Candidate:
Inês Dias Koch

Date, Time and Location
1st of July 2025, 14:30, Sala de Atos da Faculdade de Engenharia da Universidade do Porto

Title:
“Integration of models for linked data in cultural heritage and contributions to the FAIR principles”

President of the Jury:
João Carlos Pascoal Faria (PhD), Full Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto.

Members:
Maja Žumer (PhD), Full Professor, Department of Library and Information Science of the University of Ljubljana, Slovenia;

María Poveda Villalón (PhD), Associate Professor, Departament of Artificial Intelligence of the Technical University of Madrid, Spain;

José Luís Brinquete Borbinha (PhD), Full Professor, Department of Computer Science and Engineering, Instituto Superior Técnico da Universidade de Lisboa;

Pedro Manuel Rangel Santos Henriques (PhD), Full Professor, Department of Informatics, Escola de Engenharia da Universidade do Minho;

Carla Alexandra Teixeira Lopes (PhD), Associate Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto (Supervisor);

Mariana Curado Malta (PhD), Assistant Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto.

The thesis was co-supervised by Maria Cristina de Carvalho Alves Ribeiro (PhD), Retired Associate Professor in the Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto.

Abstract:

The various areas of Cultural Heritage, such as archives, museums, and libraries, have invested in tech-
nological development and innovation to make their resources available to users more efficiently and completely. To this end, the description of these resources is essential so that they are explained in
terms of their context and content, as well as to facilitate their intelligibility and accessibility. In this
sense, each area has begun to develop its own models and standards for describing the cultural objects
it deals with. This has made these standards sector-specific and only able to fulfil the information needs
within the area of knowledge they were developed, exploring only the information described within their
domain. As a result, linking resources from different information sources is challenging.
With the need to make the standards and models more interoperable, linked data models emerged in
Cultural Heritage. These models make it possible to link the various concepts from the different heritage
areas efficiently and effectively, considering the Semantic Web’s characteristics.
In Portugal, the Portuguese National Archives felt the need to develop a linked data model to describe
their cultural objects, which led to the creation of the EPISA Project, the project from which this research
emerged. Thus, this work aims to develop a linked data model to describe archival records, as well as to
connect them with other heritage domains, integrating them with existing linked data models, promoting
the access and reuse of data from heritage institutions based on the specialised description associated
with the cultural objects of these institutions. Additionally, it aims to link existing data models to data from other sources available on the Web, such as Wikidata and DBpedia.
We carry out a study that includes existing data models in Cultural Heritage, such as CIDOC CRM
in museums, RiC-CM in archives, and LRMoo in libraries, along with models that have emerged within
Web projects, such as DBpedia and Wikidata. By describing archival objects, as well as creating and
exploring relationships between other data models, this study identifies common characteristics and
principles, as well as the distinctive aspects of each area. Furthermore, it identifies the possibility of linking elements of the various models, ensuring that the models can be adapted to applications without losing the richness of the conceptualisation carried out in each of the domains.
In a context in which the Web promotes the explicitness of data semantics through the Semantic
Web and provides tools to represent it, it is necessary, on the one hand, to create links between models from different communities and, on the other, to adjust the complexity of each model to each application according to its specific requirements. The FAIR Principles (Findable, Accessible, Interoperable, Reusable) were therefore used as one of the sources for the requirements that data and metadata must fulfil to have a modular structure. We bring together a collection of use cases linked to archives users, including profiles ranging fromcollection managers to heritage promoters and informal users. In addition, we compile and evaluate a set of data modelling experiences using different models.
This work resulted in ArchOnto, a modular ontology that describes archive records. It was developed
considering existing archive standards and validated by experts in the field, specifically archivists from the Portuguese National Archives. ArchOnto is based on CIDOC CRM, combined with four other
specific ontologies also developed in this work.
The development of ArchOnto led to the creation of a prototype platform designed to explore and
manipulate archive records. Additionally, it offers the potential to apply this ontology to other domains, specifically to the representation of cinematographic records.

Keywords: Cultural Heritage; Linked Open Data; Data Integration; Semantic Web; FAIR Principles; Digital Humanities.

Candidate:
José Eduardo Ferreira Ribeiro

Date, Time and Location:
30th of June 2025, 14:30, Sala de Atos, Faculdade de Engenharia da Universidade do Porto

Title:
”Towards Continuous Certification of Software Systems for Aerospace”

President of the Jury:
Rui Filipe Lima Maranhão de Abreu (PhD), Full Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto.

