Nora Koch

University of Seville Spain · ES3 Research Group

The importance of requirements engineering for software quality is well-understood in industry. It is also clear that requirements engineers need tools that do not prescribe only one type of development process. This paper presents an overview of SofIA, a CASE tool that provides maximum flexibility when modeling functionality, data or prototypes be...

Background The benefits of requirements traceability, such as improvements in software product and process quality, early testing, and software maintenance, are widely described in the literature. Requirements traceability is a critical, widely accepted practice. However, very often it is not applied for fear of the additional costs associated with...

The mechanism of prototype development is considered by the research and industrial software communities as a key tool for user-developer communication. In software development, prototypes are used in requirements engineering to help elicit and validate users' needs. Software prototypes like mockups are frequently considered throwaway artefacts and...

Prototyping is a technique frequently used in the early stages of software development, but often prototypes are discarded or the provided information manually transferred into further steps of the software production. An open issue in industry and research is the automated reuse of valuable information included in these prototypes. We propose to b...

Agile methodologies have an impact on how organizations carry out Requirements Engineering (RE). In this context, organizations use different kind of agile techniques like artifacts, meetings, methods or roles, but there is a lack of specific guidelines for agile RE. The aim of this paper is to present a modeling language for supporting organizatio...

The First International Workshop on Maturity of Web Engineering Practices (MAT- WEP 2018) was held in conjunction with the 18th International Conference on Web Engineering (ICWE 2018) in Cáceres (Spain) on June 5th 2018. The motivation for this initiative stands in the aim of building a better bridge from theory to practice, from academia to indust...

Cyber-physical systems (CPS) are devices with sensors and actuators which link the physical with the virtual world. There is a strong trend towards open systems, which can be extended during operation by instantly adding functionalities on demand. We discuss this trend in the context of automotive, medical and industrial automation systems. The goa...

Collective autonomic systems (CAS) are adaptive, open-ended, highly parallel, interactive and distributed software systems. They consist of many collaborative entities that manage their own knowledge and processes. CAS present many engineering challenges, such as awareness of the environmental situation, performing suitable and adequate adaptations...

Collective autonomic systems are adaptive, open-ended, highly parallel, interactive and distributed software systems. Their key features are so-called self-* properties, such as self-awareness, self-adaptation, self-expression, self-healing and self-management. We propose a software development life cycle that helps developers to engineer adaptive...

1992! Internet in Germany was in its infancy, object oriented programming wasn’t well-known yet, and even the European Union, which has funded so many of our research efforts lately, had not been formed. Computing was certainly not mainstream when Martin Wirsing took the post of full professor at the Ludwig-Maximilians-Universität München in that y...

A collective autonomic system consists of collaborating autonomic entities which are able to adapt at runtime, adjusting to the state of the environment and incorporating new knowledge into their behavior. These highly dynamic systems are also known as ensembles. To ensure correct behavior of ensembles it is necessary to support their development t...

Engineering secure software systems is not an easy task. Many methods, notations and tools – we call them knowledge objects – exist to support engineers in the development of such software. A main problem is the selection of appropriate knowledge objects. Therefore, we build the conceptual framework SecEval to support the evaluation and comparison...

oftware engineers need to find effective methods, appropriate notations and tools that support the development of secure applications along the different phases of the Software Development Life Cycle (SDLC). Our evaluation approach, called SecEval, supports the search and comparison of these artifacts. SecEval comprises: (1) a workflow that defines...

Securing web applications is a difficult task not only, because it is hard to implement bulletproof techniques, but also because web developers struggle to get an overview of how to avoid security flaws in a concrete application. This is aggravated by the fact that the description of a web application’s security concept is often scattered over leng...

Component ensembles are a promising way of building self-aware autonomic adaptive systems. This approach has been promoted by the EU project ASCENS, which develops the core idea of ensembles by providing rigorous semantics as well as models and methods for the whole development life cycle of an ensemble-based system. These methods specifically addr...

In modern pervasive application domains, such as Service Oriented Architectures (SOAs) and Peer-to-Peer (P2P) systems, security aspects are critical. Justified confidence in the security mechanisms that are implemented for assuring proper data access is a key point. In the last years XACML has become the de facto standard for specifying policies fo...

We introduce a UML-based notation for graphically modeling systems' security aspects in a simple and intuitive way and a model-driven process that transforms graphical specifications of access control policies in XACML. These XACML policies are then translated in FACPL, a policy language with a formal semantics, and the resulting policies are evalu...

We have seen many efforts invested in research on engineering security aspects of software and systems over the last years, but we have also seen spectacular security breaches and privacy leaks in web applications, mobile apps, and enterprise systems. In fact, in both the industrial and the academic context, we are still far from satisfactory, inte...

The relevance of a detailed and precise specification of the requirements is well known; it helps to achieve an agreement with the customer on software functionality, user friendliness and priorities in the development process. However, in practice, modeling of requirements is avoided in many projects, in particular in the Web domain, mainly due to...

