SEC 308 Yazılım Mühendisliği SEC 308 Yazılım Mühendisliği Software Requirements 1

Requirements Engineering Process: A Basic Framework 0 3 fundamental activities: understand, (formally) describe, attain an agreement on, the problem 2 User Problem Domain Elicitation Specification Validation Domain knowledge User reqs User feedback Req. models Val. result knowledge For more knowledge (domain experts, laws, standards, policies, documents, etc.)

Requirements Engineering 0 Inception—ask a set of questions that establish … 0 basic understanding of the problem 0 the people who want a solution 0 the nature of the solution that is desired, and 0 the effectiveness of preliminary communication and collaboration between the customer and the developer 0 Elicitation—elicit requirements from all stakeholders 0 Elaboration—create an analysis model that identifies data, function and behavioral requirements 0 Negotiation—agree on a deliverable system that is realistic for developers and customers 3

Requirements Engineering (cont.) 0 Specification—can be any one (or more) of the following: 0 A written document 0 A set of models 0 A formal mathematical 0 A collection of user scenarios (use-cases) 0 A prototype 0 Validation—a review mechanism that looks for 0 errors in content or interpretation 0 areas where clarification may be required 0 missing information 0 inconsistencies (a major problem when large products or systems are engineered) 0 conflicting or unrealistic (unachievable) requirements. 0 Requirements management 4

Inception 0 Identify stakeholders 0 “who else do you think I should talk to?” 0 Recognize multiple points of view 0 Work toward collaboration 0 The first questions 0 Who is behind the request for this work? 0 Who will use the solution? 0 What will be the economic benefit of a successful solution 0 Is there another source for the solution that you need? 5

Eliciting Requirements 0 meetings are conducted and attended by both software engineers and customers 0 rules for preparation and participation are established 0 an agenda is suggested 0 a "facilitator" (can be a customer, a developer, or an outsider) controls the meeting 0 a "definition mechanism" (can be work sheets, flip charts, or wall stickers or an electronic bulletin board, chat room or virtual forum) is used 0 the goal is 0 to identify the problem 0 propose elements of the solution 0 negotiate different approaches, and 0 specify a preliminary set of solution requirements 6

Eliciting Requirements (cont.) 7

Quality Function Deployment 0 Function deployment determines the “value” (as perceived by the customer) of each function required of the system 0 Information deployment identifies data objects and events 0 Task deployment examines the behavior of the system 0 Value analysis determines the relative priority of requirements 8

Elicitation Work Products 0 a statement of need and feasibility. 0 a bounded statement of scope for the system or product. 0 a list of customers, users, and other stakeholders who participated in requirements elicitation 0 a description of the system’s technical environment. 0 a list of requirements (preferably organized by function) and the domain constraints that apply to each. 0 a set of usage scenarios that provide insight into the use of the system or product under different operating conditions. 0 any prototypes developed to better define requirements. 9

Building Analysis Model 0 Elements of the analysis model 0 Scenario-based elements 0 Functional—processing narratives for software functions 0 Use-case—descriptions of the interaction between an “actor” and the system 0 Class-based elements 0 Implied by scenarios 0 Behavioral elements 0 State diagram 0 Flow-oriented elements 0 Data flow diagram 10

Diagrams (Use Case, Class, State) 11 Reading Commands System status = “ready” Display msg = “enter cmd” Display status = steady Entry/subsystems ready Do: poll user input panel Do: read user input Do: interpret user input State name State variables State activities

Negotiating Requirements 0 Identify the key stakeholders 0 These are the people who will be involved in the negotiation 0 Determine each of the stakeholders “win conditions” 0 Win conditions are not always obvious 0 Negotiate 0 Work toward a set of requirements that lead to “win-win” 12

