user guidance for creating precise and accessible property...
TRANSCRIPT
![Page 1: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/1.jpg)
User Guidance for CreatingUser Guidance for Creating
Precise and AccessiblePrecise and Accessible
Property SpecificationsProperty Specifications
Rachel L. Cobleigh, George S. Avrunin, and Lori A. Clarke
Laboratory for Advanced Software Engineering ResearchUniversity of Massachusetts Amherst
http://laser.cs.umass.edu/
![Page 2: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/2.jpg)
Property Specification ProblemProperty Specification Problem
•• A property focuses on describing oneA property focuses on describing one
particular aspect of system behaviorparticular aspect of system behavior
•• Even with such focus, it can still be difficult toEven with such focus, it can still be difficult to
write a property correctlywrite a property correctly
•• A property should be precise andA property should be precise and
accessibleaccessible
•• precise enough to support unambiguousprecise enough to support unambiguous
communication and automated analysescommunication and automated analyses
•• accessible enough to be readily understoodaccessible enough to be readily understood
2
![Page 3: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/3.jpg)
Transfusion PropertyTransfusion Property
After receiving a physician order for a lab testAfter receiving a physician order for a lab test
and before obtaining a blood specimen, theand before obtaining a blood specimen, the
nurse must verify that the specimen vial labelnurse must verify that the specimen vial label
is correct before labeling the vial.is correct before labeling the vial.
3
![Page 4: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/4.jpg)
Our ApproachOur Approach
•• Provides property templates that explicitlyProvides property templates that explicitlyshow subtle variations as optionsshow subtle variations as options
•• Extends property patternsExtends property patterns[Dwyer, [Dwyer, AvruninAvrunin, & Corbett 1998; 1999], & Corbett 1998; 1999]
•• Provides multiple views of the propertyProvides multiple views of the property
•• Views chosen to support precision,Views chosen to support precision,accessibility, and user guidanceaccessibility, and user guidance
•• User can work with one or more of the viewsUser can work with one or more of the views
•• Changes made in a view are reflected in the othersChanges made in a view are reflected in the others
•• ImplementedImplemented prototype tool, Propel prototype tool, Propel
4
![Page 5: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/5.jpg)
OutlineOutline
•• BackgroundBackground
•• Question Tree ViewQuestion Tree View
•• EvaluationEvaluation
5
![Page 6: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/6.jpg)
After receiving a physician order for a lab testAfter receiving a physician order for a lab test
and before obtaining a blood specimen, and before obtaining a blood specimen, thethe
nurse must verify that the specimen vial labelnurse must verify that the specimen vial label
is correct before labeling the vialis correct before labeling the vial..
Transfusion PropertyTransfusion Property
6
![Page 7: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/7.jpg)
After receiving a physician order for a lab testAfter receiving a physician order for a lab test
and before obtaining a blood specimen, and before obtaining a blood specimen, thethe
nurse must verify that the specimen vial labelnurse must verify that the specimen vial label
is correct before labeling the vialis correct before labeling the vial..
Transfusion PropertyTransfusion Property
7
Events:Events:
•• receive-orderreceive-order
•• obtain-specimenobtain-specimen
•• verify-labelverify-label
•• label-viallabel-vial
![Page 8: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/8.jpg)
After receiving a physician order for a lab testAfter receiving a physician order for a lab test
and before obtaining a blood specimen, and before obtaining a blood specimen, thethe
nurse must verify that the specimen vial labelnurse must verify that the specimen vial label
is correct before labeling the vialis correct before labeling the vial..
Transfusion PropertyTransfusion Property
8
Events:Events:
•• receive-orderreceive-order
•• obtain-specimenobtain-specimen
•• verify-labelverify-label
•• label-viallabel-vial
behaviorbehaviordescribes the restrictionsdescribes the restrictions
on occurrences of eventson occurrences of events
![Page 9: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/9.jpg)
After receiving a physician order for a lab testAfter receiving a physician order for a lab test
and before obtaining a blood specimenand before obtaining a blood specimen, , thethe
nurse must verify that the specimen vial labelnurse must verify that the specimen vial label
is correct before labeling the vialis correct before labeling the vial..
