Engineering Commons^™

Systemic Risk Analysis Of Human Factors In Phishing, Mark Guilford

Engineering Management & Systems Engineering Theses & Dissertations

The scope of this study is the systemic risk of the role of humans in the risk of phishing. The relevance to engineering managers and systems engineers of the risks of phishing attacks is the theft of data which has significantly increased in the past couple of years. Phishing has become a systemic persistent threat to all internet users. Understanding the role of humans in phishing from a systemic perspective is a critical objective towards creating a strong defense against complex and manipulative phishing attacks. The systemic view of phishing concentrates on how phishing affects the entire organizational system, not …

Risk-And-Resiliency-Intelligent Supply Chain (Rrisc), Ahmad A. Abdelnabi, Ahmed M. Abdelmagid, Ghaith Rabadi, Andres Sousa-Poza, C. Ariel Pinto

Modeling, Simulation and Visualization Student Capstone Conference

This work proposes a risk-and-resiliency-intelligent supply chain (RRiSC) tool which is an SC risk management framework that leverages cutting-edge technologies in Artificial Intelligence (AI), Big Data Analytics (BDA), and Digital Twins (DT) to develop specific capabilities for SC risk management. RRiSC is a convergence of mature tools and techniques embedded in three modules: Modeling, Simulation, and Visualization – all together integrate the optimization, simulation, and data analytics to test the performance of the whole supply network under different scenarios through measuring the vital KPIs, identifying the vulnerabilities, and setting proactive plans to diminish risks consequences.

Development Of A Framework To Support Informed Shipbuilding Based On Supply Chain Disruptions, Katherine Smith, Rafael Diaz, Yuzhong Shen

VMASC Publications

In addition to stresses induced by the Covid-19 pandemic, supply chains worldwide have been growing more complex while facing a continuous onslaught of disruptions. This paper presents an analysis and extension of a graph based model for modeling and simulating the effects of such disruptions. The graph based model combines a Bayesian network approach for simulating risks with a network dependency analysis approach for simulating the propagation of disruptions through the network over time. The initial analysis provides evidence supporting extension to for using a multi-layered approach allowing for the inclusion of cyclic features in supply chain models. Initial results …

A Human Factors Study Of Risk Management Of Complex Agile Scrum Projects In Large Enterprises, Ravi Kalluri

Engineering Management & Systems Engineering Faculty Publications

Agile Project Management methods have gained phenomenal success in the IT software world in managing projects of high complexity and uncertainty. However, Agile projects come with their unique set of risks. This paper seeks to explore the risks posed by human factors to complex Agile Scrum projects in large enterprises. Project Risk Management is crucial in determining the future performance of a complex project. Increasing project complexity makes it more and more difficult to anticipate potential events that could affect the project and to make effective decisions to reduce project risk exposure. This is even more true for Agile projects …

Influence Of The Inherent Safety Principles On Quantitative Risk In Process Industry: Application Of Genetic Algorithm Process Optimization (Gapo), Mehdi Jahangiri, Abolfazl Moghadasi, Mojtaba Kamalinia, Farid Sadeghianjahromi, Sean Banaee

Community & Environmental Health Faculty Publications

Inherent safety (IS) refers to a set of measures that enhance the safety level of processes and equipment, rendering additional equipment and/or add-ons. The early design phase of processes is suited best for implementation of IS strategies as some of such strategies either are impossible to be implemented at the operation phase or substantially increase costs. The purpose of this study is to present a new approach called genetic algorithm process optimization (GAPO), by which processes can be made inherently safer even at the operation phase. This study simulates the IS principle, assessing its impact on quantitative risk and the …

Application Of Theory Of Constraints (Toc) In Managing Project Information Constraints, Ferdinand Z. Prantl

Engineering Management & Systems Engineering Projects for D. Eng. Degree

The scope of this doctoral project is the non-traditional application of Drum-Buffer-Rope (DBR) from the area of Theory of Constraints (ToC) in mitigating disruption in distribution facilities during phased upgrades caused by information constraint. The relevance of this project is that industrial equipment upgrades pose a significant risk of disrupting the operation of automated distribution facilities. It is partly due to a very high expected availability rate, as well as tight coupling with other upstream and downstream elements of the larger supply chain network. As a consequence of disruption in this scenario, losses incurred not only within the facility being …

