Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification

Secure patterns provide a solution for the security requirement of the software. There are large number of secure patterns, and it is quite difficult to choose an appropriate pattern. Moreover, selection of these patterns needs security knowledge; generally, developers are not specialized in the dom...

Full description

Saved in:
Bibliographic Details
Main Authors: Ishfaq Ali, Muhammad Asif, Muhammad Shahbaz, Adnan Khalid, Mariam Rehman, Aziz Guergachi
Format: Article
Language:English
Published: IEEE 2018-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/8546743/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832582365239574528
author Ishfaq Ali
Muhammad Asif
Muhammad Shahbaz
Adnan Khalid
Mariam Rehman
Aziz Guergachi
author_facet Ishfaq Ali
Muhammad Asif
Muhammad Shahbaz
Adnan Khalid
Mariam Rehman
Aziz Guergachi
author_sort Ishfaq Ali
collection DOAJ
description Secure patterns provide a solution for the security requirement of the software. There are large number of secure patterns, and it is quite difficult to choose an appropriate pattern. Moreover, selection of these patterns needs security knowledge; generally, developers are not specialized in the domain of security knowledge. This paper can help in the selection of secure pattern on the basis of tradeoffs of the secure pattern using text categorization. A repository of secure design patterns is used as a data set and a repository of requirements artifacts in the form of software requirements specification (SRS) are used for this paper. A text categorization scheme, which begins with preprocessing, indexing of secure patterns, ends up by querying SRS features for retrieving secure design pattern using document retrieval model. For the evaluation of the proposed model, we have used three different domains’ SRS. These three SRS documents represent three different domains, i.e., e-commerce, social media, and desktop utility program. A traditional precision and recall method along with F-measure used for evaluation of information/document retrieval model is used to evaluate the results. F-measure for 17 different design problems shows around 81% accuracy with recall up to 0.69%.
format Article
id doaj-art-35bae4ee0c424e3f94da931ef057588e
institution Kabale University
issn 2169-3536
language English
publishDate 2018-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj-art-35bae4ee0c424e3f94da931ef057588e2025-01-30T00:00:38ZengIEEEIEEE Access2169-35362018-01-016739287393910.1109/ACCESS.2018.28830778546743Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement SpecificationIshfaq Ali0Muhammad Asif1https://orcid.org/0000-0003-1839-2527Muhammad Shahbaz2Adnan Khalid3https://orcid.org/0000-0001-9880-5429Mariam Rehman4Aziz Guergachi5Department of Computer Science, National Textile University, Faisalabad, PakistanDepartment of Computer Science, National Textile University, Faisalabad, PakistanDepartment of Computer Science & Engineering, University of Engineering and Technology, Lahore, PakistanDepartment of Computer Science, Government College University, Lahore, PakistanDepartment of Information Technology, Government College University, Faisalabad, PakistanTed Rogers School of Management, Ryerson University, Toronto, CanadaSecure patterns provide a solution for the security requirement of the software. There are large number of secure patterns, and it is quite difficult to choose an appropriate pattern. Moreover, selection of these patterns needs security knowledge; generally, developers are not specialized in the domain of security knowledge. This paper can help in the selection of secure pattern on the basis of tradeoffs of the secure pattern using text categorization. A repository of secure design patterns is used as a data set and a repository of requirements artifacts in the form of software requirements specification (SRS) are used for this paper. A text categorization scheme, which begins with preprocessing, indexing of secure patterns, ends up by querying SRS features for retrieving secure design pattern using document retrieval model. For the evaluation of the proposed model, we have used three different domains’ SRS. These three SRS documents represent three different domains, i.e., e-commerce, social media, and desktop utility program. A traditional precision and recall method along with F-measure used for evaluation of information/document retrieval model is used to evaluate the results. F-measure for 17 different design problems shows around 81% accuracy with recall up to 0.69%.https://ieeexplore.ieee.org/document/8546743/Design patternsecuritycorpustext categorizationSVDSVM
spellingShingle Ishfaq Ali
Muhammad Asif
Muhammad Shahbaz
Adnan Khalid
Mariam Rehman
Aziz Guergachi
Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification
IEEE Access
Design pattern
security
corpus
text categorization
SVD
SVM
title Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification
title_full Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification
title_fullStr Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification
title_full_unstemmed Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification
title_short Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification
title_sort text categorization approach for secure design pattern selection using software requirement specification
topic Design pattern
security
corpus
text categorization
SVD
SVM
url https://ieeexplore.ieee.org/document/8546743/
work_keys_str_mv AT ishfaqali textcategorizationapproachforsecuredesignpatternselectionusingsoftwarerequirementspecification
AT muhammadasif textcategorizationapproachforsecuredesignpatternselectionusingsoftwarerequirementspecification
AT muhammadshahbaz textcategorizationapproachforsecuredesignpatternselectionusingsoftwarerequirementspecification
AT adnankhalid textcategorizationapproachforsecuredesignpatternselectionusingsoftwarerequirementspecification
AT mariamrehman textcategorizationapproachforsecuredesignpatternselectionusingsoftwarerequirementspecification
AT azizguergachi textcategorizationapproachforsecuredesignpatternselectionusingsoftwarerequirementspecification