Transfusion PropertyTransfusion Property
9
Events:Events:
•• receive-orderreceive-order
•• obtain-specimenobtain-specimen
•• verify-labelverify-label
•• label-viallabel-vial
scopescope
describes the parts of thedescribes the parts of the
event sequences withinevent sequences within
which the behaviorwhich the behavior
restrictions applyrestrictions apply
behaviorbehaviordescribes the restrictionsdescribes the restrictions
on occurrences of eventson occurrences of events
![Page 10: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/10.jpg)
Two Property ViewsTwo Property Views
•• Precision: Finite-State Automaton (FSA)Precision: Finite-State Automaton (FSA)
template viewtemplate view
•• extends FSA notationextends FSA notation
•• Accessibility: Disciplined NaturalAccessibility: Disciplined Natural
Language (DNL) template viewLanguage (DNL) template view
•• based on natural languagebased on natural language
10
![Page 11: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/11.jpg)
Finite-State Automaton (FSA) TemplateFinite-State Automaton (FSA) Template
¬B
or
¬A
or
or
A
B
¬(A,B)
A
¬B
or
A
or
¬(A,B) ¬(A, B)
11
![Page 12: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/12.jpg)
Finite-State Automaton (FSA) TemplateFinite-State Automaton (FSA) Template
¬label-vial
or
¬verify-label
or
or
verify-label
label-vial
¬(verify-label, label-vial)
verify-label
¬label-vial
or
verify-label
or
¬(verify-label, label-vial)
¬(verify-label,
label-vial)
12
![Page 13: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/13.jpg)
Disciplined Natural Language (DNL)Disciplined Natural Language (DNL)
TemplateTemplatelabel-viallabel-vial cannot occur unless cannot occur unless verify-labelverify-label has already occurred. has already occurred.
Before the first Before the first verify-labelverify-label occurs, the events in the alphabet of this property, occurs, the events in the alphabet of this property,
other than other than label-viallabel-vial, can occur any number of times., can occur any number of times.
is not required to occur.is not required to occur.
label-viallabel-vial
AfterAfter verify-label verify-label occurs and before the first subsequent occurs and before the first subsequent label-viallabel-vial
occurs:occurs:
AfterAfter the first subsequent the first subsequent label-viallabel-vial occurs:occurs:
13
![Page 14: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/14.jpg)
Disciplined Natural Language (DNL)Disciplined Natural Language (DNL)
TemplateTemplatelabel-viallabel-vial cannot occur unless cannot occur unless verify-labelverify-label has already occurred. has already occurred.
label-viallabel-vial
Before the first Before the first verify-labelverify-label occurs, the events in the alphabet of this property, occurs, the events in the alphabet of this property,
other than other than label-viallabel-vial, can occur any number of times., can occur any number of times.
is not required to occur.is not required to occur.
verify-label is required to occur, but
verify-label is not required to occur, however
It is acceptable if verify-label does not occur, however
AfterAfter verify-label verify-label occurs and before the first subsequent occurs and before the first subsequent label-viallabel-vial
occurs:occurs:
AfterAfter the first subsequent the first subsequent label-viallabel-vial occurs:occurs:
14
![Page 15: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/15.jpg)
Propel TemplatesPropel Templates
Between startand end
After start
Before end
Global
SCOPES BEHAVIORS
A must occurExistence
A never occursAbsence
A enables BPrecedence
A results in BResponse
Name Name Intent
15
![Page 16: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/16.jpg)
Question Tree ViewQuestion Tree View
•• Problem: users need guidance to chooseProblem: users need guidance to choose
appropriate scope and behaviorappropriate scope and behavior
•• Question Tree View is designed to provideQuestion Tree View is designed to provide
this guidancethis guidance
•• One tree for scope and one for behaviorOne tree for scope and one for behavior
•• Question Trees are also useful forQuestion Trees are also useful for
resolving detailed optionsresolving detailed options
16
![Page 17: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/17.jpg)
Behavior Question TreeBehavior Question Tree•• How many events of primary interest are there?How many events of primary interest are there?
•• One eventOne event
•• Two eventsTwo events
17
![Page 18: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/18.jpg)
Behavior Question TreeBehavior Question Tree•• How many events of primary interest are there?How many events of primary interest are there?
•• One eventOne event
•• Two eventsTwo events
18
![Page 19: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/19.jpg)
Behavior Question TreeBehavior Question Tree•• How many events of primary interest are there?How many events of primary interest are there?
