Users of today have ever-increasing levels of technical skill with computing and communication te... more Users of today have ever-increasing levels of technical skill with computing and communication technologies. For example, on the battlefield, some soldiers are capable of creating or modifying existing systems in response to needs that were not anticipated by the designers of the original systems. In a growing number of situations this ability is crucial, because the soldier must be able to adapt rapidly to a dynamically changing operating environment; thus the software must also be adaptable. Software architectures and software development methods must be created that enable user innovation "at the edge" so that users can be as effective as possible in the face of changing missions and unanticipated needs. In this paper, we describe the characteristics of edge systems and the edge organizations in which these systems operate, and make initial recommendations about how such systems and organizations can be created to serve the needs of users at the edge.
We consider a tactical data network with limited bandwidth, in which each agent is tracking objec... more We consider a tactical data network with limited bandwidth, in which each agent is tracking objects and may have value for receiving data from other agents. The agents are selfinterested and would prefer to receive data than share data. Each agent has private information about the quality of its data and can misreport this quality and degrade or otherwise decline to share its data. The problem is one of interdependent value mechanism design because the value to one agent for the broadcast of data on an object depends on the quality of the data, which is privately known to the sender. A recent two-stage mechanism due to Mezzetti (2004) can be modified to our setting. Our mechanism achieves efficient bandwidth allocation and provides incentive compatibility by conditioning payments on the realized value for data shared between agents.
This minitrack focuses on the research and automation techniques that can be applied to mobile pl... more This minitrack focuses on the research and automation techniques that can be applied to mobile platforms to ensure that software developed for these devices is secure without compromising other system properties such as performance or reliability. In both the personal computer and mobile platform arena, current security engineering methods are demonstrably inadequate at identifying software vulnerabilities. These vulnerabilities are caused by software designs and implementations that do not adequately protect systems and by development practices that do not focus sufficiently on eliminating implementation defects that result in security flaws. This been especially true in the area of mobile platforms where one study found that, from 2010 to 2011, the number of new vulnerabilities in mobile operating systems jumped 93 percent. Additionally, according to Symantec Corp, 2011 was the also first year that mobile malware presented a tangible threat. Android is the most widely used mobile ...
This material has been approved for public release and unlimited distribution except as restricte... more This material has been approved for public release and unlimited distribution except as restricted below.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
Use of any trademarks in this report is not intended in any way to infringe on the rights of the ... more Use of any trademarks in this report is not intended in any way to infringe on the rights of the trademark holder. Internal use. Permission to reproduce this document and to prepare derivative works from this document for internal use is granted, provided the copyright and "No Warranty" statements are included with all reproductions and derivative works.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
Journal of Software Maintenance: Research and Practice, 2000
This paper makes pragmatic recommendations for the maintenance of complex COTS-based systems. We ... more This paper makes pragmatic recommendations for the maintenance of complex COTS-based systems. We first enumerate the issues that can arise in systems that rely on COTS products, whether in operational systems themselves or in the support systems used to create, modify, or test operational systems. We then suggest principles by which maintenance practice for such systems can be facilitated, particularly for those safety-critical systems for which significant risk is present if they fail. These principles aim at making explicit, during system creation, the COTS-related development practices upon which successful system maintenance will subsequently depend. They also depend on a reasonable means of determining, during system maintenance, how much risk is acceptable in using new releases of COTS products.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
Pin is a basic, simple component technology suitable for building embedded software applications.... more Pin is a basic, simple component technology suitable for building embedded software applications. Pin implements the container idiom for software components. Containers provide a prefabricated "shell" in which custom code executes and through which all interactions between custom code and its external environment are mediated. Pin is a component technology for pure assembly-systems are assembled by selecting components and connecting their interfaces (which are composed of communication channels called pins).
Abstract: Each year, the Software Engineering Institute (SEI) undertakes several Independent Rese... more Abstract: Each year, the Software Engineering Institute (SEI) undertakes several Independent Research and Development (IR&D) projects. These projects serve to (1) support feasibility studies investigating whether further work by the SEI would be of potential benefit, and (2) support further exploratory work to determine whether there is sufficient value in eventually funding the feasibility study work as an SEI initiative. Projects are chosen based on their potential to mature and/or transition software engineering practices, ...
