14th Asia-Pacific Software Engineering Conference (APSEC'07)最新文献_第7页

Workshop on Service Oriented Architecture 面向服务架构研讨会

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.103

Toshiro Takase

引用次数: 0

Enterprise Assets Security Requirements Construction from ESRMG Grammar based on Security Patterns 基于安全模式的ESRMG语法构建企业资产安全需求

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.50

K. Supaporn, N. Prompoon, Thongchai Rojkangsadan

{"title":"Enterprise Assets Security Requirements Construction from ESRMG Grammar based on Security Patterns","authors":"K. Supaporn, N. Prompoon, Thongchai Rojkangsadan","doi":"10.1109/APSEC.2007.50","DOIUrl":"https://doi.org/10.1109/APSEC.2007.50","url":null,"abstract":"One of the highest priorities of system requirements needed in software development industry is security requirements. However, to identify the complete and correct software security requirements are a challenging task especially creating enterprise assets security requirements. Enterprise assets security requirements are to identify security basic needs, to assess risks, to establish security approach and service, and to specify external enterprise consideration including confidentiality, integrity, availability, and accountability concerns. Moreover, these may be applied to other security requirements such as identification and authentication, access control, firewall architecture, etc. Security patterns may be used to create this security requirements but understanding, analyzing and transforming from security patterns to security requirements are difficult to accomplish. We proposed a grammar, called ESRMG (enterprise security and risk management grammar), and a prototyping tool based on security patterns in a scope of enterprise asset identification and risk managements which are the fundamental of enterprise security requirements. The proposed grammar and tool are beneficial for any organization to construct enterprise security requirements and may help reduce cost and time in overall of system development.","PeriodicalId":273688,"journal":{"name":"14th Asia-Pacific Software Engineering Conference (APSEC'07)","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-12-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123130869","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

Extraction of viewpoints for eliciting customer's requirements based on analysis of specification change records 基于对规格变更记录的分析，提取客户需求的观点

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.54

Kouji Aoyama, Takanori Ugai, Shigeru Yamada, A. Obata

引用次数: 5

Checking Distributed Programs with Partially Ordered Atoms 用部分有序原子检查分布式程序

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.32

H. F. Li, E. Maghayreh

引用次数: 6

The First International Workshop on Management and Economics of Software Product Lines (MESPUL07) 第一届软件产品线管理与经济国际研讨会(MESPUL07)

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.90

M. Babar, Makoto Nonaka

引用次数: 0

Quantitative Analysis of Value-Based Software Processes Using Decision-Based Stochastic Object Petri-Nets 基于决策的随机目标petri网定量分析基于价值的软件过程

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.78

R. Yin, Hao Hu, Jidong Ge, Jian Lu

引用次数: 1

Use of Agile Methods and Practices in the Philippines 在菲律宾使用敏捷方法和实践

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.98

R. Sison, T. Yang

引用次数: 22

A Six Sigma Framework for Software Process Improvements and its Implementation 软件过程改进的六西格玛框架及其实施

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.13

Zhedan Pan, Hyuncheol Park, Jongmoon Baik, Ho‐Jin Choi

{"title":"A Six Sigma Framework for Software Process Improvements and its Implementation","authors":"Zhedan Pan, Hyuncheol Park, Jongmoon Baik, Ho‐Jin Choi","doi":"10.1109/APSEC.2007.13","DOIUrl":"https://doi.org/10.1109/APSEC.2007.13","url":null,"abstract":"Six Sigma has been adopted by many software development organizations to identify problems in software projects and processes, find optimal solutions for the identified problems, and quantitatively improve the development processes so as to achieve organizations' business goals. A Six Sigma framework for software process improvements is needed to provide a standard process and analysis tools for Six Sigma project executions, and also provide a platform for collaborations with other process improvement approaches, such as PSP/TSP and CMM/CMMI. However, few frameworks have been proposed to support Six Sigma project executions. Most of Six Sigma projects for software process improvements have been performed in an ad-hoc way. In this paper, we propose a framework to support Six Sigma projects for continuous process improvements for software developments. Based on this framework, we implemented a web-based tool, called SSPMT integrated with a software project management tool and a PSP supporting tool. The suggested framework and SSPMT is beneficial in initiating and executing Six Sigma projects, facilitating data collection and data analyses by Six Sigma toolkits, and standardizing the Six Sigma project execution process so as to achieve Six Sigma project goals and of organizations' business goals.","PeriodicalId":273688,"journal":{"name":"14th Asia-Pacific Software Engineering Conference (APSEC'07)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-12-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125412902","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 31

Injecting security as aspectable NFR into Software Architecture 将安全性作为可考虑的NFR注入到软件架构中

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.65

H. Bagheri

引用次数: 9

Enhancing the ESIM (Embedded Systems Improving Method) by Combining Information Flow Diagram with Analysis Matrix for Efficient Analysis of Unexpected Obstacles in Embedded Software 结合信息流图和分析矩阵对ESIM(嵌入式系统改进方法)进行改进，以有效分析嵌入式软件中的意外障碍

14th Asia-Pacific Software Engineering Conference (APSEC'07) Pub Date : 2007-12-04 DOI: 10.1109/APSEC.2007.49

Yasufumi Shinyashiki, Toshiro Mise, Masaaki Hashimoto, Keiichi Katamine, Naoyasu Ubayashi, Takako Nakatani

{"title":"Enhancing the ESIM (Embedded Systems Improving Method) by Combining Information Flow Diagram with Analysis Matrix for Efficient Analysis of Unexpected Obstacles in Embedded Software","authors":"Yasufumi Shinyashiki, Toshiro Mise, Masaaki Hashimoto, Keiichi Katamine, Naoyasu Ubayashi, Takako Nakatani","doi":"10.1109/APSEC.2007.49","DOIUrl":"https://doi.org/10.1109/APSEC.2007.49","url":null,"abstract":"In order to improve the quality of embedded software, this paper proposes an enhancement to the ESIM (embedded systems improving method) by combining an IFD (information flow diagram) with an Analysis Matrix to analyze unexpected obstacles in the software. These obstacles are difficult to predict in the software specification. Recently, embedded systems have become larger and more complicated. Theoretically therefore, the development cycle of these systems should be longer. On the contrary, in practice the cycle has been shortened. This trend in industry has resulted in the oversight of unexpected obstacles, and consequently affected the quality of embedded software. In order to prevent the oversight of unexpected obstacles, we have already proposed two methods for requirements analysis: the ESIM using an Analysis Matrix and a method that uses an IFD. In order to improve the efficiency of unexpected obstacle analysis at reasonable cost, we now enhance the ESIM by combining an IFD with an Analysis Matrix. The enhancement is studied from the following three viewpoints. First, a conceptual model comprising both the Analysis Matrix and IFD is defined. Then, a requirements analysis procedure is proposed, that uses both the Analysis Matrix and IFD, and assigns each specific role to either an expert or non-expert engineer. Finally, to confirm the effectiveness of this enhancement, we carry out a description experiment using an IFD.","PeriodicalId":273688,"journal":{"name":"14th Asia-Pacific Software Engineering Conference (APSEC'07)","volume":"49 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-12-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126905794","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3