{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T11:15:48Z","timestamp":1780053348697,"version":"3.54.0"},"reference-count":57,"publisher":"MDPI AG","issue":"7","license":[{"start":{"date-parts":[[2017,7,17]],"date-time":"2017-07-17T00:00:00Z","timestamp":1500249600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The cyber-physical gap (CPG) is the difference between the \u2018real\u2019 state of the world and the way the system perceives it. This discrepancy often stems from the limitations of sensing and data collection technologies and capabilities, and is inevitable at some degree in any cyber-physical system (CPS). Ignoring or misrepresenting such limitations during system modeling, specification, design, and analysis can potentially result in systemic misconceptions, disrupted functionality and performance, system failure, severe damage, and potential detrimental impacts on the system and its environment. We propose CPG-Aware Modeling &amp; Engineering (CPGAME), a conceptual model-based approach to capturing, explaining, and mitigating the CPG. CPGAME enhances the systems engineer\u2019s ability to cope with CPGs, mitigate them by design, and prevent erroneous decisions and actions. We demonstrate CPGAME by applying it for modeling and analysis of the 1979 Three Miles Island 2 nuclear accident, and show how its meltdown could be mitigated. We use ISO-19450:2015\u2014Object Process Methodology as our conceptual modeling framework.<\/jats:p>","DOI":"10.3390\/s17071644","type":"journal-article","created":{"date-parts":[[2017,7,18]],"date-time":"2017-07-18T03:45:16Z","timestamp":1500349516000},"page":"1644","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":14,"title":["Minding the Cyber-Physical Gap: Model-Based Analysis and Mitigation of Systemic Perception-Induced Failure"],"prefix":"10.3390","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5768-1044","authenticated-orcid":false,"given":"Yaniv","family":"Mordecai","sequence":"first","affiliation":[{"name":"Researcher, William Davidson Faculty of Industrial Engineering and Management, Technion\u2014Israel Institute of Technology, Haifa 32000, Israel"},{"name":"Senior Systems Architect, Motorola Solutions Israel, Airport City 70099, Israel"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2393-3124","authenticated-orcid":false,"given":"Dov","family":"Dori","sequence":"additional","affiliation":[{"name":"Harry Lebensfeld Chair of Industrial Engineering, William Davidson Faculty of Industrial Engineering and Management, Technion\u2014Israel Institute of Technology, Haifa 32000, Israel"},{"name":"Visiting Professor, Massachusetts Institute of Technology, Cambridge, MA 02142, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2017,7,17]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Lee, E.A. (2008, January 5\u20137). Cyber Physical Systems: Design Challenges. Proceedings of the 2008 11th IEEE International Symposium on Object Oriented Real-Time Distributed Computing (ISORC), Orlando, FL, USA.","DOI":"10.1109\/ISORC.2008.25"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1366283.1366309","article-title":"A prototype architecture for cyber-physical systems","volume":"5","author":"Tan","year":"2008","journal-title":"ACM Sigbed Rev."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"596","DOI":"10.1109\/TAC.1971.1099826","article-title":"An Introduction to Observers","volume":"16","author":"Luenberger","year":"1971","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Kolin, K. (2010, January 6\u20138). Philosophy of Information and the Fundamentals of Informatics. Proceedings of the Third International Conference on Problems of Cybernetics and Informatics, Baku, Azerbaijan.","DOI":"10.3390\/fis2010-00283"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Hayles, K. (1999). How We Became Posthumans, The University of Chicago Press.","DOI":"10.7208\/chicago\/9780226321394.001.0001"},{"key":"ref_6","unstructured":"Mizzaro, S. (2001). Towards a theory of epistemic information. Information Modelling and Knowledge Bases, IOS Press."