption), (Sn3, pro)), ((G5, presumption), (Sn4, pro))))) 12 presumption pro G1 S1 S2 GSN ((G1, presumption), ((S1, pro), (((G2, presumption), (Sn1, pro)), ((G3, presumption), (Sn2, pro)), ((G4, except), ((S2, pro), ((G5, presumption), (Sn3, pro))), ((S3, con), ((G6, presumption), (Sn4, pro))))))) 13 G4 except S1 except S3 con G4 con 12

14 図 12 一つのゴールに複数のストラテジを持つ GSN の例 (Informative) 図 13 撤回可能 GSN の例 (Informative) 回可能 GSN においては各ノードに対して受理や却下保留などの状態を決定することができるが本稿では構文を与えることを主な目的としているためここでは省略する詳しくは文献 [5] を参照してほしい 13

15 3 D-Case XML Schema 3.1 D-Case XSD D-Case XML (Normative) <?xml version="1.0" encoding="utf-8"?> <xs:schema targetnamespace= " elementformdefault="qualified" xmlns=" xmlns:xs= " <xs:import namespace=" schemalocation="dre.xsd"/> <xs:element name="dcase"> <xs:complextype> <xs:sequence> <xs:element name="description" type="xs:string" maxoccurs="1" minoccurs="1" /> <xs:element name="properties" type="propertiestype" /> <xs:element name="parameters" type= "ParametersType" maxoccurs="1" minoccurs="0"/> <xs:element name="responsibility" type= "ResponsibilityType" maxoccurs="1" minoccurs="0"/> <xs:element name="nodes" maxoccurs="1" minoccurs="1"> <xs:complextype> <xs:sequence> <xs:element name="node" minoccurs="0" maxoccurs="unbounded"> <xs:complextype> <xs:sequence> <xs:element name="description" type="xs:string" maxoccurs="1" minoccurs="1" /> <xs:element name="properties" minoccurs="1" maxoccurs="1" type="propertiestype"/> <xs:element name="parameters" type="parameterstype" maxoccurs="1" minoccurs="0"/> <xs:element name="responsibility" type="responsibilitytype" maxoccurs="1" minoccurs="0"/> <xs:element name="d-script" minoccurs="0" maxoccurs="1"/> </xs:sequence> <xs:attribute name="name" type="xs:string" use="optional" /> <xs:attribute name="type" use="required"> <xs:simpletype> <xs:restriction base="xs:string"> <xs:enumeration value="goal" /> <xs:enumeration value="strategy" /> <xs:enumeration value="evidence" /> <xs:enumeration value="undeveloped" /> <xs:enumeration value="context" /> <xs:enumeration value="monitor" /> <xs:enumeration value="justification" /> 14

16 <xs:enumeration value="assumption" /> <xs:enumeration value="module" /> <xs:enumeration value="contract" /> <xs:enumeration value="action" /> <xs:enumeration value="external" /> <xs:enumeration value="pattern" /> </xs:restriction> </xs:simpletype> </xs:attribute> <xs:attribute name="subtype" use="optional"> <xs:simpletype> <xs:restriction base="xs:string"> <xs:enumeration value="parameter" /> <xs:enumeration value="loop" /> <xs:enumeration value="choice" /> <xs:enumeration value="multiplicity" /> </xs:restriction> </xs:simpletype> </xs:attribute> <xs:attribute name="id" use="required" type="uuid"> </xs:attribute> </xs:complextype> </xs:element> </xs:sequence> </xs:complextype> </xs:element> <xs:element name="links" maxoccurs="1" minoccurs="1"> <xs:complextype> <xs:sequence> <xs:element name="link" maxoccurs="unbounded" minoccurs="0"> <xs:complextype> <xs:sequence> <xs:element name="description" type="xs:string" /> <xs:element name="properties" type="propertiestype" /> </xs:sequence> <xs:attribute name="source" type="xs:string" use="required" /> <xs:attribute name="target" type="xs:string" use="required" /> <xs:attribute name="id" type="uuid" use="required" /> <xs:attribute name="name" type="xs:string" /> <xs:attribute name="type" use="optional" default="supportedby"> <xs:simpletype> <xs:restriction base="xs:string"> <xs:enumeration value="supportedby" /> <xs:enumeration value="incontextof" /> <xs:enumeration value="responsibility" /> </xs:restriction> </xs:simpletype> </xs:attribute> 15

