研究者詳細 - 松原　豊

A Decision Support Scheme for Safe and Efficient Transportation of Hazardous Materials

Zhou, ZS; Matsubara, Y; Takada, H

IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS 26 巻 ( 1 ) 頁： 309 - 322 2025年1月

出版者・発行元：IEEE Transactions on Intelligent Transportation Systems

The demand for hazardous materials (HazMat) logistics is on the rise, and the importance of safety engineering of HazMat logistics is clear. Freight services based on intelligent transportation systems (ITS) offer a more secure, efficient, and environmentally-friendly method of HazMat logistics. At the same time, the voice of digital transformation (DX) in logistics continues to grow. However, there are currently some barriers to the digital transformation of the HazMat logistics industry, in which safety is always prioritized. One of the issues is how to promote the use of information technology in the logistics business process in a reasonable and orderly manner, given limited funds and technology, while also ensuring safety and improving the business process. Existing safety analysis methods, such as the Functional Resonance Analysis Method (FRAM) and its quantitative expansion, can be used to identify safety risks and make safety recommendations for business process improvement, but they cannot assist us with the rationale for DX decision making. To close the gap, we present in this article an optimization method of HazMat transportation safety engineering based on FRAM, which will assist HazMat logistics companies in making decisions regarding the implementation of ITS. We use the HazMat transportation of a Japanese logistics company as an example to verify and validate the proposed decision support scheme.

DOI： 10.1109/TITS.2024.3490635

Consensus-Based Resilience Assurance for System of Systems Open Access

Zhang, HJ; Matsubara, Y

IEEE ACCESS 13 巻頁： 20203 - 20217 2025年

出版者・発行元：IEEE Access

The complexity of a System of Systems makes resilience one of its key attributes. Numerous studies have focused on the quantitative assessment of resilience by trailing indicators, yet discussions on resilience assurance through monitoring leading indicators remain scarce. Resilience assurance in SoS faces two major challenges: lack of structured argumentation work related to resilience and conflicts among multiple independent stakeholders. To address these challenges, this paper first introduces a resilience argumentation approach based on STAMP (Systems-Theoretic Accident Model and Processes), then employs cooperative consensus process model to seek consensus on resilience assurance. Additionally, under the requirements of the international standard IEC 62853 for open systems dependability, a consensus based resilience assurance framework is proposed. Within the framework, the resilient team can discuss the specific implementation details of failure response, accountability, and change accommodation based on stakeholder consensus. Finally, two SoS case studies, Microgrid and Mobility as a Service, are used to demonstrate the application of the proposed approach.

DOI： 10.1109/ACCESS.2025.3535519

Reaching Consensus on System-of-Systems Resilience Assurance: A Case of Mobility as a Service

Zhang, HJ; Matsubara, Y; Takada, H

COMPUTER SAFETY, RELIABILITY, AND SECURITY. SAFECOMP 2024 WORKSHOPS 14989 巻頁： 200 - 212 2024年

出版者・発行元：Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Understanding and ensuring the resilience of the System of Systems (SoS) is a critical concern in SoS construction. This paper presents a framework to assure SoS resilience from a multi-stakeholder perspective. It begins by using System Theoretic Process Analysis (STPA) to identify properties within the SoS control structure that is related to resilience, starting from stakeholders’ potential losses. Subsequently, a consensus process model based on cooperative game is employed to facilitate stakeholder consensus on the requirements of these properties. The analysis process and consensus outcomes are organized and visualized using Goal Structuring Notation (GSN). To illustrate the proposed approach, Mobility as a Service (MaaS) is employed as a case study in this paper.

DOI： 10.1007/978-3-031-68738-9_15

Monitor and Analyze Rare ROS2 Performance Issues with A Unified Tracing Framework

Li, YX; Matsubara, Y; Takada, H; Funahashi, S; Kawashima, H

6TH WORLD SYMPOSIUM ON SOFTWARE ENGINEERING, WSSE 2024 頁： 95 - 104 2024年

出版者・発行元：ACM International Conference Proceeding Series

This paper proposes an open-source unified tracing framework to deal with rare performance issues for ROS2 applications. It is able to monitor the running system and capture a system-wide trace file for each detected issue to enable detailed analysis. The required resource usage is greatly reduced compared to existing tracing solutions, which allows our framework to be used in production environment. Because the design has high extensibility and interoperability, popular visualization and analysis can effortlessly collaborate with our framework. A real-time ROS2 demo application is used to evaluate the efficiency and functionality, and the results show that the proposed method can successfully obtain helpful trace files to solve performance issues with a small overhead.