Model-driven engineering (MDE) approaches provide the well-known advantage of software development at a higher level of abstraction. However, in the web engineering domain such approaches still encounter difficulties mainly due to applications that are continuously evolving and the heterogeneity of web technologies. Instead of fully automated gener...

In the last decade, the number and complexity of Web-based software systems and the amount of information they offer have been continuously growing. In the context of Software Engineering, design methods and methodologies were introduced to provide mechanisms to develop these complex Web applications and Rich Internet Applications (RIAs) in a syste...

The increasing growth of the Web field has promoted the development of a plethora of Model-Driven Web Engineering (MDWE) approaches. These methodologies share a top-down approach: they start by modeling application content, then they define a navigational schema, and finally refine the latter to obtain presentation and rich behavior specifications....

Secure web information systems are becoming increasingly important due to rising cybercrime as well as the growing awareness of data privacy. Besides authentication and confidential connections, both data access control and navigational access control are the most relevant security features in this field. Adding such security features, however, to...

Service-Oriented Computing is a paradigm where services are understood as autonomous, platform-independent computational entities that can be described, published, categorized, discovered, and dynamically assembled for developing massively distributed, interoperable, evolvable systems and applications. These characteristics have pushed service-orie...

A main challenge in Sensoria has been the inclusion of case studies from different industrial and academic application areas, namely finance, automotive, telecommunications, and university administration. The case studies, along with a short description of available scenarios, have already been introduced in Chapter 0-3. In this chapter, we go into...

We describe the Sensoria development approach using a pattern language for augmenting service engineering with formal analysis, transformation and dynamicity. The pattern language is designed to help software developers choose appropriate tools and techniques to develop service-oriented systems with support from formal methods; the full pattern cat...

A trend in software engineering is towards model-driven development. Models are used to document requirements, design results, and analysis in early phases of the development process. However, the aim of modeling is very often more ambitious as models are used for automatic generation in so-called model-driven engineering approaches. The relevance...

Egon Börger (SOSYM, 11, pp. 305---318, 2012) challenges the concepts of BPMN, workflow patterns and YAWL as useful contributions to the modeling of business processes. I show that he misjudges the role of BPMN, YAWL and similar techniques in the ...

The increasing growth of the Web field has promoted the development of a plethora of Model-Driven Web Engineering (MDWE) approaches. These methodologies share a top-down approach: they start by modeling ap plicationcontent, then they define a navigational schema, and finally refine the latter to obtain presentation and rich behavior specifications....

The foundational research carried out in Sensoria has been steered by a number of case studies for ensuring applicability of SENSORIA methods and meeting expectations of society and the economy. In this chapter, we introduce these case studies. Three of the case studies came from industrial applications in automotive, finance and telecommunication...

The International Workshop on the Web and Requirements Engineering (WeRE) was held in conjunction with the 18th International IEEE Requirements Engineering Conference (RE'10) in Sydney (Australia) on September 28 2010. WeRE intends to be an international forum for exchanging ideas on both using Web technologies as a platform in the requirements eng...

Systems based on the service-oriented architecture (SOA) principles have become an important cornerstone of the development of enterprise-scale software applications. They are characterized by separating functions into distinct software units, called services, which can be published, requested and dynamically combined in the production of business...

This document describes UML4SOA, a prolfie for the Unified Modeling Language (UML) which extends the UML and existing SOA profiles by providing the possibility for behavioural specications of services, focussing on service orchestrations. UML4SOA is an easy-to-use, conservative extension to the UML for modelling service orchestrations on a high lev...

We present a UML Profile for the description of service oriented applications. The profile focuses on style-based design and reconfiguration aspects at the architectural level. Moreover, it has formal support in terms of an approach called Architectural Design Rewriting, which enables formal analysis of the UML specifications. We show how our proto...

Adequate tool support is a crucial factor of success for a software development method or technique. In this paper, we present the MagicUWE tool, that supports systematic design of web applications with the UML-based Web Engineering (UWE) approach. It provides assistance to the designer for the modeling activities using the UWE profile and the semi...

Rich Internet Applications (RIAs) are highly interactive web applications that resemble desktop applications. Modeling RIAs hence requires techniques for web modeling enriched by model elements for powerful user interactions and client-server communications. Many existing approaches provide the required modeling features, but they are still failing...

Model-driven engineering is a promising approach, but there are still many hurdles to overcome. The tool UWE4JSF solves the hurdles for the model-driven development of web applications designed with UWE. It builds upon a set of models and domain specific annotations – in particular an abstract and a concrete presentation model. It is completely int...

The IST-FET Integrated Project Sensoria is developing a novel comprehensive approach to the engineering of service-oriented software systems where foundational theories, techniques and methods are fully integrated into pragmatic software engineering processes. The techniques and tools of Sensoria encompass the whole software development cycle, from...

Research results from industry-academic collaborative projects in service-oriented computing describe practical, achievable solutions. Service-Oriented Applications and Architectures (SOAs) have captured the interest of industry as a way to support business-to-business interaction, and the SOA market grew by $4.9 billion in 2005. SOAs and in partic...

