{"title":"Self-Adaptive Security for SLA Based Smart Contract","authors":"Irish Singh, Seok-Won Lee","doi":"10.1109/REW53955.2021.00069","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00069","url":null,"abstract":"The current smart contracts development practices do not follow a standard security development process to understand and explore the security vulnerabilities and attacks in smart contracts. We propose a self-adaptive security modeling approach for modeling and analyzing Service Level Agreement (SLA) based smart contracts using attack scenarios and goal models. There are many security vulnerabilities and bugs in the smart contract due to inconsistencies in the design of smart contracts. The objective of the proposed research is to help the smart contract security requirements designers and developers to understand the security vulnerabilities, concerns, and to propose a self-adaptive security approach to provide countermeasures to detect and mitigate these attacks in the SLA smart contract in the domain of Blockchain-Based Cloud (BBC).","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134466916","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Dash+: Extending Alloy with Hierarchical States and Replicated Processes for Modelling Transition Systems","authors":"Tamjid Hossain, N. Day","doi":"10.1109/REW53955.2021.00010","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00010","url":null,"abstract":"Modelling systems abstractly shows great promise to uncover bugs early in system development. The formal language Alloy provides the means of writing constraints abstractly, but lacks explicit constructs for describing transition systems. Extensions to Alloy, such as Electrum, DynAlloy, and Dash, provide such constructs. However, still missing are language constructs to describe easily multiple processes with the same behaviour (replicated processes) running in parallel as is found in languages such as PlusCal and PROMELA. In this paper, we describe our proposal for adding explicit constructs to Dash for replicated processes. The result is Dash+: an Alloy language extension for describing transition systems that include both concurrent and hierarchical states and parametrized concurrent processes.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115544002","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"To which degree do Software Startups focus on Sustainability in their planning work?","authors":"D. Polychronopoulos, Yngve Dahle","doi":"10.1109/REW53955.2021.00037","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00037","url":null,"abstract":"The United Nations 17 Sustainable Development Goals (SDGs), introduced in 2015, explicitly mention entrepreneurship as the vanguard of achieving a more sustainable society. Since software startups, with their high degree of innovation and impact, are archetypical entrepreneurial ventures, we wish to empirically investigate to which degree software startups focus on sustainability in their planning work.We will conduct this study using dynamic business plans entered by software startups in the entrepreneurial management system (EMS), Entreprenerdy, which is a planning and business development tool used by more than 30,000 entrepreneurial ventures from more than 120 countries to develop their business plans. By analyzing data from the Entreprenerdy EMS, we will investigate in which phases of the entrepreneurial process software startups have their sustainability foci. Due to the anonymous nature of the data and its large volume, the methods most suitable for this investigation are text data mining and Latent Dirichlet Allocation. This is a proposal for future research that we may conduct with these qualitative, exploratory methods.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114345342","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Applying Transfer Learning to Sentiment Analysis in Social Media","authors":"Ariadna de Arriba, M. Oriol, Xavier Franch","doi":"10.1109/REW53955.2021.00060","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00060","url":null,"abstract":"Context: Sentiment analysis is an NLP technique that can be used to automatically obtain the sentiment of a crowd of end-users regarding a software application. However, applying sentiment analysis is a difficult task, especially considering the need of obtaining enough good quality data for training a Machine Learning (ML) model. To address this challenge, transfer learning can help us save time and get better performance results with a limited amount of data. Objective: In this paper, we aim at identifying to which degree transfer learning improves the results of sentiment analysis of messages shared by end-users in social media. Method: We propose a tool-supported framework able to monitor and analyze the sentiment of tweets with different ML models and settings. Using the proposed framework, we apply transfer learning and conduct a set of experiments with multiple datasets. Results: The performance of different ML models with transfer learning from different datasets are obtained and discussed, showing how different factors affect the results, and discussing how they have to be considered when applying transfer learning.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"244 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123026599","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"An RE’21 Workshop on Environment-Driven Requirements Engineering (EnviRE’21)","authors":"Zhi Jin, Nan Niu, Y. Yu","doi":"10.1109/REW53955.2021.00075","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00075","url":null,"abstract":"We organize a one-day workshop on Environment-Driven Requirements Engineering(EnviRE’21) in conjunction with the 29th IEEE International Requirements Engineering Conference. With the rising influence of AI, IoT, and cyber-physical systems, we realize that the environment, in which the software operates, becomes more open and evolves rapidly with stakeholders’ changing needs. EnviRE’21 features one keynote, four accepted papers, and one accepted presentation. Overall, the workshop is aimed at bringing the interested researchers and practitioners together, exchanging ideas and visions, and exploring a set of open problems to pursue in the years to come.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128573165","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Orlando Amaral, Sallam Abualhaija, M. Sabetzadeh, L. Briand
