@inproceedings {Simula.simula.2820,
	title = {Insights on the Use of OCL in Diverse Industrial Applications},
	journal = {8th System Analysis and Modelling Conference (SAM{\textquoteright}14)},
	year = {2014},
	publisher = {Springer},
	type = {Conference},
	address = {Switzerland},
	abstract = {The Object Constraint Language (OCL) is a widely accepted language, standardized by OMG, for specifying constraints at various meta levels (e.g., meta-models and models). Despite its wide acceptance, there is a lack of understanding about terminology and purposes for which OCL can be used. In this paper, we aim to reduce this gap and provide guidance for applying OCL in practical contexts and we report our experience of applying OCL for different industrial projects in diverse domains: Communications and Control, Oil and Gas production, Energy Equipment and Services, and Recycling. Based on our experience, first, we unify the commonly used terminology in the literature for applying OCL in different ways for addressing diverse industrial problems. Second, we report the key results of the industrial application of OCL. Finally, we provide guidance to researchers and practitioners for choosing an appropriate meta-level and purpose for their specific industrial problem at hand.},
	keywords = {Conference},
	author = {Ali, Shaukat and Yue, Tao and Muhammad Zohaib {Iqbal} and Rajwinder Kaur {Panesar-Walawege}},
	editor = {Amyot, Daniel and Pau Fonseca i. {Casas} and Mussbacher, Gunter}
}
@inproceedings {MODELS2013,
	title = {SafetyMet: a Metamodel for Safety Standards},
	journal = {ACM/IEEE 16th International Conference on Model Driven Engineering Languages and Systems (MODELS 2013)},
	volume = {8107},
	year = {2013},
	pages = {69-86},
	publisher = {Springer},
	type = {Conference},
	address = {Berlin Heidelberg},
	abstract = {In domains such as automotive, avionics, and railway, critical systems must comply with safety standards to allow their operation in a given context. Safety compliance can be an extremely demanding activity as practitioners have to show fulfilment of the safety criteria specified in the standards and thus that a system can be deemed safe. This is usually both costly and time consuming, and becomes even more challenging when, for instance, a system changes or aims to be reused in another project or domain. This paper presents SafetyMet, a metamodel for safety standards targeted at facilitating safety compliance. The metamodel consists of entities and relationships that abstract concepts common to different safety standards from different domains. Its use can help practitioners to show how they have followed the recommendations of a standard, and particularly in evolutionary or cross-domain scenarios. We discuss the benefits of the use of the metamodel, its limitations, and open issues in order to clearly present the aspects of safety compliance that are facilitated and those that are not addressed.},
	author = {Jose Luis {de la Vara} and Rajwinder Kaur {Panesar-Walawege}},
	editor = {Moreira, A. and Sch{\"a}tz, B. and Gray, J. and Vallecillo, A. and Clarke, P.}
}
@article {24491,
	title = {Supporting the verification of compliance to safety standards via model-driven engineering: Approach, tool-support and empirical validation},
	journal = {Information and Software Technology},
	volume = {55},
	year = {2013},
	pages = {836-864},
	publisher = {Elsevier},
	author = {Rajwinder Kaur {Panesar-Walawege} and Sabetzadeh, Mehrdad and Briand, Lionel}
}
@techreport {25304,
	title = {Myths, Facts, and Misconceptions of OCL: Experiences from Diverse Industrial Applications},
	number = {2012-26},
	year = {2012},
	note = {This technical report is an early version of a published paper.},
	publisher = {Simula Research Laboratory},
	author = {Ali, Shaukat and Yue, Tao and Muhammad Zohaib {Iqbal} and Rajwinder Kaur {Panesar-Walawege}}
}
@techreport {25309,
	title = {SafetyMet: a Metamodel for Safety Standards},
	number = {2012-32},
	year = {2012},
	note = {This technical report is an early version of a published conference paper. The published version can be found here:https://www.simula.no/publications/safetymet-metamodel-safety-standards},
	publisher = {Simula Research Laboratory},
	author = {Jose Luis {de la Vara} and Rajwinder Kaur {Panesar-Walawege}}
}
@techreport {25308,
	title = {On the Use of Artefacts as Safety Evidence: A Conceptual Model },
	number = {2012-31},
	year = {2012},
	publisher = {Simula Research Laboratory},
	author = {Jose Luis {de la Vara} and Nair, Sunil and Rajwinder Kaur {Panesar-Walawege}}
}
@phdthesis {Simula.simula.1868,
	title = {Using Model-Driven Engineering to Support the Certification of Safety-Critical Systems},
	year = {2012},
	school = {University of Oslo},
	type = {phd},