Validation Risk Across Hierarchical Models, John B. Young

Computational Modeling & Simulation Engineering Theses & Dissertations

Modeling and simulation are applied in a great many methods across a variety of topics. Model developers and users alike have a professional duty to understand the complexities of the tools and methods they are used. Oftentimes, models that have been independently constructed and executed are used to inform one another for an analytic purpose and the compatibility of the models is not always addressed. In the literature, great attention has been paid to model validation. When using models constructively with one another, analysts must understand the bounds of model validity and ensure that the combination of models does not …

Systemic Methodology For Cyber Offense And Defense, C. Ariel Pinto, Matthew Zurasky

Engineering Management & Systems Engineering Faculty Publications

This paper describes a systemic method towards standardization of a cyber weapon effectiveness and effectiveness prediction process to promote consistency and improve cyber weapon system evaluation accuracy – for both offensive and defensive postures. The approach included theoretical examination of existing effectiveness prediction processes for kinetic and directed energy weapons, complemented with technical and social aspects of cyber realm. The examination highlighted several paradigm-shifts needed to transition from purely kinetic-based processes and transition into the realm of combined kinetic and cyber weapons. Components of the new method for cyber weapons are cyber payload assessment, effects identification, and target assessment. The …

On The Responsibility For Uses Of Downstream Software, Marty J. Wolf, Keith W. Miller, Frances S. Grodzinsky

Computer Ethics - Philosophical Enquiry (CEPE) Proceedings

In this paper we explore an issue that is different from whether developers are responsible for the direct impact of the software they write. We examine, instead, in what ways, and to what degree, developers are responsible for the way their software is used “downstream.” We review some key scholarship analyzing responsibility in computing ethics, including some recent work by Floridi. We use an adaptation of a mechanism developed by Floridi to argue that there are features of software that can be used as guides to better distinguish situations where a software developer might share in responsibility for the software’s …

Pathology-Informed Approach In Vulnerability Assessment Methods, Polinpapilinho F. Katina, Adrian V. Gheorghe, Charles B. Keating

Engineering Management & Systems Engineering Faculty Publications

A system pathology is a circumstance, condition, or pattern that acts to limit system performance, or lessen system viability, such that the likelihood of a system achieving performance expectation is reduced. The idea of pathology has been described in multiple fields, including computer science, organizational studies, policy analysis, system-of-systems engineering, and systems engineering. However, there is scarcity of literature describing relationship between system pathology and vulnerability assessment. The aim of this study lies at the intersection of system pathology and vulnerability assessment in engineered systems. First, authors provide the state of the art review of literature on system pathology. Second, …

Initiating Event Analysis Of A Lithium Fluoride Thorium Reactor, Nicholas Charles Geraci

Engineering Management & Systems Engineering Theses & Dissertations

The primary purpose of this study is to perform an Initiating Event Analysis for a Lithium Fluoride Thorium Reactor (LFTR) as the first step of a Probabilistic Safety Assessment (PSA). The major objective of the research is to compile a list of key initiating events capable of resulting in failure of safety systems and release of radioactive material from the LFTR.

Due to the complex interactions between engineering design, component reliability and human reliability, probabilistic safety assessments are most useful when the scope is limited to a single reactor plant. Thus, this thesis will study the LFTR design proposed by …

A Risk Assessment Of The Impacts Of Coastal Flooding And Sea Level Rise On The Existing And New Pump Stations 113, Norfolk, Va, David A. Pezza

Civil & Environmental Engineering Theses & Dissertations

The author assessed the risk to a wastewater pump station and a planned replacement located nearby due to coastal flooding and rising sea levels. The locations for the pump stations are in the Larchmont neighborhood by the Lafayette River tidal estuaries in Norfolk, Virginia. The Lafayette River is a tributary to the Elizabeth River, which flows to the Chesapeake Bay. The low-lying areas along the river are subject to coastal surges caused by tropical and extra-tropical storms that flood the bay.

