Building decision support problem domain ontology from natural language requirements for software assurance

International Journal of Software Engineering and Knowledge Engineering

Volumn 16, Issue 6, 2006, Pages 851-884

  Lee, Seok Won ^a   Muthurajan, Divya ^a   Gandhi, Robin A ^a   Yavagal, Deepak ^a   Ahn, Gail Joon ^a  

^a University of North Carolina at Charlotte   (United States)

Author keywords

Certification and accreditation; Critical infrastructure protection; Decision making; Ontological engineering; Requirements engineering; Software intensive systems

Indexed keywords

DECISION MAKING; DECISION SUPPORT SYSTEMS; NATURAL LANGUAGE PROCESSING SYSTEMS; REQUIREMENTS ENGINEERING; SOFTWARE ENGINEERING; SPECIFICATIONS;

CERTIFICATION AND ACCREDITATION; CRITICAL INFRASTRUCTURE PROTECTION; ONTOLOGICAL ENGINEERING; SOFTWARE INTENSIVE SYSTEMS;

DATABASE SYSTEMS;

EID: 33845292826     PISSN: 02181940     EISSN: None     Source Type: Journal    
DOI: 10.1142/S0218194006003051     Document Type: Article

References (53)

1. A. de Groot, J. Hooman, M. Lemoine, G. Gaudiere, V. L. Winter, and D. Kapur, A survey: Applying formal methods to a software intensive system, in Proc. 6th IEEE Int. Symp. on High Assurance Systems Engineering (2001), pp. 55-64.
2. A. Sutcliffe, Scenario-based requirements analysis, Requirements Engineering Journal 3(1) (1998) 48-65.
3. A. van Lamsweerde, Goal-oriented requirements engineering: A guided tour, in Proc. 5th Int. Symp. on Requirements Engineering, Toronto, Canada, 2001, pp. 249-262.
4. A. van Lamsweerde, R. Darimont, and E. Letier, Managing conflicts in goal-driven requirements engineering, in IEEE Trans. on Software Engineering 24(11) (1998) 908-926.
5. A. van Lamsweerde, S. Brohez, R. De Landtsheer, and D. Janssens, From system goals to intruder anti-goals: Attack generation and resolution for security requirements engineering, in Proc. Requirements for High Assurance Systems Workshop (RHAS'03), 11th Int. Conf. on Requirements Engineering (2003).
6. A. I. Anton, J. B. Earp, and A. Reese, Analyzing website privacy requirements using a privacy goal taxonomy, in Proc. IEEE Joint Int. Conf. on Requirements Engineering (2002), pp. 23-31.
7. B. Nuseibeh and S. Easterbrook, Requirements engineering: A roadmap, in Proc. Conf. on the Future of Software Engineering, Limerick, Ireland (ACM Press, 2000), pp. 35-46.
8. C. Potts, Using schematic scenarios to understand user needs, in Proc. Conf. on Designing Interactive Systems, Ann Arbor, Michigan (ACM Press, 1995), pp. 247-256.
9. C. Rolland, C. Souveyet, and C. B. Achour, Guiding goal modeling using scenarios in IEEE Trans. on Software Engineering 24(12) (1998) 1055-1071.
10. DoD 8500.1. Information Assurance (Oct. 2002).
11. DoD 8500.2. Information Assurance Implementation (Feb. 2003).
12. DoD 8510.1-M, DITSCAP Application Manual (2000).
13. DoD Instruction 5200.40, DITSCAP (1997).
14. G. Kotonya and I. Sommerville, Requirements Engineering - Processes and Techniques (John Wiley, New York, 1998).
15. G. Kotonya and I. Sommerville, Requirements engineering with viewpoints, in BCS/IEE Software Engineering Journal 11(1) (1996) 5-18.
16. G. Sindre and A. L. Opdahl, Eliciting security requirements by misuse cases, in Proc. 37th Int. Conf. on Technology of Object-Oriented Languages and Systems (2000), pp. 120-131.
17. I. Sommerville and P. Sawyer, Viewpoints: Principles, problems and a practical approach to requirements engineering, Annals of Software Engineering 3 (1997) 101-130.
