基于目标的高可信自适应容错软件开发方法研究
|
摘要
随着以Internet软件为核心的信息系统的深入,基于Internet的分布式计算机系统及开放式网络环境增加了系统的复杂度、故障率和不安全因素,使得软件系统变得日趋庞大和难以驾驭,缺陷和漏洞难以避免,其经常发生各种故障和失效。所有这些因素都给软件系统的可信性带来了新的问题和挑战。
软件容错技术是保障软件可信性的主要方法之一。但是传统的容错技术存在着许多不足之处：实现成本高,往往需要多个冗余的实现版本；模块化程度较差,难以清晰地进行建模和预测分析；灵活性不强,难以适应复杂多变的运行时失效。近年来,高可信软件系统方面的研究工作越来越多地与自适应软件系统(self-adaptive software system)联系起来。与传统的基于冗余和多样性思想的软件容错方法相比,自适应软件系统能够通过对自身行为和结构的动态调整来适应自身的缺陷和环境的变化,从运行时控制的角度提高软件系统的可信性。为我们提供了一种更加灵活和有效的软件容错途径。
本文在分析当前自适应软件研究领域的工作的基础上,针对高可信自适应软件系统在现实开发中面临的很多问题,论述了在可信软件系统开发的整个生命周期中所涉及的相关理论和技术,对指导高可信自适应容错软件系统开发的实践活动具有现实性的意义。本文将可信软件系统研究领域中各个阶段相互独立分散的理论与技术进行了统一,提出了一个更加系统、有效和实用的自适应容错解决方案：从可信需求建模,到自适应体系结构设计,再到系统的实现及运行时监控与诊断,将可信软件系统开发过程中的各个阶段所需的制品的设计紧密联系在一起,形成了一个全面而统一的技术体系。
为解决现有的面向目标的需求建模方法在自适应软件系统的需求建模方面所表现出来的不足,以及为了支持软件系统的运行时监控、诊断和容错决策的需要,本文首先对KAOS需求建模方法中的描述框架、目标类型、目标关系等方面进行了扩展。在此基础上,提出了一个面向目标的自适应软件系统的可信需求建模分析方法,较之于现有的自适应软件的需求建模方法,该方法细化了需求建模过程中的多个方面的建模工作,增加了对自适应基础设施和自适应场景等方面的需求建模的支持。
针对需求规约和软件体系结构模型之间的概念差距和相对独立的演化所造成的从需求模型到体系结构设计转换困难的问题,本文以可信目标模型为基础,提出了一个系统化的推导自适应体系结构的方法。面向体系结构的结构化模型和行为模型两个设计视图,分别论述了在各种“目标精化模式”下,如何从目标模型推导出体系结构模型。在此基础上,提出了一个从目标模型到体系结构模型之间的追踪元模型,以保证整个推导过程的可追踪性和一致性。
在现有的自适应容错实现技术的基础上,本文提出一种更加广义的容错概念：1)在容错对象方面,除了软件自身的设计和实现缺陷外,将运行环境的变化和失效以及系统多种非功能性目标的冲突也纳入到容错范围中；2)在容错目标方面,强调可生存性而非绝对的系统可靠性,以保障系统的关键服务为基本目标,在此基础上通过各种容错手段实现系统整体的优化运行。重点探讨了如何以软件体系结构为中心来展开对运行时系统进行监测、分析、规划和实施等自适应活动。
针对目前自适应软件系统所面临的运行时监控的难点问题,本文提出了一个基于目标模型的运行时监控与诊断分析方法。将需求推理、运行时监控以及系统的自适应调整行为集成于一体进行研究,以在检测出系统异常时,及时对检测结果进行自适应容错处理。本文从监控事件的定义,到生成和编织监控代码,再到诊断和响应监控结果,给出了一个系统完整的可信需求的运行时监控方案。
最后,本文设计了相应的支撑平台并实现了其原型系统。
As Internet software centralized information systems have deeply impacted most aspects of our social and economical life, the Internet based distributed computer systems and open network environments also have increased complexity, error-proneness, and instability of systems, which makes them huge and hard to manage. As defects and safety hazards seem hard to avoid, systems are becoming more vulnerable, and sometimes even not work as expected. All of these factors have brought new problems and challenges to the dependability of software systems.
Software fault-tolerance technology is an important method to guarantee the dependability of the systems. But, the traditional software fault-tolerance methods have several disadvantages:costs are too high that multiple redundant implementation versions are needed; low modularization makes modeling and predictive analysis hard; unable to adapt various and complex run-time ineffectiveness. In recent years, people in the field of dependable software research are tended to associate their research with self-adaptive software systems. Comparing to traditional redundancy and diversity based fault-tolerance methods, self-adaptive systems can dynamically adjust their behaviors and structures, thus improve reliability at run time. This leads to a more flexible and effective way towards software dependability.
Based on comprehensive study of this area, this dissertation presents theories and technologies that cover the whole life cycle of development of dependable software systems, and provide practical guides. This dissertation propose a more systematic, effective, and practical self-adaptive fault-tolerance solution, to combine theories and technologies scattered among reliable software system research:from modeling of reliable requirement, to design of self adaptive fault-tolerance software architecture, as well as system implementation and run-time monitoring and diagnosis, we tight designs of products of the software system development stages, and form a integral theoretical system.
To fix the disadvantages of current goal-oriented requirement modeling methods in self-adaptive software system, and to support requirements of runtime monitoring, diagnostics and fault tolerance in software systems, this dissertation at first extends the description framework, goal types and goal relations of KAOS requirement modeling methodology. And based on this, this dissertation proposes a systematical and reliable requirement modeling method for the goal oriented self-adaptive software systems. Comparing to the current similar works, our method refines many aspects in requirement modeling process, and adds the support for modeling self-adaptive infrastructure and self-adaptive scenario.
Due to the concept differences between requirement models and software architecture models and the relatively independent evolutions, translating requirement models to software architecture model is very difficult. Aiming to solve this problem, based on the reliable goal models, this thesis proposes a systematic derivation method for self-adaptive software architecture model. From two architectural design views, we respectively discuss the ways to derive software architecture model from goal model according to different kinds of goal refinement patterns. Then we propose a tracking meta-model from goal model to software architecture model that guarantees the track-ability and consistency in the whole derivation process.
Based on the current implementation of self-adaptive fault tolerance techniques, this thesis raises a boarder fault-tolerance concept:1) For fault-tolerance objects, besides defects in design and implementation of software itself, we also take changes and invalidation of runtime environment, and non-functional conflicts in system into consideration 2) For fault tolerance targets, we don't emphasize absolute reliability but sustainability to guarantee the key services, as our mail goal. Based on this we use kinds of fault tolerance methods to optimize the execution of whole system. This dissertation mainly discusses how to carry out runtime self-adaptive activities like monitoring, analysing, planning and execution, which focus on the software architecture.
To relieve the difficulty in runtime monitoring of the self-adaptive systems, based on the goal model, this thesis proposes a runtime monitoring and diagnosing approach. By integrating requirement reasoning, runtime monitoring and self-reconfiguring, it can perform fault tolerance behavior based on the detection of system errors and diagnostic results. From the definition of monitoring events, to generating and weaving the monitoring code, and then diagnosing and responding to the monitoring results, this thesis provides a complete solution for runtime monitoring of the reliable requirements.
Finally, we also design the corresponding support platform and implement a prototype system.