The region is considered one of the urban areas most exposed to the accelerating rate of rising sea levels. …

System Of Systems Perspective On Risk: Towards A Unified Concept, C. Ariel Pinto, Michael K. Mcshane, Ipek Bozkurt

Finance Faculty Publications

Many systems and projects that concern systems engineers, engineering managers, and business managers today can be defined as system of systems (SoS), which are described as ambiguous, uncertain and dynamic, among others. In addition to the traditional view on risk identification, analysis and management, the concept of risk should be considered with respect to these systems of systems. The purpose of this paper is to analyse both fundamental concepts and recent publications in system of systems, business and engineering management, as well as risk analysis, modelling, and management for the purpose of better describing the concept of risk with respect …

An Evaluation Of Risk Management Courses Offered In Engineering Management Programs, S. Jimmy Gandhi, C. Ariel Pinto

Engineering Management & Systems Engineering Faculty Publications

For this paper, the authors have surveyed a total of 22 engineering management (EM) programs in the United States (both accredited and non-accredited). The purpose of this study was to analyze the offering of risk management courses as part of the engineering management curriculum. The findings showed that the majority of the programs did not offer a single dedicated course on risk management and merely covered the topic as part of other courses such as project management. The authors have made recommendations that risk management should be included as a required part of the EM curriculum due to the higher …

Goal Approach To Risk Scenario Identification In Systems Development, Cesar Ariel Pinto, Andreas Tolk, Rafael Landaeta

Engineering Management & Systems Engineering Faculty Publications

The scope of this paper is the exploration of fundamental issues in identifying risk scenarios during systems development. Systems development refers to a series of processes which span conceptualization, designing the architecture, obtaining the elements, and eventually integrating all these elements into the fully developed final system. For truly sustainable and green systems, identifying risk scenarios early and continuously over the system development processes is vital. This paper contains various descriptions of risk from the project (i.e. programmatic) and technical perspectives, an exploration of the generally accepted risk management process, and how these relate to systems development through system goals. …

Development Of A Framework To Evaluate Human Risk Towards Sustainable Risk Management, Ra'ed M. Jaradat, Rani A. Kady, C. Ariel Pinto

Engineering Management & Systems Engineering Faculty Publications

Risk managers are constantly faced with the challenge of making decisions at various levels of their organizations. One of the challenges, which often times is unavoidable, lies in assigning a monetary value to human risks. Such challenge necessitates engineering managers to make educated decisions on the level of risk that the organizations and businesses should accept when it comes to human. The purpose of this study is to suggest a suitable framework that captures this aspect of engineering Risk Management in order to make rational and sustainable decisions about such assessed risk. This will be accomplished by exploring the tools, …

Risk And System-Of-Systems: Toward A Unified Concept, C. Ariel Pinto, Michael K. Mcshane, Rani Kady

Engineering Management & Systems Engineering Faculty Publications

The scope of this paper is the survey of both fundamental and most recent publications in system-of-systems, business and insurance, as well as risk analysis, modeling, and management for the purpose of better describing the concept of risk in recognition of emergence and complexity which characterizes many systems within the concern of engineering and business managers. The ultimate goal is to provide engineering and business managers the necessary perspective on the concept of risk and in its management for the next generation of sustainable systems - including various descriptions of risk and discussion of the relevance of properties of system-of-systems …

Rapid Sensor Technology: A Risk And System Complexity Analyses Of Early Detection Of Influenza-Like-Illnesses, Cesar Ariel Pinto, Ipek Bozkurt

Engineering Management & Systems Engineering Faculty Publications

The development of effective and reliable methods to defend the nation against biological terrorism remains an urgent challenge to researchers in the areas of risk, bio-defense, public health, and emergency medicine. The emerging threat of the avian flu pandemic also highlights the unpreparedness of our nation's health care system to meet a highly contagious and infectious disease outbreak. The implementation of a rapid sensor technology for early detection of influenza-like-illness provides possible opportunities, as well as problems. Bounding and defining such a complex problem is one of the first challenges this research addresses. Approaching this problem from various perspectives such …