•• One eventOne event
•• Two eventsTwo events
•• verify-labelverify-label causes causes label-viallabel-vial to occur to occur
•• label-viallabel-vial cannot occur until after cannot occur until after
verify-labelverify-label has occurred has occurred
•• How do How do verify-labelverify-label and and label-viallabel-vial interact? interact?
19
![Page 20: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/20.jpg)
Behavior Question TreeBehavior Question Tree•• How many events of primary interest are there?How many events of primary interest are there?
•• One eventOne event
•• Two eventsTwo events
•• verify-labelverify-label causes causes label-viallabel-vial to occur to occur
•• label-viallabel-vial cannot occur until after cannot occur until after
verify-labelverify-label has occurred has occurred
•• How do How do verify-labelverify-label and and label-viallabel-vial interact? interact?
20
![Page 21: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/21.jpg)
Behavior Question TreeBehavior Question Tree•• How many events of primary interest are there?How many events of primary interest are there?
•• One eventOne event
•• Two eventsTwo events
•• Is Is verify-labelverify-label required to occur at least required to occur at least
once, whether or not once, whether or not label-viallabel-vial eventually eventually
occurs? occurs?
. . .. . .
•• verify-labelverify-label causes causes label-viallabel-vial to occur to occur
•• label-viallabel-vial cannot occur until after cannot occur until after
verify-labelverify-label has occurred has occurred
•• How do How do verify-labelverify-label and and label-viallabel-vial interact? interact?
21
![Page 22: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/22.jpg)
22
[insert Propel tool demo here]
![Page 23: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/23.jpg)
Example Completed BehaviorExample Completed Behavior
23
![Page 24: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/24.jpg)
EvaluationsEvaluations
•• Used Propel in four real-world caseUsed Propel in four real-world case
studiesstudies
•• Completed a small study to see how wellCompleted a small study to see how well
people understand the Disciplined Naturalpeople understand the Disciplined Natural
Language viewLanguage view
24
![Page 25: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/25.jpg)
Case StudiesCase Studies
•• Four medical safety case studiesFour medical safety case studies
•• Blood TransfusionBlood Transfusion ((UMass UMass School of Nursing)School of Nursing)
•• Chemotherapy (Chemotherapy (Baystate Baystate Medical Center)Medical Center)
•• Emergency Department (Emergency Department (Baystate Baystate Medical Center)Medical Center)
•• Blood Bank (Blood Bank (Defense Blood Standard System)Defense Blood Standard System)
•• ~80 properties total~80 properties total25
![Page 26: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/26.jpg)
Case Studies: MethodologyCase Studies: Methodology
•• Elicited properties Elicited properties from domain experts viafrom domain experts viainterviews or existing documentationinterviews or existing documentation
•• Elucidated property details:Elucidated property details:
•• For most properties, used Propel alongside domainFor most properties, used Propel alongside domainexpertsexperts
•• ForFor a few properties,a few properties, domain experts useddomain experts used PropelPropeldirectlydirectly
•• Domain experts reviewedDomain experts reviewed Propel propertyPropel propertyspecifications and worked with us to improvespecifications and worked with us to improvethemthem
26
![Page 27: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/27.jpg)
Case Studies: ObservationsCase Studies: Observations
•• Current implementation can express ~80%Current implementation can express ~80%
of the propertiesof the properties
•• Cannot yet express:Cannot yet express:
•• certain property compositionscertain property compositions
e.g., chaining (6), blocking (3), e.g., chaining (6), blocking (3), nested scopes (3)nested scopes (3)
•• event disjunction/conjunction (3)event disjunction/conjunction (3)
•• real-time properties (2)real-time properties (2)
27
![Page 28: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/28.jpg)
Case Studies: ObservationsCase Studies: Observations
•• Different distribution of behavior frequenciesDifferent distribution of behavior frequenciesthanthan in property patterns surveyin property patterns survey[Dwyer et al. 1999]
•• Roughly the same high percentage ofRoughly the same high percentage ofproperties are coveredproperties are covered
28
ExistenceExistence
AbsenceAbsence
PrecedencePrecedence
ResponseResponse
1%1%5%5%
1%1%15%15%
63%63%5%5%
21%21%44%44%
Case StudiesCase StudiesPattern SurveyPattern Survey