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Araki, K., Gnesi, S., and Mandrioli, D. (2003). Determining the specification of a control system from that of its environment. Lecture Notes in Computer Science: FME 2003: Formal Methods, Springer.","DOI":"10.1007\/b13229"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Mordecai, Y., Chapman, C., and Dori, D. (2013, January 13\u201316). Conceptual Modeling Semantics for the Physical-Informatical Essence Duality Problem. Proceedings of the IEEE International Conference on Systems, Man, and Cybernetics\u2014SMC2013, Manchester, UK.","DOI":"10.1109\/SMC.2013.766"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Mordecai, Y., Orhof, O., and Dori, D. (2014, January 11\u201312). Modeling Software Agent Awareness of Physical-Informatical Essence Duality. Proceedings of the IEEE International Conference of Software Science, Technology, and Engineering\u2014SwSTE 2014, Ramat Gan, Israel.","DOI":"10.1109\/SWSTE.2014.12"},{"key":"ref_10","unstructured":"Haskins, C., Forsberg, K., Krueger, M., Walden, D., and Hamelin, R.D. (2011). Systems Engineering Handbook, International Council on Systems Engineering."},{"key":"ref_11","unstructured":"Leveson, N. (2004). Model-Based Analysis of Socio-Technical Risk\u200f, Massachusetts Institute of Technology."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Leveson, N.G. (2011). Engineering a Safer World, MIT Press.","DOI":"10.7551\/mitpress\/8179.001.0001"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1016\/j.engfailanal.2013.09.014","article-title":"Texas City refinery accident: Case study in breakdown of defense-in-depth and violation of the safety-diagnosability principle in design","volume":"36","author":"Saleh","year":"2014","journal-title":"Eng. Fail. Anal."},{"key":"ref_14","unstructured":"U.S. Nuclear Regulatory Commission (2014). Backgrounder on the Three Mile Island Accident, U.S. Nuclear Regulatory Commission."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"947","DOI":"10.1126\/science.1255963","article-title":"The hunt for MH370","volume":"344","author":"McNutt","year":"2014","journal-title":"Science"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"316","DOI":"10.1086\/286874","article-title":"The role of models in science","volume":"12","author":"Rosenblueth","year":"1945","journal-title":"Philos. Sci."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Haimes, Y.Y. (2009). Risk Modeling, Assessment, and Management, John Wiley & Sons. [3rd ed.].","DOI":"10.1002\/9780470422489"},{"key":"ref_18","unstructured":"Spichkova, M., Gleirscher, M., Dobi, S., and Struss, P. (2013). Model-Based Hazard. and Impact Analysis, Technische Universit\u00e4t M\u00fcnchen, Institut f\u00fcr Informatik."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Dori, D. (2002). Object-Process. Methodology: A Holistic Systems Approach, Springer.","DOI":"10.1007\/978-3-642-56209-9"},{"key":"ref_20","unstructured":"ISO\/TC 184 ISO\/PAS 19450L2015(en) (2015). Automation Systems and Integration\u2014Object-Process Methodology, International Organization for Standadization (ISO)."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Embley, D., and Thalheim, B. (2011). Handbook of Conceptual Modeling: Theory, Practice, and Research Challenges, Springer.","DOI":"10.1007\/978-3-642-15865-0"},{"key":"ref_22","unstructured":"Estefan, J.A. (2008). Survey of Model.-Based Systems Engineering Methodologies, International Council on Systems Engineering (INCOSE)."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1109\/TSMCC.2011.2106495","article-title":"Model-based systems engineering: An emerging approach for modern systems","volume":"42","author":"Ramos","year":"2012","journal-title":"IEEE Trans. Syst. Man Cybern. Part C Appl. Rev."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Kalman, R.E. (1959). On the General Theory of Control Systems. IRE Trans. Autom. Control, 4.","DOI":"10.1109\/TAC.1959.1104873"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"129","DOI":"10.1109\/TAC.1964.1105665","article-title":"On the concepts of controllability and observability of linear systems","volume":"9","author":"Kreindler","year":"1964","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1016\/j.ress.2010.09.002","article-title":"Augmenting defense-in-depth with the concepts of observability and diagnosability from Control Theory and Discrete Event Systems","volume":"96","author":"Bakolas","year":"2011","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Xue, Y., Rodriguez, S., and Bogdan, P. (2016, January 14\u201318). A Spatio-Temporal Fractal Model for a