Members:
Miguel Mira da Silva (PhD), Full Professor, Department of Computer Science and Engineering, Instituto Superior Técnico da Universidade de Lisboa;

João Miguel Lobo Fernandes (PhD), Full Professor, Departament of Informatics, Escola de Engenharia da Universidade do Minho;

João Carlos Pascoal Faria (PhD), Full Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto;

João Gabriel Monteiro de Carvalho e Silva (PhD), Full Professor, Department of Informatics Engineering, Faculdade de Ciências e Tecnologia da Universidade de Coimbra (Co-Supervisor).

The thesis was supervised by Ademar Manuel Teixeira de Aguiar (PhD), Associate Professor of the Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto.

Abstract:

Since the publication of the Agile Manifesto in 2001, Agile methods have evolved to become the dominant approach in software development across diverse domains. However, their adoption in safety-critical systems development, such as aerospace, remains limited for reasons usually attributed to the stringent regulatory safety requirements imposed by domain-specific standards. This dissertation explores the applicability of Agile methods within the context of safety-critical aerospace software development, specifically under the guidelines of the DO-178C standard, and concludes that, contrary to common belief, Agile methods can be effectively used also in this context. The DO-178C standard, titled Software Considerations in Airborne Systems and Equipment Certification, is the principal certification guideline for aviation software for agencies such as Federal Aviation Administration (FAA) and European Union Aviation Safety Agency (EASA).

A key observation from discussions with professionals across different organizations and industries with strong safety requirements, including space, aerospace, railway, automotive, energy, and defence, is the widespread perception that traditional methods like the Waterfall model are indispensable, if not mandatory, for compliance and successful certification. This perception derives from the rigorous safety-related evidence required for certification. In aerospace software development, the minimal adoption of Agile methods and practices is attributed to the demands of DO-178C, regarded as a restrictive standard. However, contrary to this belief, DO-178C does not mandate any specific development method but instead provides guidelines and objectives to achieve the necessary safety-related evidence. This flexibility opens the possibility for Agile methods to be adapted to meet certification requirements while offering their well-documented advantages of incremental delivery and adaptability to changing requirements.

This research examines whether Agile methods, particularly the Scrum framework, can be effectively integrated into the development of safety-critical aerospace software systems while maintaining full compliance with DO-178C. The study introduces Scrum4DO178C, a novel Agile-friendly process tailored to address the specific challenges of aerospace software development, including its extensive verification and validation (V&V) efforts. Through a comprehensive review of literature, industry practices and data, as well as real-world insights from an industrial case study involving a critical aerospace project (Software Level A – Catastrophic), the research evaluates the feasibility and benefits of this approach. The case study demonstrates that Scrum4DO178C improves project performance, enhances responsiveness to changing requirements and reduces V&V efforts, in comparison with Waterfall, while fully complying with DO-178C.

The findings challenge the prevailing notion that Agile is inherently incompatible with safety-critical domains and suggest that when adapted thoughtfully, Agile methods can complement the rigorous standards requirements like DO-178C. By bridging the gap between Agile methods, practices and safety-critical development, this work advocates for a paradigm shift in developing safety-critical software, promoting a more adaptive, customer-centric approach. Specifically, this research highlights Agile’s capacity to accelerate knowledge acquisition through shorter delivery cycles and feedback loops, improve traceability, and manage late-stage requirement changes more efficiently, also in the aerospace domain.
Building on this foundational work, ongoing efforts are underway to enhance the Scrum4DO178C process through automation, enabling the automatic generation and reuse of outputs required for DO-178C compliance. Additionally, future research will extend these concepts to other aerospace standards and safety-critical domains, ensuring their applicability and compliance across diverse regulatory frameworks. Supported by collaborative initiatives with universities (e.g Master’s thesis projects at the Faculty of Engineering, University of Porto (FEUP) and the Informatics Engineering Departament of the University of Coimbra (UC)) and industry partners, this research aims to reshape industry perceptions of Agile’s role in safety-critical systems, fostering innovation and adaptability in these complex environments.

Keywords: Agile; Aerospace; DO-178C; FAA; Safety-critical; Software development.

Candidate:

Eliseu Moura Pereira

Date, Time and Location:

17^th of June 2025, 10:00, Sala de Atos, Faculdade de Engenharia da Universidade do Porto

President of the Jury:

Carlos Miguel Ferraz Baquero-Moreno, Full Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto.

