Abstract

Preserving information integrity represent an urgent need for safety critical systems, where depending on incorrect or inconsistent information may leads to disasters. Typically, information integrity is a problem handled at technical level (e.g., checksumming). However, information integrity has to be analyzed in the social-technical context of the system, since information integrity related problems might manifest themselves in the business processes and actors interactions. In this paper, we propose an extended version of i*/ secure Tropos modeling languages to capture information integrity requirements. We illustrate the Datalog formalization of the proposed concepts and analysis techniques to support the analyst in the verification of integrity related properties. Air Traffic Management (ATM) case study is used throughout the paper. Document type: Part of book or chapter of book

Abstract

In this paper we present a method that aims to integrate the use of formal techniques in the design process of interactive applications, with particular attention to those applications where both usability and safety are main concerns. The method is supported by a set of tools. We will also discuss how the resulting environment can be helpful in reasoning about multi-user interactions using the task model of an interactive application. Examples are provided from a case study in the field of air traffic control. Document type: Part of book or chapter of book

Abstract

The purpose of this chapter is to provide a contemporary statement of existing approaches to transport-land use planning in urban and regional areas to advise practising transport planners and students. The chapter concentrates on the knowledge that are available for the synthesis, analysis, and evaluation of alternative land use-transport-systems plans and regulations. First, the transportation planner must develop an understanding of the planning process before attempting to address herself to the broader polices issues. The first objective of this chapter is to provide transportation planners with an understanding of the land-use models and their application to urban and regional planning problems. The final objective covers policy, regulations and plans. Absence of physical space between people and firms is the definition of Economists to cities. Cities appear to supply the necessity to eliminate transport costs. Density lowers the costs of interacting with other people and speeds the flow of goods, people and ideas. The location and structure of cities is driven by the desire to eliminate transport costs. In this context, transportation technologies have been the primary determinant of the location and structure of cities. There is increasing concern across the world about increasing traffic congestion and the costs it imposes, particularly on accessibility, the environment, other social factors, such as accidents, and the economy in general. Growing personal car-mileage is engendering the well-known effects on the environment and transport systems, especially roads, which are not able to cope with the increasing amounts of traffic. Further development of innovative, integrated and well-balanced policies is strongly needed. Strong and ongoing growth in mobility, especially in road traffic, means that transport trends are unsustainable if only current policies are pursued: with constraints on resources, space, safety and the environment there are only limited possibilities to extend transport supply to safeguard accessibility. It is quite clear that the need for travel cannot really be avoided; it is crucial for the performance of social and economic functions in any society. People are not travelling much more often than twenty years ago, but they are travelling further and with greater use of the private car. Increasing car ownership is a central component of this (Transland, 2000). There is a lack of knowledge about the interaction between land use and transport and the related planning consequences. Institutional demands for integrated policymaking is 13 Document type: Part of book or chapter of book

Abstract

Aircraft hazards were evaluated to determine the total annual probability of an aircraft crash occurring at any structure located on the US Department of Energy (DOE) reservation in Oak Ridge, Tennessee. This report documents the use of an accepted methodology for calculating the probability of an aircraft crash as applied to the three Oak Ridge plant sites including the adjoining facilities. Based on the data contained herein, the evaluation concluded that the probability of an aircraft crash occurrence at a single facility is generally considered ``not credible`` as defined in DOE/OR-901. Additionally, reevaluation of probabilities would be necessary if significant changes were made to local air traffic. The probability of an aircraft crash could increase as a result of the opening of any new airport or heliport in the vicinity; a greater volume of air traffic from McGhee Tyson airport in Knoxville, should the airport status change from feeder airport to hub airport; the rerouting of commercial and/or military flights at the McGhee Tyson airport; and finally, a change in direction or the addition of a federal airway. At one time, DOE planned to establish a zone of prohibited airspace over the Y-12 plant; if the plans are enacted inmore » the future, the probability of an aircraft crash at the Y-12 plant could decrease. Pilots since have been voluntarily requested not to fly below 3000 feet over the Y-12 plant. Also, the Federal Aviation Administration plans to reroute air traffic in the spring of 1993 on federal airway V16. However, the section of V16 which traverses the three plant sites and five adjoining facilities will not be altered. If this plan is implemented, the air traffic over the Oak Ridge facilities would not be affected significantly, and the probability of an aircraft crash as determined herein would be unchanged.« le Document type: Report