IntroductionThe development of component-based systems is supportedby commercial component techno... more IntroductionThe development of component-based systems is supportedby commercial component technologies such asSun's Enterprise JavaBeans^TM and Microsoft's COM+.But these technologies only address the needs of a particularclass of systems, one that we might refer to as distribute,transactional enterprise systems. Notwithstandingthe significant market size for this class of system, there aremany other classes of system that could benefit from acomponent-based approach but
A mechanism is an institution such as an auction, voting protocol, or a market that defines the r... more A mechanism is an institution such as an auction, voting protocol, or a market that defines the rules for how humans are allowed to interact, and governs the procedure for how collective decisions are made. Computational mechanisms arise where computational agents work on behalf of humans. This report describes an investigation of the potential for using computational mechanisms to improve the quality of a combat group's common operating picture, in a setting where network bandwidth is scarce. Technical details are provided about a robust emulation of a tactical data network (based loosely on the Navy LINK-11) that was developed for the study. The report also outlines the basic principles of mechanism design, as well as the features of the Vickrey-Clarke-Groves (VCG) auction mechanism implemented for the study. The report describes how the VCG mechanism was used to allocate network bandwidth for sensor data fusion. Empirical results of the investigation are presented, and ideas for further exploration are offered. The overall conclusion of the study is that computational mechanism design is a promising alternative to traditional systems approaches to resource allocation in systems that are highly dynamic, involve many actors engaged in varying activities, and have varying-and possibly competing-goals. viii | CMU/SEI-2008-TR-004 SOFTWARE ENGINEERING INSTITUTE | 1 REPORT Unclassified 18. SECURITY CLASSIFICATION OF THIS PAGE Unclassified 19. SECURITY CLASSIFICATION OF ABSTRACT Unclassified 20. LIMITATION OF ABSTRACT UL NSN 7540-01-280-5500 Standard Form 298 (Rev. 2-89) Prescribed by ANSI Std. Z39-18 298-102
Users of today have ever-increasing levels of technical skill with computing and communication te... more Users of today have ever-increasing levels of technical skill with computing and communication technologies. For example, on the battlefield, some soldiers are capable of creating or modifying existing systems in response to needs that were not anticipated by the designers of the original systems. In a growing number of situations this ability is crucial, because the soldier must be able to adapt rapidly to a dynamically changing operating environment; thus the software must also be adaptable. Software architectures and software development methods must be created that enable user innovation "at the edge" so that users can be as effective as possible in the face of changing missions and unanticipated needs. In this paper, we describe the characteristics of edge systems and the edge organizations in which these systems operate, and make initial recommendations about how such systems and organizations can be created to serve the needs of users at the edge.
We consider a tactical data network with limited bandwidth, in which each agent is tracking objec... more We consider a tactical data network with limited bandwidth, in which each agent is tracking objects and may have value for receiving data from other agents. The agents are selfinterested and would prefer to receive data than share data. Each agent has private information about the quality of its data and can misreport this quality and degrade or otherwise decline to share its data. The problem is one of interdependent value mechanism design because the value to one agent for the broadcast of data on an object depends on the quality of the data, which is privately known to the sender. A recent two-stage mechanism due to Mezzetti (2004) can be modified to our setting. Our mechanism achieves efficient bandwidth allocation and provides incentive compatibility by conditioning payments on the realized value for data shared between agents.
This minitrack focuses on the research and automation techniques that can be applied to mobile pl... more This minitrack focuses on the research and automation techniques that can be applied to mobile platforms to ensure that software developed for these devices is secure without compromising other system properties such as performance or reliability. In both the personal computer and mobile platform arena, current security engineering methods are demonstrably inadequate at identifying software vulnerabilities. These vulnerabilities are caused by software designs and implementations that do not adequately protect systems and by development practices that do not focus sufficiently on eliminating implementation defects that result in security flaws. This been especially true in the area of mobile platforms where one study found that, from 2010 to 2011, the number of new vulnerabilities in mobile operating systems jumped 93 percent. Additionally, according to Symantec Corp, 2011 was the also first year that mobile malware presented a tangible threat. Android is the most widely used mobile ...