Validating Requirements 0 Is each requirement consistent with the overall objective for the system/product? 0 Have all requirements been specified at the proper level of abstraction? That is, do some requirements provide a level of technical detail that is inappropriate at this stage? 0 Is the requirement really necessary or does it represent an add-on feature that may not be essential to the objective of the system? 0 Is each requirement bounded and unambiguous? 0 Does each requirement have attribution? That is, is a source (generally, a specific individual) noted for each requirement? 0 Do any requirements conflict with other requirements? 13

Validating Requirements (cont.) 0 Is each requirement achievable in the technical environment that will house the system or product? 0 Is each requirement testable, once implemented? 0 Does the requirements model properly reflect the information, function and behavior of the system to be built. 0 Has the requirements model been “partitioned” in a way that exposes progressively more detailed information about the system. 0 Have requirements patterns been used to simplify the requirements model. Have all patterns been properly validated? Are all patterns consistent with customer requirements? 14

Requirements Analysis 0 Requirements analysis 0 specifies software’s operational characteristics 0 indicates software's interface with other system elements 0 establishes constraints that software must meet 0 Requirements analysis allows the software engineer (called an analyst or modeler in this role) to: 0 elaborate on basic requirements established during earlier requirement engineering tasks 0 build models that depict user scenarios, functional activities, problem classes and their relationships, system and class behavior, and the flow of data as it is transformed. 15

Requirements Modeling Strategies One view of requirements modeling, called structured analysis, considers data and the processes that transform the data as separate entities. – Data objects are modeled in a way that defines their attributes and relationships. – Processes that manipulate data objects are modeled in a manner that shows how they transform data as data objects flow through the system. A second approach to analysis modeled, called object-oriented analysis, focuses on – the definition of classes and – the manner in which they collaborate with one another to effect customer requirements. 16

Domain Analysis 0 Define the domain to be investigated. 0 Collect a representative sample of applications in the domain. 0 Analyze each application in the sample. 0 Develop an analysis model for the objects. 0 In terms of data modeling, function/process modeling, behavioral modeling, etc. 17

Building the Analysis Model 0 Elements of the analysis model 0 Scenario-based elements 0 Functional—processing narratives for software functions 0 Use-case—descriptions of the interaction between an “actor” and the system 0 Class-based elements 0 Implied by scenarios 0 Behavioral elements 0 State diagram 0 Flow-oriented elements 0 Data flow diagram 18 A Bridge

Elements of Analysis Model 19

Data Modeling 0 examines data objects independently of processing 0 focuses attention on the data domain 0 creates a model at the customer’s level of abstraction 0 indicates how data objects relate to one another 20

What is a Data Object? 0 Object-something that is described by a set of attributes (data items) and that will be manipulated within the software (system) 0 each instance of an object (e.g., a book) can be identified uniquely (e.g., ISBN #) 0 each plays a necessary role in the system i.e., the system could not function without access to instances of the object 0 each is described by attributes that are themselves data items 21 object: automobile attributes: make make model model body type body type price price options code options code

What is a Relationship? 0 Data objects are connected to one another in different ways. 0 A connection is established between person and car because the two objects are related. 0 A person owns a car 0 A person is insured to drive a car 0 The relationships owns and insured to drive define the relevant connections between person and car. 0 Several instances of a relationship can exist 0 Objects can be related in many different ways 22

Entity-Relationship Diagrams 0 Entity-Relationship Diagram (ERD) is a detailed logical representation of data for an organization and uses three main constructs. 23

Entity-Relationship Diagrams 0 Entities: Fundamental thing about which data may be maintained. Each entity has its own identity. 0 Entity Type is the description of all entities to which a common definition and common relationships and attributes apply. 24 Consider an insurance company that offers both home and automobile insurance policies.These policies are offered to individuals and businesses.

