首页 > 最新文献

2015 IEEE 23rd International Requirements Engineering Conference (RE)最新文献

英文 中文
Change impact analysis for Natural Language requirements: An NLP approach 自然语言需求的变化影响分析:一种NLP方法
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320403
Chetan Arora, M. Sabetzadeh, Arda Goknil, L. Briand, Frank Zimmer
Requirements are subject to frequent changes as a way to ensure that they reflect the current best understanding of a system, and to respond to factors such as new and evolving needs. Changing one requirement in a requirements specification may warrant further changes to the specification, so that the overall correctness and consistency of the specification can be maintained. A manual analysis of how a change to one requirement impacts other requirements is time-consuming and presents a challenge for large requirements specifications. We propose an approach based on Natural Language Processing (NLP) for analyzing the impact of change in Natural Language (NL) requirements. Our focus on NL requirements is motivated by the prevalent use of these requirements, particularly in industry. Our approach automatically detects and takes into account the phrasal structure of requirements statements. We argue about the importance of capturing the conditions under which change should propagate to enable more accurate change impact analysis. We propose a quantitative measure for calculating how likely a requirements statement is to be impacted by a change under given conditions. We conduct an evaluation of our approach by applying it to 14 change scenarios from two industrial case studies.
需求受到频繁变化的影响,以确保它们反映当前对系统的最佳理解,并响应诸如新的和不断发展的需求等因素。更改需求规范中的一个需求可能会保证对规范进行进一步的更改,从而可以维护规范的总体正确性和一致性。手工分析一个需求的变更如何影响其他需求是非常耗时的,并且对大型需求规范提出了挑战。我们提出了一种基于自然语言处理(NLP)的方法来分析自然语言(NL)需求变化的影响。我们关注NL需求的动机是这些需求的普遍使用,特别是在工业中。我们的方法自动检测并考虑到需求陈述的短语结构。我们讨论了获取变更传播的条件的重要性,以实现更准确的变更影响分析。我们提出了一种定量的度量,用于计算在给定条件下需求陈述被变更影响的可能性。我们通过将我们的方法应用于来自两个工业案例研究的14个变化场景来评估我们的方法。
{"title":"Change impact analysis for Natural Language requirements: An NLP approach","authors":"Chetan Arora, M. Sabetzadeh, Arda Goknil, L. Briand, Frank Zimmer","doi":"10.1109/RE.2015.7320403","DOIUrl":"https://doi.org/10.1109/RE.2015.7320403","url":null,"abstract":"Requirements are subject to frequent changes as a way to ensure that they reflect the current best understanding of a system, and to respond to factors such as new and evolving needs. Changing one requirement in a requirements specification may warrant further changes to the specification, so that the overall correctness and consistency of the specification can be maintained. A manual analysis of how a change to one requirement impacts other requirements is time-consuming and presents a challenge for large requirements specifications. We propose an approach based on Natural Language Processing (NLP) for analyzing the impact of change in Natural Language (NL) requirements. Our focus on NL requirements is motivated by the prevalent use of these requirements, particularly in industry. Our approach automatically detects and takes into account the phrasal structure of requirements statements. We argue about the importance of capturing the conditions under which change should propagate to enable more accurate change impact analysis. We propose a quantitative measure for calculating how likely a requirements statement is to be impacted by a change under given conditions. We conduct an evaluation of our approach by applying it to 14 change scenarios from two industrial case studies.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"53 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115056021","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 58
Towards a general formal framework of Coherence Management in RE 面向可再生能源中一致性管理的一般正式框架
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320436
Alexander Borgida, Ivan Jureta, A. Zamansky
Coherence Management refers to all efforts one needs to invest, in order to ensure that information shown in, and implied by a representation of requirements makes sense as a whole, is coherent. Coherence Management is an umbrella term we use to cover, and more importantly, stimulate research on relationships between identification, measurement, and action on phenomena which reflect tensions between information in requirements representations. Such tensions exist between information which is, for example, logically inconsistent, or stakeholders disagree on, or signals tradeoffs (meaning that improvement on some requirements, for instance, necessarily means some quantifiable (or not) deterioration of others). These tensions are an important topic of research in Requirements Engineering, and various methods have been proposed for the identification, measurement, and action on logical inconsistency in requirements models, on negotiating disagreements, and on settling tradeoffs. Despite focusing on related phenomena, these methods are different and each come with their own specific definition of when a representation of requirements is incoherent and what to do about it. This makes it hard to compare existing methods, design new ones, and choose those to apply when doing RE. In this short communication we outline our research agenda for developing a unified formal framework for the systematization and classification of Coherence Management efforts in the context of RE, as well as exploring their compatibility.
