首页 > 最新文献

2021 IEEE 29th International Requirements Engineering Conference (RE)最新文献

英文 中文
Agile Teams’ Perception in Privacy Requirements Elicitation: LGPD’s compliance in Brazil 敏捷团队在隐私需求引出中的感知:巴西LGPD的遵从性
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00013
E. Canedo, A. Calazans, Anderson Jefferson Cerqueira, P. Costa, E. Masson
Context: The implementation of the Brazilian General Data Protection Law (LGPD) may impact activities carried out by the software development teams. It is necessary for developers to know the existing techniques and tools to carry out privacy requirements elicitation. Objectives: In this research, we investigated the perception of agile software development team members from different organizations, regarding the impact that LGPD will have on the activities of the software development process. Methods: We conducted an online survey and a systematic literature review to identify the techniques, methodologies and tools used in the literature to perform privacy requirements elicitation in the context of Agile Software Development (ASD). In addition, we also investigated the perception of an agile team from a Federal Public Administration organization regarding the impacts of the obligation to develop software in accordance with the LGPD. Results: Our findings reveal that agile teams know the concepts related to data privacy legislation, but they do not use the techniques proposed in the literature to perform privacy requirements elicitation. In addition, agile teams face problems with outdated software requirements specifications and stakeholders’ lack of knowledge regarding data privacy. Conclusions: Agile teams need to improve their knowledge on privacy requirements.
背景:巴西通用数据保护法(LGPD)的实施可能会影响软件开发团队开展的活动。开发人员有必要了解现有的技术和工具来进行隐私需求挖掘。目的:在本研究中,我们调查了来自不同组织的敏捷软件开发团队成员对LGPD对软件开发过程活动的影响的看法。方法:我们进行了一项在线调查和系统的文献综述,以确定文献中用于在敏捷软件开发(ASD)的背景下执行隐私需求引出的技术、方法和工具。此外,我们还调查了来自联邦公共管理组织的敏捷团队对按照LGPD开发软件的义务的影响的看法。结果:我们的研究结果表明,敏捷团队知道与数据隐私立法相关的概念,但他们没有使用文献中提出的技术来进行隐私需求引出。此外,敏捷团队还面临着过时的软件需求规范和利益相关者缺乏数据隐私知识的问题。结论:敏捷团队需要提高他们对隐私需求的了解。
{"title":"Agile Teams’ Perception in Privacy Requirements Elicitation: LGPD’s compliance in Brazil","authors":"E. Canedo, A. Calazans, Anderson Jefferson Cerqueira, P. Costa, E. Masson","doi":"10.1109/RE51729.2021.00013","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00013","url":null,"abstract":"Context: The implementation of the Brazilian General Data Protection Law (LGPD) may impact activities carried out by the software development teams. It is necessary for developers to know the existing techniques and tools to carry out privacy requirements elicitation. Objectives: In this research, we investigated the perception of agile software development team members from different organizations, regarding the impact that LGPD will have on the activities of the software development process. Methods: We conducted an online survey and a systematic literature review to identify the techniques, methodologies and tools used in the literature to perform privacy requirements elicitation in the context of Agile Software Development (ASD). In addition, we also investigated the perception of an agile team from a Federal Public Administration organization regarding the impacts of the obligation to develop software in accordance with the LGPD. Results: Our findings reveal that agile teams know the concepts related to data privacy legislation, but they do not use the techniques proposed in the literature to perform privacy requirements elicitation. In addition, agile teams face problems with outdated software requirements specifications and stakeholders’ lack of knowledge regarding data privacy. Conclusions: Agile teams need to improve their knowledge on privacy requirements.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"109 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115119018","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Unifying Behavior Driven Development Templates 统一行为驱动开发模板
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00067
Konstantinos Tsilionis, Yves Wautelet, C. faut, Samedi Heng
Behavior Driven Development (BDD) offers a way to express scenarios, written in structured natural language, on how the system should act to fulfill a requirement. Numerous templates have been written to construct BDD scenarios and various practices were born out of usage. Nevertheless, we mostly fail to find documentation on the used templates and understand empirical practices. This paper explores empirically the BDD templates used in practice by evaluating the keywords mostly associated to the GIVEN, WHEN and THEN scenario dimensions. It then studies whether we can use these existing keywords to build a set of non-redundant concepts covering the representational needs and being usable as reference when constructing BDD scenarios. We consolidate these findings in a meta-model.