DOI： 10.1145/3698062.3698075

Race Directed Fuzzing for More Effective Concurrency Testing

Ito, H; Matsubara, Y; Takada, H

6TH WORLD SYMPOSIUM ON SOFTWARE ENGINEERING, WSSE 2024 頁： 1 - 6 2024年

出版者・発行元：ACM International Conference Proceeding Series

Concurrency bugs can be tricky to identify and resolve because they rely on subtle timing or ordering issues that are hard to replicate. Schfuzz is a technique that helps to conduct concurrency tests by fuzzing and can detect concurrency bugs more efficiently and effectively than traditional feedback-guided fuzzing. However, Schfuzz may only sometimes be an effective method since it monitors access to all shared memories, even when they are not involved in such issues. To improve Schfuzz’s effectiveness, we propose a new approach focusing on shared memories with data races. Our method first uses data race detectors to identify potential data races and then instructs Schfuzz to explore concurrency bugs in shared memory regions where data races occur. We have implemented a prototype of our proposed method and conducted experiments to measure its improvement over Schfuzz. As a result, the proposed method has detected the potential concurrency bugs significantly faster than vanilla Schfuzz in 7 of 11 targets with data races.

DOI： 10.1145/3698062.3698063

Multilingual Investigation of Cross-Project Code Clones in Open-Source Software for Internet of Things Systems Open Access

Zhu, WQ; Yoshida, N; Matsubara, Y; Takada, H

IEEE ACCESS 12 巻頁： 179104 - 179118 2024年

出版者・発行元：IEEE Access

The prevalence and impact of code clones in software systems have been widely studied in the past few decades. However, the focus has primarily been on intra-project clones. Our work comprehensively investigates cross-project code clones in open-source software for Internet of Things (IoT) systems across multiple programming languages. This work addresses the prevalence of cross-project code clones in IoT systems and their impact on software maintainability. We collected 122 IoT system repositories in nine languages from GitHub and grouped them according to their primary functionality in IoT systems. We used MSCCD, a multilingual code clone detector to detect Type-3 code clones for each group. The results show that cross-project clones exist in more than 30% of the projects, particularly in communication-related functionalities. We tracked the historical evolution of these clones and classified them according to the revision history and changing trend of similarity. The results show that 95% cross-project clones are untouched. Moreover, clones with decreasing similarities were over 72%. Therefore, the same clone detector may no longer detect these clones. We also investigated whether these cross-project code clones lead to defect propagation by analyzing the commit message to determine the commits that fixed a defect. We identified nine defect propagation instances, of which seven remain unfixed. Our work contributes to understanding cross-project code clones, highlighting the importance of automated clone management tools for improving the quality and security of IoT system software to mitigate the risks associated with unresolved defects and inconsistencies in IoT software development.

DOI： 10.1109/ACCESS.2024.3506013

分散リアルタイムシステムとしての車載制御システム

高田広章, 松原豊

システム／制御／情報 67 巻 ( 12 ) 頁： 482 - 487 2023年12月

Resilience analysis and design for mobility-as-a-service based on enterprise architecture modeling Open Access

Zhou, ZS; Matsubara, Y; Takada, H

RELIABILITY ENGINEERING & SYSTEM SAFETY 229 巻 2023年1月

記述言語：日本語出版者・発行元：Reliability Engineering and System Safety

The development of a service that integrates multiple systems, platforms, and businesses, such as Mobility as a Service (MaaS), has attracted the attention of engineers and scholars. However, because of the complexity of the interactions of its subsystems, it is difficult to ensure the reliability of an integrated service, and the analysis approach of the individual subsystems that influence each other is insufficient. Even though many studies on functional safety for road vehicles have been conducted, there are currently no theoretical or experimental reports on MaaS reliability issues at the service level. To fill the void, we propose in this paper a resilience analysis method to facilitate the development of reliable mobility services. As a result, we proposed a novel MaaS resilience analysis and design method. We contend that a connection with enterprise architecture modeling helps to address resilience concerns for MaaS reliability. The claim is based on the close connection between resilience and reliability. Furthermore, we conduct a controlled experiment to demonstrate the efficacy of the proposed method and compare it quantitatively to a referenced method.