一致性管理指的是需要投入的所有努力,以确保在需求表示中显示的信息,以及由需求表示所暗示的信息作为一个整体是有意义的,是一致的。一致性管理是一个总括性的术语,我们用它来涵盖,更重要的是,刺激对反映需求表示中信息之间紧张关系的现象的识别、度量和行动之间关系的研究。这种紧张关系存在于信息之间,例如,逻辑上不一致的信息,或者涉众不同意的信息,或者信号权衡(意味着对某些需求的改进,例如,必然意味着对其他需求的一些可量化(或不可量化)的恶化)。这些紧张关系是需求工程中研究的一个重要主题,并且已经提出了各种方法来识别、度量和处理需求模型中的逻辑不一致、协商分歧和解决权衡。尽管关注的是相关的现象,但这些方法是不同的,并且每种方法都有自己的特定定义,即需求的表示何时不一致以及如何处理。这使得在进行RE时很难比较现有方法,设计新方法并选择适用的方法。在这篇简短的交流中,我们概述了我们的研究议程,以便为RE背景下的一致性管理工作的系统化和分类开发统一的正式框架,并探索它们的兼容性。
{"title":"Towards a general formal framework of Coherence Management in RE","authors":"Alexander Borgida, Ivan Jureta, A. Zamansky","doi":"10.1109/RE.2015.7320436","DOIUrl":"https://doi.org/10.1109/RE.2015.7320436","url":null,"abstract":"Coherence Management refers to all efforts one needs to invest, in order to ensure that information shown in, and implied by a representation of requirements makes sense as a whole, is coherent. Coherence Management is an umbrella term we use to cover, and more importantly, stimulate research on relationships between identification, measurement, and action on phenomena which reflect tensions between information in requirements representations. Such tensions exist between information which is, for example, logically inconsistent, or stakeholders disagree on, or signals tradeoffs (meaning that improvement on some requirements, for instance, necessarily means some quantifiable (or not) deterioration of others). These tensions are an important topic of research in Requirements Engineering, and various methods have been proposed for the identification, measurement, and action on logical inconsistency in requirements models, on negotiating disagreements, and on settling tradeoffs. Despite focusing on related phenomena, these methods are different and each come with their own specific definition of when a representation of requirements is incoherent and what to do about it. This makes it hard to compare existing methods, design new ones, and choose those to apply when doing RE. In this short communication we outline our research agenda for developing a unified formal framework for the systematization and classification of Coherence Management efforts in the context of RE, as well as exploring their compatibility.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122376655","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Sketching and notation creation with FlexiSketch Team: Evaluating a new means for collaborative requirements elicitation 与FlexiSketch团队一起创建草图和符号:评估协作需求引出的新方法
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320421
Dustin Wüest, N. Seyff, M. Glinz
Whiteboards and paper allow for any kind of notations and are easy to use. Requirements engineers love to use them in creative requirements elicitation and design sessions. However, the resulting diagram sketches cannot be interpreted by software modeling tools. We have developed FlexiSketch as an alternative to whiteboards in previous work. It is a mobile tool for model-based sketching of free-form diagrams that allows the definition and re-use of diagramming notations on the fly. The latest version of the tool, called FlexiSketch Team, supports collaboration with multiple tablets and an electronic whiteboard, such that several users can work simultaneously on the same model sketch. In this paper we present an exploratory study about how novice and experienced engineers sketch and define ad-hoc notations collaboratively in early requirements elicitation sessions when supported by our tool. Results show that participants incrementally build notations by defining language constructs the first time they use them. Participants considered the option to re-use defined constructs to be a big motivational factor for providing type definitions. They found our approach useful for longer sketching sessions and situations where sketches are re-used later on.