Entity-Relationship Diagrams Relationships: A relationship is a reason for associating two entity types. – Binary relationships  involve two entity types – A CUSTOMER is insured by a POLICY. A POLICY CLAIM is made against a POLICY. Relationships are represented by diamond notation in a ER diagram. 25

Entity-Relationship Diagrams 26

Entity-Relationship Diagrams 0 Cardinality defines “the maximum number of objects that can participate in a relationship”[TIL93]. 0 Two entity types A and B, connected by a relationship. The cardinality of a relationship is the number of instances of entity B that can be associated with each instance of entity A 0 Modality specifies if the relationship is optional (0) or mandatory (1). 27

Entity-Relationship Diagrams Attributes: An attribute is a property or characteristic of an entity that is of interest to organization. Each entity type has a set of attributes associated with it. 28

ERD Notation 29 (0, m) (1, 1) object object relationship 1 2 One common form: (0, m) (1, 1) object 1 2 relationship Another common form: attribute

Building an ERD 0 Level 1—model all data objects (entities) and their “connections” to one another 0 Level 2—model all entities and relationships 0 Level 3—model all entities, relationships, and the attributes that provide further depth 30

The ERD: An Example 31 (1,1) (1,m) places Customer request for service generates (1,n) (1,1) work order work tasks materials consists of lists (1,1) (1,w) (1,1) (1,i) selected from standard task table (1,w) (1,1)

Scenario-Based Modeling 0 Use-Cases 0 “[Use-cases] are simply an aid to defining what exists outside the system (actors) and what should be performed by the system (use-cases).” 0 a scenario that describes a “thread of usage” for a system 0 actors represent roles people or devices play as the system functions 0 users can play a number of different roles for a given scenario 32

What to Write About? 0 Inception and elicitation—provide you with the information you’ll need to begin writing use cases. 0 Requirements gathering meetings, QFD, and other requirements engineering mechanisms are used to 0 identify stakeholders 0 define the scope of the problem 0 specify overall operational goals 0 establish priorities 0 outline all known functional requirements, and 0 describe the things (objects) that will be manipulated by the system. 0 To begin developing a set of use cases, list the functions or activities performed by a specific actor. 33

Developing a Use-Case 0 Each scenario is described from the point-of-view of an “actor”—a person or device that interacts with the software in some way 0 Each scenario answers the following questions: 0 Who is the primary actor, the secondary actor (s)? 0 What are the actor’s goals? 0 What preconditions should exist before the story begins? 0 What main tasks or functions are performed by the actor? 0 What extensions might be considered as the story is described? 0 What variations in the actor’s interaction are possible? 0 What system information will the actor acquire, produce, or change? 0 Will the actor have to inform the system about changes in the external environment? 0 What information does the actor desire from the system? 0 Does the actor wish to be informed about unexpected changes? 34

Use-Case Diagram 35 Use-case diagram for surveillance function

Alternative Actions 0 Can the actor take some other action at this point? 0 Is it possible that the actor will encounter some error condition at this point? 0 Is it possible that the actor will encounter behavior invoked by some event outside the actor’s control? 36

Activity Diagram 37 Supplements the use case by providing a graphical representation of the flow of interaction within a specific scenario

Swimlane Diagrams 38 Allows the modeler to represent the flow of activities described by the use-case and at the same time indicate which actor (if there are multiple actors involved in a specific use-case) or analysis class has responsibility for the action described by an activity rectangle

Flow-Oriented Modeling 0 Represents how data objects are transformed as they move through the system 0 A data flow diagram (DFD) is the diagrammatic form that is used 0 Considered by many to be an ‘old school’ approach, flow-oriented modeling continues to provide a view of the system that is unique—it should be used to supplement other analysis model elements 0 Every computer-based system is an information transform computer based system input output

Flow Modeling Notation 40 external entity process data flow data store

External Entity 41 A producer or consumer of data Examples: a person, a device, a sensor Another example: computer-based system Data must always originate somewhere and must always be sent to something

Process 42 A data transformer (changes input to output) Examples: compute taxes, determine area, format report, display graph Data must always be processed in some way to achieve system function

Data Flow 43 compute triangle area base height area Data flows through a system, beginning as input and be transformed into output.

