bluuebunny/crossref_metadata_2025 huggingface dataset:
A Proposal for Model‐Based Systems Engineering Method for Creating Secure Cyber‐Physical Systems
Authors: Larsen Martin Haug , Kokkula Satyanarayana , Muller Gerrit
Published: September 2024

Rising levels of risk as cyber‐attackers look to exploit system vulnerabilities threatens the Air Traffic Control industry. Attacks on Air Navigation Service Providers' communications systems may lead to airspace closure and even cause safety issues. This paper presents a novel Model‐Based Systems Engineering method that enables systems engineers, in collaboration with system security and software engineers, to perform threat‐modeling analysis of cyber‐physical systems early in the system development process and incorporate mitigation strategies into the system design. The proposed model‐based method covers few security concepts, including misuse cases, system assets, threats, risks, vulnerabilities, and security control identification. The study found that the proposed method is suitable for conducting security analysis for complex cyber‐physical systems early in the system development process.
Modeling Cybersecurity Operations to Improve Resilience
Authors: Taylor Ivan W. , Willett Keith D.
Published: September 2024

In this paper, we explore the concept of operational resilience of a network or system of computer systems, focusing on the processes of a cybersecurity team within the multi‐disciplinary network security operations center. The computer system under examination has faced a cyber‐attack that has reduced its capability. The organization's reputation is damaged temporarily but can be restored if the network security operations center can quickly restore the organization's ability to produce desired results. After a cyber‐attack, we examine the processes for restoring the system's capability to its original level. These processes will happen sequentially and require close coordination of the cybersecurity team members. We examine a balanced and adaptive assignment policy within the cybersecurity organization to the various processes, showing how these policies can impact the speed with which the system's capability can be restored. Our findings reveal that the adaptive assignment policy among the team members can increase the system restoration rate even though recovering the complete capability of the system may be the same.
Enabling FuSE Security Objectives by Leveraging Cyber Survivability Methods
Authors: Papke Barry , Kratzke Ron , Span Martin (Trae) , Shevchenko Nataliya (Natasha)
Published: September 2024

The importance of system security continues to grow as systems become more complex, more connected, and more vulnerable. The INCOSE Vision 2035 sets goals for systems engineering (SE) as a discipline in enabling engineering solutions for a better world: “By 2035, cybersecurity will be as foundational a perspective in systems design as system performance and safety are today” (INCOSE, 2024). A key objective of the INCOSE Future of Systems Engineering (FuSE) Security Foundations Roadmap is to recognize system security as a fundamental part of the mission, integrated into the system architecture, and not “bolted‐on” as a separate subsystem or set of features in the detailed design. To achieve this, systems engineering must address system security early in the system lifecycle, during the mission analysis and concept development phase and ensure it is addressed as a functional requirement throughout the systems engineering lifecycle. System security needs must be treated as fundamental system capability.

The INCOSE FuSE Security foundations roadmap identifies six (6) objectives and eleven (11) foundational concepts necessary to achieve the FuSE vision for system security (Dove, et al., 2021). Five of the objectives and five of the foundational concepts are directly related to systems acquisition and engineering lifecycle processes. The five key foundational concepts are: Stakeholder Alignment, Security as a Capability, Security as a Functional Requirement, Loss Driven Engineering and Modeled Trustworthiness.

The Operational Test and Evaluation (OT&E) community has extensive cyber assessment and execution processes mandated through numerous Department of Defense (DoD) and individual service policies, directives and guidebooks. This paper studies several of the cybersecurity assessment and process guidebooks, analyzing the processes and methods to identify areas where systems engineering should be responsible, and which SE activities and outputs are needed to enable the requirements of each guidebook.

This paper examines six OT&E cyber security guidebooks, and the methods and processes they describe to achieve system security in relation to the five foundation concepts. In addition to their test and evaluation processes, each describes systems engineering processes, activities and outputs that could be used to form the initial foundation of a system security technical process.

While the original INCOSE vision statement uses the term “cybersecurity,” the FuSE Security initiative is adopting the term “system security” to emphasize that this is a system engineering responsibility as opposed to software engineering or information technology task. As a result, the analysis of the cybersecurity guidebooks will be in the context of “system security.”
Theoretical Underpinnings to Establish Fidelity Conditions for Defining Verification Models
Authors: Wach Paul , Salado Alejandro
Published: September 2024

The current state of the discipline suggests that the desired fidelity of verification models is defined based on qualitative statements, that is, using heuristics, at the onset of an engineering endeavor. While the use of heuristics in systems engineering is well known, many heuristics have not been validated, and therefore there may be errors in judgement that could lead to systems being engineered that are ultimately not fit‐for‐purpose. This bears the question, based on what conditions should we formally define verification models? In this article, we provide insights from our research to discover the sufficient conditions for defining verification models, taking a science‐based approach that leverages the richness of systems‐theoretic constructs.
Multiple Pathways of Influence for Tightly and Loosely Structured Organizations: Implications for Systems Resilience
Authors: Valdez Raquel , Gunda Thushara , Caskey Susan
Published: September 2024

