Risks of off-the-shelf-based software acquisition and development: A systematic mapping study and a survey

IET Seminar Digest

Volumn 2012, Issue 1, 2012, Pages 233-242

  Kusumo, Dana S ^a,b,c   Staples, Mark ^a,b   Zhu, Liming ^a,b   Zhang, He ^a,b   Jeffery, Ross ^a,b  

^a CSIRO   (Australia)

^b UNIVERSITY OF NEW SOUTH WALES   (Australia)

^c TELKOM UNIVERSITY   (Indonesia)

Author keywords

OTS based software acquisition; OTS based software development; risks; survey; systematic mapping study

Indexed keywords

MAPPING STUDIES; PARTIAL REPLICATION; PERCEIVED RISK; REAL WORLD SETTING; RELATED RISK; RISK CATEGORIES; SOFTWARE ACQUISITION; SOFTWARE PROJECT; SOFTWARE RISKS; SYSTEMATIC MAPPING; TECHNICAL SUPPORT;

MAPPING; MERGERS AND ACQUISITIONS; PROJECT MANAGEMENT; RISK MANAGEMENT; SOFTWARE DESIGN; SURVEYS;

RISKS;

EID: 84865515639     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1049/ic.2012.0031     Document Type: Conference Paper

References (45)

1. M. Torchiano and M. Morisio, 'Overlooked aspects of COTS-based development', Software, IEEE, vol. 21, no. 2, pp. 88-93, 2004.
2. C. Schmidt, P. Dart, L. Johnston, L. Sterling, and P. Thorne, 'Disincentives for communicating risk: a risk paradox', Information and Software Technology, vol. 41, no. 7, pp. 403-411, May 1999.
3. R. W. Woolridge, D. J. McManus, and J. E. Hale, 'Stakeholder Risk Assessment: An Outcome-Based Approach', Software, IEEE, vol. 24, no. 2, pp. 36-4 5, 2007.
4. R. E. Freeman, Strategic management: A stakeholder approach, vol. 1. Pitman, 1984.
5. E. A. Whitley and A. Pouloudi, 'Stakeholder identification in inter- organizational systems: gaining insights for dmg use management systems', European Journal of Information Systems, vol. 6, no. 1, pp. 1-14.
6. J. Kaler, 'Differentiating Stakeholder Theories', Journal of Business Ethics, vol. 46, pp. 71-83, 2003.
7. E. Rosendahl and T. Vullinghs, 'Performing Initial Risk Assessments in Software Acquisition Projects', Software Quality - ECSQ 2002, 2002.
8. M. Jorgensen, 'How to Avoid Selecting Bids Based on Overoptimistic Cost Estimates', Software, IEEE, vol. 26, no. 3, pp. 79-84, 2009.
9. M. Keil, A. Tiwana, and A. Bush, 'Reconciling user and project manager perceptions of IT project risk: a Delphi studyl', Information Systems Journal, vol. 12, no. 2, pp. 103-119, 2002.
10. L. Zhu, R. Jeffery, M. Staples, M. Huo, and T. Tran, 'Effects of Architecture and Technical Development Process on Micro-process', in Software Process Dynamics and Agility, vol. 4470, Q. Wang, D. Pfahl, and D. Raffo, Eds. Springer Berlin / Heidelberg, 2007, pp. 49-60.
11. IEEE, 'IEEE recommended practice for software acquisition', IEEE Std 1062, 1998 Edition, 1998.
12. B. W. Boehm and R. Ross, 'Theory-W software project management principles and examples', IEEE Transactions on Software Engineering, vol. 15, no. 7, pp. 902-916, 1989.
13. H. Barki, S. Rivard, and J. Talbot, 'Toward an Assessment of Software Development Risk', Journal of Management Information Systems, vol. 10, no. 2, pp. 203-225, Oct. 1993.
14. B. W. Boehm, 'Sofiware risk management: principles and practices', Software, IEEE, vol. 8, no. 1, pp. 32-41, 1991.
15. J. Ropponen and K. Lyytinen, 'Components of sofiware development risk: how to address them? A project manager survey', IEEE Transactions on Software Engineering, vol. 26, no. 2, pp. 98-112, 2000.
16. R. C. Schmidt, K. Lyytinen, M. Keil, and P. E. Cule, 'Identifing sofiware project risks: An international Delphi study', Journal of Management Information Systems, vol. 17, no. 4, pp. 5-36, 2001.
17. L. Brownsword, T. Oberndorf, and C. A. Sledge, 'Developing new processes for COTS-based systems', Software, IEEE, vol. 17, no. 4, pp. 48-55, 2000.
18. J. Li, F. Bjørnson, R. Conradi, and V. Kampenes, 'An empirical study of variations in COTS-based software development processes in the Norwegian IT industry', Empirical Software Engineering, vol. 11, no. 3, pp. 433-461, 2006.
19. M. Morisio, C. B. Seaman, V. R. Basili, A. T. Pana, S. E. Krafl, and S. E. Condon, 'COTS-based software development: Processes and open issues', Journal of Systems and Software, vol. 61, no. 3, pp. 189-199, Apr. 2002.
20. D. S. Kusumo, L. Zhu, M. Staples, and H. Zhang, 'A Systematic Mapping Study on Off-The-Shelf-based Software Acquisition', in ACIS 2011 Proceedings, Sydney, 2011.
21. J. Li, O. P. N. Slyngstad, M. Torchiano, M. Morisio, and C. Bunse, 'A State-of-the-Practice Survey of Risk Management in Development with Off-the-Shelf Software Components', IEEE Transactions on Software Engineering, vol. 34, no. 2, pp. 271-286, 2008.