CPS Approach to Brain-Machine-Body Interfaces. Proceedings of the Design, Automation & Test in Europe Conference & Exhibition (DATE), Dresden, Germany.","DOI":"10.3850\/9783981537079_0502"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"2460","DOI":"10.1073\/pnas.1215508110","article-title":"Observability of complex systems","volume":"110","author":"Liu","year":"2013","journal-title":"Proc. Natl. Acad. Sci. USA"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Xue, Y., Coelho, J.R., Bogdan, P., and Pappas, G.J. (2016, January 27\u201330). Minimum Number of Sensors to Ensure Observability of Physiological Systems: A Case Study. Proceedings of the Fifty-fourth Annual Allerton Conference, Monticello, IL, USA.","DOI":"10.1109\/ALLERTON.2016.7852369"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Pagel, M., and Carlson, D. (2015, January 14\u201317). Ambient Control: A mobile framework for dynamically remixing the Internet of Things. Proceedings of the WoWMoM 2015: A World of Wireless Mobile and Multimedia Networks, Boston, MA, USA.","DOI":"10.1109\/WoWMoM.2015.7158143"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"33","DOI":"10.2307\/2214711","article-title":"Individuals, possible worlds, and epistemic logic","volume":"1","author":"Hintikka","year":"1967","journal-title":"Nous"},{"key":"ref_32","unstructured":"Van Harmelen, F., Lifschitz, V., and Porter, B. (2008). Handbook of Knowledge Representation, Elsevier."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"823","DOI":"10.1109\/TSMCB.2009.2013721","article-title":"Contemporary cybernetics and its facets of cognitive informatics and computational intelligence","volume":"39","author":"Wang","year":"2009","journal-title":"IEEE Trans. Syst. Man, Cybern. Part B Cybern."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"509","DOI":"10.1109\/9.664154","article-title":"Conflict Resolution for Air Traffic Management: A Study in Multiagent Hybrid Systems","volume":"43","author":"Tomlin","year":"1998","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_35","first-page":"1629","article-title":"Intrusion Detection Systems: A Survey and Analysis of Classification Techniques","volume":"2","author":"Jaiganesh","year":"2013","journal-title":"Int. J. Adv. Res. Comput. Commun. Eng."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1145\/2542049","article-title":"A Survey of Intrusion Detection Techniques for Cyber-Physical Systems","volume":"46","author":"Mitchell","year":"2014","journal-title":"ACM Comput. Surv."},{"key":"ref_37","unstructured":"Sinai, M.B., Partush, N., Yadid, S., and Yahav, E. (2014). Exploiting Social Navigation. arXiv."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Chmielewski, M., Ga\u0142ka, A., Jarema, P., Krasowski, K., and Kosi\u0144ski, A. (2009, January 5\u20137). Semantic Knowledge Representation in Terrorist Threat Analysis for Crisis Management Systems. Proceedings of the Computational Collective Intelligence, First International Conference, Wroc\u0142aw, Poland.","DOI":"10.1007\/978-3-642-04441-0_40"},{"key":"ref_39","first-page":"27","article-title":"Intrusion Detection Systems\u2014Analysis and Containment of False Positives Alerts","volume":"5","author":"Victor","year":"2010","journal-title":"Int. J. Comput. Appl."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Xue, Y., and Bogdan, P. (2017, January 18\u201320). Constructing Compact Causal Mathematical Models for Complex Dynamics. Proceedings of the 8th ACM\/IEEE International Conference on Cyber-Physical Systems (ICCPS), Pittsburgh, PA, USA.","DOI":"10.1145\/3055004.3055017"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Carlson, D., Altakrouri, B., and Schrader, A. (2012, January 24\u201326). AmbientWeb: Bridging the Web\u2019s cyber-physical gap. Proceedings of the 2012 3rd International Conference on the Internet of Things (IOT), Wuxi, China.","DOI":"10.1109\/IOT.2012.6402297"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"579","DOI":"10.1016\/0005-1098(79)90006-2","article-title":"Model discrimination using an algorithmic information criterion","volume":"15","author":"Maciejowski","year":"1979","journal-title":"Automatica"},{"key":"ref_43","unstructured":"Goldstein, M., Tech, V., Va, B., and Rougier, J. (2008). Assessing Model Discrepancy Using a Multi-Model Ensemble. Sci. York, 1\u201335."