Organizations play a key role in supporting various societal functions, ranging from environmental governance to the manufacturing of goods. The behaviors of organization are impacted by various influences, including information, technology, authority, economic leverage, historical experiences, and external factors, such as regulations. This paper introduces a generalized framework, focused on the relative structure of an organization (tight vs. loose), that can be used to understand how different influence pathways can impact decision‐making within differently structured organizations. This generalized framework is then translated into a modeling and simulation platform to support and assess implications of these structural differences in resilience to disinformation (measured by organizational behaviors of timeliness and inclusion of quality information) using a systems dynamics approach Preliminary results indicate that a tightly structured organization may be less timely at processing information but could be more resilient against using poor quality information in organizational decisions compared to a loosely structured organization. Ongoing work is underway to understand the robustness of these findings and to validate current model design activities with empirical insights.
The Human‐Technology Spectrum: A Framework for Evaluating Sociotechnical System Function Allocation, Risk, and Performance
Authors: Troxell Graeme , Sprague Christian
Published: September 2024

This paper investigates the interplay of human and technological elements performing functions within socio‐technical systems. With rapid technological advancements, understanding the various possible human‐technology configurations, and their unique implications, is crucial. This research proposes a conceptual schema to demarcate particular kinds of human‐technology relationships, as it pertains to function allocation, and aims to guide system design and risk management. The Human‐Technology Spectrum (HTS) framework considers a continuum of systemic risks, lifecycle management strategies, and evaluation processes, offering a valuable resource for engineers and designers. For each stage along the HTS, we provide examples and discuss function across types of sociotechnical systems. We conclude with a discussion on the importance of understanding the tradeoffs between humans versus technologies enacting system functions.
Systems Engineering Application for Better Design and Analysis of an Assembly Process
Authors: Taghiyar Adel , Pavalkis Saulius , God Ralf , Eichmann Oliver C. , Lammers Sven
Published: September 2024

The use of systems engineering has proven effective in managing complexity and improving system design. Model based system engineering utilizing the Systems Modeling Language (SysML) especially helps in multidisciplinary environments where engineering data needs to be transformed and integrated between environments. Manufacturing is another discipline same as systems engineering is on active digitalization transformation. In the paper, we propose method and solution to apply Model based system engineering (MBSE) for improvement of process planning of assembly lines leveraging model based approach. SysML modeling and execution enable automation of analysis activities as trade‐off, where the behavior of various assembly scenarios of an assembly line can be captured using SysML behavioral diagrams and compared based on various evaluation criteria. However, relying solely on descriptive SysML system models without integrating the virtual representation of the assembly line is insufficient to verify all aspects of system behavior, such as ergonomics and collision avoidance. The main objective of this work is to present a concept for transforming SysML assembly scenarios into the process and resources models of the computer‐aided design and manufacturing (CAD/CAM) environment. This yields a holistic view that serves as a foundation for further production‐related simulations and analyses, enhancing efficiency, ergonomic design, factory layout, and material flow, ensuring effective assembly workstation design optimized at systems engineering level.
Secure Design: A Principled Approach for Systems Engineers
Authors: Winstead Mark
Published: September 2024

INCOSE's Systems Engineering Vision 2035 sets a goal that security will be as foundational a perspective in systems design as system performance and safety are today. Such a design needs to be inherently secure (i.e., eliminate hazards, susceptibilities, and vulnerabilities to the extent possible and control the remaining ones are, while still enabling the system to meet performance requirements) and provide a basis for necessary security functionality. This paper discusses a principled approach and concepts for creating such a design. Activities for secure design across multiple MITRE sponsors and work programs with desired outcomes to the Vision 2035 goal inform. These activities include community outreach through workshops and public review of publications.
Building a Scientific Foundation for Security: Multilayer Network Model Insights for System Security Engineering
Authors: Williams Adam D. , Caskey Susan A.
Published: September 2024