白板和纸允许任何类型的符号,并且易于使用。需求工程师喜欢在创造性的需求引出和设计会议中使用它们。然而,产生的图表草图不能被软件建模工具解释。在之前的工作中,我们已经开发了FlexiSketch作为白板的替代品。它是一种基于模型的自由形式图表草图的移动工具,允许动态地定义和重用图表符号。该工具的最新版本称为FlexiSketch Team,支持与多台平板电脑和电子白板协作,这样多个用户可以同时在同一个模型草图上工作。在本文中,我们提出了一个探索性的研究,关于在我们的工具支持下,新手和有经验的工程师如何在早期的需求引出会议中协作地勾画和定义特别的符号。结果表明,参与者在第一次使用语言结构时,通过定义语言结构来逐步构建符号。与会者认为,重用已定义结构的选项是提供类型定义的一个重要动机因素。他们发现我们的方法对于较长时间的素描会话和稍后重复使用草图的情况很有用。
{"title":"Sketching and notation creation with FlexiSketch Team: Evaluating a new means for collaborative requirements elicitation","authors":"Dustin Wüest, N. Seyff, M. Glinz","doi":"10.1109/RE.2015.7320421","DOIUrl":"https://doi.org/10.1109/RE.2015.7320421","url":null,"abstract":"Whiteboards and paper allow for any kind of notations and are easy to use. Requirements engineers love to use them in creative requirements elicitation and design sessions. However, the resulting diagram sketches cannot be interpreted by software modeling tools. We have developed FlexiSketch as an alternative to whiteboards in previous work. It is a mobile tool for model-based sketching of free-form diagrams that allows the definition and re-use of diagramming notations on the fly. The latest version of the tool, called FlexiSketch Team, supports collaboration with multiple tablets and an electronic whiteboard, such that several users can work simultaneously on the same model sketch. In this paper we present an exploratory study about how novice and experienced engineers sketch and define ad-hoc notations collaboratively in early requirements elicitation sessions when supported by our tool. Results show that participants incrementally build notations by defining language constructs the first time they use them. Participants considered the option to re-use defined constructs to be a big motivational factor for providing type definitions. They found our approach useful for longer sketching sessions and situations where sketches are re-used later on.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"107 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134523131","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 20
Ambiguity as a resource to disclose tacit knowledge 模糊作为隐性知识披露的资源
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320405
Alessio Ferrari, P. Spoletini, S. Gnesi
Interviews are the most common and effective means to perform requirements elicitation and support knowledge transfer between a customer and a requirements analyst. Ambiguity in communication is often perceived as a major obstacle for knowledge transfer, which could lead to unclear and incomplete requirements documents. In this paper, we analyse the role of ambiguity in requirements elicitation interviews. To this end, we have performed a set of customer-analyst interviews to observe how ambiguity occurs during requirements elicitation. From this direct experience, we have observed that ambiguity is a multi-dimensional cognitive phenomenon with a dominant pragmatic facet, and we have defined a phenomenological framework to describe the different types of ambiguity in interviews. We have also discovered that, rather than an obstacle, the occurrence of an ambiguity is often a resource for discovering tacit knowledge. Starting from this observation, we have envisioned the further steps needed in the research to exploit these findings.