18. J. Andrade, J. Ares, R. Garcia, J. Pazos, S. Rodriguez, and A. Silva, A methodological framework for viewpoint-oriented conceptual modeling, IEEE Trans. on Software Engineering 30(5) (2004) 282-294.
19. J. Evermann and Y. Wand, Ontology based object-oriented domain modeling: Fundamental concepts, Requirements Engineering Journal (2005).
20. J. J. Carroll, I. Dickinson, C. Dollin, D. Reynolds, A. Seaborne, and K. Wilkinson, Jena: Implementing the semantic web recommendations, in Proc. 13th Int. World Wide Web Conference, New York, USA, 2004, pp. 74-83.
21. J. Kimbell and M. Walrath, Life cycle security and DITSCAP, IANewsletter 4(2) (2001) http://iac.dtic.mil/iatac.
22. J. Mylopoulos, A. Borgida, M. Jarke, and M. Koubarakis, TELOS: Representing knowledge about information systems, ACM Trans. on Information Systems 8(4) (1990) 325-362.
23. J. Mylopoulos, L. Chung, and B. Nixon, Representing and using nonfunctional requirements: A process-oriented approach, IEEE Trans. on Software Engineering 18(6) (1992) 483-497.
24. J. C. S. P. Leite, G. D. S. Hadad, J. H. Doorn, and G. N. Kaplan, A scenario construction process, Requirements Engineering Journal 5 (2000) 38-61.
25. K. Allenby and K. Tim, Deriving safety requirements using scenarios, in Proc. 5th Int. Symp. on Requirements Engineering (2001), pp. 228-235.
26. K. K. Breitman and J. Leite, Ontology as a requirements engineering product, in Proc. 11th IEEE Int. Conf. on Requirements Engineering, Mini-tutorial on Ontology Development (2003).
27. L. Lin, B. Nuseibeh, D. Ince, and M. Jackson, Using abuse frames to bound the scope of security problems, in Proc. 12th IEEE Int. Conf. on Requirements Engineering (2004), pp. 354-355.
28. L. Liu and E. Yu, Designing information systems in social context: A goal and scenario modeling approach, Information Systems Journal 29(2) (2003).
29. L. Liu, E. Yu, and J. Mylopoulos, Analyzing security requirements as relationships among strategic actors, in Proc. 2nd Symp. on Requirements Engineering for Information Security (SREIS '02), Raleigh, NC, 2002.
30. L. Liu, E. Yu, and J. Mylopoulos, Security and privacy requirements analysis within a social setting, in Proc. 11th IEEE Int. Conf. on Requirements Engineering (2003), pp. 151-161.
31. L. M. Cysneiros and J. C. S. P. Leite, Nonfunctional requirements: From elicitation to conceptual models, IEEE Trans. on Software Engineering 30(5) (2004).
32. M. Jackson, The meaning of requirements, Annals of Software Engineering 3 (1997) 5-21.
33. OMB Circular No. A-130, Management of Federal Information Resources (1996).
34. OWL Web Ontology Language Overview, eds. D. McGuinness and F. van Harmelen, W3C Recommendation (2004) http://www.w3.org/TR/owl-features/.
35. P. Donzelli, A goal-driven and agent-based requirements engineering framework, Requirements Engineering Journal 9(1) (2004) 16-39.
36. P. Giorgini, F. Massacci, J. Mylopoulos, and N. Zannone, Modeling security requirements through ownership, permission and delegation, in Proc. 13th IEEE Int. Conf. on Requirements Engineering (2005), pp. 167-176.
37. P. Loucopoulos and E. Kavakli, Enterprise modeling and the teleological approach to requirements engineering, Int. J. Intelligent and Cooperative Information Systems 4(1) (1995) 45-79.
38. R. Offen, Domain Understanding is key to successful system development, Requirements Engineering Journal 7(3) (2002) 172-175.