	abstract = {Critical systems such as those found in the avionics, automotive, maritime, and energy domains are often subject to a formal process known as certification. The goal of certification is to ensure that such systems will operate safely in the presence of known hazards, and without posing undue risks to the users, the public, or the environment. Certification bodies examine such systems based on evidence that the system suppliers provide, to ensure that the relevant safety risks have been sufficiently mitigated. Typically, generic safety standards set forth the general evidence requirements across different industry sectors, and then derived standards specialize the generic standards according to the needs of a specific industry sector. Regardless of whether a generic or sector-specific standard is being used, a key prerequisite for effective collection of evidence is that the supplier be aware of the requirements stipulated in the relevant standard and the evidence they require. This often proves to be a very challenging task because of the sheer size of the standards and the fact that the textual standards are amenable to subjective interpretation. Notably, suppliers find it hard to interpret the evidence requirements imposed by the safety standards within the domain of application; little support exists for recording, querying, and reporting evidence in a structured manner; and there is a general absence of guidelines on how the collected evidence supports the safety objectives. This thesis proposes the application of Model-Driven Engineering as an enabler for per- forming the various tasks related to safety evidence management. The position taken is that models should serve as the main source of certification information - documents, when needed, should be generated from models. Models are beneficial for the purpose of safety certification in many respects, most notably: (1) Models can be employed to clarify the expectations of safety standards and recommended practices, and develop concrete guidelines for system suppliers; (2) Models expressed in standard notations avoid the ambiguity and redundancy problems associated with text-based documentation; (3) Models provide an ideal vehicle for preserving traceability and the chain of evidence between hazards, requirements, design ele- ments, implementation, and test cases; (4) Models can represent different levels of abstraction and an explicit mapping between the different levels; (5) Models present opportunities for partial or full automation of many laborious safety analysis tasks. The main contribution of this thesis is a model-driven process that enables the automated verification of compliance to standards based on evidence. Specifically, a UML profile is created, based on a conceptual model of a given standard, which provides a succinct and explicit interpretation of the underlying standard. The profile is augmented with constraints that help system suppliers with establishing a relationship between the concepts in the safety standard of interest and the concepts in the application domain. This in turn enables suppliers to demonstrate how their system development artifacts achieve compliance to the standard. Additionally, UML profiles are further used to systematically capture how the evidence requirements of a generic standard are specialized in a particular domain. This provides a means of explicitly showing the relationship between a generic and a sector-specific standard. This tackles the certification issues that arise from poorly-stated or implicit relationships between a generic standards and their sector-specific interpretations. Finally, the tool infrastructure needs for supporting the collection and management of iv safety evidence data is tackled by proposing tools for upfront planning of evidence collection activities and the storage of evidence information outside of modelling environments.},
	author = {Rajwinder Kaur {Panesar-Walawege}}
}
@inproceedings {Simula.simula.1120,
	title = {CRESCO: Construction of Evidence Repositories for Managing Standards Compliance},
	journal = {30th ACM International Conference on Conceptual Modeling (ER2011)},
	year = {2011},
	publisher = {Springer},
	type = {Conference},
	address = {Berlin Heidelberg},
	abstract = {We describe CRESCO, a tool for Construction of Evidence REpositories for Managing Standards COmpliance. CRESCO draws on Model Driven Engineering (MDE) technologies to generate a database repository schema from the evidence requirements of a given standard, expressed as a UML class diagram. CRESCO in addition generates a web-based user interface for building and manipulating evidence repositories based on the schema. CRESCO is targeted primarily at addressing the tool infrastructure needs for supporting the collection and management of safety evidence data. A systematic treatment of evidence information is a key prerequisite for demonstration of compliance to safety standards, such as IEC 61508, during the safety certification process.},
	isbn = {978-3-642-24574-9},
	author = {Rajwinder Kaur {Panesar-Walawege} and Torbj{\o}rn Skyberg {Knutsen} and Sabetzadeh, Mehrdad and Briand, Lionel Claude}
}
@inproceedings {Simula.simula.716,
	title = {A Model-Driven Engineering Approach to Support the Verification of Compliance to Safety Standards},
	journal = {22th IEEE International Symposium on Software Reliability Engineering (ISSRE 2011)},
	year = {2011},
	pages = {30-39},
	publisher = {IEEE},
	type = {Conference},