Data Stores 44 Data is often stored for later use. look-up sensor data sensor # report required sensor #, type, location, age sensor data sensor number type, location, age

Data Flow Diagramming: Guidelines 0 all icons must be labeled with meaningful names 0 the DFD evolves through a number of levels of detail 0 always begin with a context level diagram (also called level 0) 0 always show external entities at level 0 0 always label data flow arrows 0 do not represent procedural logic 45

Constructing a DFD—I review the data model to isolate data objects and use a grammatical parse to determine “operations” determine external entities (producers and consumers of data) create a level 0 DFD Level 0 DFD Example 46 user processing request video source NTSC video signal digital video processor requested video l signa l monitor

Constructing a DFD—II 0 write a narrative describing the transform 0 parse to determine next level transforms 0 “balance” the flow to maintain data flow continuity 0 develop a level 1 DFD 0 use a 1:5 (approx.) expansion ratio 47

The Data Flow Hierarchy 48 P a b xy p1 p2 p3 p4 5 a b c d e f g level 0 level 1

Example: SafeHome Software 49 Level 0 DFD for SafeHome security function

50 Level 1 DFD for SafeHome security function

51 Level 2 DFD that refines the monitor sensors process

Flow Modeling Notes 0 each bubble is refined until it does just one thing 0 the expansion ratio decreases as the number of levels increase 0 most systems require between 3 and 7 levels for an adequate flow model 0 a single data flow item (arrow) may be expanded as levels increase (data dictionary provides information) 52

Process Specification (PSPEC) 53 PSPEC narrative pseudocode (PDL) equations tables diagrams and/or charts bubble

DFDs: A Look Ahead 54 Maps into analysis model design model

Control Flow Diagrams 0 Represents “events” and the processes that manage events 0 An “event” is a Boolean condition that can be ascertained by: 0 listing all sensors that are "read" by the software. 0 listing all interrupt conditions. 0 listing all "switches" that are actuated by an operator. 0 listing all data conditions. 0 recalling the noun/verb parse that was applied to the processing narrative, review all "control items" as possible CSPEC inputs/outputs. 55

The Control Model the control flow diagram is "superimposed" on the DFD and shows events that control the processes noted in the DFD control flows—events and control items—are noted by dashed arrows a vertical bar implies an input to or output from a control spec (CSPEC) — a separate specification that describes how control is handled a dashed arrow entering a vertical bar is an input to the CSPEC a dashed arrow leaving a process implies a data condition a dashed arrow entering a process implies a control input read directly by the process control flows do not physically activate/deactivate the processes—this is done via the CSPEC 56

Control Flow Diagram 57 read operator input create user displays perform problem diagnosis reload process manage copying beeper on/off start copies done display panel enabled full problem light jammed empty

Control Flow Diagram 58 State diagram for SafeHome security function

Flow-Oriented Modeling 59 The CSPEC can be: state diagram (sequential spec) state transition table decision tables activation tables combinatorial spec

Class-Based Modeling Class-based modeling represents: – objects that the system will manipulate – operations (also called methods or services) that will be applied to the objects to effect the manipulation – relationships (some hierarchical) between the objects – collaborations that occur between the classes that are defined. The elements of a class-based model include classes and objects, attributes, operations, CRC models, collaboration diagrams and packages. 60

Class-Based Modeling Identify analysis classes by examining the problem statement Use a “grammatical parse” to isolate potential classes [Abb83] Identify the attributes of each class Identify operations that manipulate the attributes Potential classes 61 –retained information –needed services –multiple attributes –common attributes –common operations –essential requirements

Analysis Classes 0 External entities (e.g., other systems, devices, people) that produce or consume information to be used by a computer-based system. 0 Things (e.g., reports, displays, letters, signals) that are part of the information domain for the problem. 0 Occurrences or events (e.g., a property transfer or the completion of a series of robot movements) that occur within the context of system operation. 0 Roles (e.g., manager, engineer, salesperson) played by people who interact with the system. 0 Organizational units (e.g., division, group, team) that are relevant to an application. 0 Places (e.g., manufacturing floor or loading dock) that establish the context of the problem and the overall function of the system. 0 Structures (e.g., sensors, four-wheeled vehicles, or computers) that define a class of objects or related classes of objects. 62

