Naming the Pain in Requirements Engineering: Comparing Practices in Brazil and Germany

Méndez, Daniel; Wagner, Stefan; Kalinowski, Marcos; Schekelmann, André; Tuzcu, Ahmet; Conte, Tayana; Spínola, Rodrigo O.; Prikladnicki, Rafael

doi:10.1109/ms.2015.122

Cited by 30 publications

(31 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Liu et al [25] conducted a survey in Chinese companies to determine problems and other contributing factors responsible for projects' failures. Mendez Fernandez et al [28] who surveyed German and Brazilian software companies, uncovered a number of RE problems, their causes and analyzed differences between those two countries. These three approaches are most similar to our work.…”

Section: Related Workmentioning

confidence: 99%

A Survey on Identifying and Addressing Business Analysis Problems

Jarzębowicz

Marciniak²

2017

Foundations of Computing and Decision Sciences

View full text Add to dashboard Cite

Abstract. Despite the growing body of knowledge on requirements engineering and business analysis, these areas of software project are still considered problematic. The paper focuses on problems reported by business analysts and on applicability of available business analysis techniques as solutions to such problems. A unified set of techniques was developed on the basis of 3 industrial standards associated with IIBA, REQB and IREB certification schemes. A group of 8 business analysts was surveyed to list problems they encounter in their work and to assess their frequency. Selected problems were further analyzed and most suitable techniques were proposed to address them. These proposals were validated through follow-up discussions with business analysts. The main results of research reported in this paper are: the comparative analysis of techniques included in IIBA, REQB and IREB standards and the list of problems reported by practitioners associated with techniques suggested as effective solutions.

show abstract

Section: Related Workmentioning

confidence: 99%

A Survey on Identifying and Addressing Business Analysis Problems

Jarzębowicz

Marciniak²

2017

Foundations of Computing and Decision Sciences

View full text Add to dashboard Cite

show abstract

“…Before developing an SIEM in cloud, a company, which is a cloud service provider, should consider SWOT analysis. Table shows a partial SWOT produced for the aims of the considered cybersecurity project . In the scenario modeling phase, domain experts are in charge of producing a rules and regulations diagram containing a suitable selection from the overall list individuated in the context modeling phase.…”

Section: Modeling Compliance Analysis As a Servicementioning

confidence: 99%

“…Table 9 shows a partial SWOT produced for the aims of the considered cybersecurity project. 7 In the scenario modeling phase, domain experts are in charge of producing a rules and regulations diagram containing a suitable selection from the overall list individuated in the context modeling phase. They are also in charge to raise warning by highlighting rules and regulations which may affect each other.…”

Section: Scenario Model: Security Information and Event Manager (Siem)mentioning

confidence: 99%

“…Requirements engineering (RE) is a critical step in the life cycle of every software system and its importance increases with the size and complexity of the system. However, the elicitation of requirements typically requires a strong human involvement and the identification of factors that contribute to its success has proven to be a difficult task …”

Section: Introductionmentioning

confidence: 99%

“…However, the elicitation of requirements typically requires a strong human involvement and the identification of factors that contribute to its success has proven to be a difficult task. 7,8 In order to master this complexity, it is crucial to correctly identify the main application scenarios and the related requirements. 9,10GOReM (goal-oriented requirements methodology) is a recently proposed methodology, 11 which has been devised to deal with requirements engineering in complex software development projects.…”

mentioning

confidence: 99%

See 2 more Smart Citations

Cybersecurity compliance analysis as a service: Requirements specification and application scenarios

Furfaro

Gallo

Garro

et al. 2017

Concurrency and Computation

View full text Add to dashboard Cite

Summary Cybersecurity compliance analysis is the process of assessing whether the behavior of an IT system or application conforms to the cybersecurity rules and regulations in force. This assessment can be offered as a service by exploiting available cloud technologies, and, indeed, it is one of the services classified by the Cloud Security Alliance (CSA) as part of the security information and event management (SIEM) category of the SecaaS (security as a service) domain. The definition and implementation of this typology of cloud services are challenging activities due to the complexity of both the reference business domain and the compliance analysis services to be provided themselves. The paper exploits a recently proposed requirements methodology, called GOReM (goal‐oriented requirements methodology), to support the conceptualization and subsequent implementation of cybersecurity compliance analysis services. In particular, two different application scenarios regarding compliance analysis of an existing or under development IT system/application are presented and discussed. In both the scenarios, GOReM allows to grasp and understand the many and complex issues to address for providing secure cloud services to worldwide customers, also due to the numerous, different and ever changing legal aspects, which have to be taken into account by service providers.

show abstract