![Page 29: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/29.jpg)
Case Studies: ObservationsCase Studies: Observations
•• Different domain experts were comfortableDifferent domain experts were comfortablewith different property viewswith different property views
•• Asking domain experts to carefully specifyAsking domain experts to carefully specifysubtle detailssubtle details
•• made them aware of common interpretationmade them aware of common interpretationerrorserrors
•• heightened their awareness of safety hazards inheightened their awareness of safety hazards inpracticepractice
•• changed the language they usedchanged the language they used
•• prompted the creation of new propertiesprompted the creation of new properties
29
![Page 30: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/30.jpg)
Disciplined Natural LanguageDisciplined Natural Language
(DNL) Study(DNL) Study
•• Completed a small study to see if peopleCompleted a small study to see if peopleinterpret the DNL as we intendedinterpret the DNL as we intended
•• Selected a diverse sample of propertiesSelected a diverse sample of properties
•• Asked participants to translate DNL into Asked participants to translate DNL into FSAsFSAs
•• 14 participants: Computer Science graduate students14 participants: Computer Science graduate studentsand technical staffand technical staff
•• Gave each personGave each person 1 simple 1 simple ““trainingtraining”” property and 3 property and 3more complex propertiesmore complex properties
•• For each translated FSA, estimated howFor each translated FSA, estimated how““closelyclosely”” that FSA and the Propel FSA matched that FSA and the Propel FSA matched
30
![Page 31: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/31.jpg)
DNL Study: ObservationsDNL Study: Observations
•• Comparing translated Comparing translated FSAs FSAs to Propel to Propel FSAsFSAs::
•• It is difficult to clearly express Between scopeIt is difficult to clearly express Between scope’’ss
subtle details precisely in natural languagesubtle details precisely in natural language
•• Participants interpreted most of the DNL the wayParticipants interpreted most of the DNL the way
we intendedwe intended31
“close” match(incl. exact matches)
exact match
no Between-scope
FSAs (28)all FSAs (42)
40%
64%
57%
82%
![Page 32: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/32.jpg)
Related WorkRelated Work•• Requirements FormalismsRequirements Formalisms
e.g. Graphical or tabular approachese.g. Graphical or tabular approaches
•• Processing Natural Language (NL) forProcessing Natural Language (NL) forRequirements EngineeringRequirements Engineering
e.g. Fuchs, e.g. Fuchs, SchwertelSchwertel, & , & SchwitterSchwitter, 1998;, 1998;
Gervasi Gervasi & & ZowghiZowghi, 2005;, 2005;
Breaux, Vail, & Anton, 2006;Breaux, Vail, & Anton, 2006;
Gervasi Gervasi & & AmbriolaAmbriola, 2006, 2006
•• Using brief NL notes alongside formal modelsUsing brief NL notes alongside formal models
e.g. Dwyer, e.g. Dwyer, AvruninAvrunin, & Corbett, 1999;, & Corbett, 1999;
DrusinskyDrusinsky, 2004;, 2004;
Mondragon Mondragon & Gates, 2004& Gates, 2004
•• Developing NL and formal model in parallelDeveloping NL and formal model in parallele.g. e.g. Konrad Konrad & Cheng, 2005& Cheng, 2005
32
![Page 33: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/33.jpg)
Future WorkFuture Work
•• Address gaps in Propel Address gaps in Propel expressibilityexpressibility
•• Support both state- and event-basedSupport both state- and event-basedpropertiesproperties
•• SupportSupport property compositionsproperty compositions
•• Provide guidance for how to decompose aProvide guidance for how to decompose aproperty into a behavior and a scopeproperty into a behavior and a scope
•• Perform more in-depth evaluations ofPerform more in-depth evaluations ofPropelPropel
33
![Page 34: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/34.jpg)
SummarySummary
•• Case studies are ongoingCase studies are ongoing
•• Now ~100 propertiesNow ~100 properties
•• Initial findings are very promisingInitial findings are very promising
•• Good coverage of encountered propertiesGood coverage of encountered properties
•• Propel property specifications providePropel property specifications provide
precision and appear to be reasonablyprecision and appear to be reasonably
accessibleaccessible
•• Domain expertsDomain experts’’ responses are very positive responses are very positive
34
![Page 35: User Guidance for Creating Precise and Accessible Property ...laser.cs.umass.edu/techreports/06-27slides.pdf · ¥Implemented prototype tool, Propel 4. Outline ¥Background ¥Question](https://reader034.vdocument.in/reader034/viewer/2022043017/5f399d4f30dbb528c30cd4fc/html5/thumbnails/35.jpg)
Thanks!Thanks!
35