行为驱动开发(BDD)提供了一种表达场景的方法,用结构化的自然语言编写,描述系统应该如何行动以满足需求。已经编写了许多模板来构建BDD场景,并且在使用中产生了各种实践。然而,我们大多无法找到关于使用模板的文档,也无法理解经验实践。本文通过评估主要与给定、何时和然后场景维度相关的关键字,对实践中使用的BDD模板进行了实证研究。然后研究我们是否可以使用这些现有的关键字来构建一组非冗余的概念,这些概念涵盖了表示需求,并且在构建BDD场景时可用作参考。我们将这些发现整合到一个元模型中。
{"title":"Unifying Behavior Driven Development Templates","authors":"Konstantinos Tsilionis, Yves Wautelet, C. faut, Samedi Heng","doi":"10.1109/RE51729.2021.00067","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00067","url":null,"abstract":"Behavior Driven Development (BDD) offers a way to express scenarios, written in structured natural language, on how the system should act to fulfill a requirement. Numerous templates have been written to construct BDD scenarios and various practices were born out of usage. Nevertheless, we mostly fail to find documentation on the used templates and understand empirical practices. This paper explores empirically the BDD templates used in practice by evaluating the keywords mostly associated to the GIVEN, WHEN and THEN scenario dimensions. It then studies whether we can use these existing keywords to build a set of non-redundant concepts covering the representational needs and being usable as reference when constructing BDD scenarios. We consolidate these findings in a meta-model.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"40 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124677730","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Requirements Reuse for Exploring Stakeholder Needs 用于探索涉众需求的需求重用
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00078
H. Kaindl, M. Mannion
This tutorial presents and compares two different approaches to requirements reuse. The first approach deals with requirements reuse and reusability using feature modelling. The second approach deals with requirements reuse and reusability in the context of case-based reasoning. Both approaches have different key properties and trade-offs between the costs of making software artefacts reusable and the benefits of reusing them. To aid large-scale development, we have proposed a Feature-Similarity Model, which draws on both approaches to facilitate discovering requirements relationships using similarity metrics. A FeatureSimilarity Model also helps with exploring stakeholder needs, since new requirements can be introduced first into a case base and then gradually included into a product line representation.
本教程介绍并比较了两种不同的需求重用方法。第一种方法使用特征建模处理需求重用和可重用性。第二种方法处理基于案例推理上下文中的需求重用和可重用性。这两种方法都具有不同的关键属性,并且在使软件工件可重用的成本和重用它们的好处之间进行了权衡。为了帮助大规模开发,我们提出了一个特征相似模型,它利用这两种方法来使用相似度量来促进发现需求关系。FeatureSimilarity Model还有助于探索涉众的需求,因为新的需求可以首先引入到案例库中,然后逐渐包含到产品线表示中。
{"title":"Requirements Reuse for Exploring Stakeholder Needs","authors":"H. Kaindl, M. Mannion","doi":"10.1109/RE51729.2021.00078","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00078","url":null,"abstract":"This tutorial presents and compares two different approaches to requirements reuse. The first approach deals with requirements reuse and reusability using feature modelling. The second approach deals with requirements reuse and reusability in the context of case-based reasoning. Both approaches have different key properties and trade-offs between the costs of making software artefacts reusable and the benefits of reusing them. To aid large-scale development, we have proposed a Feature-Similarity Model, which draws on both approaches to facilitate discovering requirements relationships using similarity metrics. A FeatureSimilarity Model also helps with exploring stakeholder needs, since new requirements can be introduced first into a case base and then gradually included into a product line representation.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"150 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134394932","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
DBRG: Description-Based Non-Quality Requirements Generator 基于描述的非质量需求生成器
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00052
Mohamed Osama, Aya Zaki-Ismail, Mohamed Abdelrazek, J. Grundy, Amani S. Ibrahim
Requirements quality checking is a key process in requirements engineering. For complex and large scale systems, it is recommended to use automated requirements quality checking tools because of the size and complexity of requirements. However, such tools are typically evaluated on a small set of manually curated requirements. This limitation affects the comprehensiveness and reliability of the evaluation and leaves several possible quality issues undetected. In this paper, we de-scribe a novel quality-checking-oriented synthesised requirements generator. We provide an input description language so that several quality checking issues and scenarios can be defined. The generator utilises an input dictionary of nouns and verb frames, and generates requirements sentences complying to a user-defined description of a quality affected requirement.
