Certifying Software for High-Assurance Environments
IEEE Software
Using a Concept Lattice of Decomposition Slices for Program Understanding and Impact Analysis
IEEE Transactions on Software Engineering
IEEE Computer Graphics and Applications
Ontology-based Active Requirements Engineering Framework
APSEC '05 Proceedings of the 12th Asia-Pacific Software Engineering Conference
REV '06 Proceedings of the 1st international workshop on Requirements Engineering Visualization
Towards a Requirements-Driven Workbench for Supporting Software Certification and Accreditation
SESS '07 Proceedings of the Third International Workshop on Software Engineering for Secure Systems
Seeing is believing: designing visualizations for managing risk and compliance
IBM Systems Journal
Requirements Engineering Visualization: A Survey on the State-of-the-Art
REV '09 Proceedings of the 2009 Fourth International Workshop on Requirements Engineering Visualization
Predicting high-risk program modules by selecting the right software measurements
Software Quality Control
Hi-index | 0.00 |
Risk assessment is a complex decision making process during Certification and Accreditation (C&A) activities. It requires to understand the multidimensional correlations among numerous C&A requirements to reason about their collective and adequate behavior to minimize risks to a software system. Also, diverse stakeholders in the organizational hierarchy should be able to comprehend and utilize the risk assessment artifacts to agree upon an acceptable level of risks and justify the criticality and cost of mitigation strategies related to C&A requirements. We believe requirements visualization plays an important role in providing rich contextual information for understanding and analyzing risk assessment artifacts and present our initial experiences in using intuitive visual metaphors and their explanations for requirements-driven risk assessment [8] [11].