Requirements Engineering for Internet of Things: 4th Asia-Pacific Symposium, APRES 2017, Melaka, Malaysia, November 9–10, 2017, Proceedings (Communications ... Computer and Information Science Book 809)

This book constitutes the proceedings of the 4th Asia Pacific Requirements Engineering Symposium, APRES 2017, held in Melaka, Malaysia, in November 2017. The 11 full papers presented together with four short papers were carefully reviewed and selected from 45 submissions. The papers are organized in topical sections on big data, cyber security, crowd-sourcing, requirements challenges, automation. Preface 6 Organization 8 Abstracts of Keynote Talks 10 Old and New Directions in Requirements Elicitation Research and Practice: A Sociotechnical Perspective 11 Role of Blockchain Technology in Requirement Engineering 12 Contents 13 Big Data 15 Big Data Services Requirements Analysis 16 Abstract 16 1 Introduction 16 2 Background and Related Work 17 3 Big Data Services Life Cycle Support Needs 18 4 Requirements for Big Data Services 20 4.1 Requirements Elicitation 21 4.2 Big Data Services Requirements Catalogue 22 5 Service Requirements at Run-Time 22 5.1 Runtime Service Monitoring 22 5.2 Log Pre-processing 23 5.3 Log Feature Construction 23 6 Findings from Real-World Cases 24 6.1 Identify Use Cases of True Value 24 6.2 Matching Use Cases with Available Datasets 24 6.3 Identify Models, Algorithms and Technical Service Solutions 25 7 Conclusion 25 Acknowledgement 26 References 26 An Empirical Study of the Software Development Process, Including Its Requirements Engineering, at Very Large Organization: How to Use Data Mining in Such a Study 28 Abstract 28 1 Introduction 28 2 Product Description 29 3 Data Compilation 30 3.1 Project Lifelines 30 3.2 Source-Control Repository 30 3.3 CRs 31 3.4 Customer Acceptances 31 3.5 Hardware 32 3.6 Data Summary 32 4 Data Analysis 32 5 Possible Ways to Avoid Deviations 35 6 Answering the Research Questions 35 7 Threats and Limitations 36 8 Conclusion 36 Acknowledgment 36 References 37 Cyber Security 39 Social Engineering Based Security Requirements Elicitation Model for Advanced Persistent Threats 40 Abstract 40 1 Introduction 40 2 Background 41 2.1 Advanced Persistent Threat 41 2.2 Social Engineering Attack and Ontological Model 43 2.3 Human Factor 43 3 Proposed Idea 44 3.1 Defining Human Factor and Elements 44 3.2 Security Requirement for Social Engineering Related Human Factor 46 4 Case Study 48 5 Conclusion 50 Acknowledgement 50 References 51 Eliciting Requirements for Improving Users’ Behavior Using Transparency 52 Abstract 52 1 Introduction 52 2 Related Work 53 2.1 Quality Requirements and Human Error Understanding 53 2.2 Transparency 54 2.3 Use Cases for Security, Hazard Analysis and Embedded System Analysis 54 2.4 KAOS and Its Obstacle Analysis 55 3 Method for Avoiding or Mitigating Expectation Violation 57 3.1 Reasons of Violating Expectations 57 3.2 Steps 58 4 Illustrative Examples 59 4.1 A Library System 59 4.2 A Self-checkout System 61 5 Conclusion 64 Acknowledgement 65 References 65 Comparative Requirements Analysis for the Feasibility of Blockchain for Secure Cloud 68 Abstract 68 1 Introduction 68 2 Background and Related Works 70 2.1 Blockchain and Cloud Technology 70 2.2 Service Level Agreements for Cloud Security 71 3 Comparative Analysis Between Blockchain and Cloud 73 3.1 Non-functional Characteristics of Blockchain 75 3.2 Non-functional Requirements for Cloud 76 4 Blockchain Based Cloud 78 4.1 Open Ledger 78 4.2 Distributed Ledger 78 4.3 Decentralized Smart Contract 79 5 Blockchain Based Framework for Secure Cloud 79 5.1 Cloud User Layer 79 5.2 Cloud Automation Layer 79 5.3 Blockchain