需求质量检查是需求工程中的一个关键过程。对于复杂和大规模的系统,由于需求的大小和复杂性,建议使用自动化的需求质量检查工具。然而,这样的工具通常是在一小部分手动规划的需求上进行评估的。这种限制影响了评估的全面性和可靠性,并使几个可能的质量问题未被发现。在本文中,我们描述了一种新的面向质量检查的综合需求生成器。我们提供了一种输入描述语言,以便可以定义几个质量检查问题和场景。生成器利用名词和动词框架的输入字典,并生成符合用户定义的质量影响需求描述的需求句子。
{"title":"DBRG: Description-Based Non-Quality Requirements Generator","authors":"Mohamed Osama, Aya Zaki-Ismail, Mohamed Abdelrazek, J. Grundy, Amani S. Ibrahim","doi":"10.1109/RE51729.2021.00052","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00052","url":null,"abstract":"Requirements quality checking is a key process in requirements engineering. For complex and large scale systems, it is recommended to use automated requirements quality checking tools because of the size and complexity of requirements. However, such tools are typically evaluated on a small set of manually curated requirements. This limitation affects the comprehensiveness and reliability of the evaluation and leaves several possible quality issues undetected. In this paper, we de-scribe a novel quality-checking-oriented synthesised requirements generator. We provide an input description language so that several quality checking issues and scenarios can be defined. The generator utilises an input dictionary of nouns and verb frames, and generates requirements sentences complying to a user-defined description of a quality affected requirement.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"470 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127128260","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Enhancing NL Requirements Formalisation Using a Quality Checking Model 使用质量检查模型增强NL需求的形式化
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00064
Mohamed Osama, Aya Zaki-Ismail, Mohamed Abdelrazek, J. Grundy, Amani S. Ibrahim
The formalisation of natural language (NL) requirements is a challenging problem because NL is inherently vague and imprecise. Existing formalisation approaches only support requirements adhering to specific boilerplates or templates, and are affected by the requirements quality issues. Several quality models are developed to assess the quality of NL requirements. However, they do not focus on the quality issues affecting the formalisability of requirements. Such issues can greatly compromise the operation of complex systems and even lead to catastrophic consequences or loss of life (in case of critical systems). In this paper, we propose a requirements quality checking approach utilising natural language processing (NLP) analysis. The approach assesses the quality of the requirements against a quality model that we developed to enhance the formalisability of NL requirements. We evaluate the effectiveness of our approach by comparing the formalisation efficiency of a recent automatic formalisation technique before and after utilising our approach. The results show an increase of approximately 15% in the F-measure (from 83.8% to 98%).