To help incorporate security into INCOSE's Systems Engineering Vision 2035, the INCOSE systems security engineering working group endorses a paradigmatic shift to reframe systems security as trustworthy, loss‐driven, and capabilities‐based. Similar research out of Sandia National Laboratories has explored cutting‐edge approaches to systems security for national security applications. Together, these efforts highlight the need for—‐and a path toward—‐a scientific foundation for security. Leveraging underlying tenets of systems theory, observed security heuristics, and the concepts emerging from INCOSE's SSE working helps triangulate a set of “first principles” as part of a scientific foundation for security as an emergent systems property that incorporates traditional physical security designs, cyber security architectures, and personnel security programs—‐as well as the (often ignored) interactions between them. These first principles, in turn, are the basis for a set of derived systems security performance axioms that support current INCOSE SSE working efforts. We have demonstrated this approach's logic and designability with a multilayer network model‐based approach for systems security. The structure of this scientific foundation for security offers additional, innovative opportunities to achieve desired levels of trustworthiness, creative mechanisms to meet needs, innovative loss‐driven approaches, and enhanced capabilities—‐all aimed at producing more efficient and effective systems security solutions against current and emerging threats, uncertainties, and complexities.
Validation Framework of a Digital Twin: A System Identification Approach
Authors: Phillips Ibukun , Kenley C. Robert
Published: September 2024

The constant improvement and developments in Artificial Intelligence/Machine learning models coupled with increased computing power have led to the incorporation of AI/ML for simulating learning and problem‐solving in simple and complex engineering systems. This latent uncertainty and unpredictable characteristics of AI‐enabled systems challenges engineers and industry stakeholders who care about ensuring the right systems are built (system validation). Digital Twins are an excellent example of such AI‐enabled systems due to their data‐dependent nature when tasked with replicating, monitoring, and updating physical assets for structural health monitoring and control. However, Digital Twins' system validation has not been well‐researched. This study delves into existing research and frameworks for validating Digital Twins and proposes a novel model‐centric validation framework based on system identification techniques. As a case study, we apply this model‐centric validation framework towards partially validating a Digital Twin for a single‐heat‐pipe test article for a Microre‐actor Agile Non‐nuclear Experimental Testbed.
Early Validation using Architectural Overviews (A3AO) a Case Study in an IoT Consultancy
Authors: Hidle Eirik , Kjørstad Marianne
Published: September 2024

This paper focuses on the use of A3 Architectural Overviews (A3AO) for early validation of stakeholder needs and system concept as part of a tender proposal in an IoT consultancy. Tender proposals are an essential part of communication between most companies working in the engineering field. Often with hightech companies, a technical knowledge gap exists between the different stakeholders reading tender proposals. This knowledge gap increases the risk of miscommunication and wasteful work. A real‐life case from an IoT consultancy tendering an IoT concept for a processing facility forms the basis for the research. Applying an action research approach, the researchers tailored the A3AO framework to fit within the consultancy's work flow and developed an A3AO describing the tendered system concept. The customer received and later accepted the tender proposal including the A3AO containing the stakeholders' problems and needs, a concept solution, and a roadmap detailing further work. In this study, we collected data from observations, semi‐structured interviews, surveys, and a follow‐up questionnaire to the customer. The study found that the A3AO functions as a tool for early validation and that it helped bridge the knowledge gap between the consultancy and customer. The study also raises questions and criticism regarding cost and complexity. The consultancy later decided to implement A3AOs in future proceedings.
Promoting Neurodiversity Through MBSE and Other Technical Approaches
Authors: Duffy Taylor , Romero Maria
Published: September 2024

The Systems Engineering (SE) industry employs many people from the neurotypical and neurodivergent communities. This research presents different concepts and potential methods/tools available to promote neurodiversity and the complex interactions between those who are categorized by it, as well as the various relevant institutions it challenges and responds to (psychiatry, education, industry, etc.). Neurodiversity will mean different things at different times. The challenge we face in the industry is finding ways to work on complex systems that include neurodiverse thinking into the overall solution. This paper will attempt to bridge this gap by looking into the meaning of neurodivergence, showing the different ways organizations within the SE industry assess a neurodiverse individual to perform work, and demonstrating how organizations can utilize tools and methodologies to offer more inclusion and reduce feeling invisible within the community. This paper will further explain how modelbased systems engineering (MBSE) and simulation could provide methods and visualizations necessary to provide a cross‐neurotype communication and visualization methodology to convey both abstract and concrete solutions to complex problems in SE. By adopting a neurodiverse perspective, we can alter actual relations; from how we empathize with the neurodivergent community, to how we design adaptable systems that evolve and expand into new functionalities and services.
Integrating IoT Technology with a Systems Engineering Approach to Improve the GHG Emission Accounting in the Waste Management Industry
Authors: Hylleseth Tobias , Giudici Henri , Muller Gerrit
Published: September 2024

