We found a match
Your institution may have access to this item. Find your institution then sign in to continue.
- Title
Goal-driven risk assessment in requirements engineering.
- Authors
Asnar, Yudistira; Giorgini, Paolo; Mylopoulos, John
- Abstract
Risk analysis is traditionally considered a critical activity for the whole software system's lifecycle. Risks are identified by considering technical aspects (e.g., failures of the system, unavailability of services, etc.) and handled by suitable countermeasures through a refined design. This, however, introduces the problem of reconsidering system requirements. In this paper, we propose a goal-oriented approach for analyzing risks during the requirements analysis phase. Risks are analyzed along with stakeholder interests, and then countermeasures are identified and introduced as part of the system's requirements. This work extends the Tropos goal modeling formal framework proposing new concepts, qualitative reasoning techniques, and methodological procedures. The approach is based on a conceptual framework composed of three main layers: assets, events, and treatments. We use 'loan origination process' case study to illustrate the proposal, and we present and discuss experimental results obtained from the case study.
- Subjects
RISK assessment; REQUIREMENTS engineering; COMPUTER software; COMPUTER system failures; LOAN originations
- Publication
Requirements Engineering, 2011, Vol 16, Issue 2, p101
- ISSN
0947-3602
- Publication type
Article
- DOI
10.1007/s00766-010-0112-x