	abstract = {Certification of safety-critical systems according to well-recognised standards is the norm in many industries where the failure of such systems can harm people or the environment. Certification bodies examine such systems, based on evidence that the system suppliers provide, to ensure that the relevant safety risks have been sufficiently mitigated. The evidence is aimed at satisfying the requirements of the standards used for certification, and naturally a key prerequisite for effective collection of evidence, is that the supplier be aware of these requirements and the evidence they require. This often proves to be a very challenging task because of the sheer size of the standards and the fact that the textual standards are amenable to subjective interpretation. In this paper, we propose an approach based on UML profiles and model-driven engineering. It addresses not only the above challenge but also enables the automated verification of compliance to standards based on evidence. Specifically, a profile is created, based on a conceptual model of a given standard, which provides a succinct and explicit interpretation of the underlying standard. The profile is augmented with constraints that help system suppliers with establishing a relationship between the concepts in the safety standard of interest and the concepts in the application domain. This in turn enables suppliers to demonstrate how their system development artifacts achieve compliance to the standard. We illustrate our approach by showing how the concepts in the domain of sub-sea control systems can be aligned with the evidence requirements in the IEC61508 standard, which is one of the most commonly used certification standard for control systems.},
	isbn = {978-0-7695-4568-4},
	author = {Rajwinder Kaur {Panesar-Walawege} and Sabetzadeh, Mehrdad and Briand, Lionel},
	editor = {IEEE, }
}
@techreport {25313,
	title = {A Model-Driven Engineering Approach to Support the Verification of Compliance to Safety Standards},
	number = {2011-15},
	year = {2011},
	note = {This technical report is an early version of a published conference paper. The published version can be found here:https://www.simula.no/publications/model-driven-engineering-approach-support-verification-compliance-safety-standards},
	publisher = {Simula Research Laboratory},
	author = {Rajwinder Kaur {Panesar-Walawege} and Sabetzadeh, Mehrdad and Lionel C. {Briand}}
}
@article {Simula.simula.182,
	title = {Planning for Safety Evidence Collection: a Tool-Supported Approach Based on Modeling of Standards Compliance Information},
	journal = {IEEE Software},
	volume = {pp},
	number = {99},
	year = {2011},
	publisher = {IEEE},
	abstract = {Safety-critical software-dependent systems such as those found in the avionics, automotive, maritime, and energy domains often need to be certified by a licensing or regulatory body based on one or more safety standards. Safety standards often do not specify the details of the evidence that needs to be collected for the certification of a particular system because these standards need to remain generic and applicable to a wide variety of systems and domains. Without an upfront agreement between the system supplier and the certifier about the details of the evidence that needs to be collected, there will invariably be important omissions in the evidence information provided by the supplier, which need to be remedied after the fact and at significant costs. In this paper, we present a flexible and tool-supported approach for assisting suppliers and certifiers in developing an agreement about the evidence necessary to demonstrate compliance to a safety standard. Our approach is model-based; specifically, the safety standard of interest is expressed via an information model. This helps manage the complexity of safety standards, provides precise interpretation for the standards, and ensures the completeness and consistency of the generated agreement.},
	author = {Falessi, Davide and Sabetzadeh, Mehrdad and Briand, Lionel Claude and Turella, Emanuele and Coq, Thierry and Rajwinder Kaur {Panesar-Walawege}}
}
@inproceedings {Simula.simula.1132,
	title = {Using Model-Driven Engineering for Managing Safety Evidence: Challenges, Vision and Experience},
	journal = {The 1st Intentional Workshop on Software Certification (WoSoCER) at 22th IEEE International Symposium on Software Reliability Engineering.},
	year = {2011},
	publisher = {Springer},
	type = {Workshop},
	abstract = {Certification is a major prerequisite for most safety-critical systems before they can be put into operation. During certification, system suppliers often have to present a coherent body of evidence demonstrating that the developed systems are safe for operation. Regardless of the certification approach taken (process-based or product-based), collection of proper evidence at the proper stage of development is critical for successful certification. Currently, system suppliers and certification bodies alike are facing various challenges in relation to safety evidence collection. Notably, they find it hard to interpret the evidence requirements imposed by the safety standards within the domain of application; little support exists for recording, querying, and reporting