This work presents how to automate emission accounting and analysis in the waste management industry. The methodology adopted is based on the combined use of Internet of Things (IoT) technology and a Systems Engineering approach. The presented methodology has been tested in an industrial case. In the case, there were multiple systems available to collect environmental data. However, the accessibility and the interpretability of this environmental data were observed as a challenge. After gathering the data in a centralized database, the automation of the Green House Gasses (GHG) emission management and accounting was performed. Findings show that the operational emissions of the industry partner mainly occur from energy and fuel consumption. By measuring and categorizing energy usage, the industry partner identified several potential improvements for reducing emissions. Lowering energy usage can consequently decrease the associated carbon footprint. Finally, the authors suggest some useful insights for companies with the aim of improving the effectiveness and efficiency of industrial GHG emissions accounting.
Model‐Based Decision Support using Test and Evaluation: A Lightweight Architecture Approach
Authors: Anyanhun Awele , Arndt Craig , Werner Jeremy
Published: September 2024

A standardized decision support tool to support test prioritization and decision‐making is a prerequisite to achieving on‐time delivery of weapon systems that are adequately tested and vetted by decision makers within distributed organizations such as the defense industrial base. However, to achieve standardization, the core principles of systems thinking and systems engineering must be utilized in order to realize a holistic and evolvable process and product that integrates Test & Evaluation (T&E) data and information with decision‐making in a consistent format to support program offices. To address this need, a model‐based reference architecture for the standardization of the Integrated Decision Support Key (IDSK) data and decision formats is presented in this paper. The IDSK is a DoD‐mandated decision support tool (artifact) for capturing a program's decisions and the T&E information necessary to support the decisions. The digital‐IDSK reference architecture proposed is developed using a model‐based systems engineering approach and facilitates the generation of standardized data and decision formats that are tailorable, adaptable to incremental future changes, and easy to integrate with other digital engineering artifacts all within a digital engineering ecosystem. In addition, this approach is also applicable not only to defense‐based organizations, but also finds utility within organizations pivoting to a digital engineering strategy for informing product T&E decision‐making.
Risk Assessment Method for System‐of‐Systems Operations — A Case Study of Wildfire Fighting
Authors: Zimdahl Rosanna , Franzén Ludvig Knöös
Published: September 2024

A SoS is a set of collaborating systems that act towards a common achievement. Risk assessment is important in the early stages of SoS operational development, both for mission objectives and to enable technology which is developed responsibly. The method considers risks that stems from both internal and external interactions which leads to losses for different kind of actors. The method has been applied to a fictional case study of wildfire fighting. The internal interactions are mostly communication between the CSs while external interactions represent dependencies of other systems as well as impacts on other systems. The outcome of the methodology is a network of connected hazards to be used for risk management and for high level SoS requirements.
Long Term Trends in Security Threats and an Approach for Integrating Them into System Architecture and Design
Authors: Rosser Larri Ann
Published: September 2024

Security is an important consideration in today's systems, and it promises to be both relevant and challenging in the future. Our design and development processes are evolving to incorporate modern methods such as agile development and model‐based engineering with the intent to provide flexible and resilient capabilities to our customers quickly and with high quality. As we continue to enhance our practices to achieve these aspirations, security capabilities both at initial deployment and throughout the system lifespan are an important consideration. A literature review of security concerns in general and challenges across a range of domains including civil aviation, smart cities, eLearning, finance and defense reveals a set of recurring long‐term trends. These trends suggest challenges to security capabilities in the future. In this paper, we summarize and analyze these trends and propose an approach for addressing them in architecture and design activities.
The Effects of the Assessed Perceptions of MBSE on Adoption
Authors: Call Daniel R. , Herber Daniel R. , Conrad Steven A.
Published: September 2024

Traditional document‐based systems engineering (SE) practices have proven inadequate to address modern systems' increasing complexity, leading to shortcomings in SE outcomes. To address these limitations, model‐based systems engineering (MBSE) has emerged with an emphasis on the system model as the primary SE artifact. Despite its potential, MBSE has not achieved widespread adoption. This study explores MBSE adoption challenges through the lens of the diffusion of innovations theory to identify factors hindering its adoption. The study's methodology includes a survey distributed to SE professionals focusing on perceptions of attributes of MBSE identified by the diffusion of innovations theory, current use of models and MBSE, and basic demographic information. Results highlighted that respondents recognize the relative advantage of MBSE in improving data quality and traceability, but perceived complexity and compatibility with existing practices still present barriers to adoption. Subpopulation analysis reveals that those who are not already involved in MBSE efforts face the additional adoption obstacles of limited trial opportunities and tool access (chi‐squared test of independence between these populations resulted in p = 0.00). The survey underscores the potential for closer alignment between MBSE and existing SE methodologies to improve the perceived compatibility of MBSE. Future studies would benefit from examining additional variables identified by the diffusion of innovations theory, incorporating control questions to differentiate between perceptions of SE generally and MBSE specifically, identification of better methods to assess current MBSE use by participants, and measures to broaden the participant scope. Finally, the imminent introduction of SysML v2 presents a unique opportunity to reshape perceptions of MBSE to improve the adoption rate of MBSE and enhance its accessibility among SE professionals.
MissionML: A Mission Architecture Modeling Language based on Unified Architecture Framework
Authors: Yang Yilong , Song Wenxiao , Chang Chuangye , Gao Xinghai
Published: September 2024

