Practical challenges of requirements prioritization based on risk estimation

Empirical Software Engineering

Volumn 14, Issue 6, 2009, Pages 644-684

  Herrmann, Andrea ^a   Paech, Barbara ^a  

^a UNIVERSITY OF HEIDELBERG   (Germany)

Author keywords

Requirements prioritization; Risk; Risk analysis; Risk estimation; Risk prediction

Indexed keywords

PRIORITIZATION; QUANTITATIVE EXPERIMENTS; QUANTITATIVE STUDY; REQUIREMENTS PRIORITIZATION; RISK ESTIMATION; RISK PREDICTION; RISK-BASED;

ESTIMATION; EXPERIMENTS; RISK ANALYSIS; RISK ASSESSMENT; SAFETY FACTOR; STUDENTS;

RISK PERCEPTION;

EID: 70349225928     PISSN: 13823256     EISSN: 15737616     Source Type: Journal    
DOI: 10.1007/s10664-009-9105-0     Document Type: Article

References (58)

1. Ambler SW (2002) Agile modeling-effective practices for extreme programming and the unified process. Wiley Computer Publishing, New York
2. Arora A, Hall D, Pinto CA, Ramsey D, Telang R (2004) An ounce of prevention vs. a pound of cure: how can we measure the value of IT security solutions? Carnegie Mellon CyLab
3. Beck K (2000) Extreme programming explained. Upper Saddle River, Addison-Wesley
4. Berander P (2004) Prioritization of Stakeholder Needs in Software Engineering. Understanding and Evaluation. Licenciate Thesis, Blekinge Institute of Technology, Sweden, Licentiate Series No 2004:12
5. P Berander P Jönsson 2006 Hierarchical cumulative voting (HCV)-prioritization of requirements in hierarchies Int J Softw Eng Knowl Eng 16 6 819 849 10.1142/S0218194006003026 (Pubitemid 46181434)
6. Carver J, Shull F, Basili V (2003) Observational Studies to Accelerate Process Experience in Classroom Studies: An Evaluation. Proc. of the 2003 Int. Symposium on Empirical Software Eng. ISESE, Rome, Italy, pp 72-79
7. Cook TD, Campbell DT (1979) Quasi-Experimentation-Design and Analysis Issues for Field Settings. Houghton Mifflin Company, Boston
8. S Chulani B Boehm B Steece 1999 Bayesian analysis of empirical software engineering cost models IEEE Trans Softw Eng 25 4 573 583 10.1109/32.799958
9. Daneva M, Herrmann A (2008) Requirements Prioritization Based on Benefit and Cost Prediction: A Method Classification Framework. Track on Software Process and Product Improvement (SPPI), 34th Euromicro Conf., Parma, Italy, 1-5 Sept. 2008
10. AM Davis 2003 The Art of requirements triage IEEE Comput 36 3 42 49
11. Denne M, Cleland-Huang J (2003) Software by Numbers: Low-Risk, High-Return Development. Prentice-Hall
12. Devnani-Chulani S (1999) Bayesian Analysis of Software Cost and Quality Models. A Dissertation Presented to the Faculty of the Graduate School, University of Southern California, http://sunset.usc.edu/publications/TECHRPTS/ PhD-Dissertations/files/SChulani-Dissertation.pdf
13. AH Dutoit B Paech 2002 Rationale-based use case specification Requirements Eng. J. 7 3 19 1002.68727 10.1007/s007660200001
14. Dutoit AH, Paech B (2003) Eliciting and maintaining knowledge for requirements evolution. In: Aurum A, Jeffery R, Wohlin C, Handzic M (eds) Managing Software Engineering Knowledge. Springer, Berlin, pp 135-156
15. MS Feather SL Cornford 2003 Quantitative risk-based requirements reasoning Requirements Eng J 8 4 248 265 10.1007/s00766-002-0160-y (Pubitemid 37554177)
16. Feather MS, Cornford SL, Larson T (2000a) Combining the best attributes of qualitative and quantitative risk management tool support. Proc. 15th IEEE Int. Conf. on automated software eng., Grenoble, France, 11-15 September 2000. IEEE Computer Society, 309-312
17. Feather MS, Cornford SL, Gibbel M (2000b) Scalable mechanisms for requirements interaction management. IEEE Int. Conf. on Requirements Eng., Schaumburg, USA, pp 119-129
18. Feather MS, Cornford SL, Kiper JD, Menzies T (2006) Experiences using Visualization Techniques to Present Requirements, Risks to Them, and Options for Risk Mitigation. Proc. Int. Workshop on Requirements Eng. Visualization, Minneapolis/ St. Paul, Minnesota