39. Rational Corporation, UML: Unified Modeling Language Method (1999).
40. S. Greenspan, J. Mylopoulos, and A. Borgida, On formal requirements modeling languages: RML revisited, in Proc. 16th Int. Conf. on Software Engineering, Sorrento, Italy (IEEE Computer Society Press, 1994), pp. 135-147.
41. S. W. Lee and R. A. Gandhi, Engineering dependability requirements for software-intensive systems through the definition of a common language, in Proc. 13th IEEE Int. Requirements Engineering Conference (RE '05), Workshop on Requirements Engineering for High-Availability Systems (RHAS), Software Engineering Institute (SEI), Carnegie Mellon University &: IEEE Press (Paris, France, 2005), pp. 40-48.
42. S. W. Lee, R. A. Gandhi, G. Ahn, and D. Yavagal, Active automation of the DITSCAP, in Proc. IEEE Int. Conf. on Intelligence and Security Informatics, Lecture Notes in Computer Science, Vol. 3495, Springer, 2005, pp. 479-485.
43. S. W. Lee, R. A. Gandhi, and G. Ahn, Certification process artifacts defined as measurable units for software-intensive systems lifecycle, in Software Process: Improvement and Practice Journal (Wiley, 2006).
44. S. W. Lee, R. A. Gandhi, and G. Ahn, Establishing trustworthiness in services of the critical infrastructure: Automating the DITSCAP, in Workshop on Software Engineering for Secure Systems (SESS05), 27th Int. Conf. on Software Engineering (2005), pp. 43-49.
45. S. W. Lee, R. A. Gandhi, and G. Ahn, Security requirements driven risk assess ment for critical infrastructure information systems, in Proc. Symp. on Requirements Engineering for Information Security (SREIS 05), 13th Int. Conf. on Requirements Engineering (IEEE Computer Society, Paris, France, 2005).
46. S. W. Lee, R. A. Gandhi, and G. Ahn, Engineering information assurance for critical infrastructures: The DITSCAP automation study, in Proc. 15th Annual Int. Symp. Int. Council on Systems Engineering (INCOSE), Rochester, NY, 2005.
47. S. W. Lee and D. Yavagal, GenOM User's Guide V2.0, Technical Report TR.-NiSE-05-05, Knowledge Intensive Software Engineering Research Group, Department of Software and Information Systems, UNC Charlotte, 2005.
48. S. W. Lee and D. C. Rine, Case study methodology designed research in software engineering methodology validation, in Proc. 16th Int. Conf. on Software Engineering and Knowledge Engineering, Banff, Alberta, Canada, 2004, pp. 117-122.
49. S. W. Lee and R. A. Gandhi, Ontology-based active requirements engineering framework, in Proc. 12th Asia-Pacific Software Engg. Conference (APSEC '05), IEEE CS Press, Taiwan, 2005.
50. T. Davis, Chairman Government Reform Committee, Davis Statement on 2004 Federal Computer Security Report Card Grades, Press Release, http://reform.house.gov/UploadedFiles/021605FISMAstatement.pdf.
51. T. Davis, Chairman Government Reform Committee, No Computer System Left Behind: A Review of the 2005 Federal Computer, Press Release (2005) http://reform.house.gov/UploadedFiles/TMD FISMA 06 Opener.pdf.
52. T. D. Breaux and A. I. Anton, Analyzing goal semantics for rights, obligations, and permissions, in Proc. 13th Int. Conf. on Requirements Engineering, Paris, France, 2005.
53. V. K. Chaudhri, A. Farquhar, R. Fikes, P. D. Karp, and J. P. Rice, OKBC: A programmatic foundation for knowledge base interoperability, in Proc. 15th National/10th Conf. on Artificial Intelligence/Innovative Applications of Artificial intelligence, AAAI, Menlo Park, CA, 1998, pp. 600-607.