17 </xs:complextype> </xs:element> </xs:sequence> </xs:complextype> </xs:element> </xs:sequence> <xs:attribute name="id" type="uuid" use="required" /> <xs:attribute name="name" type="xs:string" use="optional" /> <xs:attribute name="status" type="xs:string" use="optional" /> </xs:complextype> </xs:element> <xs:simpletype name="uuid"> <xs:restriction base="xs:string"> <xs:minlength value="1" /> </xs:restriction> </xs:simpletype> <xs:complextype name="propertiestype"> <xs:sequence> <xs:element name="property" minoccurs="0" maxoccurs="unbounded"> <xs:complextype> <xs:sequence> </xs:sequence> <xs:attribute name="name" use="required"> <xs:simpletype> <xs:restriction base="xs:string"> <xs:enumeration value="attachment" /> <xs:enumeration value="message" /> <xs:enumeration value="parameterizeddesc" /> <xs:enumeration value="parent" /> <xs:enumeration value="refsource" /> <xs:enumeration value="flag" /> <xs:enumeration value="stakeholder" /> <xs:enumeration value="isnormal" /> <xs:enumeration value="leafnode" /> <xs:enumeration value="i" /> <xs:enumeration value="j" /> <xs:enumeration value="siblingorder" /> <xs:enumeration value="validuntil" /> </xs:restriction> </xs:simpletype> </xs:attribute> <xs:attribute name="value" type="xs:string" use="required" /> </xs:complextype> </xs:element> </xs:sequence> </xs:complextype> <xs:complextype name="parameterstype"> <xs:sequence> 16

18 <xs:element name="parameter" maxoccurs="unbounded" minoccurs="1"> <xs:complextype> <xs:attribute name="name" type="xs:string" /> <xs:attribute name="type" use="required"> <xs:simpletype> <xs:restriction base="xs:string"> <xs:enumeration value="string" /> <xs:enumeration value="int" /> <xs:enumeration value="double" /> <xs:enumeration value="enum" /> <xs:enumeration value="raw" /> </xs:restriction> </xs:simpletype> </xs:attribute> <xs:attribute name="min" type="xs:string" /> <xs:attribute name="max" type="xs:string" /> <xs:attribute name="digit" type="xs:string" /> <xs:attribute name="inc" type="xs:string" /> <xs:attribute name="items" type="xs:string" /> <xs:attribute name="value" type="xs:string" /> </xs:complextype> </xs:element> </xs:sequence> </xs:complextype> <xs:complextype name="responsibilitytype"> <xs:attribute name="name" type="xs:string" /> <xs:attribute name="address" type="xs:string" /> <xs:attribute name="icon" type="xs:string" /> </xs:complextype> </xs:schema> 3.2 OMG SACM (Informative) OMG SACM(Structured Assurance Case Metamodel) [4] UML OMG(Object Management Group) *3 GSN SACM GSN Normative Informative [4] D-Case D-Case SACM [4] Informative ( 5) D-Case Schema OMG SACM?? GSN OMG SACM AssertedChallenge AssertedCounterEvidence *3 17

19 5 GSN SACM [4](Informative) GSN SACM Claim InformationElement AssertedInference AsseretedEvidence AsseretedContext Claim ToBeSupported = true D-Case Editor Astah/GSN SACM (Informative) D-Case Editor Astah/GSN 6 SACM 4 D-Case Editor *4 D-Case 2.4 [1] Robin Bloomfield and Peter Bishop. Safety and assurance cases: Past, present and possible future - an Adelard perspective. In Proceedings of the Eighteenth Safety-Critical Systems Symposium, Bristol, UK, [2] GSN contributors. GSN community standard version 1.0, goalstructuringnotation.info. [3] Yutaka Matsuno. A design and implementation of an assurance case language. In 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2014, Atlanta, GA, USA, June 23-26, 2014, pages , [4] Object Management Group (OMG). Structured assurance case metamodel (SACM), http: // [5] Toshinori Takai and Hiroyuki Kido. A supplemental notation of gsn aiming for dealing with changes of assurance cases. In 2014 IEEE International Symposium on Software Reliability Engineering Workshops, Workshop on Open Systems Dependability (WOSD), pages , *4 18