Members:

Pedro Nicolau Faria da Fonseca (PhD), Assistant Professor, Department of Electronics, Telecommunications and Computer Science, Universidade de Aveiro;

Paulo Jorge Pinto Leitão (PhD), Principal Coordinating Professor, Department of Electrical Engineering, Instituto Politécnico de Bragança;

André Monteiro de Oliveira Restivo (PhD), Associate Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto;

Gil Manuel Magalhães de Andrade Gonçalves (PhD), Associate Professor with Habilitation, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto (Supervisor).

The thesis was co-supervised by João Pedro Correia dos Reis (PhD), Assistant Researcher, Department of Electrical and Computer Engineering, Faculdade de Engenharia da Universidade do Porto.

Abstract:

Cyber-Physical Production Systems (CPPSs) integrate computation, communication, and control technologies, delivering the flexibility needed for dynamic shop floor reconfiguration and efficient manufacturing. A factory with higher shop floor flexibility has the advantage of higher product customization or changeover, when compared to traditional industries. They manifest this advantage mainly when the industry introduces a new product or because the shop floor produces highly variable products needing constant reconfiguration. Several manufacturers adopt such production philosophy, like in the automotive industry, where a high variability of car models and specifications requires different setups/configurations of the shop floor to manufacture them. In sequential production lines, like car assembly lines, reconfigurable CPPSs play an essential role because processing one product can affect the entire production performance, requiring a shop floor reconfiguration to optimize their execution. A significant challenge in CPPSs arises when reacting to changing conditions, such as new products or requirements, reconfiguration is needed. Current systems rely on manual intervention, leading to significant delays, especially in large industries where reprogramming hundreds of machines can take days or weeks. This thesis addresses this issue by proposing a platform that automatically optimizes software assignment to resources, speeding up development, deployment, and reconfiguration, enabling CPPSs to adapt to external disturbances quickly.

With the purpose of accelerating the development, reconfiguration, and execution of software in CPPSs, this thesis aims to optimize Function Blocks (FBs) assignment to the devices existent in an IEC 61499-based Cyber-Physical System (CPS), reducing the total execution time (reconfiguration time plus FB pipeline execution time). With this main goal, the thesis resulted in the development of 3 tools: 1) the Dynamic Intelligent Architecture for Software and Modular Reconfiguration (DINASORE), that enables the development, execution and manual reconfiguration of IEC 61499-based CPSs, 2) the Task Resources Estimator and Allocation Optimizer (TREAO),  that simulates and optimizes the tasks/FBs assignment to the CPS machines, recommending suitable software layouts for the CPS characteristics, and 3) the Task Assignment Optimization and Synchronization Engine (T-Sync), which integrates the previous two tools in a solution and optimizes in run-time the FBs assignment to the devices existent in an IEC 61499-based CPS.

Integrating these tools in T-Sync resulted in a differentiating solution because it 1) allows online FB assignment to optimize the CPS execution continuously and 2) improves the transparency and interoperability between FBs across IEC 61499-based devices. With this solution, the performance (total execution time) running FBs in reconfigurable CPSs improved by 30% in a simulated environment and 61% in a CPS. In addition to T-Sync improving total execution time, DINASORE enhances reconfiguration efficiency and flexibility, while TREAO streamlines CPS development by optimizing task and FB assignments to available resources. Besides the mentioned ones, during this thesis, other algorithms were implemented and tested for task assignment optimization, and other tools were developed to increase the interoperability and portability in CPSs. The future work envisions the automatic generation of FB pipelines from structured requirements, with formal specifications like UML diagrams, consequently integrating TREAO, manufacturing process simulators, and T-Sync to iteratively validate, optimize, simulate factory layouts, and deploy CPS software with enhanced flexibility and adaptability.

Keywords: Cyber-Physical Production Systems; IEC 61499; Machine Learning; Task Assignment.

Candidate:

Leonardo da Silva Ferreira

Date, Time and Location:

13th of June 2025, 9:30, Sala de Atos, Faculdade de Engenharia da Universidade do Porto

President of the Jury:

Pedro Nuno Ferreira da Rosa da Cruz Diniz, PhD, Full Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto

Members:

Pedro Manuel Henriques da Cunha Abreu, PhD, Associate Professor with habilitation, Department of Informatics Engineering, Faculdade de Ciência e Tecnologia da Universidade de Coimbra;

Paulo Jorge Freitas de Oliveira Novais, PhD, Full Professor, Department of Computer Science, Escola de Engenharia da Universidade do Minho;

Carlos Manuel Milheiro de Oliveira Pinto Soares, PhD, Associate Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto;

Ana Paula Cunha da Rocha, PhD, Associate Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto;

Daniel Augusto Gama de Castro Silva, PhD, Assistant Professor, Department of Informatics Engineering, Faculdade de Engenharia da Universidade do Porto (Supervisor).