The missions of complex systems, organizations, or groups can be identified through careful requirements and domain analysis. Mission architecture modeling is a crucial step for enterprise modeling and design. However, mission modeling is lacking from the Unified Architecture Framework (UAF), which system engineers must specify and model from sketch. This paper proposes a Mission Architecture Modeling Language (MissionML). This two‐layer architecture language generalizes the general common and special knowledge from four typical missions as a core layer and mission layer. The elements of the core layer are obtained through slight extensions of the operational layer elements in UAFML, and the elements of the mission layer are derived from the elements in the core layer. Moreover, MissionML is implemented as a UAF profile, incorporating numerous domain concepts in its syntax and semantics for mission modeling. Finally, we use five public case studies to demonstrate learnability and extensibility from the viewpoint of system engineers.
Using VR to Validate and Visualize MBSE‐Designed Interfaces
Authors: Flanagan Sean L.
Published: September 2024

Several unique challenges arise in the new field of integration between Model‐Based Systems Engineering (MBSE) models and game‐based digital twin visualizations. First, no known standardized interfaces between the MBSE model and game engine visualization are defined, which can lead to custom or stove‐piped solutions. Additionally, visualizing digital twin models in true to life scale is insufficient with typical desktop computers. The Bi‐Directional Interface Requirements Operational System Test (BIFROST) prototype, funded by the US Army Program Executive Office (PEO) Aviation, seeks to address these challenges.

Progress of the BIFROST prototype is covered in the paper. The prototype aims to determine the feasibility and challenges of validating interfaces through visualizing changes to an MBSE model in a 3D game engine. Research was performed to visualize part of an uncrewed aircraft system ground control station in 3D using the Unity game engine. A Mission Control Architecture MBSE model, developed by PEO Aviation, is used to drive the digital twin of the ground control station through a set of virtual reality (VR) controls. Users can visualize, analyze, and test the human‐machine interaction of the 3D models in VR prior to real‐world system changes. This paper presents the recommended interfaces between the MBSE model and 3D engine, lessons learned, and future research areas.
The Nature of Technical Debt in the Development of Descriptive Models for MBSE
Authors: Noguchi Ryan A.
Published: September 2024

Model‐Based Systems Engineering (MBSE) is the growing practice of systems engineering (SE) in which descriptive models replace documents as the embodiment of SE knowledge. These descriptive models capture SE information in place of documents, are developed in a similar manner to software source code, and are encoded and used in machine‐to‐machine applications as data. This paper describes how the Technical Debt concept widely used in the software domain—rework deferred to the future for expediency—needs to be modified for the domain of descriptive models. Technical Debt is often associated with agile development practices of software or descriptive models, which emphasize the rapid creation and iterative evolution of a Minimum Viable Product (MVP). Consciously applying appropriate modeling principles and practices is essential to make informed decisions during the modeling process to prevent the accumulation of excessive model Technical Debt—particularly during this iterative evolutionary process—which can require substantial rework to correct. The paper establishes a foundation for characterizing the Technical Debt implications of key model architecture and implementation decisions that are made explicitly or implicitly by modelers when developing descriptive models. To illustrate the model Technical Debt concept, several examples of modeling principles pertaining to model purpose and implementation are described along with their implications on model Technical Debt.
NASA's Use of MBSE and SysML Modeling to Architect the Future of Human Exploration
Authors: Hill Terry R. , Carnevale Alanna E. , Morris‐Eckart Audrey , Sundaram Vinodini , Farhaj Leon Z.
Published: September 2024

One of the key roles of National Aeronautics and Space Administration (NASA) is to help mitigate the risk and lower expenses associated with space exploration, science, and discovery to the point where industry and international partners are willing and able to profitably take on larger, more complex missions. To do this, the Agency must undertake a transformation to a more modern integrated Digital Engineering approach to mission definition and planning. This paper highlights NASA's journey in understanding what this Digital Engineering Transformation means for the Agency, the benefits of this transformation to human exploration definition and planning, and the benefits to the current Artemis campaign engineering capability portfolio.
Case Studies for Complexity Pattern Identification
Authors: Pickard Andrew C , Beasley Richard , Beale Dean , McKinney Dorothy , Oosthuizen Rudolph , Stewart Dave , Cureton Kenneth , Mirchandani Chandru
Published: September 2024

The INCOSE Complex Systems Working Group Heuristics Team has selected 67 Principles and Heuristics that are considered to be particularly relevant to Complex Systems. These have been incorporated into a Difficulty Assessment Tool that prioritizes the list of Principles and Heuristics based on scoring of a matrix of four Difficulty Elements and six System Elements (to characterize the nature of the complexity).