{"title":"A Model-based Conceptualization of Requirements for Compliance Checking of Data Processing against GDPR","authors":"Orlando Amaral, Sallam Abualhaija, M. Sabetzadeh, L. Briand","doi":"10.1109/REW53955.2021.00009","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00009","url":null,"abstract":"The General Data Protection Regulation (GDPR) has been recently introduced to harmonize the different data privacy laws across Europe. Whether inside the EU or outside, organizations have to comply with the GDPR as long as they handle personal data of EU residents. The organizations with whom personal data is shared are referred to as data controllers. When controllers subcontract certain services that involve processing personal data to service providers (also known as data processors), then a data processing agreement (DPA) has to be issued. This agreement regulates the relationship between the controllers and processors and also ensures the protection of individuals’ personal data. Compliance with the GDPR is challenging for organizations since it is large and relies on complex legal concepts. In this paper, we draw on model-driven engineering to build a machine-analyzable conceptual model that characterizes DPA-related requirements in the GDPR. Further, we create a set of criteria for checking the compliance of a given DPA against the GDPR and discuss how our work in this paper can be adapted to develop an automated compliance checking solution.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127037663","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"On the Value of CrowdRE in Research and Practice","authors":"F. Dalpiaz","doi":"10.1109/REW53955.2021.00051","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00051","url":null,"abstract":"Crowd-based Requirements Engineering, or CrowdRE, is an emerging requirements engineering paradigm in which a crowd of users plays a central role in carrying out activities such as elicitation and prioritization. In this keynote, I analyze the value of CrowdRE, focusing on its effectiveness and impact in research and in practice. Starting from research carried out in collaboration with industrial partners, I make the case for the need of conducting in vivo research for CrowdRE. This type of research is crucial to gather evidence for the practical effectiveness and to ultimately establish CrowdRE as a prominent paradigm for the software industry.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"49 3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126763001","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Model-based Method to Utilize a Catalogue of Quality Requirements in Software Development","authors":"Lukas Strey, Christian Hein, Tom Ritter","doi":"10.1109/REW53955.2021.00007","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00007","url":null,"abstract":"Complex software-based systems must comply with both functional and non-functional requirements (NFRs) to provide usefulness. This paper presents a structured catalogue of quality requirements and a model-based approach to collect NFRs from the catalogue in a given project context. The NFR catalogue is structured according to the quality criteria from the ISO 25000 series of standards and can be further extended. This catalogue can be applied in specific software development or modernization projects and in the preparation of tenders. This application to a specific project context is achieved by using the BPMN-NFR method presented in this paper. In this method, pattern recognition in system models is used to build a soft-goal model that serves as a filter mechanism for selecting relevant quality requirements from the catalogue. Through enrichment with context information concrete system related non-functional requirements are derived, which can be used for the system development. This model-based method was developed and applied in the context of the modernization of the budgetary procedures of Germany’s federal government.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124384436","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The Role of Environmental Deviations in Engineering Robust Systems","authors":"Eunsuk Kang","doi":"10.1109/REW53955.2021.00078","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00078","url":null,"abstract":"Software systems are developed with various assumptions about the environment. However, over time, the environment may evolve and deviate from its expected behavior, possibly undermining desired requirements of the system. In this paper, we argue that identifying and treating environmental deviations as a first-class concept throughout the development cycle is a key to the successful engineering of robust software systems. We describe some examples of environmental deviations in different domains, discuss their implications on development activities, and also put forward research challenges that we believe the requirements engineering community is particularly well-positioned to tackle.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"49 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128750007","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Welcome to the Eighth International Workshop on Evolving Security and Privacy Requirements Engineering (ESPRE’21)","authors":"Duncan Ki-Aries, Seok-Won Lee, Mattia Salnitri","doi":"10.1109/REW53955.2021.00068","DOIUrl":"https://doi.org/10.1109/REW53955.2021.00068","url":null,"abstract":"ESPRE brings together international researchers and practitioners with a common interest towards evolving security and privacy requirements. The workshop probes the interfaces between Security, Privacy, and Requirements Engineering, exploring evolving approaches enhancing the practice of Security and Privacy Requirements Engineering, whilst accounting for the ever changing needs of consumers and organisations. Stakeholders may, for example, include business analysts and security engineers, to technology entrepreneurs and privacy advocates, and perhaps most importantly, accounting for system users and context of use. ESPRE invites papers covering a variety of topics pertinent to Security and Privacy Requirements Engineering, such as elicitation and analysis techniques, ontologies, and other Requirements Engineering processes.","PeriodicalId":393646,"journal":{"name":"2021 IEEE 29th International Requirements Engineering Conference Workshops (REW)","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122233846","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}