DOI： 10.1016/j.ress.2022.108812

Schfuzz: Detecting Concurrency Bugs with Feedback-Guided Fuzzing Open Access

Ito, H; Matsubara, Y; Takada, H

PROCEEDINGS OF THE 18TH INTERNATIONAL CONFERENCE ON EVALUATION OF NOVEL APPROACHES TO SOFTWARE ENGINEERING, ENASE 2023 2023-April 巻頁： 273 - 282 2023年

出版者・発行元：International Conference on Evaluation of Novel Approaches to Software Engineering, ENASE - Proceedings

It is challenging to detect concurrency bugs with fuzzing. There are two main reasons for this. First, manifesting them by exploring input space is inefficient because they only occur under specific interleavings. Second, re-giving an input detected a bug in a fuzzing campaign does not necessarily reproduce the bug because typical runtimes do not schedule threads deterministically. This research proposes Schfuzz, a novel approach for detecting concurrency bugs with feedback-guided fuzzing. This approach executes programs under test deterministically based on test cases generated by fuzzers. In addition, it feeds back dynamic memory-access orders to aid fuzzers in detecting concurrency bugs more efficiently and effectively. We evaluate Schfuzz with a hand-made motivating example and four benchmark programs from SCTBench (Thomson et al., 2016). The result shows that it can detect concurrency bugs more efficiently and effectively than traditional feedback-guided fuzzing.

DOI： 10.5220/0011722100003464

Developing Reliable Digital Healthcare Service Using Semi-Quantitative Functional Resonance Analysis Open Access

Zhou, ZS; Matsubara, Y; Takada, H

COMPUTER SYSTEMS SCIENCE AND ENGINEERING 45 巻 ( 1 ) 頁： 35 - 50 2023年

記述言語：日本語出版者・発行元：Computer Systems Science and Engineering

Since entering the era of Industry 4.0, the concept of Healthcare 4.0 has also been put forward and explored by researchers. How to use Information Technology (IT) to better serve people’s healthcare is one of the most featured emerging directions in the academic circle. An important field of Healthcare 4.0 research is the reliability engineering of healthcare service. Because healthcare systems often affect the health and even life of their users, developers must be very cautious in the design, development, and operation of these healthcare systems and services. The problems to be solved include the reliability of business process, system functions, and personal healthcare data. The Functional Resonance Analysis Method (FRAM) has been applied in reliability engineering for safety-critical systems in available studies, using both qualitative and quantitative approaches. However, the method has not been applied in the field of digital healthcare services development. Therefore, to narrow the gap, we present in this paper a semi-quantitative functional resonance analysis method to develop reliable healthcare services for diabetics. Moreover, this paper has tried to improve the reliability design of the service-oriented architecture (SOA) of traditional insulin pump therapy by system thinking.

DOI： 10.32604/csse.2023.030848

A Quantitative Approach for System of Systems' Resilience Analyzing Based on ArchiMate

Zhang, HJ; Matsubara, Y; Takada, H

COMPUTER SAFETY, RELIABILITY, AND SECURITY, SAFECOMP 2023 WORKSHOPS 14182 巻頁： 47 - 60 2023年

出版者・発行元：Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

With the development of IT technology and the increasing demand for service integration, the widespread application of System of Systems (SoS) is inevitable in the era to come. Among numerous key issues related to SoS, analyzing the resilience of SoS is a challenging problem. Although many studies and discussions for system engineering have provided solutions for this problem, two significant characteristics of SoS, which are the independence of Constituent systems (CSs) and the involvement of multiple stakeholders, are ignored. Based on these two characteristics, this paper proposed a quantitative method for analyzing the resilience of SoS. The method includes visual modeling of the SoS using the EA tool ArchiMate, quantitatively simulating the model based on defining the value of service capacities of the CSs and evaluating and designing resilience from multiple stakeholders’ perspectives. Finally, a case study based on Mobility as a Service (MaaS) is presented. By analyzing resilience of MaaS, the critical node is identified, and by resilience redesign, the resilience of the SoS is improved after enhancement.