19. A Herrmann B Paech 2005 Quality Misuse. Proc. 11th Int. Workshop on Requirements Eng. for Software Quality, Foundations of Software Quality REFSQ, Essener Informatik Beiträge Band 10 193 199
20. A Herrmann B Paech 2006 Benefit Estimation of Requirements Based on a Utility Function. Proc. 12th Int. Workshop on Requirements Eng. for Software Quality, Foundations of Software Quality REFSQ, Essener Informatik Beiträge Band 11 249 250
21. Herrmann A, Paech B (2008a) Practical Challenges of Requirements Prioritization Based on Risk Estimation: Result of Two Student Experiments. Technical Report SWEHD-TR-2008-03, University of Heidelberg, http://www-swe.informatik.uni-heidelberg.de/research/publications/reports.htm
22. A Herrmann B Paech 2008 MOQARE: Misuse-oriented quality requirements engineering Requirements Eng J 13 1 73 86 10.1007/s00766-007-0058-9 (Pubitemid 351146803)
23. Herrmann A, Rückert J, Paech B (2006) Exploring the Interoperability of Web Services using MOQARE. Proc. IS-TSPQ First Int. Workshop on Interoperability Solutions to Trust, Security, Policies and QoS for Enhanced Enterprise Systems, Bordeaux, France
24. M Höst B Regnell C Wohlin 2000 Using students as subjects-a comparative study of students and professionals in lead-time impact assessment Empir Softw Eng 5 3 201 214 1010.68611 10.1023/A:1026586415054 (Pubitemid 32085481)
25. ISO (International Standards Organization) (2002) ISO, Risk management-Vocabulary-Guidelines for use in standards, ISO Guide 73. International Standards Organization, Geneva
26. Jalali O, Menzies T, Feather M (2008) Optimizing requirements decisions with KEYS. Proc. 4th Int. Workshop on Predictor models in software eng., Int. Conf. on Software Eng., Leipzig, Germany. ACM New York, NY, USA, pp 79-86
27. Karlsson J (1996) Software requirements prioritising. Proc. 2nd Int. Conf. Requirements Eng., 110-116
28. J Karlsson C Wohlin B Regnell 1998 An evaluation of methods for prioritizing software requirements Inf Softw Technol 39 939 947 10.1016/S0950-5849(97)00053-0
29. Karlsson L, Berander P, Regnell B, Wohlin C (2004) Requirements Prioritisation: An Experiment on Exhaustive Pair-Wise Comparisons versus Planning Game Partitioning. Berander, P. Prioritization of Stakeholder Needs in Software Engineering, Understanding and Evaluation, Licenciate Thesis, Blekinge Institute of Technology, Licentiate Series No 2004:12
30. L Karlsson T Thelin B Regnell P Berander C Wohlin 2007 Pair-wise comparisons versus planning game partitioning-experiments on requirements prioritisation techniques Empir Softw Eng 12 1 3 33 10.1007/s10664-006-7240-4 (Pubitemid 46190939)
31. Kontio J (1996) The Riskit Method for Software Risk Management, Version 1.00. University of Maryland. College park, MD, Computer Science Technical Reports CS-TR-3782
32. Leffingwell D, Widrig D (2000) Managing Software Requirements-A Unified Approach. Addison-Wesley, Reading, Massachusetts, USA
33. N Mayer A Rifaut E Dubois 2005 Towards a risk-based security requirements engineering framework. Proc. 11th Int. workshop on requirements eng. for software quality, foundations of software quality REFSQ, essener informatik beiträge Band 10 89 104
34. Menzies M, Kiper J, Feather M (2003) Improved software engineering decision support through automatic argument reduction tools. 2nd Int. Workshop on Software Eng. Decision Support SEDECS2003, part of SEKE2003, June 2003
35. Ngo-The A, Ruhe G (2005) Decision Support in Requirements Engineering. In: Aurum A, Wohlin C (eds) Engineering and Managing Software Requirements. Springer, Berlin, Heidelberg
36. Papadacci E, Salinesi C, Rolland C (2004) Payoff Analysis in Goal-Oriented Requirements Engineering. Proc. 10th Int. Workshop on Requirements Eng. for Software Quality, Foundations of Software Quality REFSQ