Management Layer 80 5.4 Secure Data Storage Layer 81 6 Conclusion and Future Work 81 Acknowledgement 82 References 82 A Template for Writing Security Requirements 84 Abstract 84 1 Introduction 84 2 Background and Motivation 85 3 Security Requirements Template Approach 86 3.1 Security Requirements Library 87 3.2 Development of Security Requirements Template 89 4 Usage Examples 90 4.1 Requirements 1: Booking Flight Ticket 91 4.2 Requirements 2: Electronic Health Record (EHR) 91 5 Related Works 93 6 Conclusion and Future Works 95 Acknowledgment 95 References 95 A Security Requirements Library for the Development of Internet of Things (IoT) Applications 98 Abstract 98 1 Introduction 98 2 Background and Motivation 99 2.1 IoT Applications 99 2.2 IoT Attributes and Security Properties 101 3 Development of IoT Security Library 102 4 Usage Example 103 5 Related Works 105 6 Conclusion and Future Work 106 Acknowledgements 106 References 106 Crowd-Sourcing 108 Eliciting Activity Requirements from Crowd Using Genetic Algorithm 109 Abstract 109 1 Introduction 109 2 A Motivating Example 111 3 Crowd-Based Requirements Elicitation 112 4 Genetic Algorithm Based Approach for Activity Diagram Merging 113 4.1 Main Idea 113 4.2 Overview of the Approach 115 4.3 Encoding Scheme 115 4.4 Fitness Function 116 4.5 Genetic Operators 118 5 Case Study 120 6 Conclusion and Future Work 122 Acknowledgments 122 References 122 Crowd Vigilante 124 Abstract 124 1 Introduction 124 2 Background and Motivation 126 3 Proposed Conceptual Model 127 4 Open Questions 128 5 Conclusion and Future Work 129 References 129 Requirements Challenges 131 A Systematic Mapping Study of Empirical Research in GORE 132 Abstract 132 1 Introduction 132 2 Research Process 134 2.1 Protocol Development 134 2.2 Search String 134 2.3 Search Resources 135 2.4 Inclusion and Exclusion Criteria 135 2.5 Data Extraction Strategy 135 2.6 Execution of Mapping Study 136 3 Results 137 3.1 State-of-the-Art in the Empirical Studies of GORE (RQ1) 137 3.2 Strength of Empirical Evidence (RQ2) 142 4 Discussion 144 5 Study Limitations 145 6 Conclusion 146 Appendix 146 References 147 Challenges in Context-Aware Requirements Modeling: A Systematic Literature Review 149 Abstract 149 1 Introduction 149 2 Research Method 150 2.1 Research Questions 150 2.2 Review Process 150 2.3 Search Strategy 151 2.4 Inclusion and Exclusion 152 2.5 Quality Assessment 152 3 Results and Analysis 153 3.1 What Are the Venues/Authors of the Studies? 153 3.1.1 What Are the Venues of the Studies? 153 3.1.2 What Are the Authors of the Studies? 153 3.2 What Are the Challenges in Context-Aware Requirements Modeling? 154 3.2.1 Challenges of Diversity 154 3.2.2 Challenges of Dynamicity 155 3.2.3 Challenges of Consistency 156 3.2.4 Challenges of Uncertainty 156 3.3 To What Extent Have the Challenges Been Addressed? 156 4 Threats to Validity 158 5 Related Work 159 6 Conclusion and Future Work 159 Acknowledgments 160 References 160 Issues of Using Function Point Analysis Method for Requirement Changes During Software Development Phase 165 Abstract 165 1 Introduction 165 2 Related Work 166 2.1 Software Effort Estimation 167 2.2 Function Point Analysis 167 3 Evaluation 168 3.1 Case Study 168 3.2 Evaluation Metric 168 3.3 Data Collection and Analysis 169 4 Evaluation Results 169 5 Discussion 169 5.1 Tracking of Change Request in Software Artifacts 170 5.2 Impact of Change Requests on Software Artifact 170 6 Conclusion and Future Work 171 Acknowledgements 171 References 171 Understanding Uncertainty of Software Requirements Engineering: A Systematic Literature Review Protocol 173 Abstract 173 1 Introduction 173 2 Background 174 3 Research Method 175 3.1 Research