evidence in a structured manner; and there is a general absence of guidelines on how the collected evidence supports the safety objectives. This paper states our position on how safety evidence should be characterized and managed. Specifically, we propose the application of Model-Driven Engineering as an enabler for performing the various tasks related to safety evidence management. We outline our current work on the specification of safety evidence requirements, upfront planning of evidence collection activities, tailoring of evidence information to domain-specific needs, and storage of evidence information. Based on this work, we identify a number of challenges that need further investigation and provide a future research agenda for managing safety evidence for software safety certification.},
	isbn = {978-0-7695-4568-4},
	author = {Rajwinder Kaur {Panesar-Walawege} and Sabetzadeh, Mehrdad and Briand, Lionel}
}
@inproceedings {Simula.simula.666,
	title = {Using UML Profiles for Sector-Specific Tailoring of Safety Evidence Information},
	journal = {30th ACM International Conference on Conceptual Modeling (ER)},
	volume = {6998/2011},
	year = {2011},
	pages = {362-378},
	publisher = {ACM},
	type = {Conference},
	abstract = {Safety-critical systems are often subject to certification as a way to ensure that the safety risks associated with their use are sufficiently mitigated. A key requirement of certification is the provision of evidence that a system complies with the applicable standards. The way this is typically organized is to have a generic standard that sets forth the general evidence requirements across different industry sectors, and then to have a derived standard that specializes the generic standard according to the needs of a specific industry sector. To demonstrate standards compliance, one therefore needs to precisely specify how the evidence requirements of a sector-specific standard map onto those of the generic parent standard. Unfortunately, little research has been done to date on capturing the relationship between generic and sector-specific standards and a large fraction of the issues arising during certification can be traced to poorly-stated or implicit relationships between a generic standard and its sector-specific interpretation. In this paper, we propose an approach based on UML profiles to systematically capture how the evidence requirements of a generic standard are specialized in a particular domain. To demonstrate our approach, we apply it for tailoring IEC61508 - one of the most established standards for functional safety - to the Petroleum industry},
	isbn = {978-3-642-24605-0},
	author = {Rajwinder Kaur {Panesar-Walawege} and Sabetzadeh, Mehrdad and Briand, Lionel}
}
@techreport {Simula.simula.600,
	title = {Using UML Profiles for Sector-Specific Tailoring of Safety Evidence Information},
	number = {2011-10},
	year = {2011},
	month = {April},
	publisher = {Simula Research Laboratory},
	address = {P.O.Box 134, 1325 Lysaker, Norway},
	abstract = {Safety-critical systems are often subject to certification as a way to ensure that the safety risks associated with their use are sufficiently mitigated. A key requirement of certification is the provision of evidence that a system complies with the applicable standards. The way this is typically organized is to have a generic standard that sets forth the general evidence requirements across different industry sectors, and then to have a derived standard that specializes the generic standard according to the needs of a specific industry sector. To demonstrate standards compliance, one therefore needs to precisely specify how the evidence requirements of a sector-specific standard map onto those of the generic parent standard. Unfortunately, little research has been done to date on capturing the relationship between generic and sector-specific standards and a large fraction of the issues arising during certification can be traced to poorly-stated or implicit relationships between a generic standard and its sector-specific interpretation. In this paper, we propose an approach based on UML profiles to systematically capture how the evidence requirements of a generic standard are specialized in a particular domain. To demonstrate our approach, we apply it for tailoring IEC61508 - one of the most established standards for functional safety - to the Petroleum industry.},
	author = {Rajwinder Kaur {Panesar-Walawege} and Sabetzadeh, Mehrdad and Briand, Lionel}
}
@inproceedings {Simula.se.687,
	title = {Characterizing the Chain of Evidence for Software Safety Cases: a Conceptual Model Based on the IEC 61508 Standard},
	journal = {Third IEEE International Conference on Software Testing, Verification and Validation (ICST)},
	year = {2010},
	publisher = {IEEE Computer Society},
	type = {Conference},