Viewpoint modeling has demonstrated to be an effective approach for specifying complex software systems by means of a set of independent views and correspondences between them. As any other software system, a Web ap-plication evolves during its lifetime, and its specifications change to meet new requirements or to adapt to business changes. As a co...

A new kind of web applications came up to overcome the limitations of traditional web applications regarding the usability and interactivity of their user interfaces: the so-called Rich Internet Applications (RIAs). New languages and frameworks mainly drive the development of RIAs, but engineering of RIAs is a very new field in the area of software...

The MDWE 2008 workshop offered a forum to exchange experiences and ideas related to model-driven languages and systems, applied to the Web Engineering field. Presentations and discussions focused on Model Driven Architecture (MDA) for the development of web systems; the use of metamodels, UML profiles, model-to-model and model-to-code transformatio...

Service-Oriented Architectures (SOAs) have become an important cornerstone of the development of enterprise-scale software applications. Although a range of domain-specific languages and standards are available for dealing with such architectures, model-driven approaches starting from models written in an established modelling language like UML and...

In the last few years, almost all model-driven Web Engineering approaches have evolved in response to the new challenges of Web systems design, which are due to new requirements and implementation technologies in the Web domain. The evolution implies the extension and adaptation of current approaches, in terms of new models, transformations and pro...

This work has been partly funded by the Austrian Federal Ministry for Education, Science, and Culture, and the European Social Fund (ESF) under grant 31.963/46‐VII/9/2002. The authors would like to thank Andreas Schönbeck and Alexander Knapp for their fruitful comments and contributions to prior versions of this work.

The rapidly increasing importance of rich Internet applications (RIAs) calls for systematic RIA development methods. However, most current Web engineering methods focus on Web 1.0 applications only; RIAs, on the contrary, are still developed in an ad-hoc manner, which often results in error-prone and hard-to-maintain products. We propose a model-dr...

Software systems based on Service-Oriented Architectures (SOAs) promise high flexibility, improved maintainability, and simple re-use of functionality. A variety of languages and standards have emerged for working with SOA artifacts; however, service computing still lacks an effective and intuitive model-driven approach starting from models written...

We report on the successful application of academic expe- rience with formal modelling and verication techniques to an automotive scenario from the service-oriented computing domain. The aim of this industrial case study is to verify a priori, thus before implementation, certain design issues. The specic scenario is a simplied version of one of pos...

Service engineering and Service-Oriented Architectures (SOAs) have recently been embraced by both industry and research, as they promise high reusability and maintainability, and a flexible environment for future changes in business requirements and workflows. In this paper, we present a model-driven service engineering approach called the SENSORIA...

Software development techniques are continuously evolving with the goal of solving the main problems that still affect the building and maintenance of software systems: time, costs and error-proneness. Model-driven engineering (MDE) approaches aim to reduce at least some of these problems providing techniques for the construction of models and the...

Although role modeling is a topic that has been treated over years in the object-oriented community, its use in the life cycle of Web Engineering, and particularly in object-oriented Web design methods, has been seldom discussed and used yet. In this paper, we introduce roles in the modeling and design armory of existing Web engineering methods and...

Zusammenfassung UWE (UML-based Web Engineering) ist ein Ansatz zur modellgetriebenen Entwicklung von Websystemen. Die UWE-Notation ist speziell an die intuitive Modellierung von Webanwendungen angepasst; UWE umfasst einen werkzeugunterstützten Entwicklungsprozess für die semi-automatische Konstruktion von Webanwendungen; und UWE-Modelle ermöglichen...

A detailed requirements analysis is best practice in the development of traditional software. Conversely, the importance of requirements engineering for Web systems is still underestimated. Only few Web methodologies provide an approach for the elicitation of requirements and techniques for their specification. This paper focuses on specification t...

Current model-driven Web Engineering approaches (such as OO-H, UWE or WebML) provide a set of methods and supporting tools for a system- atic design and development of Web applications. Each method addresses dif- ferent concerns using separate models (content, nav igation, presentation, busi- ness logic, etc.), and provide model compilers that prod...

Model-driven engineering (MDE) techniques address rapid changes in Web languages and platforms by lifting the abstraction level from code to models. On the one hand models are transformed for model elaboration and translation to code; on the other hand models can be executable. We demon- strate how both approaches are used in a complementary way in...

Service-oriented computing is emerging as a new paradigm based on autonomous, platform-independent computational entities (called services) that can be described, published and categorised, and dynamically discovered and assembled, resulting in massively distributed, interoperable, evolvable systems. The IST-FET Integrated Project SENSORIA is devel...

Service-oriented computing is an emerging paradigm where services are understood as autonomous, platform-independent computational entities that can be described, published, categorised, discovered, and dynamically assembled for developing massively distributed, interoperable, evolvable systems and appli- cations. The IST-FET Integrated Project SEN...