访谈是执行需求引出和支持客户与需求分析师之间的知识转移的最常见和最有效的方法。沟通中的歧义通常被认为是知识转移的主要障碍,这可能导致需求文档不清晰和不完整。在本文中,我们分析了歧义在需求引出访谈中的作用。为此,我们执行了一组客户分析师访谈,以观察在需求引出期间歧义是如何发生的。从这一直接经验中,我们观察到歧义是一种以语用为主导的多维认知现象,我们定义了一个现象学框架来描述访谈中不同类型的歧义。我们还发现,歧义的出现往往是发现隐性知识的资源,而不是障碍。从这一观察开始,我们设想了研究中需要采取的进一步步骤,以利用这些发现。
{"title":"Ambiguity as a resource to disclose tacit knowledge","authors":"Alessio Ferrari, P. Spoletini, S. Gnesi","doi":"10.1109/RE.2015.7320405","DOIUrl":"https://doi.org/10.1109/RE.2015.7320405","url":null,"abstract":"Interviews are the most common and effective means to perform requirements elicitation and support knowledge transfer between a customer and a requirements analyst. Ambiguity in communication is often perceived as a major obstacle for knowledge transfer, which could lead to unclear and incomplete requirements documents. In this paper, we analyse the role of ambiguity in requirements elicitation interviews. To this end, we have performed a set of customer-analyst interviews to observe how ambiguity occurs during requirements elicitation. From this direct experience, we have observed that ambiguity is a multi-dimensional cognitive phenomenon with a dominant pragmatic facet, and we have defined a phenomenological framework to describe the different types of ambiguity in interviews. We have also discovered that, rather than an obstacle, the occurrence of an ambiguity is often a resource for discovering tacit knowledge. Starting from this observation, we have envisioned the further steps needed in the research to exploit these findings.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"52 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123780031","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 26
Agile requirements engineering with prototyping: A case study 使用原型的敏捷需求工程:一个案例研究
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320450
Marja Kapyaho, Marjo Kauppinen
The rise of agile software development methods has led to the abandonment of many traditional practices especially in requirements engineering (RE). Agile RE is still a relatively new research area and the growing use of agile methods in large projects is forcing companies to look for more formal practices for RE. This paper describes experiences gained from a case study of a large agile project. The goal of this case study was to explore how prototyping can solve the challenges of agile RE. Our findings indicate that while prototyping can help with some challenges of agile RE such as lack of documentation, motivation for RE work and poor quality communication, it also needs complementary practices to reach its full potential. These practices include reviewing the big picture regularly, keeping track of quality requirements, and using ATDD (Acceptance Test Driven Development).
敏捷软件开发方法的兴起导致了许多传统实践的放弃,特别是在需求工程(RE)中。敏捷可再生能源仍然是一个相对较新的研究领域,在大型项目中越来越多地使用敏捷方法迫使公司寻找更正式的可再生能源实践。本文描述了从一个大型敏捷项目的案例研究中获得的经验。本案例研究的目的是探讨原型如何解决敏捷可再生能源的挑战。我们的研究结果表明,虽然原型可以帮助解决敏捷可再生能源的一些挑战,如缺乏文档、可再生能源工作的动机和低质量的沟通,但它也需要补充实践来充分发挥其潜力。这些实践包括定期回顾大局,跟踪质量需求,以及使用ATDD(验收测试驱动开发)。
{"title":"Agile requirements engineering with prototyping: A case study","authors":"Marja Kapyaho, Marjo Kauppinen","doi":"10.1109/RE.2015.7320450","DOIUrl":"https://doi.org/10.1109/RE.2015.7320450","url":null,"abstract":"The rise of agile software development methods has led to the abandonment of many traditional practices especially in requirements engineering (RE). Agile RE is still a relatively new research area and the growing use of agile methods in large projects is forcing companies to look for more formal practices for RE. This paper describes experiences gained from a case study of a large agile project. The goal of this case study was to explore how prototyping can solve the challenges of agile RE. Our findings indicate that while prototyping can help with some challenges of agile RE such as lack of documentation, motivation for RE work and poor quality communication, it also needs complementary practices to reach its full potential. These practices include reviewing the big picture regularly, keeping track of quality requirements, and using ATDD (Acceptance Test Driven Development).","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"186 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131398404","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 50
SACRE: A tool for dealing with uncertainty in contextual requirements at runtime SACRE:用于在运行时处理上下文需求中的不确定性的工具
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320437
Edith Zavala, Xavier Franch, Jordi Marco, Alessia Knauss, D. Damian
Self-adaptive systems are capable of dealing with uncertainty at runtime handling complex issues as resource variability, changing user needs, and system intrusions or faults. If the requirements depend on context, runtime uncertainty will affect the execution of these contextual requirements. This work presents SACRE, a proof-of-concept implementation of an existing approach, ACon, developed by researchers of the Univ. of Victoria (Canada) in collaboration with the UPC (Spain). ACon uses a feedback loop to detect contextual requirements affected by uncertainty and data mining techniques to determine the best operationalization of contexts on top of sensed data. The implementation is placed in the domain of smart vehicles and the contextual requirements provide functionality for drowsy drivers.