自然语言(NL)需求的形式化是一个具有挑战性的问题,因为自然语言本身是模糊和不精确的。现有的形式化方法只支持遵循特定样板或模板的需求,并且受到需求质量问题的影响。开发了几个质量模型来评估NL需求的质量。然而,它们并不关注影响需求可形式化的质量问题。这些问题会极大地影响复杂系统的运行,甚至导致灾难性的后果或生命损失(在关键系统的情况下)。在本文中,我们提出了一种利用自然语言处理(NLP)分析的需求质量检查方法。该方法根据我们开发的质量模型来评估需求的质量,以增强NL需求的形式化。我们通过比较最近的自动形式化技术在使用我们的方法之前和之后的形式化效率来评估我们方法的有效性。结果显示,f度量增加了大约15%(从83.8%增加到98%)。
{"title":"Enhancing NL Requirements Formalisation Using a Quality Checking Model","authors":"Mohamed Osama, Aya Zaki-Ismail, Mohamed Abdelrazek, J. Grundy, Amani S. Ibrahim","doi":"10.1109/RE51729.2021.00064","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00064","url":null,"abstract":"The formalisation of natural language (NL) requirements is a challenging problem because NL is inherently vague and imprecise. Existing formalisation approaches only support requirements adhering to specific boilerplates or templates, and are affected by the requirements quality issues. Several quality models are developed to assess the quality of NL requirements. However, they do not focus on the quality issues affecting the formalisability of requirements. Such issues can greatly compromise the operation of complex systems and even lead to catastrophic consequences or loss of life (in case of critical systems). In this paper, we propose a requirements quality checking approach utilising natural language processing (NLP) analysis. The approach assesses the quality of the requirements against a quality model that we developed to enhance the formalisability of NL requirements. We evaluate the effectiveness of our approach by comparing the formalisation efficiency of a recent automatic formalisation technique before and after utilising our approach. The results show an increase of approximately 15% in the F-measure (from 83.8% to 98%).","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"55 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126627632","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Human-Centric Elicitation of Context-Oriented Personal Data Categories: An Exploratory Study in An Educational Institution 以人为中心的情境导向的个人数据类别引出:一项教育机构的探索性研究
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00056
Deepti Balaji Raykar, V. Sridhar
Complying with data protection regulation is often considered a tedious task as they are generalized regulations that are applicable across domains. They guide acceptable behavior, rather than defining rules that impose specific conditions for a particular domain. Domain-specific context-oriented data categories that are to be protected in the domain of implementation need to be discovered for implementing data protection. We propose a human-centric approach to elicit such data categories causing privacy concerns to stakeholders in an educational institution. We conducted a study to understand the privacy concerns of the stakeholders related to different data categories to be protected. Using a combination of surveys and indepth interviews of the different stakeholders, we were able to gain insights into the privacy and data protection requirements that need to be incorporated into the associated information system design.
遵守数据保护法规通常被认为是一项繁琐的任务,因为它们是跨领域适用的通用法规。它们指导可接受的行为,而不是为特定领域定义强加特定条件的规则。需要发现要在实现域中保护的特定于领域的面向上下文的数据类别,以便实现数据保护。我们提出了一种以人为中心的方法来引出这些数据类别,这些数据类别会引起教育机构利益相关者的隐私问题。我们进行了一项研究,以了解持份者对需要保护的不同数据类别的隐私关注。通过调查和对不同持份者的深入访谈,我们得以深入了解需要纳入相关信息系统设计的隐私和数据保护要求。
{"title":"Human-Centric Elicitation of Context-Oriented Personal Data Categories: An Exploratory Study in An Educational Institution","authors":"Deepti Balaji Raykar, V. Sridhar","doi":"10.1109/RE51729.2021.00056","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00056","url":null,"abstract":"Complying with data protection regulation is often considered a tedious task as they are generalized regulations that are applicable across domains. They guide acceptable behavior, rather than defining rules that impose specific conditions for a particular domain. Domain-specific context-oriented data categories that are to be protected in the domain of implementation need to be discovered for implementing data protection. We propose a human-centric approach to elicit such data categories causing privacy concerns to stakeholders in an educational institution. We conducted a study to understand the privacy concerns of the stakeholders related to different data categories to be protected. Using a combination of surveys and indepth interviews of the different stakeholders, we were able to gain insights into the privacy and data protection requirements that need to be incorporated into the associated information system design.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116102754","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
From Ideas to Expressed Needs: an Empirical Study on the Evolution of Requirements during Elicitation 从观念到表达需求:启发过程中需求演变的实证研究
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00028
Sourav Debnath, P. Spoletini, Alessio Ferrari