The purpose of this paper is to describe an initial assessment of the effectiveness and usefulness of the Difficulty Assessment Tool. The Tool has been used to assess eight Case Studies by five assessment teams — one with three people working together, one with two people and the remaining three with individual assessments.

The results of these assessments have been compared using four different correlation methods, using the total weighted Heuristic score, the maximum weighted Heuristic score, a Match / Mismatch analysis of the top fifteen and bottom seven Heuristics, and a difference ranking between pairs of assessors of all 67 Principles and Heuristics. The last two assessment methods are shown to be more insightful.

The assessment teams then reviewed the relevance of the highest and lowest‐ranked Principles and Heuristics to the full Case Study definitions (Problem and Outcome). There is good agreement of relevance for the highest‐ranking Principles and Heuristics, less so for the lowest‐ranking ones. Based on this initial assessment, the DAT shows promise to help people develop complex systems.

The paper concludes with recommendations for further assessment of the Difficulty Assessment Tool.
Evaluating the Scalability and Combinatorial Effectiveness of Design‐for‐Resilience Heuristics
Authors: Rogoll Olivier , Wierzbanowski Benjamin , Watson Bryan C
Published: September 2024

This study investigates the scalability of biologically inspired design‐for‐resilience heuristics in System of Systems (SoS) of varying sizes, simulating SoS with ten, twenty, and thirty constituent systems. We build upon previous research that identified thirteen design heuristics for SoS resilience based on Ecological Network Analysis (a subset of graph theory). We both extend their application to larger network sizes and combine them to enhance efficiency. Our analysis validates the application of design heuristics for random networks to evaluate the effectiveness of individual and combined design heuristics in network resilience compared to random network modifications. The outcomes provide insights into the scalability and efficiency of these heuristics, revealing the potential for systematic SoS design and resilience improvement. Key contributions of this research include the validation of the scalability of bio‐inspired resilience metrics and the testing of nine new combined design heuristics for SoS. These contributions provide a tool for decision‐makers seeking to select resilient SoS architectures. The findings also pave the way for future research into broader applications beyond ecological networks and further exploration of the relationship between ecological robustness and resilience.
Tactical Network Bandwidth Analysis: Application of the Wearables Model‐Based Systems Engineering ‐ System Architecture (MBSE‐SA)
Authors: Cyr Jillian , Sarathi Tara , Balcius Jim , Shatz Michael
Published: September 2024

Warfighters are often exposed to harsh environmental conditions, and experience high rates of physical and cognitive stress, fatigue, and infections, resulting in the degradation of their health and physical performance. This degradation can have a profound effect on the readiness of military forces. Wearable sensor systems can be used to monitor warfighter physiological and cognitive data, providing insight into their health status during routine military training and deployed operations; however, to enable a real‐time, tactical health and performance monitoring capability, wearable sensor systems must integrate into existing tactical military information networks without compromising network function. We extended our existing Wearables Model‐Based System Engineering – System Architecture (MBSE‐SA) to include a bandwidth simulation to analyze the effects wearable sensor systems have on overall network function specifically for military use cases. Our Wearables MBSE‐SA enabled us to model many notional and existing architectures, which represent the wide range of wearable sensor devices, communication protocols, end user devices, and tactical network nodes typically present in operational environments. By taking advantage of the existing Wearables MBSE‐SA framework and architectures, the resulting bandwidth simulation rapidly assessed several existing military network architectures for wearable sensor system integration and identified where network changes were required. Validating the flexibility of the Wearables MBSE‐SA to incorporate new analyses was critical for the military's ability to explore wearable sensor system trades and evaluate architectures in the quickly changing wearable systems technology domain.
Risk and Systems Analysis for Renewable Power Generation with Environmental and Other Stressors
Authors: Marcellin Megan C. , Pavur Gigi , Cardenas John J. , Waheed Saddam Q. , Trump Benjamin D. , Linkov Igor , Lakshmi Venkataraman , Lambert James H.
Published: September 2024