自适应系统能够在运行时处理不确定性,处理复杂的问题,如资源可变性、不断变化的用户需求和系统入侵或故障。如果需求依赖于上下文,则运行时的不确定性将影响这些上下文需求的执行。这项工作提出了SACRE,这是一种现有方法ACon的概念验证实现,由维多利亚大学(加拿大)的研究人员与UPC(西班牙)合作开发。ACon使用反馈循环来检测受不确定性影响的上下文需求,并使用数据挖掘技术来确定基于感知数据的上下文的最佳操作化。该实现被放置在智能车辆领域,并且上下文需求为昏昏欲睡的驾驶员提供功能。
{"title":"SACRE: A tool for dealing with uncertainty in contextual requirements at runtime","authors":"Edith Zavala, Xavier Franch, Jordi Marco, Alessia Knauss, D. Damian","doi":"10.1109/RE.2015.7320437","DOIUrl":"https://doi.org/10.1109/RE.2015.7320437","url":null,"abstract":"Self-adaptive systems are capable of dealing with uncertainty at runtime handling complex issues as resource variability, changing user needs, and system intrusions or faults. If the requirements depend on context, runtime uncertainty will affect the execution of these contextual requirements. This work presents SACRE, a proof-of-concept implementation of an existing approach, ACon, developed by researchers of the Univ. of Victoria (Canada) in collaboration with the UPC (Spain). ACon uses a feedback loop to detect contextual requirements affected by uncertainty and data mining techniques to determine the best operationalization of contexts on top of sensed data. The implementation is placed in the domain of smart vehicles and the contextual requirements provide functionality for drowsy drivers.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134371950","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 8
Towards reuse in safety risk analysis based on product line requirements 在基于产品线需求的安全风险分析中重用
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320430
H. Kaindl, R. Popp, David Raneburger
Risk analysis and requirements engineering for safety-critical systems are expensive and challenging, especially for the very high reliability required, e.g., in the automotive and railway industries. Currently, risk analysis is performed by safety engineers with little or no explicit reuse. Of course, these engineers build on their previous experience in this course, but explicit reuse of related artefacts, e.g., from a dedicated repository is not available according to our best knowledge.
安全关键系统的风险分析和需求工程是昂贵且具有挑战性的,特别是对非常高的可靠性要求,例如,在汽车和铁路行业。目前,风险分析是由安全工程师执行的,很少或没有明确的重用。当然,这些工程师是建立在他们之前在本课程中的经验之上的,但是根据我们最好的知识,相关工件的明确重用,例如,来自专用存储库的重用是不可用的。
{"title":"Towards reuse in safety risk analysis based on product line requirements","authors":"H. Kaindl, R. Popp, David Raneburger","doi":"10.1109/RE.2015.7320430","DOIUrl":"https://doi.org/10.1109/RE.2015.7320430","url":null,"abstract":"Risk analysis and requirements engineering for safety-critical systems are expensive and challenging, especially for the very high reliability required, e.g., in the automotive and railway industries. Currently, risk analysis is performed by safety engineers with little or no explicit reuse. Of course, these engineers build on their previous experience in this course, but explicit reuse of related artefacts, e.g., from a dedicated repository is not available according to our best knowledge.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124683435","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Detecting repurposing and over-collection in multi-party privacy requirements specifications 检测多方隐私需求规范中的再利用和过度收集
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320419
T. Breaux, Daniel Smullen, Hanan Hibshi
Mobile and web applications increasingly leverage service-oriented architectures in which developers integrate third-party services into end user applications. This includes identity management, mapping and navigation, cloud storage, and advertising services, among others. While service reuse reduces development time, it introduces new privacy and security risks due to data repurposing and over-collection as data is shared among multiple parties who lack transparency into third-party data practices. To address this challenge, we propose new techniques based on Description Logic (DL) for modeling multiparty data flow requirements and verifying the purpose specification and collection and use limitation principles, which are prominent privacy properties found in international standards and guidelines. We evaluate our techniques in an empirical case study that examines the data practices of the Waze mobile application and three of their service providers: Facebook Login, Amazon Web Services (a cloud storage provider), and Flurry.com (a popular mobile analytics and advertising platform). The study results include detected conflicts and violations of the principles as well as two patterns for balancing privacy and data use flexibility in requirements specifications. Analysis of automation reasoning over the DL models show that reasoning over complex compositions of multi-party systems is feasible within exponential asymptotic timeframes proportional to the policy size, the number of expressed data, and orthogonal to the number of conflicts found.