Requirements are elicited from the customer and other stakeholders through an iterative process of interviews, prototyping, and other interactive sessions. Many communication phenomena may emerge in these early iterations, that lead initial ideas to be transformed, renegotiated, or reframed. Understanding how this process takes place can help in solving possible communication issues as well as their consequences. In this work, we perform an exploratory study of descriptive nature to understand in which way requirements get transformed from initial ideas into documented needs. To this end, we select 30 subjects that act as requirements analysts, and we perform a set of elicitation sessions with a fictional customer. The customer is required to study a sample requirements document for a system beforehand and to answer the questions of the analysts about the system. After the elicitation sessions, the analysts produce user stories for the system. These are compared with the original ones by two researchers to assess to which extent and in which way the initial requirements evolved throughout the interactive sessions. Our results show that between 30% and 38% of the produced user stories include content that can be fully traced to the initial ones, while the rest of the content is dedicated to new requirements. We also show what types of requirements are introduced through the elicitation process, and how they vary depending on the analyst. Our work contributes to theory in requirements engineering, with empirically grounded, quantitative data, concerning the impact of elicitation activities with respect to initial ideas.
需求是通过访谈、原型设计和其他交互会议的迭代过程从客户和其他涉众那里获得的。在这些早期的迭代中可能会出现许多沟通现象,导致最初的想法被转变、重新协商或重新定义。了解这个过程是如何发生的可以帮助解决可能的沟通问题及其后果。在这项工作中,我们对描述性本质进行了探索性研究,以了解需求以何种方式从最初的想法转化为文档化的需求。为此,我们选择了30个作为需求分析师的主题,并与一个虚构的客户执行一组启发会话。客户需要事先研究系统的需求文档样本,并回答分析人员关于系统的问题。在启发会议之后,分析人员为系统生成用户故事。两名研究人员将这些与最初的需求进行比较,以评估在整个互动会议中初始需求的发展程度和方式。我们的结果表明,30%到38%的生成的用户故事包含了可以完全追溯到初始需求的内容,而其余的内容则用于满足新的需求。我们还展示了通过启发过程引入的需求类型,以及它们如何根据分析人员而变化。我们的工作对需求工程的理论有贡献,基于经验的、定量的数据,涉及与初始想法相关的启发活动的影响。
{"title":"From Ideas to Expressed Needs: an Empirical Study on the Evolution of Requirements during Elicitation","authors":"Sourav Debnath, P. Spoletini, Alessio Ferrari","doi":"10.1109/RE51729.2021.00028","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00028","url":null,"abstract":"Requirements are elicited from the customer and other stakeholders through an iterative process of interviews, prototyping, and other interactive sessions. Many communication phenomena may emerge in these early iterations, that lead initial ideas to be transformed, renegotiated, or reframed. Understanding how this process takes place can help in solving possible communication issues as well as their consequences. In this work, we perform an exploratory study of descriptive nature to understand in which way requirements get transformed from initial ideas into documented needs. To this end, we select 30 subjects that act as requirements analysts, and we perform a set of elicitation sessions with a fictional customer. The customer is required to study a sample requirements document for a system beforehand and to answer the questions of the analysts about the system. After the elicitation sessions, the analysts produce user stories for the system. These are compared with the original ones by two researchers to assess to which extent and in which way the initial requirements evolved throughout the interactive sessions. Our results show that between 30% and 38% of the produced user stories include content that can be fully traced to the initial ones, while the rest of the content is dedicated to new requirements. We also show what types of requirements are introduced through the elicitation process, and how they vary depending on the analyst. Our work contributes to theory in requirements engineering, with empirically grounded, quantitative data, concerning the impact of elicitation activities with respect to initial ideas.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115797182","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Towards the Integration of Cybersecurity Risk Assessment into Model-based Requirements Engineering 网络安全风险评估与基于模型的需求工程集成研究
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00037
Douraid Naouar, Jamal El Hachem, J. Voirin, Jacques Foisil, Y. Kermarrec
Engineering projects requires to consider the increasingly significant needs and constraints regarding expected behaviors, services, quality and security. These requirements are introduced into system and software engineering projects as functional and non-functional properties. Satisfying such properties implies rigorous processes that steer the project, from the requirements identification and definition to the system deployment and maintenance. Model-Based System Engineering (MBSE) is an effective approach to address security requirements and risk assessment at the early stages of the development life cycle, which enables cost-efficient fixes. The aim of this work is to investigate how cybersecurity risk assessment could be integrated into model-based requirement engineering. We propose a Model-based Cyberisk Assessment (MBCA) method, that comprises: (1) A semantic alignment between risk assessment concepts and system modeling concepts and (2) A modeling language extension to represent security concepts and metrics throughout the system modeling life cycle. To illustrate our approach, validate its applicability and evaluate its expressiveness, we applied it to an industrial in-flight entertainment system.