软件容错技术是保障软件可信性的主要方法之一。但是传统的容错技术存在着许多不足之处：实现成本高,往往需要多个冗余的实现版本；模块化程度较差,难以清晰地进行建模和预测分析；灵活性不强,难以适应复杂多变的运行时失效。近年来,高可信软件系统方面的研究工作越来越多地与自适应软件系统(self-adaptive software system)联系起来。与传统的基于冗余和多样性思想的软件容错方法相比,自适应软件系统能够通过对自身行为和结构的动态调整来适应自身的缺陷和环境的变化,从运行时控制的角度提高软件系统的可信性。为我们提供了一种更加灵活和有效的软件容错途径。
本文在分析当前自适应软件研究领域的工作的基础上,针对高可信自适应软件系统在现实开发中面临的很多问题,论述了在可信软件系统开发的整个生命周期中所涉及的相关理论和技术,对指导高可信自适应容错软件系统开发的实践活动具有现实性的意义。本文将可信软件系统研究领域中各个阶段相互独立分散的理论与技术进行了统一,提出了一个更加系统、有效和实用的自适应容错解决方案：从可信需求建模,到自适应体系结构设计,再到系统的实现及运行时监控与诊断,将可信软件系统开发过程中的各个阶段所需的制品的设计紧密联系在一起,形成了一个全面而统一的技术体系。
为解决现有的面向目标的需求建模方法在自适应软件系统的需求建模方面所表现出来的不足,以及为了支持软件系统的运行时监控、诊断和容错决策的需要,本文首先对KAOS需求建模方法中的描述框架、目标类型、目标关系等方面进行了扩展。在此基础上,提出了一个面向目标的自适应软件系统的可信需求建模分析方法,较之于现有的自适应软件的需求建模方法,该方法细化了需求建模过程中的多个方面的建模工作,增加了对自适应基础设施和自适应场景等方面的需求建模的支持。
针对需求规约和软件体系结构模型之间的概念差距和相对独立的演化所造成的从需求模型到体系结构设计转换困难的问题,本文以可信目标模型为基础,提出了一个系统化的推导自适应体系结构的方法。面向体系结构的结构化模型和行为模型两个设计视图,分别论述了在各种“目标精化模式”下,如何从目标模型推导出体系结构模型。在此基础上,提出了一个从目标模型到体系结构模型之间的追踪元模型,以保证整个推导过程的可追踪性和一致性。
在现有的自适应容错实现技术的基础上,本文提出一种更加广义的容错概念：1)在容错对象方面,除了软件自身的设计和实现缺陷外,将运行环境的变化和失效以及系统多种非功能性目标的冲突也纳入到容错范围中；2)在容错目标方面,强调可生存性而非绝对的系统可靠性,以保障系统的关键服务为基本目标,在此基础上通过各种容错手段实现系统整体的优化运行。重点探讨了如何以软件体系结构为中心来展开对运行时系统进行监测、分析、规划和实施等自适应活动。
针对目前自适应软件系统所面临的运行时监控的难点问题,本文提出了一个基于目标模型的运行时监控与诊断分析方法。将需求推理、运行时监控以及系统的自适应调整行为集成于一体进行研究,以在检测出系统异常时,及时对检测结果进行自适应容错处理。本文从监控事件的定义,到生成和编织监控代码,再到诊断和响应监控结果,给出了一个系统完整的可信需求的运行时监控方案。
最后,本文设计了相应的支撑平台并实现了其原型系统。
As Internet software centralized information systems have deeply impacted most aspects of our social and economical life, the Internet based distributed computer systems and open network environments also have increased complexity, error-proneness, and instability of systems, which makes them huge and hard to manage. As defects and safety hazards seem hard to avoid, systems are becoming more vulnerable, and sometimes even not work as expected. All of these factors have brought new problems and challenges to the dependability of software systems.
Software fault-tolerance technology is an important method to guarantee the dependability of the systems. But, the traditional software fault-tolerance methods have several disadvantages:costs are too high that multiple redundant implementation versions are needed; low modularization makes modeling and predictive analysis hard; unable to adapt various and complex run-time ineffectiveness. In recent years, people in the field of dependable software research are tended to associate their research with self-adaptive software systems. Comparing to traditional redundancy and diversity based fault-tolerance methods, self-adaptive systems can dynamically adjust their behaviors and structures, thus improve reliability at run time. This leads to a more flexible and effective way towards software dependability.
Based on comprehensive study of this area, this dissertation presents theories and technologies that cover the whole life cycle of development of dependable software systems, and provide practical guides. This dissertation propose a more systematic, effective, and practical self-adaptive fault-tolerance solution, to combine theories and technologies scattered among reliable software system research:from modeling of reliable requirement, to design of self adaptive fault-tolerance software architecture, as well as system implementation and run-time monitoring and diagnosis, we tight designs of products of the software system development stages, and form a integral theoretical system.
To fix the disadvantages of current goal-oriented requirement modeling methods in self-adaptive software system, and to support requirements of runtime monitoring, diagnostics and fault tolerance in software systems, this dissertation at first extends the description framework, goal types and goal relations of KAOS requirement modeling methodology. And based on this, this dissertation proposes a systematical and reliable requirement modeling method for the goal oriented self-adaptive software systems. Comparing to the current similar works, our method refines many aspects in requirement modeling process, and adds the support for modeling self-adaptive infrastructure and self-adaptive scenario.
Due to the concept differences between requirement models and software architecture models and the relatively independent evolutions, translating requirement models to software architecture model is very difficult. Aiming to solve this problem, based on the reliable goal models, this thesis proposes a systematic derivation method for self-adaptive software architecture model. From two architectural design views, we respectively discuss the ways to derive software architecture model from goal model according to different kinds of goal refinement patterns. Then we propose a tracking meta-model from goal model to software architecture model that guarantees the track-ability and consistency in the whole derivation process.
Based on the current implementation of self-adaptive fault tolerance techniques, this thesis raises a boarder fault-tolerance concept:1) For fault-tolerance objects, besides defects in design and implementation of software itself, we also take changes and invalidation of runtime environment, and non-functional conflicts in system into consideration 2) For fault tolerance targets, we don't emphasize absolute reliability but sustainability to guarantee the key services, as our mail goal. Based on this we use kinds of fault tolerance methods to optimize the execution of whole system. This dissertation mainly discusses how to carry out runtime self-adaptive activities like monitoring, analysing, planning and execution, which focus on the software architecture.
To relieve the difficulty in runtime monitoring of the self-adaptive systems, based on the goal model, this thesis proposes a runtime monitoring and diagnosing approach. By integrating requirement reasoning, runtime monitoring and self-reconfiguring, it can perform fault tolerance behavior based on the detection of system errors and diagnostic results. From the definition of monitoring events, to generating and weaving the monitoring code, and then diagnosing and responding to the monitoring results, this thesis provides a complete solution for runtime monitoring of the reliable requirements.
Finally, we also design the corresponding support platform and implement a prototype system.
引文
[1]刘克,单志广,王戟,何积丰,张兆田,秦玉文。“可信软件基础研究重大研究计划综述”。中国科学基金,2008,(03),pp.145-151.
[2]Trusted Computing Group, TCG Architecture Overview v1.2. http s://www.trustedcomputinggroup.org/specs/IWG/TCG_1_0_Architecture_Overvie w.pdf.
[3]Bill Gates, "Trustworthy Computing", http://www.wired.com/news/business/0,1367,49826,00.html.
[4]林闯,“可信网络研究”,计算机学报,2005,Vol.28,No.5,pp：751-758.
[5]Kai-Yuan Cai, Xiang-Yun Wang:"Towards a Control-Theoretical Approach to Software Fault-Tolerance". QSIC 2004.
[6]Betty H.C. Cheng, Rogerio de Lemos, Stephen Fickas, etc. SEAMS 2007: Software Engineering for Adaptive and Self-Managing Systems. International Workshop on Software Engineering for Adaptive and Self-Managing Systems (SEAMS'07).
[7]闵应骅。“前进中的可信计算”。新华网-中国传媒科技http://news.xinhuanet. com/newmedia/2005-11/22/content 3818095.htm
[8]A. Avizienis. The n-version approach to fault-tolerant software. IEEE Trans. Sofhvare Engineering, vol SE-11,1985 Dec, pp:1491-1501.
[9]B. Randell. System Structure for Software Fault-Tolerance, IEEE Trans. Software Engineering, vol SE-1,1975, pp:220-232.
[10]A.Capozucca, N.Guelfi, P.Pelliccione, H.Muccini, "An Architecture-driven Methodology for Developing Fault-Tolerant Systems,"Software Engineering Competence Center Technical Report nr.TR-SE2C-05-10,SE2C, Luxembourg,2005.
[11]IBM Corporation. "An architectural blueprint for autonomic computing" http://www.ibm.com/developerworks/autonomic/library/ac-summary/ac-blue.html.20 06
[12]A. Lapouchnian, Y. Yu, S. Liaskos and J. Mylopoulos. Requirements-Driven Design of Autonomic Application Software. In Proceedings of CASCON'06. Toronto, 2006.
