Browsing SINTEF Open by Author "Refsdal, Atle"
Now showing items 1-20 of 25
-
A feasibility study in model based prediction of impact of changes on system quality
Omerovic, Aida; Andresen, Anette; Grindheim, Håvard; Myrseth, Per; Refsdal, Atle; Stølen, Ketil; Ølnes, Jon (Research report, 2010)We propose a method, called PREDIQT, for model based prediction of impact of architecture design changes on system quality attributes. PREDIQT supports simultaneous analysis of several quality attributes and their trade-offs. ... -
A feasibility study in model based prediction of impact of changes on system quality
Omerovic, Aida; Andresen, Anette; Grindheim, Håvard; Myrseth, Per; Refsdal, Atle; Stølen, Ketil; Ølnes, Jon (Research report, 2010)We propose a method, called PREDIQT, for model based prediction of impact of architecture design changes on system quality attributes. PREDIQT supports simultaneous analysis of several quality attributes and their trade-offs. ... -
A Method for Developing Algorithms for Assessing Cyber-Risk Cost
Erdogan, Gencer; Refsdal, Atle; Seehusen, Fredrik; Gonzalez, Alejandra (Chapter, 2017)We present a method for developing executable algorithms for quantitative cyber-risk assessment. Exploiting techniques from security risk modeling and actuarial approaches, the method pragmatically combines use of available ... -
A Method for Developing Qualitative Security Risk Assessment Algorithms
Erdogan, Gencer; Refsdal, Atle (Journal article; Peer reviewed, 2018)We present a method for developing qualitative security risk assessment algorithms where the input captures the dynamic state of the target of analysis. This facilitates continuous monitoring. The intended users of the ... -
A Model-Based Approach to Support Safety-Related Decisions in the Petroleum Domain
Montecchi, Leonardo; Refsdal, Atle; Lollini, Paolo; Bondavalli, Andrea (Chapter, 2016)Accidents on petroleum installations can have huge consequences; to mitigate the risk, a number of safety barriers are devised. Faults and unexpected events may cause barriers to temporarily deviate from their nominal ... -
A Systematic Method for Risk-driven Test Case Design Using Annotated Sequence Diagrams
Erdogan, Gencer; Refsdal, Atle; Stølen, Ketil (SINTEF Rapport;, Research report, 2014)Risk-driven testing is a testing approach that aims at focusing the testing on the aspects or features of the system under test that are most exposed to risk. Current risk-driven testing approaches succeed in identifying ... -
A Systematic Method for Risk-Driven Test Case Design Using Annotated Sequence Diagrams
Erdogan, Gencer; Refsdal, Atle; Stølen, Ketil (Chapter, 2014)Risk-driven testing is a testing approach that aims at focusing the testing process on the aspects or features of the system under test that are most exposed to risk. Current risk-driven testing approaches succeed in ... -
Divide and Conquer – Towards a Notion of Risk Model Encapsulation
Refsdal, Atle; Rideng, Øyvind; Solhaug, Bjørnar; Stølen, Ketil (Lecture Notes in Computer Science;8431, Chapter, 2014)The criticality of risk management is evident when considering the information society of today, and the emergence of Future Internet technologies such as Cloud services. Information systems and services become ever more ... -
Dynamic monitoring of safety barriers in petroleum installations
Omerovic, Aida; Refsdal, Atle; Rideng, Øyvind (Chapter, 2014)Accidents on petroleum installations can have huge consequences, resulting in loss of life, environmental damages as well as economic loss. A number of so called safety barriers are therefore from earlier implemented with ... -
Employing Graphical Risk Models to Facilitate Cyber-Risk Monitoring - the WISER Approach
Černivec, Aleš; Erdogan, Gencer; Gonzalez, Alejandra; Refsdal, Atle; Romero, Antonio Alvarez (Journal article; Peer reviewed, 2018)We present a method for developing machine-readable cyber-risk assessment algorithms based on graphical risk models, along with a framework that can automatically collect the input, execute the algorithms, and present the ... -
Evaluations of methodology and tools used during the 8th SECURIS field trail
Refsdal, Atle; Solhaug, Bjørnar (Research report, 2007)This report presents the evaluation of the risk analysis in the 8th SECURIS field trial carried out the autumn 2006 and early 2007. FLO/IKT was the client and the target of the analysis was work with/handling of information ... -
Experiences from Developing an Algorithm to Support Risk-Based Decisions for Offshore Installations
Erdogan, Gencer; Refsdal, Atle; Nygård, Bjørn; Randeberg, Bernt Kvam; Rosland, Ole Petter (Chapter, 2017)We present our experiences from developing a decision model to support risk-based decisions on offshore installations. The model was developed using the DEXi tool for multi- criteria decision modeling. We report on the ... -
Experiences from Using Indicators to Validate Expert Judgments in Security Risk Analysis
Ligaarden, Olav Skjelkvåle; Refsdal, Atle; Stølen, Ketil (SINTEF Rapport;, Research report, 2012)Expert judgments are often used to estimate likelihood values in a security risk analysis. These judgments are subjective and their correctness rely on the competence, training, and experience of the experts. Thus, there ... -
Mandatory and Potential Choice: Comparing Event-B and STAIRS
Refsdal, Atle; Runde, Ragnhild Kobro; Stølen, Ketil (Chapter, 2016)In order to decide whether a software system fulfills a specification, or whether a detailed specification preserves the properties of a more abstract specification, we need an understanding of what it means for one ... -
Relating computer systems to sequence diagrams: the impact of underspecification and inherent nondeterminism
Runde, Ragnhild Kobro; Refsdal, Atle; Stølen, Ketil (Journal article; Peer reviewed, 2013)Having a sequence diagram specification and a computer system, we need to answer the question: Is the system compliant with the sequence diagram specification in the desired way? We present a procedure for answering this ... -
Risk factors in emergency response: a review of investigations of emergency response in Norway
Brændeland, Gyrd; Refsdal, Atle (Journal article; Peer reviewed, 2013)We present a systematic review of investigations of some large incidents in Norway from 1999 to 2008. The purpose of the review is to identify factors that affect the risk level during emergency response.We found that the ... -
Risk-Based Decision Support Model for Offshore Installations
Erdogan, Gencer; Refsdal, Atle; Nygård, Bjørn; Rosland, Ole Petter; Randeberg, Bernt Kvam (Journal article; Peer reviewed, 2018)Background: During major maintenance projects on offshore installations, flotels are often used to accommodate the personnel. A gangway connects the flotel to the installation. If the offshore conditions are unfavorable, ... -
Schematic Generation of English-prose Semantics for a Risk Analysis Language Based on UML Interactions
Erdogan, Gencer; Refsdal, Atle; Stølen, Ketil (Chapter, 2014)To support risk-driven testing, we have developed CORAL, a language for risk analysis based on UML interactions. In this paper, we present its semantics as a translation of CORAL diagrams into English prose. The CORAL ... -
Schematic Generation of English-prose Semantics for a Risk Analysis Language Based on UML Interactions
Erdogan, Gencer; Refsdal, Atle; Stølen, Ketil (SINTEF Rapport;, Research report, 2014)To support risk-driven testing, we have developed CORAL, a language for risk analysis based on UML interactions. In this paper, we present its semantics as a translation of CORAL diagrams into English prose. The CORAL ... -
Security risk analysis of system changes exemplified within the oil and gas domain
Refsdal, Atle; Solhaug, Bjørnar; Stølen, Ketil (Journal article; Peer reviewed, 2015)Changes, such as the introduction of new technology, may have considerable impact on the risk to which a system or organization is exposed. For example, in the oil & gas domain, introduction of technology that allows ...