移动和web应用程序越来越多地利用面向服务的体系结构,在这种体系结构中,开发人员将第三方服务集成到最终用户应用程序中。这包括身份管理、地图和导航、云存储和广告服务等。虽然服务重用减少了开发时间,但由于数据在多方之间共享而对第三方数据实践缺乏透明度,因此由于数据重用和过度收集,它引入了新的隐私和安全风险。为了应对这一挑战,我们提出了基于描述逻辑(DL)的新技术,用于对多方数据流需求进行建模,并验证目的规范以及收集和使用限制原则,这些都是国际标准和指南中突出的隐私属性。我们在一个实证案例研究中评估了我们的技术,该案例研究了Waze移动应用程序及其三家服务提供商的数据实践:Facebook Login, Amazon Web Services(云存储提供商)和Flurry.com(流行的移动分析和广告平台)。研究结果包括检测到的冲突和对原则的违反,以及在需求规范中平衡隐私和数据使用灵活性的两种模式。对DL模型的自动化推理分析表明,在指数渐近时间框架内,对复杂的多方系统组成的推理是可行的,该时间框架与策略大小、表达的数据数量成正比,与发现的冲突数量正交。
{"title":"Detecting repurposing and over-collection in multi-party privacy requirements specifications","authors":"T. Breaux, Daniel Smullen, Hanan Hibshi","doi":"10.1109/RE.2015.7320419","DOIUrl":"https://doi.org/10.1109/RE.2015.7320419","url":null,"abstract":"Mobile and web applications increasingly leverage service-oriented architectures in which developers integrate third-party services into end user applications. This includes identity management, mapping and navigation, cloud storage, and advertising services, among others. While service reuse reduces development time, it introduces new privacy and security risks due to data repurposing and over-collection as data is shared among multiple parties who lack transparency into third-party data practices. To address this challenge, we propose new techniques based on Description Logic (DL) for modeling multiparty data flow requirements and verifying the purpose specification and collection and use limitation principles, which are prominent privacy properties found in international standards and guidelines. We evaluate our techniques in an empirical case study that examines the data practices of the Waze mobile application and three of their service providers: Facebook Login, Amazon Web Services (a cloud storage provider), and Flurry.com (a popular mobile analytics and advertising platform). The study results include detected conflicts and violations of the principles as well as two patterns for balancing privacy and data use flexibility in requirements specifications. Analysis of automation reasoning over the DL models show that reasoning over complex compositions of multi-party systems is feasible within exponential asymptotic timeframes proportional to the policy size, the number of expressed data, and orthogonal to the number of conflicts found.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121789667","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 27
Towards engineering transparency as a requirement in socio-technical systems 朝向工程透明度作为社会技术系统的要求
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320435
M. Hosseini, A. Shahri, Keith Phalp, Raian Ali
The improvement and success of socio-technical systems depend on the joint optimisation of both the social and the technical parts. Improving the social part of a socio-technical system is a meticulous task, as social requirements are diverse and dynamic, and they usually evolve with time and context. Information transparency (henceforth, transparency) is one of the social requirements that can affect the overall attitude of the stakeholders present within a socio-technical system, and influence their other social requirements such as privacy, trust, collaboration and non-bias. In this paper, we advocate the need to engineer transparency as a first class requirement, propose a baseline model for transparency and show how this model can be a starting point for the analysis of transparency requirements of different stakeholders. We showcase our on-going research in the modelling and analysis of transparency as a requirement, discuss some of the challenges of transparency requirements elicitation, and present our future work.
