Text Categorization Approach for Secure Design Pattern Selection Using Software Requirement Specification

作     者：Ali, Ishfaq Asif, Muhammad Shahbaz, Muhammad Khalid, Adnan Rehman, Mariam Guergachi, Aziz 

作者机构：Natl Text Univ Dept Comp Sci Faisalabad 37610 Pakistan Univ Engn & Technol Dept Comp Sci & Engn Lahore 54890 Pakistan Govt Coll Univ Dept Comp Sci Lahore 54600 Pakistan Govt Coll Univ Dept Informat Technol Faisalabad 38000 Pakistan Ryerson Univ Ted Rogers Sch Management Toronto ON M5B 2K3 Canada 

出 版 物：《IEEE ACCESS》 (IEEE Access)

年 卷 期：2018年第6卷

页      面：73928-73939页

核心收录：

基　　金：NSERC CFI 

主　　题：Design pattern security corpus text categorization SVD SVM 

摘      要：Secure patterns provide a solution for the security requirement of the software. There are large number of secure patterns, and it is quite difficult to choose an appropriate pattern. Moreover, selection of these patterns needs security knowledge;generally, developers are not specialized in the domain of security knowledge. This paper can help in the selection of secure pattern on the basis of tradeoffs of the secure pattern using text categorization. A repository of secure design patterns is used as a data set and a repository of requirements artifacts in the form of software requirements specification (SRS) are used for this paper. A text categorization scheme, which begins with preprocessing, indexing of secure patterns, ends up by querying SRS features for retrieving secure design pattern using document retrieval model. For the evaluation of the proposed model, we have used three different domains SRS. These three SRS documents represent three different domains, i.e., e-commerce, social media, and desktop utility program. A traditional precision and recall method along with F-measure used for evaluation of information/document retrieval model is used to evaluate the results. F-measure for 17 different design problems shows around 81% accuracy with recall up to 0.69%.