[13]Diao Y, Hellerstein J L, Parekh S, et al. "Managing Web server performance with autotune agents". IBM Syst J,2003,42(1), pp:136-149.
[14]Dai M, Rouff Y S, Rash C A, et al. "Modeling for NASA autonomous nano-technology swarm missions and model-driven autonomic computing". In:21st International Conference on Advanced Information Networking and Applications (AINA 2007). Washington:IEEE Computer Society,2007. pp:250-257.
[15]陈火旺,王戟,董威。“高可信软件工程技术”。电子学报,2003,Vol.31(12A).
[16]S.P. Leblanc, P.A. Roman. "Reliability estimation of hierarchical software system". In Proceedings annual Reliability and Maintainability Symposium,2002.
[17]Goseva-Popstojanova K, Trivedi K, Mathur A P. "How different architecture based software reliability models are related?". In:Proc. of the Fast Abstracts 11th IEEE Int'l. Symp. on Software Reliability Engineering (ISSRE 2000).
[18]Y. Zhu, J. Gao. A method to calculate the reliability of component based software, In Proceedings of 12th Asian Test Symposium, (ATS 2003), pp:488-491.
[19]H. Singh, et al. "A Bayesian approach to reliability prediction and assessment of component based systems", In Proceedings of 12th International Symposium on Software Reliability Engineering (ISSRE 2001).2001, pp:12-21.
[20]胡军,于笑丰,张岩,王林章,李宣东,郑国梁,“基于场景规约的构件式系统设计分析与验证”,计算机学报,2006,Vol.29 No.4,pp：513-525.
[21]梁军涛,蒋晓原,张海,“根据软件体系结构评估软件可靠性”,应用科学学报,2009年,Vol.27 No.3,pp：277-281.
[22]毛晓光,邓勇进,“基于构件软件的可靠性通用模型[J]”。软件学报,2004,Vol.15 No.1,pp：27-32.
[23]樊林波,吴智,赵明,“基于构件的软件可靠性分析”,计算机科学,2007,Vol.34,No.5,pp：266-268.
[24]马敏书,张仲义,吕永波,“层次型软件系统可靠性模型及预测”[J].中国软科学,2003年第6期,pp：147-150.
[25]Fisher J, Linger R. "Survivability:protecting your critical systems". IEEE Journal of Internet Computing,1999,3(6), pp:55-63.
[26]Keromytis A, et al. "A Holistic Approach to Service Survivability[C]". In Proceedings of the 2003 ACM workshop on Survivable and self-regenerative systems, in association with 10th ACM Conference on Computer and Communications Security,2003. pp:11-20.
[27]郭渊博,马建峰。“分布式系统中服务可生存性的定量分析[J]。”同济大学学报：自然科学版,2002,Vol.30 No.10 pp：1190-1193.
[28]Wells D, et al. "Software Survivability[C]". In Proceedings of DARPA Information Survivability Conference and Exposition (DISCEX), IEEE Computer Soc. Press, Los Alamitos, Calif, Jan.2000, pp:241-255.
[29]Ghosh A K, Voas J M. "Inoculating Software for Survivability[C]". Communications of the ACM,1999,42 (7), pp:38-44.
[30]John C. Knight, Elisabeth A. Strunk. Achieving Critical System Survivability Through Software Architectures. Architecting Dependable Systems II, LNCS 3069, 2004.
[31]Jha S, Wing J M. "Survivability Analysis of Networked Systems[C]". In proceedings of the 23rd International Conference on Software Engineering (ICSE 2001),pp:307-317.
[32]R. J. Ellison, D. A. Fisher, R. C. Linger, H. F. Lipson, T. A. Longstaff, and N. R. Mead. "Survivable systems:An emerging discipline". In Proceedings of the 11th Canadian Information Technology Security Symposium (CITSS'99), Ottawa, Ontario, May 1999.
[33]R. Kazman, M. Klein, M. Barbacci, T. Longstaff, H. F. Lipson, and S. J. Carriere. 'The architecture tradeoff analysis method". In Proceedings of the IEEE International Conference on Engineering of Complex Computer Systems, Monterey, CA, August 1998.
[34]H. Lipson, N. Mead, A. Moore, "Can we ever build survivable systems from COTS components?" In proceedings of CAiSE 2002 LNCS, vol.2348, Springer-Verlag, Orlando, Florida,2002, pp:216-229.
[35]黄遵国,卢锡城,王怀民.“可生存技术及其实现框架研究”.国防科技大学学报,Vol.24,No.5,2002.
[36]A.Romanovsky,"A Looming Fault Tolerance Software Crisis?"ACM SIGSOFT Software Engineering Notes.Vol.32, No.2,2007.
[37]A. Mahmood, E. J. McCluskey. Concurrent Error Detection Using Watchdog Processors-A Survey. IEEE Trans. Computers, vol37,1988, Feb, pp 160-174.
[38]K-H. Huang, J. A. Abraham. Algorithm-based Fault Tolerance for Matrix Operations. IEEE Trans. Computers, vol C-33,1984 Jun, pp 518-528.
[39]梅宏,黄罡,兰灵,李军国。“基于体系结构的网构软件自适应方法”。中国科学E辑：信息科学,Vol.38,No.6,2008,pp：901-920.
[40]Mirko Morandini, Loris Penserini, Anna Perini. Towards Goal-Oriented Development of Self-Adaptive Systems. SEAMS 2008.
[41]Axel van Lamsweerde, "Goal-Oriented Requirements Engineering:A Guided Tour", Proceedings RE'01,5th IEEE International Symposium on Requirements Engineering, Toronto, August 2001,249-263.
[42]B. Hui, S. Liaskos, and J. Mylopoulos. Requirements Analysis for Customizable Software:Goals-Skills-Preferences Framework. In Proc.11th IEEE International Requirements Engineering Conference (RE'03), Monterrey, CA, pp.117-126, September 2003.
[43]A. van Lamsweerde. Requirements Engineering in the Year 00:A Research Perspective. Proc. ICSE'00, Limerick, Ireland, June,2000.
[44]Anne Dardenne, Stephen Fickas, Axel van Lamsweerde. Goal-directed Concept Acquisition in Requirements Elicitation, IEEE 1991.
[45]唐姗,赵文耘.基于反射的动态软件体系结构实现.微电子学与计算机.2006年第32卷第9期.
[46]Chung L, Nixon B.A, Yu E, et al. Non-functional requirements in software engineering[M]. Kluwer Academic Publishers,1999.
[47]Mylopoulos J, Chung L, Nixon B A. Representing and using nonfunct ional requirements:a process-oriented approach [J]. IEEE Transact ions on Softw are Engineering,1992,18 (6):483-497.
[48]IEEE Std 610.12-1990. IEEE Standard Glossary of Software Engineering Terminology. New York:Institute of Electrical and Electronics Engineers,1990.
[49]Mario Barbacci., Mark H.Klein, Thomas A.Longstaff, Charles B. Weinstock. Quality Attributes, Software Engineering Insititute, Carnegie Mellon University Pittsburgh, Pennsylvania 15213, December 1995.
[50]Greg Brown, Betty H.C. Cheng, Heather Goldsby, Ji Zhang. Goal-oriented Specification of Adaptation Requirements Engineering in Adaptive Systems. SEAMS 2006.
[51]A. Dardenne, A. van Lamsweerde, and S. Fickas. Goal-directed requirements acquisition. Science of computer Programming,1993, pp:3-50.
[52]M.S. Feather, S.Fickas, A.V.Lamsweerde, and C.Ponsard. "Reconciling system requirements and runtime behavior". In IWSSD'98:Proceedings of the 9th International Workshop on Software Specification and Design,1998.
[53]S. Fickas and M. S. Feather. "Requirements monitoring in dynamic environments". In RE'95:Proceedings of the Second IEEE International Symposium on Requirements Engineering,1995.
[54]A. Lapouchnian, S.Liaskos, J.Mylopoulos, and Y.Yu. "Towards requirements-driven autonomic systems design". In DEAS'05:Proceedings of the 2005 Workshop on Design and Evolution of Autonomic Application Software,2005.
[55]Y. Yu, J. C. S. do Prado Leite, and J. Mylopoulos. "From goals to aspects: Discovering aspects from requirements goal models". In Proceedings of the 12th IEEE International Conference on Requirements Engineering (RE 2004),2004.