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Mordecai, Y., and Dori, D. (2014). Conceptual Modeling of System-Based Decision-Making. INCOSE Internaional Symposium, INCOSE.","DOI":"10.1002\/j.2334-5837.2014.tb03161.x"},{"key":"ref_45","unstructured":"Mordecai, Y., Orhof, O., and Dori, D. (2016). Model-Based Interoperability Engineering in Systems-of-Systems and Civil Aviation. IEEE Trans. Syst. Man Cybern. Syst."},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Mordecai, Y., Raju, P., Chapman, C., and Dori, D. (2013, January 20\u201322). Physical-Informatical Essence-Duality-Aware Generic Modeling of Threat Handling Processes. Proceedings of the European Modeling Symposium\u2014EMS2013, Manchester, UK.","DOI":"10.1109\/EMS.2013.17"},{"key":"ref_47","unstructured":"Mordecai, Y. (2016). Cyber-Physical Disruption Modeling, Analysis, and Management: An Evolutionary Object-Process Model-Based Robust Systems Engineering Approach. [Ph.D. Thesis, Technion\u2014Israel Institute of Technology]."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"269","DOI":"10.1002\/j.2334-5837.2016.00159.x","article-title":"Issues in Conceptual Design and MBSE Successes: Insights from the Model-Based Conceptual Design Surveys","volume":"26","author":"Morris","year":"2016","journal-title":"INCOSE Int. Symp."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Heisig, P., Clarkson, J., and Vajna, S. (2010). OPCAT\u2014An Object-Process CASE Tool for OPM-Based Conceptual Modelling. Proceedings of the 1st International Conference on Modelling and Management of Engineering Processes, University of Cambridge.","DOI":"10.1007\/978-1-84996-199-8"},{"key":"ref_50","unstructured":"Dori, D., and Linchevski, C. (2010, January 19\u201320). OPCAT\u2013An Object-Process CASE Tool for OPM-Based Conceptual Modelling. Proceedings of the 1st International Conference on Modelling and Management of Engineering Processes, University of Cambridge, Cambridge, UK."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"244","DOI":"10.1111\/j.1467-8640.1988.tb00279.x","article-title":"Representation and combination of uncertainty with belief functions and possibility measures","volume":"4","author":"Dubois","year":"1988","journal-title":"Comput. Intell."},{"key":"ref_52","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1111\/j.1539-6924.1999.tb00399.x","article-title":"Combining probability distributions from experts in risk analysis","volume":"19","author":"Clemen","year":"1999","journal-title":"Risk Anal."},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1016\/S0954-1810(98)00021-1","article-title":"V Evaluating machine learning models for engineering problems","volume":"13","author":"Reich","year":"1999","journal-title":"Artif. Intell. Eng."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1115\/1.3662552","article-title":"A New Approach to Linear Filtering and Prediction Problems 1","volume":"82","author":"Kalman","year":"1960","journal-title":"Trans. ASME\u2013J. Basic Eng."},{"key":"ref_55","doi-asserted-by":"crossref","first-page":"1050","DOI":"10.1057\/palgrave.jors.2601610","article-title":"Constructively simple estimating: A project management example","volume":"54","author":"Chapman","year":"2003","journal-title":"J. Oper. Res. Soc."},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"696","DOI":"10.1016\/j.anucene.2013.09.021","article-title":"Multimodel-based power-level control with state-feedback and observer for load-follow PWR core","volume":"63","author":"Li","year":"2014","journal-title":"Ann. Nucl. Energy"},{"key":"ref_57","unstructured":"(2017, July 09). USNRC Defense in Depth. Available online: https:\/\/www.nrc.gov\/reading-rm\/basic-ref\/glossary\/defense-in-depth.html."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/17\/7\/1644\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T18:42:55Z","timestamp":1760208175000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/17\/7\/1644"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,7,17]]},"references-count":57,"journal-issue":{"issue":"7","published-online":{"date-parts":[[2017,7]]}},"alternative-id":["s17071644"],"URL":"https:\/\/doi.org\/10.3390\/s17071644","relation":{"has-preprint":[{"id-type":"doi","id":"10.20944\/preprints201706.0113.v1","asserted-by":"object"}]},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,7,17]]}}}