Questions 175 3.2 Search Strategy 175 4 Data Synthesis 177 5 Results and Discussion 177 5.1 Distribution of Studies Based on Publication Channel Type 177 5.2 The Most Used Approaches 178 6 Conclusion and Future Work 179 References 179 Automation 181 Constructing a Goal Model from Requirements Descriptions Based on Extraction Rules 182 Abstract 182 1 Introduction 182 2 Background and Related Work 183 2.1 Goal Model 183 2.2 Related Work 184 2.2.1 Goal Model Construction 184 2.2.2 Analyzing Goal Model 185 3 Our Approach 185 3.1 Overview 185 3.2 Extraction Rules 185 4 Evaluation 189 5 Discussion 190 6 Automation 191 7 Conclusion 194 References 194 New Requirements Elicited from Accidents of Train Control System Simulated by Modelica 196 Abstract 196 1 Introduction 196 2 Preliminaries 197 3 Overview of Our Approach 198 3.1 System Model 198 3.2 Accident Model 199 4 System Modeling 200 4.1 Train 200 4.2 Light 201 4.3 Track 202 4.4 Control Center 204 4.5 System Composition 204 5 Simulation and New Requirements Elicitation: A Case Study 204 5.1 Simulation Scenarios 204 5.2 Train Control System Simulation Settings 205 5.3 Analyzing Simulation Results 205 5.4 Eliciting and Locating New Requirements 207 5.5 Modification of System Model 208 6 Related Work 209 7 Conclusion 210 Acknowledgements 210 References 210 Author Index 212 Front Matter ....Pages I-XIV Front Matter ....Pages 1-1 Big Data Services Requirements Analysis (Affan Yasin, Lin Liu, Zhanqiang Cao, Jianmin Wang, Yingbo Liu, Tan Sheau Ling)....Pages 3-14 An Empirical Study of the Software Development Process, Including Its Requirements Engineering, at Very Large Organization: How to Use Data Mining in Such a Study (Colin M. Werner, Daniel M. Berry)....Pages 15-25 Front Matter ....Pages 27-27 Social Engineering Based Security Requirements Elicitation Model for Advanced Persistent Threats (Seung-Jun Kim, Seok-Won Lee)....Pages 29-40 Eliciting Requirements for Improving Users’ Behavior Using Transparency (Haruhiko Kaiya, Nobukazu Yoshioka, Hironori Washizaki, Takao Okubo, Atsuo Hazeyama, Shinpei Ogata et al.)....Pages 41-56 Comparative Requirements Analysis for the Feasibility of Blockchain for Secure Cloud (Irish Singh, Seok-Won Lee)....Pages 57-72 A Template for Writing Security Requirements (Massila Kamalrudin, Nuridawati Mustafa, Safiah Sidek)....Pages 73-86 A Security Requirements Library for the Development of Internet of Things (IoT) Applications (Massila Kamalrudin, Asma Asdayana Ibrahim, Safiah Sidek)....Pages 87-96 Front Matter ....Pages 97-97 Eliciting Activity Requirements from Crowd Using Genetic Algorithm (Chunhui Wang, Wei Zhang, Haiyan Zhao, Zhi Jin)....Pages 99-113 Crowd Vigilante (Muneera Bano, Didar Zowghi)....Pages 114-120 Front Matter ....Pages 121-121 A Systematic Mapping Study of Empirical Research in GORE (Anbreen Javed, Naveed Ikram, Faiza Ghazanfar)....Pages 123-139 Challenges in Context-Aware Requirements Modeling: A Systematic Literature Review (Yuanbang Li, Rong Peng, Bangchao Wang)....Pages 140-155 Issues of Using Function Point Analysis Method for Requirement Changes During Software Development Phase (Jalal Shah, Nazri Kama)....Pages 156-163 Understanding Uncertainty of Software Requirements Engineering: A Systematic Literature Review Protocol (Ahmad M. Salih, Mazni Omar, Azman Yasin)....Pages 164-171 Front Matter ....Pages 173-173 Constructing a Goal Model from Requirements Descriptions Based on Extraction Rules (Hironori Shimada, Hiroyuki Nakagawa, Tatsuhiro Tsuchiya)....Pages 175-188 New Requirements Elicited from Accidents of Train Control System Simulated by Modelica (Wen Zhong, Yan Wang, Xiaohong Chen)....Pages 189-204 Back Matter ....Pages 205-205