[56]Y. Yu, J. Mylopoulos, A. Lapouchnian, S. Liaskos, and J. C. Leite. "From stakeholder goals to high-variability software design". Technical report csrg-509, University of Toronto,2005.
[57]A. Dardenne, A. van Lamsweerde, and S. Fickas. Goal-directed requirements acquisition. Science of computer Programming,20:3-50,1993.
[58]Daniel Sykes, William Heaven, Jeff Magee, Jeff Kramer. From Goals To Components:A Combined Approach To Self-Management. SEAMS 2008.
[59]Parnas, D.:On the criteria to be used in decomposing systems into modules. CACM 15(12),1972, pp:1053-1058.
[60]A. Brown. Large-Scale Component-Based Development. New Jersey:Prentice Hall,2000.
[61]D.Garlan. Software Architecture:a Roadmap. The Future of Software Engineering, ACM Press,2000, pp.91-101.
[62]李长云.“基于体系结构的软件动态演化研究”[博士学位论文].浙江大学,2005.
[63]梅宏,申峻嵘。“软件体系结构研究进展”。软件学报,2006,Vol.17(6),pp.1257-1275.
[64]孙连山,孙艳春,陈泓婕,梅宏。“从需求规约到软件体系结构——个实例研究”。电子学报,2005,Vol.33(12A),pp.2508-2516.
[65]Brandozzi M, Perry DE. From goal-oriented requirements to architectural prescriptions:The preskriptor process. In:Proc. of the 2nd Int'l Software Requirements to Architectures Workshop.2003. pp.107-113.
[66]Van Lamweerde, A., Darimont, R., Massonet, P.:Goal-Directed Elaboration of Requirements for a Meeting Scheduler:Problems and Lessons Learnt. In:Proc. of the RE 1995-2nd IEEE Symposium on Requirements Engineering, York, pp.194-203 (1995).
[67]Van Lamsweerde, A.:From system goals to software architecture. In:Bernardo, M., Inverardi, P. (eds.) SFM 2003. LNCS, vol.2804, pp.25-43. Springer, Heidelberg (2003).
[68]梅宏,陈锋,冯耀东,杨杰.ABC：基于体系结构、面向构件的软件开发方法.软件学报,2003,Vol.14,No.4：pp.721-732.
[69]Medvidovic, N., Gruenbacher, P., Egyed, A.F., Boehm, B.W.:Bridging Models across the Software Lifecycle. Technical Report USC-CSE-2000-521, University of Southern California (2000).
[70]Brandozzi, M., Perry, D.E.:Transforming goal oriented requirements specifications into architectural prescriptions. In:STRAW at ICSE 2001 (2001).
[71]Rajasree MS, Reddy PK, Janakiram D. Pattern oriented software development: Moving seamlessly from requirements to architecture. In:Proc. of the 2nd Int'l Software Requirements to Architectures Workshop.2003. pp.54-60.
[72]Zhang, J., Cheng, B.H.:Model-based development of dynamically adaptive software. In:Proc. of the 28th International Conference on Software Engineering (2006).
[73]Shang-Wen Cheng, David Garlan,etc. Using Architectural Style as a Basis for System Self-repair. Proceedings of the IFIP 17th World Computer Congress. pp. 45-59 (2002).
[74]Yu, Y., Lapouchnian, A., Liaskos, S., Mylopoulos, J., Leite, J.C.S.P.:From goals to high variability software design. In:17th International Symposium on Methodologies for Intelligent Systems, pp.1-16 (2008).
[75]M. Rakic, and N. Medvidovic. Increasing the Confidence in off-the-shelf Components:A Software Connector-based Approach. In Proceedings of the 2001 Symposium on Software Reusability (SSR'01), pages 11--18. ACM/SIGSOFT, May 2001.
[76]Paulo Asterio de C. Guerra, Cecilia Mary F. Rubira, and Rogerio de Lemos. A Fault-Tolerant Software Architecture for Component-Based Systems. Architecting Dependable Systems, LNCS 2677,2003.
[77]Yali Zhu, Gang Huang, Hong Mei. Quality Attribute Scenario Based Architectural Modeling for Self-Adaptation Supported by Architecture-based Reflective Middleware. Proceedings of the 11th Asia-Pacific Software Engineering Conference (APSEC'04).
[78]Yali Zhu, Gang Huang, Hong Mei. Modeling Diverse and Complex Interactions Enabled by Middleware as Connectors in Software Architectures.10th IEEE International Conference on the Engineering of Complex Computer Systems (ICECCS2005).
[79]Gang Huang, Hong Mei, Qianxiang Wang. Towards Software Architecture at Runtime. ACM SIGSOFT Software Engineering Notes, Vol.28, No.2, March 2003.
[80]Junrong Shen, Xi Sun, Gang Huang, Wenpin Jiao, Yanchun Sun, Hong Mei: Towards a Unified Formal Model for Supporting Mechanisms of Dynamic Component Update. ESEC/SIGSOFT FSE 2005.
[81]Hong Mei, Gang Huang, Wei-Tek Tsai. Towards Self-Healing Systems via Dependable Architecture and Reflective Middleware. Proceedings of the 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems (WORDS'05).
[82]李军国,黄罡,邹键,梅宏.一种中间件服务容错配置管理方法.计算机学报,2007,30(10).
[83]马晓星,余萍,陶先平,吕建.一种面向服务的动态协同架构及其支撑平台.计算机学报,2005(4).
[84]余萍,马晓星,吕建,陶先平.一种面向动态软件体系结构的在线演化方法.软件学报,2006,17(6).
[85]潘健,周宇,罗滨,马晓星,吕建.一种基于本体的软件自适应机制.计算机科学,2007,34(11).
[86]马骞,俞春,马晓星,吕建ARTEMIS-ARC系统协同模型的自省式实现技术研究,计算机科学,2006,33(10).
[87]Peng, X., Wu, Y., Zhao, W.:A Feature-Oriented Adaptive Component Model for Dynamic Evolution. In:11th European Conference on Software Maintenance and Reengineering,2007, pp.49-57.
[88]Shan Tang, Xin Peng, Yiming Lau, Wenyun Zhao and Zhixiong Jiang. An Adaptive Software Architecture Model Based on Component-Mismatches Detection and Elimination. In the proceedings of 32nd Annual IEEE International Computer Software and Applications Conference (COMPSAC2008).
[89]许毅,赵文耘,彭鑫,张志.通用连接器模型及其形式化推导研究.南京大学学报(自然科学版),2005,41(5).
[90]彭鑫,赵文耘,钱乐秋.基于领域特征本体的构件语义描述和组装.电子学报,2006,34(12A).
[91]彭鑫,赵文耘,刘奕明.基于特征模型和构件语义的概念体系结构设计.软件学报,2006,17(6).
[92]Yiming Lau, Wenyun Zhao, Xin Peng, Zhixiong Jiang, Liwei Shen. Coordination-Policy Based Composed System Behavior Derivation. APSEC2007.
[93]Yiming Yang, Xin Peng, Wenyun Zhao. An Automatic Connector Generation Method for Dynamic Architecture. IEEE International Workshop on Quality-Oriented Reuse of Software, with COMPSAC 2007.
[94]Liwei Shen, Xin Peng and Wenyun Zhao. Decision Support for Dynamic Adaptation of Business Systems Based on Feature Binding Analysis. The First IEEE International Workshop on Software Engineering for Adaptive Software Systems, with COMPSAC 2007.
[95]李长云,李赣生,何频捷.一种形式化的动态体系结构描述语言.软件学报,2006,17(6).
[96]李长云,李莹,吴健,吴朝晖.一个面向服务的支持动态演化的软件模型.计算机学报,2006,29(7).
[97]熊惠民,应时,虞莉娟.基于组合连接器的动态软件体系结构规范方法.计算机科学,2007,34(8).
[98]于振华,蔡远利,徐海平.动态软件体系结构建模方法研究.西安交通大学学报,2007,41(2).
[99]Kai-Yuan Cai, Joao W. Cangussu, Raymond A. DeCarlo, Aditya P. Mathur:An Overview of Software Cybernetics. STEP 2003.