工程项目需要考虑与预期行为、服务、质量和安全相关的日益重要的需求和约束。这些需求作为功能和非功能属性引入到系统和软件工程项目中。满足这些属性意味着引导项目的严格过程,从需求识别和定义到系统部署和维护。基于模型的系统工程(MBSE)是在开发生命周期的早期阶段处理安全需求和风险评估的有效方法,它支持具有成本效益的修复。这项工作的目的是研究如何将网络安全风险评估集成到基于模型的需求工程中。我们提出了一种基于模型的网络风险评估(MBCA)方法,该方法包括:(1)风险评估概念和系统建模概念之间的语义对齐;(2)在整个系统建模生命周期中表示安全概念和度量的建模语言扩展。为了说明我们的方法,验证其适用性并评估其表达性,我们将其应用于工业飞行娱乐系统。
{"title":"Towards the Integration of Cybersecurity Risk Assessment into Model-based Requirements Engineering","authors":"Douraid Naouar, Jamal El Hachem, J. Voirin, Jacques Foisil, Y. Kermarrec","doi":"10.1109/RE51729.2021.00037","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00037","url":null,"abstract":"Engineering projects requires to consider the increasingly significant needs and constraints regarding expected behaviors, services, quality and security. These requirements are introduced into system and software engineering projects as functional and non-functional properties. Satisfying such properties implies rigorous processes that steer the project, from the requirements identification and definition to the system deployment and maintenance. Model-Based System Engineering (MBSE) is an effective approach to address security requirements and risk assessment at the early stages of the development life cycle, which enables cost-efficient fixes. The aim of this work is to investigate how cybersecurity risk assessment could be integrated into model-based requirement engineering. We propose a Model-based Cyberisk Assessment (MBCA) method, that comprises: (1) A semantic alignment between risk assessment concepts and system modeling concepts and (2) A modeling language extension to represent security concepts and metrics throughout the system modeling life cycle. To illustrate our approach, validate its applicability and evaluate its expressiveness, we applied it to an industrial in-flight entertainment system.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125177141","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
RV-SLC: A Tool for Regression Validation of Safety and Liveness Constraints on Goal Models in DevOps Environment RV-SLC:用于在DevOps环境中对目标模型的安全性和活动性约束进行回归验证的工具
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00066
Palak Ambade, Diptiben Solanki, Novarun Deb
Requirements keep changing and getting updated in any incremental software development - including DevOps. The notion of regression validation ensures compliance to a given set of rules (or properties) even when either the requirement set changes or the associated rules themselves change due to new business policies and regulations. In this tool paper, we propose the RV-SLC tool which has the SLC framework at its core. The tool uses a formal data model that demonstrates how regression validation of safety and liveness constraints can be achieved across multiple iterations. The tool also has an analytics dashboard that allows the developers to monitor and visualize how the requirements and the associated safety and liveness constraints have been modified and updated across these iterations.
