Analyzing and evaluating security features in software requirements

Software requirements, for complex projects, often contain specifications of non-functional attributes (e.g., security-related features). The process of analyzing such requirements for standards compliance is laborious and error prone. Due to the inherent free-flowing nature of software requirements, it is tempting to apply Natural Language Processing (NLP) and Machine Learning (ML) based techniques for analyzing these documents. In this thesis, we propose a novel semi-automatic methodology that assesses the security requirements of the software system with respect to completeness and ambiguity, creating a bridge between the requirements documents and being in compliance. Security standards, e.g., those introduced by the ISO and OWASP, are compared against annotated software project documents for textual entailment relationships (NLP), and the results are used to train a neural network model (ML) for classifying security-based requirements. Hence, this approach aims to identify the appropriate structures that underlie software requirements documents. Once such structures are formalized and empirically validated, they will provide guidelines to software organizations for generating comprehensive and unambiguous requirements specification documents as related to security-oriented features. The proposed solution will assist organizations during the early phases of developing secure software and reduce overall development effort and costs.

Discipline thesis:degree_discipline

Computer & Information Science

Year dc:date.issued

2016

Author dc:creator

• Hayrapetian, Allenoush

Advisor dc:contributor.advisor

• Raje, Rajeev

• Security
• NLP
• Machine Learning
• Text Mining
• Neural Network
• Software Requirements

Statement dc:rights

• Attribution 3.0 United States

Licence dc:rights.uri

• http://creativecommons.org/licenses/by/3.0/us/

Language dc:language.iso

en_US

DOI

10.7912/C23H29

Identifier URI

http://dx.doi.org/10.7912/C2/2340

OAI identifier oai:identifier

oai:scholarworks.indianapolis.iu.edu:1805/11837