[100]Cangussu, J. W., Cooper, Kendra, Li, Changcheng. A Control Theory Based Framework for Dynamic Adaptable Systems. ACM Symposium on Applied Computing (SAC 2004) Nicosia, Cyprus, March 14-17,2004.
[101]I. Lee, H. Ben-Abdallah, S. Kannan, M. Kim, O. Sokolsky, and M. Viswanathan. A monitoring and checking framework for run-time correctness assurance. In Proceedings of the 1998 Korea-U.S. Technical Conference on Strategic Technologies,1998.
[102]Zheng Li, Yan Jin, Jun Han, A Runtime Monitoring and Validation Framework for Web Service Interactions, ASWEC,2006.
[103]Y. Wang, S. McIlraith, Y. Yu and J. Mylopoulos. An Automated Approach to Monitoring and Diagnosing Requirements. In:the 22nd IEEE/ACM International Conference on Automated Software Engineering (ASE'07) 2007.
[104]Feng Chen and Grigore Rosu, MOP:An Efficient and Generic Runtime Verification Framework, Technical report UIUCDCS-R-2007-2836, March 2007.
[105]黄罡,王千祥,梅宏.基于软件体系结构的反射式中间件研究[J].软件学报,2003,14(11),pp：1819-1826.
[106]刘永刚,李敏,王千祥,梅宏.基于中间件的运行时监测与分析框架,电子 学报,2007.
[107]Nelly Delgado, Ann Quiroz Gates, Steve Roach, A Taxonomy and Catalog of Runtime Software-Fault Monitoring Tools, IEEE Transactions on Software Engineering, Vol.30, No.12, December 2004.
[108]Avgustinov P, Bodden E, Hajiyev E et al.Aspect for trace monitoring. In Proc of Formal Approaches to Testing Systems and Runtime Verification (FATES/RV 2006). LNCS 4262, pp.20-39,2006.
[109]Bodden E. A lightweight LTL runtime verification tool for Java.In Proc of OOPSLA 2004. pp:306-307.
[110]Axel van Lamsweerde, "Goal-Oriented Requirements Engineering:A Guided Tour", Proceedings RE'01,5th IEEE International Symposium on Requirements Engineering, Toronto, August 2001, pp:249-263.
[111]Jaelson Castro, Manuel Kolp, John Mylopoulos, Towards requirements-driven information systems engineering:The tropos project,2002.
[112]S. Liaskos, A. Lapouchnian, Y. Yu, E. Yu, J. Mylopoulos. On Goal-based Variability Acquisition and Analysis. In Proc.14th IEEE International Requirements Engineering Conference, Minneapolis, USA, Sep 11-15,2006.
[113]Van Lamweerde, A., Darimont, R., Massonet, P.:Goal-Directed Elaboration of Requirements for a Meeting Scheduler:Problems and Lessons Learnt. In:Proc. of the RE 1995-2nd IEEE Symposium on Requirements Engineering, York,1995, pp:194-203.
[114]Andrzej Uszok, Jeffrey M. Bradshaw, Renia Jeffers, Austin Tate, Jeff Dalton. Applying KAOS Services to Ensure Policy Compliance for Semantic Web Services Workflow Composition and Enactment, ISWC 2004.
[115]Shan Tang, Xin Peng and Wenyun Zhao. Goal-Directed Modeling of Self-adaptive Software Architecture. In the proceedings of 14th. International Conference on Exploring Modeling Methods in Systems Analysis and Design (EMMSAD 2009 in conjunction with the CAiSE'09).
[116]A. van Lamsweerde, R. Darimont, and E. Letier. Managing Conflicts in Goal-Driven Requirements Engineering. IEEE Trans. Software Eng., vol.24, no.11, pp.908-926, Nov.1998.
[117]D. Cohen, M. S. Feather, K. Narayanaswamy, and S. S. Fickas. "Automatic monitoring of software requirements". In proceedings of the 19th International Conference on Software Engineering (ICSE 1997)
[118]D. Garlan, M. Shaw. An Introduction to Software Architecture. Advances in Software Engineering and Knowledge Engineering, Volume 1, World Scientific Publishing Co.,1993.
[119]Hoare, C.:Communicating Sequential Processes. Prentice-Hall International, Englewood Cliffs (1985).
[120]Robert J. Allen, "A Formal Approach to Software Architecture", Carnegie Mellon University, CMU Technical Report CMU-CS-97-144, May 1997.
[121]Kephart JO, Walsh WE. An artificial intelligence perspective on autonomic computing policies. In:Verma D, Devarakonda M, Lupu E, Kohli M, eds. Proc. of the 5th IEEE Int'l Workshop on Policies for Distributed Systems and Networks. New York:IEEE Computer Society,2004. pp:3-12.
[122]E. Gat. On Three-Layer Architectures. Artificial Intelligence and Mobile Robots:Case Studies of Successful Robot Systems,1998. pp:195-210.
[123]M. Ghallib, D. Nau, P. Traverso. Automated Planning:Theory and Practice. Morgan Kaufman,2005.
[124]Paolucci, M., Kawamura, T., Payne, T.R., et al.:"Semantic matching of web services capabilities". In Proceedings of the 1st International Semantic Web Conference (ISWC), Sardinia, Italy, June 2002, pp.333-347.
[125]Zaremski MA, Wing JM. Specification matching of software components. ACM Trans. on Software Engineering and Methodology,1997,6(4), pp:333-369.
[126]Luckham DC, Kenney JJ, Augustin LM, Vera J, Bryan D, Mann W. Specification and analysis of system architecture using rapide. IEEE Trans. on Software Engineering,1995,21(4), pp:336-355.
[127]Dai Y S. "Autonomic computing and reliability improvement". In proceedings of the eighth IEEE International Symposium on Object-Oriented Real-Time Distributed Computing (ISORC'05). New York:IEEE,2005, pp.204-206.
[128]Cheng S W. "Rainbow:Architecture-based Self-adaptation with Reusable Infrastructure"[J]. Computer,2004,37(10).pp:46-54.
[129]Alessandro Orso, Donglin Liang, Mary Jean Harrold, and Richard Lipton.Gamma System:Continuous Evolution of Software after Deployment, ISSTA 2002.
[130]J.O. Kephart and D.M. Chess, "The Vision of Autonomic Computing," Computer, vol.36, no.1,2003. pp:41-50.
[131]van Lamsweerde, A. and Letier, E. Handling Obstacles in Goal-oriented Requirements Engineering. IEEE Transactions on Software Engineering,26(10). 2000.
[132]E. M. Clarke, O. Grumberg, and D. A. Peled. Model Checking. The MIT Press, 2001.
[133]Laila Taher, Rawshan Basha, Hazem El Khatib, Qos Information & Computation (QoS-IC) Framework for QoS-based Discovery of Web services. The European Journal for the Informatics Professional,6 (4),2005.
[134]Anbazhagan Mani, Arun Nagarajan, Understanding quality of service for Web services,http://www-128.ibm.com/developerworks/webservices/library/ws-quality.ht ml.
[135]F. Dalpiaz, P. Giorgini, and J. Mylopoulos. An architecture for requirements-driven self-reconfiguration. In Proceedings, CAiSE, Volume 5565 of LNCS, pages 246-260. Springer,2009.
[136]http://www.objectiver.com
[2]Trusted Computing Group, TCG Architecture Overview v1.2. http s://www.trustedcomputinggroup.org/specs/IWG/TCG_1_0_Architecture_Overvie w.pdf.
[3]Bill Gates, "Trustworthy Computing", http://www.wired.com/news/business/0,1367,49826,00.html.
[4]林闯,“可信网络研究”,计算机学报,2005,Vol.28,No.5,pp：751-758.
[5]Kai-Yuan Cai, Xiang-Yun Wang:"Towards a Control-Theoretical Approach to Software Fault-Tolerance". QSIC 2004.
[6]Betty H.C. Cheng, Rogerio de Lemos, Stephen Fickas, etc. SEAMS 2007: Software Engineering for Adaptive and Self-Managing Systems. International Workshop on Software Engineering for Adaptive and Self-Managing Systems (SEAMS'07).