22. P. Brereton and D. Budgen, 'Component-based systems: a classification of issues', Computer, vol. 33, no. 11, pp. 54-62, 2000.
23. P. Vitharana, 'Risks and challenges of component-based sofiware development', Communication of the ACM, vol. 46, no. 8, pp. 67-72, 2003.
24. J. C. Carver, 'Towards Reporting Guidelines for Experimental Replications: A Proposal', in 1st International Workshop on Replication in Empirical Software Engineering Research (RESER), Cape Town, South Africa, 2010.
25. D. Budgen, M. Turner, P. Brereton, and B. Kitchenham, 'Using Mapping Studies in Software Engineering', 2008, pp. 195-204.
26. B. Kitchenham and S. Charters, 'Guidelines for performing Systematic Literature Reviews in Software Engineering', Keele University and Durham University Joint Report, EBSE 2007-001, 2007.
27. EBSE RG, 'Template for a Mapping Study Protocol', http://www.dur.ac.uk/ ebse/resources/templates/MappingStudyTemplate. pc/f, Apr-2009. [Online]. Available: http://www.dur.ac.uklebse/resources/templates/MappingStudyTemplate. pdf. [Accessed: 05-Mar-2011].
28. B. A. Kitchenham, D. Budgen, and O. Pearl Brereton, 'Using mapping studies as the basis for farther research - A participant-observer case study', Information and Software Technology, vol. 53, no. 6, pp. 638-651, Jun. 2011.
29. 'Zotero', http://wwwzotero.org/, 2011.
30. R. Wieringa, N. Maiden, N. Mead, and C. Rolland, 'Requirements engineering paper classification and evaluation criteria: a proposal and a discussion', Requirements Eng, vol. 11, no. 1, pp. 102-107, Nov. 2005.
31. K. Petersen, R. Feldt, S. Mujtaba, and M. Mattsson, 'Systematic Mapping Studies in Software Engineering', University of Ban, Italy, 2008.
32. Yi Ding and N. Napier, 'Measurement Framework for Assessing Risks in Component-Based Software Development', in Proceedings of the 39th Annual Hawaii International Conference on System Sciences, 2006, vol. 9, p. 230b.
33. P. Vitharana, 'Risks and challenges of component-based sofiware development', Communication of the ACM, vol. 46, no. 8, pp. 67-72, 2003.
34. th Euromicro Conference, 2001, pp. 12-21.
35. N. Admodisastro and G. Kotonya, 'Architectural Analysis Approaches: A Component-Based System Development Perspective', in High Confidence Software Reuse in Large Systems, vol. 5030, H. Mei, Ed. Springer Berlin / Heidelberg, 2008, pp. 26-38.
36. Vu Tran and Dar-Biau Liu, 'A risk-mitigating model for the development of reliable and maintainable large-scale commercial-off-the-shelf integrated sofiware systems', presented at the Reliability and Maintainability Symposium. 1997 Proceedings, Annual, 1997, pp. 361-367.
37. L. Rose, 'Risk Management of COTS Based Systems Development', in Component-Based Software Quality, vol. 2693, Springer Berlin / Heidelberg, 2003, pp. 352-373.
38. D. Port and Y. Yang, 'Empirical Analysis of COTS Activity Effort Sequences', in COTS-Based Software Systems, vol. 2959, R. Kazman and D. Port, Eds. Springer Berlin / Heidelberg, 2004, pp. 169-182.
39. B. Boehm, D. Port, Y. Yang, and J. Bhuta, 'Not All CBS Are Created Equally: COTS-Intensive Project Types', in COTS-Based Software Systems, vol. 2580, H. Erdogmus and T. Weng, Eds. Springer Berlin / Heidelberg, 2003, pp. 36-50.
40. J. Li, R. Conradi, O. P. N. Slyngstad, M. Torchiano, M. Morisio, and C. Bunse, 'Preliminary Results from a State-of-the-Practice Survey on Risk Management in Off-the-Shelf Component-Based Development', in COTS-Based Software Systems, vol. 3412, X. Franch and D. Port, Eds. Springer Berlin / Heidelberg, 2005, pp. 278-288.
41. S. Mahmood and A. Khan, 'An industrial study on the importance of sofiware component documentation: A system integrator's perspective', Information Processing Letters, vol. 111, no. 12, pp. 583-590, Jun. 2011.
42. D. Greer and R. Conradi, 'Software project initiation and planning - an empirical study', Software, lET, vol. 3, no. 5, pp. 356-368, 2009.
43. D. Hillson, 'Using a Risk Breakdown Structure in project management', Journal of Facilities Management, vol. 2, no. 1, pp. 85-97, 2003.
44. M. Keil, P. E. Cule, K. Lyytinen, and R. C. Schmidt, 'A framework for identifying software project risks', Communication of the ACM, vol. 41, no. 11, pp. 76-83, 1998.
45. E. Engström and P. Runeson, 'Software product line testing - A systematic mapping study', Information and Software Technology, vol. 53, no. 1, pp. 2-13, Jan. 2011.