20 6 D-Case Editor Astah/GSN SACM (Informative)!"#$% Astar GSN D-Case Editor (Astar GSN&'())!"#$%&'()*+,-. <argumentelement xsi:type="arm:claim" xmi:id="xmi*+,-. xmi:id=goal.id Goal /ID" id="goal.id" description="" content="goal.statement" assumed=false tobesupported="true false"/> assumed0false&123 tobesupported0undeveloped4true'560true id=goal.name content=goal.desc / tobesupported01target&undeveloped)*234true5 (6789:;<=>9-. <argumentelement xsi:type="arm:argumentreasoning" xmi:id="xmi*+,-./id" id="strategy.id" description="" content="strategy.statement" describedinference="7!8&goal 47!9:;2AssertedInference'xmi:id(<=-<>"?@A& 9:B"CDE)"/> ArgumentReasoningF0toBeSupported4CDGE*H2IJK Undeveloped'LM0NO*P/;3 QRS#*0describes*H24KTU'XSD*#V&/W:;!"#$%&'()*+,-. 23 xmi:id=strategy.id XFdescribedChallenge/structureYZK[I0\]^_*`$ id=strategy.name %(ab0assertedinference&\])&9:ccded'ef*h content=strategy.desc 23 describedinference=(assertedinference90?@)taget#goal grh-i0describedinference'yzcd&`$%cd'jk #xmi:id Strategy $%4l$*H2&mno24K`$%4p'efFCDqo2 <argumentelement xsi:type="arm:informationelement" Solution xmi:id="xmi*+,-./id" id="solution.id" description="" (Evidence,Monitor content="solution.statement" url=""/>,contract,action) urlyz4lr$%*h2ijs*cd3 <argumentelement xsi:type="arm:informationelement" xmi:id="xmi*+,-./id" id="context.id" description="" content="context.statement" url=""/> Context urlyz4lr$%*h2ijs*cd3 Justification Assumption SupportedBy (Responsibility,Dc aselink004c) <argumentelement xsi:type="arm:claim" xmi:id="xmi*+,-. /ID" id="justification.id" description="" content="justification.statement" assumed=false tobesupported=false> Goal&\&FClaimF#t123Goal&'uv0K!InContextOf 'w-<*h2x&"**p23justification&assumption0 assumed*uv12 assumed0false <argumentelement xsi:type="arm:claim" xmi:id="xmi*+,-. /ID" id="assumption.id" description="" content="assumption.statement" assumed=true tobesupported=false> Goal&\&FClaimF#t123Goal&'uv0K!InContextOf 'w-<*h2x&"**p23justification&assumption0 assumed*uv12 assumed0true!"#$%&'()*+,-.(<type>0abcde) xmi:id=<type>.id id=<type>.name content=<type>.desc!"#$%&'()*+,-. xmi:id=context.id id=context.name content=context.desc F!"#$%&'()*+,-. xsi:type="arm:informationelement" xmi:id=justification.id id=justification.name content=justification.desc assumedghi (InformationElement#;J) tobesupporedghi (InformationElement#;J) F!"#$%&'()*+,-. xsi:type="arm:informationelement" xmi:id=assumption.id id=assumption.name content=assumption.desc assumedghi (InformationElement#;J) tobesupporedghi (InformationElement#;J) <argumentelement xsi:type="arm:claim" xmi:id=<type>.id id=<type>.name content=<type>.desc parameterizedcontent=<type>.parameterizeddesc flag=<type>.flag refsource=<type>.refsource attachment=<type>.attachment assumed=true tobesupported=false /> Module,External (/;) <type>0!"#$% Pattern (/;) <argumentelement xsi:type="arm:informationelement" xmi:id=pattern.id id=pattern.name content=pattern.desc parameterizedcontent=pattern.parameterizeddesc flag=pattern.flag refsource=pattern.refsource attachment=pattern.attachment url="" subtype=pattern.subtype leafnode=pattern.leafnode i=pattern.i j=pattern.j parameterdefs=pattern.parameterdefs parametervals=pattern.parametervals /> 7!84Goal/Strategy'56 <argumentelement xsi:type="arm:assertedinference" xmi:id="xmi *+,-./ID" id="supportedby.id" source="7!8'xmi:id" target="7!y'goal(<=-<>"?@a&9:b"cde)" description="" content="supportedby.definition"/> Strategy>'z9:;256*ctarget0Goal*H2x&F{ source target4kmonitor Action'56 (<type>0!"# 3}'IJKGoal->Strategy->Goal'56FNO12 $%) AssertedInference01~&/23 <argumentelement xsi:type="arm:assertedevidence" [IK}'56FD12id0KStrategy&source>7!9:; xmi:id=<type>.id id=<type>.name content=<type>.desc 2SupportedBy'ID&123 source="7!y'xmi:id" target="7!8'xmi:id" SupportedBy4Goal->Strategy' * 9:;256' description="" /> AssertedInference0KNOab4ƒ *0/;IJNO9/;3 InContextOf 7!84Solution'56 <argumentelement xsi:type="arm:assertedevidence" xmi:id="xmi *+,-./ID" id="incontextof.id" source="7!8'xmi:id" target="7!y'goal" description="" content="supportedby.definition"/> <argumentelement xsi:type="arm:assertedcontext" xmi:id="xmi *+,-./ID" id="incontextof.id" source="7!8'xmi:id" target="7!y'goal or Strategy" description="" content="incontextof.definition"/> }o '56(<type>0!"#$%) <argumentelement xsi:type="arm:assertedinference" xmi:id=<type>.id id=<type>.name content=<type>.desc source="7!y'xmi:id" target="7!8'xmi:id" description="" /> ˆ &0xsi:type4)/2Š *13 Œ'YZF ;4HŽ[13 xmi:id=incontextof.id id=incontextof.name content=incontextof.desc 19

untitled

untitled 0 0 TravelXML Ver. () 00/0/ TravelXML TravelXML Ver. 0 http://www.xmlconsortium.org/wg/travelxml/ http://www.jata-net.or.jp/xml/index.htm TravelXML ver. /0 TravelXML Ver. Ver 00/0/.0 00//0.0. 00/0/. XML