[7]闵应骅。“前进中的可信计算”。新华网-中国传媒科技http://news.xinhuanet. com/newmedia/2005-11/22/content 3818095.htm
[8]A. Avizienis. The n-version approach to fault-tolerant software. IEEE Trans. Sofhvare Engineering, vol SE-11,1985 Dec, pp:1491-1501.
[9]B. Randell. System Structure for Software Fault-Tolerance, IEEE Trans. Software Engineering, vol SE-1,1975, pp:220-232.
[10]A.Capozucca, N.Guelfi, P.Pelliccione, H.Muccini, "An Architecture-driven Methodology for Developing Fault-Tolerant Systems,"Software Engineering Competence Center Technical Report nr.TR-SE2C-05-10,SE2C, Luxembourg,2005.
[11]IBM Corporation. "An architectural blueprint for autonomic computing" http://www.ibm.com/developerworks/autonomic/library/ac-summary/ac-blue.html.20 06
[12]A. Lapouchnian, Y. Yu, S. Liaskos and J. Mylopoulos. Requirements-Driven Design of Autonomic Application Software. In Proceedings of CASCON'06. Toronto, 2006.
[13]Diao Y, Hellerstein J L, Parekh S, et al. "Managing Web server performance with autotune agents". IBM Syst J,2003,42(1), pp:136-149.
[14]Dai M, Rouff Y S, Rash C A, et al. "Modeling for NASA autonomous nano-technology swarm missions and model-driven autonomic computing". In:21st International Conference on Advanced Information Networking and Applications (AINA 2007). Washington:IEEE Computer Society,2007. pp:250-257.
[15]陈火旺,王戟,董威。“高可信软件工程技术”。电子学报,2003,Vol.31(12A).
[16]S.P. Leblanc, P.A. Roman. "Reliability estimation of hierarchical software system". In Proceedings annual Reliability and Maintainability Symposium,2002.
[17]Goseva-Popstojanova K, Trivedi K, Mathur A P. "How different architecture based software reliability models are related?". In:Proc. of the Fast Abstracts 11th IEEE Int'l. Symp. on Software Reliability Engineering (ISSRE 2000).
[18]Y. Zhu, J. Gao. A method to calculate the reliability of component based software, In Proceedings of 12th Asian Test Symposium, (ATS 2003), pp:488-491.
[19]H. Singh, et al. "A Bayesian approach to reliability prediction and assessment of component based systems", In Proceedings of 12th International Symposium on Software Reliability Engineering (ISSRE 2001).2001, pp:12-21.
[20]胡军,于笑丰,张岩,王林章,李宣东,郑国梁,“基于场景规约的构件式系统设计分析与验证”,计算机学报,2006,Vol.29 No.4,pp：513-525.
[21]梁军涛,蒋晓原,张海,“根据软件体系结构评估软件可靠性”,应用科学学报,2009年,Vol.27 No.3,pp：277-281.
[22]毛晓光,邓勇进,“基于构件软件的可靠性通用模型[J]”。软件学报,2004,Vol.15 No.1,pp：27-32.
[23]樊林波,吴智,赵明,“基于构件的软件可靠性分析”,计算机科学,2007,Vol.34,No.5,pp：266-268.
[24]马敏书,张仲义,吕永波,“层次型软件系统可靠性模型及预测”[J].中国软科学,2003年第6期,pp：147-150.
[25]Fisher J, Linger R. "Survivability:protecting your critical systems". IEEE Journal of Internet Computing,1999,3(6), pp:55-63.
[26]Keromytis A, et al. "A Holistic Approach to Service Survivability[C]". In Proceedings of the 2003 ACM workshop on Survivable and self-regenerative systems, in association with 10th ACM Conference on Computer and Communications Security,2003. pp:11-20.
[27]郭渊博,马建峰。“分布式系统中服务可生存性的定量分析[J]。”同济大学学报：自然科学版,2002,Vol.30 No.10 pp：1190-1193.
[28]Wells D, et al. "Software Survivability[C]". In Proceedings of DARPA Information Survivability Conference and Exposition (DISCEX), IEEE Computer Soc. Press, Los Alamitos, Calif, Jan.2000, pp:241-255.
[29]Ghosh A K, Voas J M. "Inoculating Software for Survivability[C]". Communications of the ACM,1999,42 (7), pp:38-44.
[30]John C. Knight, Elisabeth A. Strunk. Achieving Critical System Survivability Through Software Architectures. Architecting Dependable Systems II, LNCS 3069, 2004.
[31]Jha S, Wing J M. "Survivability Analysis of Networked Systems[C]". In proceedings of the 23rd International Conference on Software Engineering (ICSE 2001),pp:307-317.
[32]R. J. Ellison, D. A. Fisher, R. C. Linger, H. F. Lipson, T. A. Longstaff, and N. R. Mead. "Survivable systems:An emerging discipline". In Proceedings of the 11th Canadian Information Technology Security Symposium (CITSS'99), Ottawa, Ontario, May 1999.
[33]R. Kazman, M. Klein, M. Barbacci, T. Longstaff, H. F. Lipson, and S. J. Carriere. 'The architecture tradeoff analysis method". In Proceedings of the IEEE International Conference on Engineering of Complex Computer Systems, Monterey, CA, August 1998.
[34]H. Lipson, N. Mead, A. Moore, "Can we ever build survivable systems from COTS components?" In proceedings of CAiSE 2002 LNCS, vol.2348, Springer-Verlag, Orlando, Florida,2002, pp:216-229.
[35]黄遵国,卢锡城,王怀民.“可生存技术及其实现框架研究”.国防科技大学学报,Vol.24,No.5,2002.
[36]A.Romanovsky,"A Looming Fault Tolerance Software Crisis?"ACM SIGSOFT Software Engineering Notes.Vol.32, No.2,2007.
[37]A. Mahmood, E. J. McCluskey. Concurrent Error Detection Using Watchdog Processors-A Survey. IEEE Trans. Computers, vol37,1988, Feb, pp 160-174.
[38]K-H. Huang, J. A. Abraham. Algorithm-based Fault Tolerance for Matrix Operations. IEEE Trans. Computers, vol C-33,1984 Jun, pp 518-528.
[39]梅宏,黄罡,兰灵,李军国。“基于体系结构的网构软件自适应方法”。中国科学E辑：信息科学,Vol.38,No.6,2008,pp：901-920.
[40]Mirko Morandini, Loris Penserini, Anna Perini. Towards Goal-Oriented Development of Self-Adaptive Systems. SEAMS 2008.
[41]Axel van Lamsweerde, "Goal-Oriented Requirements Engineering:A Guided Tour", Proceedings RE'01,5th IEEE International Symposium on Requirements Engineering, Toronto, August 2001,249-263.
[42]B. Hui, S. Liaskos, and J. Mylopoulos. Requirements Analysis for Customizable Software:Goals-Skills-Preferences Framework. In Proc.11th IEEE International Requirements Engineering Conference (RE'03), Monterrey, CA, pp.117-126, September 2003.
[43]A. van Lamsweerde. Requirements Engineering in the Year 00:A Research Perspective. Proc. ICSE'00, Limerick, Ireland, June,2000.
[44]Anne Dardenne, Stephen Fickas, Axel van Lamsweerde. Goal-directed Concept Acquisition in Requirements Elicitation, IEEE 1991.
[45]唐姗,赵文耘.基于反射的动态软件体系结构实现.微电子学与计算机.2006年第32卷第9期.
[46]Chung L, Nixon B.A, Yu E, et al. Non-functional requirements in software engineering[M]. Kluwer Academic Publishers,1999.
[47]Mylopoulos J, Chung L, Nixon B A. Representing and using nonfunct ional requirements:a process-oriented approach [J]. IEEE Transact ions on Softw are Engineering,1992,18 (6):483-497.
[48]IEEE Std 610.12-1990. IEEE Standard Glossary of Software Engineering Terminology. New York:Institute of Electrical and Electronics Engineers,1990.
[49]Mario Barbacci., Mark H.Klein, Thomas A.Longstaff, Charles B. Weinstock. Quality Attributes, Software Engineering Insititute, Carnegie Mellon University Pittsburgh, Pennsylvania 15213, December 1995.
[50]Greg Brown, Betty H.C. Cheng, Heather Goldsby, Ji Zhang. Goal-oriented Specification of Adaptation Requirements Engineering in Adaptive Systems. SEAMS 2006.