DOI： 10.1007/978-3-031-40953-0_5

Design and Implementation of RTOS-Aware Control-Flow Integrity Mechanism for Microcontroller-Based Systems

KAWADA Tomoaki, HONDA Shinya, MATSUBARA Yutaka, TAKADA Hiroaki

コンピュータソフトウェア 39 巻 ( 2 ) 頁： 2_39 - 2_68 2022年4月

記述言語：日本語出版者・発行元：日本ソフトウェア科学会

CFI (Control-Flow Integrity) is a class of defensive techniques against control-flow attacks such as Return-Oriented Programming. We propose a lightweight CFI scheme for RTOS-based applications, TZmCFI, which utilizes TrustZone for Armv8-M, a hardware-assisted security feature for embedded systems with tight resource constraints. TZmCFI embodies several existing CFI techniques to provide a self-contained toolset for building an instrumented application. The toolset is comprised of a modified LLVM-based compiler and a runtime library called Monitor. The modified LLVM code generator implements the traditional shadow stack technique by inserting calls to Monitor. To protect exception handlers, Monitor replaces an application's exception vector table and wrap interrupt handlers with exception trampolines, which implement variations of the shadow exception stack technique we proposed in our previous work. The performance evaluation on NXP Semiconductors LPC55S69 indicated a -7–35% increase in the execution times of FreeRTOS+MPU system calls and a 9.36% runtime overhead on CoreMark.

DOI： 10.11309/jssst.39.2_39

Quantitative Security Assurance Case for In-vehicle Embedded Systems

CiNii Research

Zhou, ZS; Matsubara, Y; Takada, H

2021 IEEE INTL CONF ON DEPENDABLE, AUTONOMIC AND SECURE COMPUTING, INTL CONF ON PERVASIVE INTELLIGENCE AND COMPUTING, INTL CONF ON CLOUD AND BIG DATA COMPUTING, INTL CONF ON CYBER SCIENCE AND TECHNOLOGY CONGRESS DASC/PICOM/CBDCOM/CYBERSCITECH 2021 頁： 43 - 50 2021年

記述言語：日本語出版者・発行元：Proceedings - 2021 IEEE International Conference on Dependable, Autonomic and Secure Computing, International Conference on Pervasive Intelligence and Computing, International Conference on Cloud and Big Data Computing and International Conference on Cyber Science and Technology Congress, DASC/PiCom/CBDCom/CyberSciTech 2021

Technological advances are transforming the automotive industry by increasing the number of computer-controlled auto components that provide information to remote systems through various means of communication. The changes have created new opportunities for cyber-attacks. To enable the engineering of in-vehicle embedded systems within road vehicles to keep up with changing technology and attack methods, in this year, ISO and SAE will jointly release the international standard ISO/SAE 21434. However, to date there are few studies about how to apply the standard to academia and industry. To fill this gap, the paper proposes an approach to develop assurance cases for cybersecurity argument of road vehicle in compliance with ISO/SAE 21434. We analyze the standard, and then propose a model-based approach to automotive cybersecurity assurance. After that, case studies are carried out to verify the effectiveness of the proposed method. Finally, the paper is concluded by discussing the limitations and future directions of the study.

DOI： 10.1109/DASC-PICom-CBDCom-CyberSciTech52372.2021.00022

A Performance Evaluation of Embedded Multi-core Mixed-criticality System Based on PREEMPT RT Linux Open Access

Li Y., Matsubara Y., Takada H., Suzuki K., Murata H.

Journal of Information Processing 31 巻 ( 0 ) 頁： 78 - 87 2023年

記述言語：英語掲載種別：研究論文（学術雑誌）出版者・発行元：一般社団法人情報処理学会

The use of Linux in the domain of embedded systems is growing very fast. Due to the complexity of hardware and software on Linux-based platforms, it is challenging to meet the performance requirements, especially for the mixed-criticality system with both real-time and best-effort tasks. We propose a reference design of Linux-based mixed-criticality system using PREEMPT RT patch to improve real-time performance and QEMU/KVM virtual machine to reduce interferences. An evaluation environment of the proposed design is built with recent software and hardware to investigate the performance characteristics via experimental measurements. We measure and analyze the baseline kernel latency, the system throughput and the real-time performance under multiple conditions. In detailed analysis, we reveal novel insights on the real-time capabilities and limitations of Linux-based embedded systems. The results show that our design can meet the 100 µs deadline goal of 1 kHz real-time task with high probability under various extreme interferences, and can deliver high throughput for best-effort workload.

DOI： 10.2197/ipsjjip.31.78