37. J Park D Port B Boehm H In 1999 Supporting distributed collaborative prioritization for winwin requirements capture and negotiations Proc. Int. 3rd World Multiconference on Systemics, Cybernetics and Informatics SCI'99 2 578 584
38. Raiffa H, Richardson J, Metcalfe D (2002) Negotiation analysis-the science and art of collaborative decision making. Belknap, Cambridge
39. B Regnell M Höst J Natt och Dag P Beremark T Hjelm 2001 An industrial case study on distributed prioritisation in market-driven requirements engineering for packaged software Requirements Eng 6 51 62 1003.68723 10.1007/s007660170015 (Pubitemid 33243010)
40. Remus W (1989) Using Students as Subjects in Experiments on Decision Support Systems. Proc. 22nd Annual Hawaii Int. Conf. on System Sciences, Vol. III: Decision Support and Knowledge Based Systems Track, pp 176-180
41. Richardson R (2003) 2003 CSI/FBI Computer Crime and Security Survey. Computer Security Institute. http://i.cmpnet.com/gocsi/db-area/pdfs/fbi/FBI2003. pdf (last visit: nov 07)
42. Robson C (2002) Real World Research. Blackwell Publishing, Cornwall, UK
43. G Ruhe A Eberlein D Pfahl 2003 Trade-off analysis for requirements selection Int J Softw Eng Knowl Eng 13 4 345 366 10.1142/S0218194003001378
44. Runeson P (2003) Using students as experiment subjects-an analysis on graduate and freshmen student data. Proc. Int. Conf. Empirical Assessment and Evaluation in Software Eng. EASE Keele, UK, pp 95-102
45. Ryan K, Karlsson J (1997) Prioritizing Software Requirements in an Industrial Setting. Proc. Int. Conf. on Software Eng., pp 564-565
46. Saaty TL (1980) The Analytic Hierarchy Process. McGraw-Hill, New York
47. G Sindre AL Opdahl 2000 Eliciting security requirements by misuse cases Proc. TOOLS Pacific 2000 120 131
48. Sindre G, Opdahl AL (2001) Templates for Misuse Case Description. Proc. 7th Int. Workshop on Requirements Eng.: Foundation of Software Quality-REFSQ, Essener Informatik Beiträge Band 6. Essen, Germany, pp 125-136
49. Stamatis DH (2003) Failure Mode and Effect Analysis-FMEA from Theory to Execution. American Society for Quality Press, Milwauki, USA
50. AC Stylianou RL Kumar MJ Khouja 1997 A total quality management-based systems development process ACM SIGMIS Database 28 3 59 71 10.1145/272657.272691
51. Sysiphus (2007) http://sysiphus.in.tum.de/ (last visit: nov 2007)
52. WF Tichy 2000 Hints for reviewing empirical work in software engineering Empir Softw Eng 5 4 309 312 10.1023/A:1009844119158 1770449
53. A Tversky D Kahneman 1974 Judgment under uncertainty: heuristics and biases Science 185 1124 1131 10.1126/science.185.4157.1124
54. van den Akker M, Brinkkemper S, Diepen G, Versendaal J (2004) Flexible Release Composition using Integer Linear Programming. Technical Report UU-CS-2004-063, Institute of Information and Computing Sciences, Utrecht University, Netherlands
55. van den Akker M, Brinkkemper S, Diepen G, Versendaal J (2006) Software product release planning through optimization and what-if analysis. Technical Report UU-CS-2006-63, Department of Information and Computing Sciences, Utrecht University, The Netherlands
56. Wiegers K (1999) First things first: prioritizing requirements. Software Development 7(9) http://www.processimpact.com/pubs.shtml#requirements (last visit: nov 07)
57. Wolf T, Dutoit AH (2004) A rationale-based analysis tool. Proc. 13th Int. Conf. on Intelligent on Adaptive Systems and Software Eng, Nice, France
58. Xie N, Mead NR, Chen P, Dean M, Lopez L, Ojoko-Adams D, Osman H (2004) SQUARE Project: Cost/Benefit Analysis Framework for Information Security Improvement Projects in Small Companies. Software Engineering Institute, Carnegie Mellon University, Technical Note CMU/SEI-2004-TN-045