[51]A. Dardenne, A. van Lamsweerde, and S. Fickas. Goal-directed requirements acquisition. Science of computer Programming,1993, pp:3-50.
[52]M.S. Feather, S.Fickas, A.V.Lamsweerde, and C.Ponsard. "Reconciling system requirements and runtime behavior". In IWSSD'98:Proceedings of the 9th International Workshop on Software Specification and Design,1998.
[53]S. Fickas and M. S. Feather. "Requirements monitoring in dynamic environments". In RE'95:Proceedings of the Second IEEE International Symposium on Requirements Engineering,1995.
[54]A. Lapouchnian, S.Liaskos, J.Mylopoulos, and Y.Yu. "Towards requirements-driven autonomic systems design". In DEAS'05:Proceedings of the 2005 Workshop on Design and Evolution of Autonomic Application Software,2005.
[55]Y. Yu, J. C. S. do Prado Leite, and J. Mylopoulos. "From goals to aspects: Discovering aspects from requirements goal models". In Proceedings of the 12th IEEE International Conference on Requirements Engineering (RE 2004),2004.
[56]Y. Yu, J. Mylopoulos, A. Lapouchnian, S. Liaskos, and J. C. Leite. "From stakeholder goals to high-variability software design". Technical report csrg-509, University of Toronto,2005.
[57]A. Dardenne, A. van Lamsweerde, and S. Fickas. Goal-directed requirements acquisition. Science of computer Programming,20:3-50,1993.
[58]Daniel Sykes, William Heaven, Jeff Magee, Jeff Kramer. From Goals To Components:A Combined Approach To Self-Management. SEAMS 2008.
[59]Parnas, D.:On the criteria to be used in decomposing systems into modules. CACM 15(12),1972, pp:1053-1058.
[60]A. Brown. Large-Scale Component-Based Development. New Jersey:Prentice Hall,2000.
[61]D.Garlan. Software Architecture:a Roadmap. The Future of Software Engineering, ACM Press,2000, pp.91-101.
[62]李长云.“基于体系结构的软件动态演化研究”[博士学位论文].浙江大学,2005.
[63]梅宏,申峻嵘。“软件体系结构研究进展”。软件学报,2006,Vol.17(6),pp.1257-1275.
[64]孙连山,孙艳春,陈泓婕,梅宏。“从需求规约到软件体系结构——个实例研究”。电子学报,2005,Vol.33(12A),pp.2508-2516.
[65]Brandozzi M, Perry DE. From goal-oriented requirements to architectural prescriptions:The preskriptor process. In:Proc. of the 2nd Int'l Software Requirements to Architectures Workshop.2003. pp.107-113.
[66]Van Lamweerde, A., Darimont, R., Massonet, P.:Goal-Directed Elaboration of Requirements for a Meeting Scheduler:Problems and Lessons Learnt. In:Proc. of the RE 1995-2nd IEEE Symposium on Requirements Engineering, York, pp.194-203 (1995).
[67]Van Lamsweerde, A.:From system goals to software architecture. In:Bernardo, M., Inverardi, P. (eds.) SFM 2003. LNCS, vol.2804, pp.25-43. Springer, Heidelberg (2003).
[68]梅宏,陈锋,冯耀东,杨杰.ABC：基于体系结构、面向构件的软件开发方法.软件学报,2003,Vol.14,No.4：pp.721-732.
[69]Medvidovic, N., Gruenbacher, P., Egyed, A.F., Boehm, B.W.:Bridging Models across the Software Lifecycle. Technical Report USC-CSE-2000-521, University of Southern California (2000).
[70]Brandozzi, M., Perry, D.E.:Transforming goal oriented requirements specifications into architectural prescriptions. In:STRAW at ICSE 2001 (2001).
[71]Rajasree MS, Reddy PK, Janakiram D. Pattern oriented software development: Moving seamlessly from requirements to architecture. In:Proc. of the 2nd Int'l Software Requirements to Architectures Workshop.2003. pp.54-60.
[72]Zhang, J., Cheng, B.H.:Model-based development of dynamically adaptive software. In:Proc. of the 28th International Conference on Software Engineering (2006).
[73]Shang-Wen Cheng, David Garlan,etc. Using Architectural Style as a Basis for System Self-repair. Proceedings of the IFIP 17th World Computer Congress. pp. 45-59 (2002).
[74]Yu, Y., Lapouchnian, A., Liaskos, S., Mylopoulos, J., Leite, J.C.S.P.:From goals to high variability software design. In:17th International Symposium on Methodologies for Intelligent Systems, pp.1-16 (2008).
[75]M. Rakic, and N. Medvidovic. Increasing the Confidence in off-the-shelf Components:A Software Connector-based Approach. In Proceedings of the 2001 Symposium on Software Reusability (SSR'01), pages 11--18. ACM/SIGSOFT, May 2001.
[76]Paulo Asterio de C. Guerra, Cecilia Mary F. Rubira, and Rogerio de Lemos. A Fault-Tolerant Software Architecture for Component-Based Systems. Architecting Dependable Systems, LNCS 2677,2003.
[77]Yali Zhu, Gang Huang, Hong Mei. Quality Attribute Scenario Based Architectural Modeling for Self-Adaptation Supported by Architecture-based Reflective Middleware. Proceedings of the 11th Asia-Pacific Software Engineering Conference (APSEC'04).
[78]Yali Zhu, Gang Huang, Hong Mei. Modeling Diverse and Complex Interactions Enabled by Middleware as Connectors in Software Architectures.10th IEEE International Conference on the Engineering of Complex Computer Systems (ICECCS2005).
[79]Gang Huang, Hong Mei, Qianxiang Wang. Towards Software Architecture at Runtime. ACM SIGSOFT Software Engineering Notes, Vol.28, No.2, March 2003.
[80]Junrong Shen, Xi Sun, Gang Huang, Wenpin Jiao, Yanchun Sun, Hong Mei: Towards a Unified Formal Model for Supporting Mechanisms of Dynamic Component Update. ESEC/SIGSOFT FSE 2005.
[81]Hong Mei, Gang Huang, Wei-Tek Tsai. Towards Self-Healing Systems via Dependable Architecture and Reflective Middleware. Proceedings of the 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems (WORDS'05).
[82]李军国,黄罡,邹键,梅宏.一种中间件服务容错配置管理方法.计算机学报,2007,30(10).
[83]马晓星,余萍,陶先平,吕建.一种面向服务的动态协同架构及其支撑平台.计算机学报,2005(4).
[84]余萍,马晓星,吕建,陶先平.一种面向动态软件体系结构的在线演化方法.软件学报,2006,17(6).
[85]潘健,周宇,罗滨,马晓星,吕建.一种基于本体的软件自适应机制.计算机科学,2007,34(11).
[86]马骞,俞春,马晓星,吕建ARTEMIS-ARC系统协同模型的自省式实现技术研究,计算机科学,2006,33(10).
[87]Peng, X., Wu, Y., Zhao, W.:A Feature-Oriented Adaptive Component Model for Dynamic Evolution. In:11th European Conference on Software Maintenance and Reengineering,2007, pp.49-57.
[88]Shan Tang, Xin Peng, Yiming Lau, Wenyun Zhao and Zhixiong Jiang. An Adaptive Software Architecture Model Based on Component-Mismatches Detection and Elimination. In the proceedings of 32nd Annual IEEE International Computer Software and Applications Conference (COMPSAC2008).
[89]许毅,赵文耘,彭鑫,张志.通用连接器模型及其形式化推导研究.南京大学学报(自然科学版),2005,41(5).
[90]彭鑫,赵文耘,钱乐秋.基于领域特征本体的构件语义描述和组装.电子学报,2006,34(12A).
[91]彭鑫,赵文耘,刘奕明.基于特征模型和构件语义的概念体系结构设计.软件学报,2006,17(6).
[92]Yiming Lau, Wenyun Zhao, Xin Peng, Zhixiong Jiang, Liwei Shen. Coordination-Policy Based Composed System Behavior Derivation. APSEC2007.
[93]Yiming Yang, Xin Peng, Wenyun Zhao. An Automatic Connector Generation Method for Dynamic Architecture. IEEE International Workshop on Quality-Oriented Reuse of Software, with COMPSAC 2007.
