Determining how much software assurance is enough?: a value-based approach

  • Authors:
  • LiGuo Huang;Barry Boehm

  • Affiliations:
  • University of Southern California;University of Southern California

  • Venue:
  • EDSER '05 Proceedings of the seventh international workshop on Economics-driven software engineering research
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

A classical problem facing many software projects is to determine when to stop testing and release the product for use. Risk analyses address such "how much is enough?" questions, by balancing the risk exposure of doing too little with the risk exposure of doing too much. However, it's difficult to quantify the relative probabilities and sizes of loss in order to provide practical approaches for determining a risk-balanced "sweet spot" operating point.In this paper, we provide a quantitative approach based on the COCOMO II cost estimation model, the COQUALMO quality estimation model and the Value Estimating Relationships.