The effects of climate change and water scarcity threaten the stability of critical infrastructure systems in developing regions. In particular, the interconnectedness of energy systems, natural resources, economic growth, and social welfare requires a systems‐level framework to identify scenarios which most impact these systems. This paper evaluates and quantifies infrastructure system risk, defined as the influence of scenarios on system priorities. A scenario‐based multi‐criteria preferences model assesses system component priorities for a baseline scenario as well as climate and related scenarios. The shift in priorities between the baseline and other future scenarios define scenario disruptiveness, or level of risk. The methods are demonstrated for the case of the emerging renewable energy sector of Iraq. Twenty‐five renewable energy system assets are prioritized by an assessment of system success criteria, which include economic, social, political, and climate considerations. The system prioritization is reevaluated in the case of seven disruptive scenarios relating to water scarcity, climate volatility, and social and economic shifts. This paper advances methods of the Systems Engineering Body of Knowledge (SEBoK) Part 3: Engineering and Management, by defining system risk and proposing methods for risk identification and risk analysis.
When Moving Backward Means Moving Forward – Educating Systems Engineers in Designerly Ways of Thinking
Authors: Bengtsson Marie , Axehill Johanna Wallén , Herzog Erik
Published: September 2024

Systems Engineering as a discipline provides many tools for managing complexity and reducing risks. However, these tools come with drawbacks when ideating new product concepts in early lifecycle phases when the problem and solutions spaces are open. This paper suggests that methods from the Design field have a complementing role early in the systems lifecycle, but that those methods need to be accompanied by a different way of approaching problems, something that takes time to learn. We present experiences from a hybrid university course, where regular students were mixed with professional systems engineers for more rapid development of Design method experience in both groups.
Institute for Convergent Systems Engineering: A Strategic Plan for Ethical Sustainability
Authors: Wade Jon , Shin Hyoduk , Gessner Richard
Published: September 2024

The last few years have made it clear that the world is entering a new phase in which sustainability is of paramount importance to the survival and well‐being of our global societies. This paper describes the strategic plan for the Institute for Convergent Systems Engineering which is addressing the challenge of ethical sustainability in which social, environmental, and economic implications are carefully considered and balanced. Included is a discussion of the criticality of convergent systems engineering and its values and principles. The paper also presents a three part strategy for sustainability at the macro, meso, and micro levels entailing the consideration of end‐to‐end global value supply chains. The foundational pillars of research, education, and collaboration are also described.
Accelerating Digital Transformation through MBSE, Multi‐physics Simulation and Digital Twin in Industry
Authors: MARTINEZ Jacques , BOUHALI Imane , PALLADINO Luca , IDASIAK Vincent , KRATZ Frederic , CHOLEY Jean‐Yves , MHENNI Faida
Published: September 2024

In the dynamic aviation industry, Aerospace Industries grapple with the intricate challenge of certifying products amidst integration requirements from aerospace manufacturers and airworthiness regulations imposed by aviation authorities. This paper underscores the indispensable role of ModelBased Systems Engineering (MBSE) in addressing the multiphase issues inherent in our product complexity. The first focal point is the certification process, where Safran SEATS navigates the complexities imposed by aerospace manufacturers and stringent airworthiness regulations. This intricate certification process demands the strategic deployment of MBSE to streamline and enhance procedural efficiency. The second challenge arises from the abstract nature of style and perceived quality requirements articulated by diverse customers. With the goal of exceeding customer expectations and creating a genuine “WOW” effect, MBSE becomes instrumental in aligning product development with diverse and often oriented customers' needs. The third dimension of complexity stems from the variability in emerging requirements, where innovations swiftly become industry standards. MBSE provides a structured approach to handle this variability, ensuring adaptability and positioning products at the forefront of innovation. Additionally, we dissect the influence of Model‐Based Design (MBD) on design processes, shedding light on its transformative effects. Introducing the concept of a digital twin, we explore its significance in the aerospace domain. Real‐world implementations of digital twin technology examined through concrete examples from aerospace projects. Finally, the presentation addresses uncertainties surrounding program efficiency, a critical consideration in the intensely competitive seat market. This paper unfolds a compelling industrial testimony, showcasing Safran SEATS' journey in overcoming the complexity of digital transformation in Aerospace Industries. It provides solutions to intricate challenges posed by certification, customers' requirements, evolving industry standards, and economic competitiveness, encapsulating the transformative impact of MBSE in our pursuit of excellence.
Application of the System‐Theoretic Process Analysis (STPA) technique to enabling systems in the rail industry
Authors: Slowey John
Published: September 2024

Investigations into several recent railway safety incidents have concluded that failures of enabling systems contributed significantly to the root cause of those incidents, suggesting a tendency towards poor management of safety risk associated with subsystems outside the immediate System of Interest (SoI) boundary. This paper examines whether better application of systems thinking to the analysis of hazards, through use of the System‐Theoretic Process Analysis (STPA) technique, could have enabled safety risk to be better identified and managed in the circumstances surrounding a serious derailment that occurred in Victoria, Australia in February 2020.
Integrating STPA Extended for Coordination into SysML Using RAAML
Authors: Pennington Elizabeth , Johnson Kip , Colombi John , Hobbs Kerianne
Published: September 2024