	abstract = {Increasingly, licensing and safety regulatory bodies require the suppliers of software-intensive, safety-critical systems to provide an explicit software safety case - a structured set of arguments based on objective evidence to demonstrate that the software elements of a system are acceptably safe. Existing research on safety cases has mainly focused on how to build the arguments in a safety case based on available evidence; but little has been done to precisely characterize what this evidence should be. As a result, system suppliers are left with practically no guidance on what evidence to collect during software development. This has led to the suppliers having to recover the relevant evidence after the fact - an extremely costly and sometimes impractical task. Although standards such as the IEC 61508 - which is widely viewed as the best available generic standard for managing functional safety in software - provide some guidance for the collection of relevant safety and certification information, this guidance is mostly textual, not expressed in a precise and structured form, and is not easy to specialize to context-specific needs. To address these issues, we present a conceptual model to characterize the evidence for arguing about software safety. Our model captures both the information requirements for demonstrating compliance with IEC 61508 and the traceability links necessary to create a seamless chain of evidence. We further describe how our generic model can be specialized according to the needs of a particular context, and discuss some important ways in which our model can facilitate software certification.},
	isbn = {978-0-7695-3990-4},
	author = {Rajwinder Kaur {Panesar-Walawege} and Briand, Lionel and Sabetzadeh, Mehrdad and Coq, Thierry},
	editor = {Gaudel, Marie-Claude and Ana Rosa {Cavalli} and Ghosh, Sudipto}
}
@article {Simula.SE.661,
	title = {A Systematic Review of the Application and Empirical Investigation of Search-Based Test-Case Generation},
	journal = {IEEE Transactions on Software Engineering},
	volume = {36},
	number = {6},
	year = {2010},
	pages = {742-762},
	publisher = {IEEE},
	abstract = {Metaheuristic search techniques have been extensively used to automate the process of generating test cases and thus providing solutions for a more cost-effective testing process. This approach to test automation, often coined as \&ldquo;Search-based Software Testing\&rdquo; (SBST), has been used for a wide variety of test case generation purposes, differing in terms of test objectives, test levels, and other characteristics [1]. Since SBST techniques are heuristic by nature, they must be empirically investigated in terms of how costly and effective they are at reaching their test objectives and whether they scale up to realistic development artifacts. However, approaches to empirically study SBST techniques have shown wide variation in the literature. This paper presents the results of a systematic, comprehensive review that aims at characterizing how empirical studies have been designed to investigate SBST cost-effectiveness and what empirical evidence is available in the literature regarding SBST cost-effectiveness and scalability. We also provide a framework that drives the data collection process of this systematic review and can be the starting point of guidelines on how SBST techniques can be empirically assessed. The intent is to aid future researchers doing empirical studies in SBST by providing an unbiased view of the body of empirical evidence and by guiding them in performing well designed and executed empirical studies.},
	author = {Ali, Shaukat and Briand, Lionel and Hemmati, Hadi and Rajwinder Kaur {Panesar-Walawege}}
}
@techreport {Simula.SE.293,
	title = {A Systematic Review of the Application and Empirical Investigation of Search-Based Test-Case Generation},
	year = {2008},
	month = {September},
	publisher = {Simula Research Laboratory},
	abstract = {Metaheuristic search techniques have been extensively used to automate the process of generating test cases and thus providing solutions for a more cost-effective testing process. This approach to test automation, often coined as {\textquotedblleft}Search-based Software Testing{\textquotedblright} (SBST), has been used for a wide variety of test case generation purposes, differing in terms of test objectives, test levels, and other characteristics. Since SBST techniques are heuristic by nature, they must be empirically investigated in terms of how costly and effective they are at reaching their test objectives and whether they scale up to realistic development artifacts. However, approaches to empirically study SBST techniques have shown wide variation in the literature. This paper presents the results of a systematic, comprehensive review that aims at characterizing how empirical studies have been designed to investigate SBST cost-effectiveness and what empirical evidence is available in the literature regarding SBST cost-effectiveness and scalability. We also provide a framework that drives the data collection process of this systematic review and can be the starting point of guidelines on how SBST techniques can be empirically assessed. The intent is to aid future researchers doing empirical studies in SBST by providing an unbiased view of the body of empirical evidence and by guiding them in performing well designed and executed empirical studies.},
	author = {Ali, Shaukat and Briand, Lionel and Hemmati, Hadi and Rajwinder Kaur {Panesar-Walawege}}
}