The thesis was co-supervised by Professor Mikel Uriarte Itzazelaia, Associate Professor at the Escuela de Ingeniería de Bilbao, Universidad del País Vasco.

Abstract:

With the dynamic evolution of the internet, particularly in domains such as multimedia services, cloud computing, internet of things, virtualization, and artificial intelligence, companies have witnessed significant expansion in their market and services. However, this growth has also exposed numerous vulnerabilities that threaten the confidentiality, integrity, and availability of organizational and personal data. As information technology analysts work to address security system alerts, artificial intelligence has introduced new avenues for breaching security, ranging from simple, low-cost methods to highly sophisticated attacks. Low-cost approaches include phishing and password spraying, which exploit human error and weak password practices. In contrast, more complex threats include advanced persistent attacks and zero-day exploits, which require significant expertise and resources, often disrupting critical systems. Many organizations rely on cybersecurity helpdesk centers, internal or outsourced, to manage incidents. However, these centers often struggle to respond effectively due to data overload and a lack of qualified operators.

This dissertation addresses the shortage of skilled operators and the high volume of incidents in helpdesk operations by developing a ticket management assistant to support human operators in resolving incidents. The framework integrates a context-aware recommender system that identifies the fastest analyst-procedure pair for each incident and continually improves with each treatment followed. To ensure data privacy, this recommender system is trained using artificial data generated by a custom synthetic data generator. Furthermore, this thesis explores the possibility of enhancing this assistant with automated machine learning functionalities to predict incoming tickets. This feature could help managers anticipate workloads and proactively adjust the composition of the security teams.

The development of this framework is supported by the collaboration with a cybersecurity company, S21sec, which provides anonymized historical incident treatment data structures and taxonomies. However, synthetic data generation techniques are essential due to the absence of granular information on incident resolution and related parameters in the shared data set, which also requires privacy. The implemented generator builds artificial datasets that can mimic distributions similar to those observed in the real dataset while emulating real-world behaviours, including ticket prioritization, scheduling, and treatment.

The artificial data generator is evaluated for its efficiency in replicating real-world datasets using similarity measures such as Hellinger distance and Kullback-Leibler divergence. Furthermore, several ticket scheduling scenarios are explored, varying operators’ numbers and distribution across three work shifts. The results demonstrate that this framework can replicate ticket distributions and treatment durations observed in real datasets. Additionally, it allows for the simulation of real-world helpdesk operations, providing a solid foundation for exploring diverse operational contexts without compromising privacy. The analysis of the ticket scheduling consistently shows that scenarios characterized by a high shift imbalance and fewer operators lead to longer wait times and more tickets scheduled for later treatment.

The recommender system is assessed from two perspectives: scalability and impact on ticket treatment. The first phase uses various test datasets with different sizes and numbers of operators, analyzed with metrics such as the average recommendation time and memory usage. In contrast, the impact on ticket treatment is examined by considering improvements in ticket waiting times before being allocated to an operator and the response time required for their resolution, using different recommendation acceptance degrees. The results indicate that the number of operators the recommender system utilizes has a slightly larger impact on its scalability than the number of test tickets. Both features show a similar linear growth pattern regarding the referred metrics, but the number of operators has a larger slope. Integrating this recommender system into the ticket treatment reduced the average response time by 37.9\% to 45.1\% and the average wait time by 62.2\% to 63.2\%, assuming operators always accept the recommendations. With varying recommendation acceptance rates, the average wait time remains constant, while the response time improvement ranges from 0.4\% to 11.7\%.

The potential application of automated machine learning for predictive analysis is explored through a case study, comparing the system’s recommended team dimensionality decisions with expected outcomes. The case study evaluates the system based on prediction accuracy and its ability to suggest team size adjustments. Among the tested dataset distributions, models trained in three years of data outperformed those trained on four years, showing a better mean average error using real data on ticket frequency throughout the year. Regarding team dimensionality recommendations, including hiring or dismissing operators, the tool-based on automated machine learning frequently proposed decisions closely aligned with those that could have been proposed in the same period.

Collectively, these results show that the proposed framework can optimize ticket treatment workflows in real-world applications, leading to more efficient use of resources and reduced operational delays. Furthermore, its ability to simulate real-world operations without compromising privacy allows security operations centers to test several scenarios and refine their strategies.

Keywords: Helpdesk; Ticket; Cybersecurity; Synthetic Data; Recommendation Systems.