Dirk Riehle's Industry and Research Publications

Category: 2. Building Products

  • The benefits of pre-requirements specification traceability [RE 2022]

    The benefits of pre-requirements specification traceability [RE 2022]

    Abstract: Requirements traceability is the ability to trace requirements to other software engineering artifacts. Traceability can be classified as either pre- or post-requirements specifications (RS) traceability. Pre-RS traceability is the ability to trace between requirements and their origin. However, the benefits of pre-RS traceability are often not clear. In this article, we systematically lay out…

  • Will open source become the default way of developing software?

    Will open source become the default way of developing software?

    Someone on the internet said that open source will become the default way of developing software. This begs the question: What is open source software development? What about other forms of development? And why would open source be the default way? Open source software development There is no one way of developing open source software.…

  • Who to blame for the log4j vulnerability?

    Who to blame for the log4j vulnerability?

    So far, nobody. Not the open source developers, who responded fast and professionally, and not the companies who handled the risk within a day or two. Eventually, however, we will have to blame (or complain) about those companies who got cracked because they did not remove the vulnerability in time. Now, why would a company…

  • Calculating the costs of inner source collaboration by computing the time worked [HICSS 2022]

    Calculating the costs of inner source collaboration by computing the time worked [HICSS 2022]

    Abstract: A key part of taxation, controlling, and management of international collaborative programming workflows is determining the costs of a supplied software artifact. The OECD suggests the use of the Cost Plus method for calculating these costs. However, in the past, this method has been implemented using only coarse-grain data from the costs of whole…

  • A validation of QDAcity‑RE for domain modeling using qualitative data analysis [RE Journal]

    A validation of QDAcity‑RE for domain modeling using qualitative data analysis [RE Journal]

    Abstract: Using qualitative data analysis (QDA) to perform domain analysis and modeling has shown great promise. Yet, the evaluation of such approaches has been limited to single-case case studies. While these exploratory cases are valuable for an initial assessment, the evaluation of the efficacy of QDA to solve the suggested problems is restricted by the…

  • Upcoming talk on establishing open source license compliance using continuous integration

    Upcoming talk on establishing open source license compliance using continuous integration

    Philippe Ombredanne, lead maintainer of ScanCode, will give a talk on open source license compliance, injected into my own lecture series on commercial open source software, both organized by CROSS, the Center for Research on Open Source Software at UC Santa Cruz. Abstract Open source has changed deeply how projects and products are created; they…