社会技术系统的改进和成功取决于社会和技术部分的共同优化。改善社会技术系统的社会部分是一项细致的任务,因为社会需求是多样化和动态的,它们通常随着时间和环境而变化。信息透明(以下简称透明)是社会需求之一,它可以影响社会技术系统中利益相关者的整体态度,并影响他们的其他社会需求,如隐私、信任、合作和无偏见。在本文中,我们提倡将透明度作为第一类需求,提出透明度的基线模型,并展示该模型如何成为分析不同利益相关者透明度需求的起点。我们展示了我们正在进行的关于透明度作为需求的建模和分析的研究,讨论了透明度需求引出的一些挑战,并介绍了我们未来的工作。
{"title":"Towards engineering transparency as a requirement in socio-technical systems","authors":"M. Hosseini, A. Shahri, Keith Phalp, Raian Ali","doi":"10.1109/RE.2015.7320435","DOIUrl":"https://doi.org/10.1109/RE.2015.7320435","url":null,"abstract":"The improvement and success of socio-technical systems depend on the joint optimisation of both the social and the technical parts. Improving the social part of a socio-technical system is a meticulous task, as social requirements are diverse and dynamic, and they usually evolve with time and context. Information transparency (henceforth, transparency) is one of the social requirements that can affect the overall attitude of the stakeholders present within a socio-technical system, and influence their other social requirements such as privacy, trust, collaboration and non-bias. In this paper, we advocate the need to engineer transparency as a first class requirement, propose a baseline model for transparency and show how this model can be a starting point for the analysis of transparency requirements of different stakeholders. We showcase our on-going research in the modelling and analysis of transparency as a requirement, discuss some of the challenges of transparency requirements elicitation, and present our future work.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122628599","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 16
Requirements problems in the development of a new user interface for healthcare equipment 医疗设备新用户界面开发中的需求问题
Pub Date : 2015-11-05 DOI: 10.1109/RE.2015.7320448
Maria Holmegaard, Jens Bæk Jørgensen, M. Loft, M. Stissing
In August 2013, our company started work for an industrial customer. First, we developed a prototype and conducted field studies in small-scale projects. This was successful and the basis for a larger project about development of a new user interface for healthcare equipment. A main aim for us was to use this project as starting point for establishing a strategic, long-term relationship with this customer. However, we were not successful. In November 2014, our customer chose to take over the development themselves. We were too expensive, used too many hours and were not able to provide useful estimates, they said. In this paper, we describe the project and analyze causes to our customer's decision. We also look at possible alternatives to the actions we took in the project and discuss whether we could have done better. A root cause to our customer's dissatisfaction is related to requirements and handling of requirements.
2013年8月,我公司开始为一个工业客户工作。首先,我们开发了一个原型,并在小规模项目中进行了实地研究。这是成功的,并为一个更大的项目开发一个新的医疗设备用户界面奠定了基础。我们的主要目标是将这个项目作为与客户建立长期战略关系的起点。然而,我们没有成功。在2014年11月,我们的客户选择自己接手开发。他们说,我们的成本太高,耗时太长,而且无法提供有用的估算。在本文中,我们描述了项目,并分析了导致客户决策的原因。我们也会考虑我们在项目中采取的行动的可能替代方案,并讨论我们是否可以做得更好。客户不满意的根本原因与需求和对需求的处理有关。
{"title":"Requirements problems in the development of a new user interface for healthcare equipment","authors":"Maria Holmegaard, Jens Bæk Jørgensen, M. Loft, M. Stissing","doi":"10.1109/RE.2015.7320448","DOIUrl":"https://doi.org/10.1109/RE.2015.7320448","url":null,"abstract":"In August 2013, our company started work for an industrial customer. First, we developed a prototype and conducted field studies in small-scale projects. This was successful and the basis for a larger project about development of a new user interface for healthcare equipment. A main aim for us was to use this project as starting point for establishing a strategic, long-term relationship with this customer. However, we were not successful. In November 2014, our customer chose to take over the development themselves. We were too expensive, used too many hours and were not able to provide useful estimates, they said. In this paper, we describe the project and analyze causes to our customer's decision. We also look at possible alternatives to the actions we took in the project and discuss whether we could have done better. A root cause to our customer's dissatisfaction is related to requirements and handling of requirements.","PeriodicalId":132568,"journal":{"name":"2015 IEEE 23rd International Requirements Engineering Conference (RE)","volume":"81 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126406990","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
期刊
2015 IEEE 23rd International Requirements Engineering Conference (RE)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1