This material has been approved for public release and unlimited distribution except as restricte... more This material has been approved for public release and unlimited distribution except as restricted below.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
Use of any trademarks in this report is not intended in any way to infringe on the rights of the ... more Use of any trademarks in this report is not intended in any way to infringe on the rights of the trademark holder. Internal use. Permission to reproduce this document and to prepare derivative works from this document for internal use is granted, provided the copyright and "No Warranty" statements are included with all reproductions and derivative works.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
Journal of Software Maintenance: Research and Practice, 2000
This paper makes pragmatic recommendations for the maintenance of complex COTS-based systems. We ... more This paper makes pragmatic recommendations for the maintenance of complex COTS-based systems. We first enumerate the issues that can arise in systems that rely on COTS products, whether in operational systems themselves or in the support systems used to create, modify, or test operational systems. We then suggest principles by which maintenance practice for such systems can be facilitated, particularly for those safety-critical systems for which significant risk is present if they fail. These principles aim at making explicit, during system creation, the COTS-related development practices upon which successful system maintenance will subsequently depend. They also depend on a reasonable means of determining, during system maintenance, how much risk is acceptable in using new releases of COTS products.
The ideas and findings in this report should not be construed as an official DoD position. It is ... more The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange.
Pin is a basic, simple component technology suitable for building embedded software applications.... more Pin is a basic, simple component technology suitable for building embedded software applications. Pin implements the container idiom for software components. Containers provide a prefabricated "shell" in which custom code executes and through which all interactions between custom code and its external environment are mediated. Pin is a component technology for pure assembly-systems are assembled by selecting components and connecting their interfaces (which are composed of communication channels called pins).
Abstract: Each year, the Software Engineering Institute (SEI) undertakes several Independent Rese... more Abstract: Each year, the Software Engineering Institute (SEI) undertakes several Independent Research and Development (IR&D) projects. These projects serve to (1) support feasibility studies investigating whether further work by the SEI would be of potential benefit, and (2) support further exploratory work to determine whether there is sufficient value in eventually funding the feasibility study work as an SEI initiative. Projects are chosen based on their potential to mature and/or transition software engineering practices, ...
IntroductionThe development of component-based systems is supportedby commercial component techno... more IntroductionThe development of component-based systems is supportedby commercial component technologies such asSun's Enterprise JavaBeans^TM and Microsoft's COM+.But these technologies only address the needs of a particularclass of systems, one that we might refer to as distribute,transactional enterprise systems. Notwithstandingthe significant market size for this class of system, there aremany other classes of system that could benefit from acomponent-based approach but
A mechanism is an institution such as an auction, voting protocol, or a market that defines the r... more A mechanism is an institution such as an auction, voting protocol, or a market that defines the rules for how humans are allowed to interact, and governs the procedure for how collective decisions are made. Computational mechanisms arise where computational agents work on behalf of humans. This report describes an investigation of the potential for using computational mechanisms to improve the quality of a combat group's common operating picture, in a setting where network bandwidth is scarce. Technical details are provided about a robust emulation of a tactical data network (based loosely on the Navy LINK-11) that was developed for the study. The report also outlines the basic principles of mechanism design, as well as the features of the Vickrey-Clarke-Groves (VCG) auction mechanism implemented for the study. The report describes how the VCG mechanism was used to allocate network bandwidth for sensor data fusion. Empirical results of the investigation are presented, and ideas for further exploration are offered. The overall conclusion of the study is that computational mechanism design is a promising alternative to traditional systems approaches to resource allocation in systems that are highly dynamic, involve many actors engaged in varying activities, and have varying-and possibly competing-goals. viii | CMU/SEI-2008-TR-004 SOFTWARE ENGINEERING INSTITUTE | 1 REPORT Unclassified 18. SECURITY CLASSIFICATION OF THIS PAGE Unclassified 19. SECURITY CLASSIFICATION OF ABSTRACT Unclassified 20. LIMITATION OF ABSTRACT UL NSN 7540-01-280-5500 Standard Form 298 (Rev. 2-89) Prescribed by ANSI Std. Z39-18 298-102
Uploads
Papers by Daniel Plakosh