在任何增量软件开发(包括DevOps)中,需求都在不断变化和更新。回归验证的概念确保了给定规则集(或属性)的遵从性,即使在需求集更改或相关规则本身由于新的业务策略和法规而更改时也是如此。在这篇工具论文中,我们提出了以SLC框架为核心的RV-SLC工具。该工具使用一个正式的数据模型来演示如何跨多个迭代实现安全性和活动性约束的回归验证。该工具还有一个分析仪表板,允许开发人员监视和可视化需求以及相关的安全性和活动性约束是如何在这些迭代中被修改和更新的。
{"title":"RV-SLC: A Tool for Regression Validation of Safety and Liveness Constraints on Goal Models in DevOps Environment","authors":"Palak Ambade, Diptiben Solanki, Novarun Deb","doi":"10.1109/RE51729.2021.00066","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00066","url":null,"abstract":"Requirements keep changing and getting updated in any incremental software development - including DevOps. The notion of regression validation ensures compliance to a given set of rules (or properties) even when either the requirement set changes or the associated rules themselves change due to new business policies and regulations. In this tool paper, we propose the RV-SLC tool which has the SLC framework at its core. The tool uses a formal data model that demonstrates how regression validation of safety and liveness constraints can be achieved across multiple iterations. The tool also has an analytics dashboard that allows the developers to monitor and visualize how the requirements and the associated safety and liveness constraints have been modified and updated across these iterations.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"95 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122535617","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Data-Driven Agile Requirements Elicitation through the Lenses of Situational Method Engineering 情境方法工程视角下的数据驱动敏捷需求提取
Pub Date : 2021-09-01 DOI: 10.1109/RE51729.2021.00045
Xavier Franch, Aron Henriksson, J. Ralyté, J. Zdravkovic
Ubiquitous digitalization has led to the continuous generation of large amounts of digital data, both in organizations and in society at large. In the requirements engineering community, there has been a growing interest in considering digital data as new sources for requirements elicitation, in addition to stake-holders. The volume, dynamics, and variety of data makes iterative requirements elicitation increasingly continuous, but also unstructured and complex, which current agile methods are unable to consider and manage in a systematic and efficient manner. There is also the need to support software evolution by enabling a synergy of stakeholder-driven requirements elicitation and management with data-driven approaches. In this study, we propose extension of agile requirements elicitation by applying situational method engineering. The research is grounded on two studies in the business domains of video games and online banking.
无处不在的数字化导致了大量数字数据的不断产生,无论是在组织还是在整个社会中。在需求工程社区中,除了涉众之外,人们对将数字数据作为需求引出的新来源越来越感兴趣。数据的数量、动态和多样性使得迭代需求的获取越来越连续,但也变得非结构化和复杂,当前的敏捷方法无法以系统和有效的方式考虑和管理。还需要通过支持利益相关者驱动的需求引出和管理与数据驱动方法的协同作用来支持软件发展。在本研究中,我们提出了应用情景方法工程扩展敏捷需求的方法。该研究基于视频游戏和网上银行业务领域的两项研究。
{"title":"Data-Driven Agile Requirements Elicitation through the Lenses of Situational Method Engineering","authors":"Xavier Franch, Aron Henriksson, J. Ralyté, J. Zdravkovic","doi":"10.1109/RE51729.2021.00045","DOIUrl":"https://doi.org/10.1109/RE51729.2021.00045","url":null,"abstract":"Ubiquitous digitalization has led to the continuous generation of large amounts of digital data, both in organizations and in society at large. In the requirements engineering community, there has been a growing interest in considering digital data as new sources for requirements elicitation, in addition to stake-holders. The volume, dynamics, and variety of data makes iterative requirements elicitation increasingly continuous, but also unstructured and complex, which current agile methods are unable to consider and manage in a systematic and efficient manner. There is also the need to support software evolution by enabling a synergy of stakeholder-driven requirements elicitation and management with data-driven approaches. In this study, we propose extension of agile requirements elicitation by applying situational method engineering. The research is grounded on two studies in the business domains of video games and online banking.","PeriodicalId":440285,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference (RE)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116488797","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
期刊
2021 IEEE 29th International Requirements Engineering Conference (RE)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1