[94]Liwei Shen, Xin Peng and Wenyun Zhao. Decision Support for Dynamic Adaptation of Business Systems Based on Feature Binding Analysis. The First IEEE International Workshop on Software Engineering for Adaptive Software Systems, with COMPSAC 2007.
[95]李长云,李赣生,何频捷.一种形式化的动态体系结构描述语言.软件学报,2006,17(6).
[96]李长云,李莹,吴健,吴朝晖.一个面向服务的支持动态演化的软件模型.计算机学报,2006,29(7).
[97]熊惠民,应时,虞莉娟.基于组合连接器的动态软件体系结构规范方法.计算机科学,2007,34(8).
[98]于振华,蔡远利,徐海平.动态软件体系结构建模方法研究.西安交通大学学报,2007,41(2).
[99]Kai-Yuan Cai, Joao W. Cangussu, Raymond A. DeCarlo, Aditya P. Mathur:An Overview of Software Cybernetics. STEP 2003.
[100]Cangussu, J. W., Cooper, Kendra, Li, Changcheng. A Control Theory Based Framework for Dynamic Adaptable Systems. ACM Symposium on Applied Computing (SAC 2004) Nicosia, Cyprus, March 14-17,2004.
[101]I. Lee, H. Ben-Abdallah, S. Kannan, M. Kim, O. Sokolsky, and M. Viswanathan. A monitoring and checking framework for run-time correctness assurance. In Proceedings of the 1998 Korea-U.S. Technical Conference on Strategic Technologies,1998.
[102]Zheng Li, Yan Jin, Jun Han, A Runtime Monitoring and Validation Framework for Web Service Interactions, ASWEC,2006.
[103]Y. Wang, S. McIlraith, Y. Yu and J. Mylopoulos. An Automated Approach to Monitoring and Diagnosing Requirements. In:the 22nd IEEE/ACM International Conference on Automated Software Engineering (ASE'07) 2007.
[104]Feng Chen and Grigore Rosu, MOP:An Efficient and Generic Runtime Verification Framework, Technical report UIUCDCS-R-2007-2836, March 2007.
[105]黄罡,王千祥,梅宏.基于软件体系结构的反射式中间件研究[J].软件学报,2003,14(11),pp：1819-1826.
[106]刘永刚,李敏,王千祥,梅宏.基于中间件的运行时监测与分析框架,电子 学报,2007.
[107]Nelly Delgado, Ann Quiroz Gates, Steve Roach, A Taxonomy and Catalog of Runtime Software-Fault Monitoring Tools, IEEE Transactions on Software Engineering, Vol.30, No.12, December 2004.
[108]Avgustinov P, Bodden E, Hajiyev E et al.Aspect for trace monitoring. In Proc of Formal Approaches to Testing Systems and Runtime Verification (FATES/RV 2006). LNCS 4262, pp.20-39,2006.
[109]Bodden E. A lightweight LTL runtime verification tool for Java.In Proc of OOPSLA 2004. pp:306-307.
[110]Axel van Lamsweerde, "Goal-Oriented Requirements Engineering:A Guided Tour", Proceedings RE'01,5th IEEE International Symposium on Requirements Engineering, Toronto, August 2001, pp:249-263.
[111]Jaelson Castro, Manuel Kolp, John Mylopoulos, Towards requirements-driven information systems engineering:The tropos project,2002.
[112]S. Liaskos, A. Lapouchnian, Y. Yu, E. Yu, J. Mylopoulos. On Goal-based Variability Acquisition and Analysis. In Proc.14th IEEE International Requirements Engineering Conference, Minneapolis, USA, Sep 11-15,2006.
[113]Van Lamweerde, A., Darimont, R., Massonet, P.:Goal-Directed Elaboration of Requirements for a Meeting Scheduler:Problems and Lessons Learnt. In:Proc. of the RE 1995-2nd IEEE Symposium on Requirements Engineering, York,1995, pp:194-203.
[114]Andrzej Uszok, Jeffrey M. Bradshaw, Renia Jeffers, Austin Tate, Jeff Dalton. Applying KAOS Services to Ensure Policy Compliance for Semantic Web Services Workflow Composition and Enactment, ISWC 2004.
[115]Shan Tang, Xin Peng and Wenyun Zhao. Goal-Directed Modeling of Self-adaptive Software Architecture. In the proceedings of 14th. International Conference on Exploring Modeling Methods in Systems Analysis and Design (EMMSAD 2009 in conjunction with the CAiSE'09).
[116]A. van Lamsweerde, R. Darimont, and E. Letier. Managing Conflicts in Goal-Driven Requirements Engineering. IEEE Trans. Software Eng., vol.24, no.11, pp.908-926, Nov.1998.
[117]D. Cohen, M. S. Feather, K. Narayanaswamy, and S. S. Fickas. "Automatic monitoring of software requirements". In proceedings of the 19th International Conference on Software Engineering (ICSE 1997)
[118]D. Garlan, M. Shaw. An Introduction to Software Architecture. Advances in Software Engineering and Knowledge Engineering, Volume 1, World Scientific Publishing Co.,1993.
[119]Hoare, C.:Communicating Sequential Processes. Prentice-Hall International, Englewood Cliffs (1985).
[120]Robert J. Allen, "A Formal Approach to Software Architecture", Carnegie Mellon University, CMU Technical Report CMU-CS-97-144, May 1997.
[121]Kephart JO, Walsh WE. An artificial intelligence perspective on autonomic computing policies. In:Verma D, Devarakonda M, Lupu E, Kohli M, eds. Proc. of the 5th IEEE Int'l Workshop on Policies for Distributed Systems and Networks. New York:IEEE Computer Society,2004. pp:3-12.
[122]E. Gat. On Three-Layer Architectures. Artificial Intelligence and Mobile Robots:Case Studies of Successful Robot Systems,1998. pp:195-210.
[123]M. Ghallib, D. Nau, P. Traverso. Automated Planning:Theory and Practice. Morgan Kaufman,2005.
[124]Paolucci, M., Kawamura, T., Payne, T.R., et al.:"Semantic matching of web services capabilities". In Proceedings of the 1st International Semantic Web Conference (ISWC), Sardinia, Italy, June 2002, pp.333-347.
[125]Zaremski MA, Wing JM. Specification matching of software components. ACM Trans. on Software Engineering and Methodology,1997,6(4), pp:333-369.
[126]Luckham DC, Kenney JJ, Augustin LM, Vera J, Bryan D, Mann W. Specification and analysis of system architecture using rapide. IEEE Trans. on Software Engineering,1995,21(4), pp:336-355.
[127]Dai Y S. "Autonomic computing and reliability improvement". In proceedings of the eighth IEEE International Symposium on Object-Oriented Real-Time Distributed Computing (ISORC'05). New York:IEEE,2005, pp.204-206.
[128]Cheng S W. "Rainbow:Architecture-based Self-adaptation with Reusable Infrastructure"[J]. Computer,2004,37(10).pp:46-54.
[129]Alessandro Orso, Donglin Liang, Mary Jean Harrold, and Richard Lipton.Gamma System:Continuous Evolution of Software after Deployment, ISSTA 2002.
[130]J.O. Kephart and D.M. Chess, "The Vision of Autonomic Computing," Computer, vol.36, no.1,2003. pp:41-50.
[131]van Lamsweerde, A. and Letier, E. Handling Obstacles in Goal-oriented Requirements Engineering. IEEE Transactions on Software Engineering,26(10). 2000.
[132]E. M. Clarke, O. Grumberg, and D. A. Peled. Model Checking. The MIT Press, 2001.
[133]Laila Taher, Rawshan Basha, Hazem El Khatib, Qos Information & Computation (QoS-IC) Framework for QoS-based Discovery of Web services. The European Journal for the Informatics Professional,6 (4),2005.
[134]Anbazhagan Mani, Arun Nagarajan, Understanding quality of service for Web services,http://www-128.ibm.com/developerworks/webservices/library/ws-quality.ht ml.
[135]F. Dalpiaz, P. Giorgini, and J. Mylopoulos. An architecture for requirements-driven self-reconfiguration. In Proceedings, CAiSE, Volume 5565 of LNCS, pages 246-260. Springer,2009.
[136]http://www.objectiver.com