As Model‐Based Systems Engineering (MBSE) becomes prevalent in engineering practice, the Department of Defense (DoD) requires a consistent methodology to conduct and record system safety analyses in the system model. Systems Theoretic Process Analysis (STPA) is a relatively new safety and hazard analysis method that utilizes the principles of Systems Theory and abstraction to analyze today's complex systems. Systems Theoretic Process Analysis Extended for Coordination (STPA‐Coord) provides a framework to design safe coordination among a system‐of‐systems architecture, which is needed for next‐generation integrated military systems. This research presents results from conducting an STPA‐Coord in Systems Modeling Language (SysML) using Risk Analysis and Assessment Modeling Language (RAAML), a recent extension to SysML that provides tools and guidance for multiple safety analyses. Results describe deviations from the RAAML standard and suggest modifications to RAAML for STPA‐Coord. Results include qualitative and quantitative observations conducting an STPA‐Coord using SysML, including time required for the effort and observed benefit over document‐based methodologies.
A Classical Modernization of the V‐Model
Authors: Barnum William J. , Fisher William , Winstead Mark W. , Walsh Stephen J.
Published: September 2024

This paper provides new iconography for the Systems Engineering “V‐Model” or “Vee‐Model.” The “Arch Model” resets and refreshes the original iterative intent of the “V‐Model” in a modern context integrated with digital engineering (DE). We will highlight common misperceptions that reduced the efficacy of the “V‐Model” and explore how a “classical Roman engineering” metaphor can inspire a modern view of systems development based on historically successful, foundational engineering.
Modeling NASA's Procedural Requirement Processes ‐ Implications for Digital Future
Authors: Hill Terry R. , Nicoli Patricia E. , Cornford Steven L. , Morgenstern Robert M. , Chiras David M. , Barnes Patrick D. , Bendig Josh L.
Published: September 2024

The National Aeronautics and Space Administration (NASA) has an ongoing Digital Transformation effort and to leverage and showcase the power of Digital Transformation, an effort is underway to develop an integrated, datacentric, model representing NASA's key process requirements. The task was divided into three phases: As Is modeling, Analysis, and To Be Planning. As part of this effort, a team has completed the first Phase I of the modeling task and is nearing completion of the second phase. This effort will capture the key elements as requirements, responsibilities, allocations, roles, products, and associated lifecycle elements. The scope of modeling included NASA's NPR 7120.5 (Project and Program Management), NPR 7123.1 (Systems Engineering) and NPRs 8705.2 (Risk classification for Robotic Missions) and 8705.4 (Human‐Rating Requirements for Space Missions).

This paper will summarize the approach, scope, parsing patterns applied, metamodel, and associated workflows for the As‐Is modeling. It will also summarize the results and insights gleaned during that phase, including the review process. These insights have informed the analysis and will be discussed. The analysis modeling phase will also be summarized including how the stakeholders were engaged, how the common elements were handled and dispositioned, and will also describe some of the plans for the future of NASA NPDs and NPRs.
How the INCOSE Model‐Based Capability Matrix Has Steered Model‐Based Systems Engineering Transformation at NASA
Authors: Pierce Gregory J. , Nicoli Patricia E. , Hill Terry R. , Cornford Steven L.
Published: September 2024

The National Aeronautics and Space Administration (NASA) is embarking on new, complex, and diverse missions to accomplish its scientific and exploration objectives, and it views digital transformation as a key enabler for those missions. The NASA Model‐Based Systems Engineering (MBSE) Leadership Team (MLT) is leading the charge in the digital transformation of the systems engineering domain at NASA, and it is using the INCOSE Model‐Based Capability Matrix (MBCM) as a roadmap. This paper discusses the modifications and tailoring of the INCOSE MBCM (Hale & Hoheb, 2020) for use at NASA, the process the team has taken on multiple rounds of assessment, findings to date, and work products that have been generated as a result of the assessment. The paper will also discuss findings and potential changes that should be made to the original product.
Design Basis Model for Hosting Small Modular Reactors
Authors: Claghorn Ron
Published: September 2024

To provide energy security and head off further increases in global temperatures, an aggressive transition from fossil fuels to other types of energy implies the need to possibly construct hundreds of nuclear power plants in the near future. However, the real and perceived risks of nuclear energy remain a significant impediment to that transition.

This paper describes a comprehensive work process that combines the rigor of model‐based systems engineering (MBSE) with 1) the Idaho National Laboratory's (INL) decades of experience with small reactors and with 2) modern project delivery processes. The objective is to reduce the risks of building new facilities or converting existing facilities to nuclear power generation.