Class Diagram 63 Class name attributes operations Class diagram for the system class

Class Diagram 64 Class diagram for FloorPlan

CRC Modeling 0 Class-responsibility-collaborator (CRC) modeling [Wir90] provides a simple means for identifying and organizing the classes that are relevant to system or product requirements. Ambler [Amb95] describes CRC modeling in the following way: 0 A CRC model is really a collection of standard index cards that represent classes. The cards are divided into three sections. Along the top of the card you write the name of the class. In the body of the card you list the class responsibilities on the left and the collaborators on the right. 65

CRC Modeling 66 A CRC model index card for FloorPlan class

Class Types 0 Entity classes, also called model or business classes, are extracted directly from the statement of the problem (e.g., FloorPlan and Sensor). 0 Boundary classes are used to create the interface (e.g., interactive screen or printed reports) that the user sees and interacts with as the software is used. 0 Controller classes manage a “unit of work” [UML03] from start to finish. That is, controller classes can be designed to manage 0 the creation or update of entity objects; 0 the instantiation of boundary objects as they obtain information from entity objects; 0 complex communication between sets of objects; 0 validation of data communicated between objects or between the user and the application. 67

Responsibilities 0 System intelligence should be distributed across classes to best address the needs of the problem 0 Each responsibility should be stated as generally as possible 0 Information and the behavior related to it should reside within the same class 0 Information about one thing should be localized with a single class, not distributed across multiple classes. 0 Responsibilities should be shared among related classes, when appropriate. 68

Collaborations 0 Classes fulfill their responsibilities in one of two ways: 0 A class can use its own operations to manipulate its own attributes, thereby fulfilling a particular responsibility, or 0 a class can collaborate with other classes. 0 Collaborations identify relationships between classes 0 Collaborations are identified by determining whether a class can fulfill each responsibility itself 0 three different generic relationships between classes [WIR90]: 0 the is-part-of relationship 0 the has-knowledge-of relationship 0 the depends-upon relationship 69

Composite Aggregate Class 70

Associations and Dependencies 0 Two analysis classes are often related to one another in some fashion 0 In UML these relationships are called associations 0 Associations can be refined by indicating multiplicity (the term cardinality is used in data modeling) 0 In many instances, a client-server relationship exists between two analysis classes. 0 In such cases, a client-class depends on the server-class in some way and a dependency relationship is established 71

Class Diagrams 72 Top: Multiplicity Bottom: Dependencies

Analysis Packages 0 Various elements of the analysis model (e.g., use-cases, analysis classes) are categorized in a manner that packages them as a grouping 0 The plus sign preceding the analysis class name in each package indicates that the classes have public visibility and are therefore accessible from other packages. 0 Other symbols can precede an element within a package. A minus sign indicates that an element is hidden from all other packages and a # symbol indicates that an element is accessible only to packages contained within a given package. 73

Analysis Packages 74

Behavioral Modeling 0 The behavioral model indicates how software will respond to external events or stimuli. To create the model, the analyst must perform the following steps: 0 Evaluate all use-cases to fully understand the sequence of interaction within the system. 0 Identify events that drive the interaction sequence and understand how these events relate to specific objects. 0 Create a sequence for each use-case. 0 Build a state diagram for the system. 0 Review the behavioral model to verify accuracy and consistency. 75

State Representations In the context of behavioral modeling, two different characterizations of states must be considered: – the state of each class as the system performs its function and – the state of the system as observed from the outside as the system performs its function The state of a class takes on both passive and active characteristics [CHA93]. – A passive state is simply the current status of all of an object’s attributes. – The active state of an object indicates the current status of the object as it undergoes a continuing transformation or process 76

State Diagram 77 State diagram for the ControlPanel class

The States of a System 0 state—a set of observable circumstances that characterizes the behavior of a system at a given time 0 state transition—the movement from one state to another 0 event—an occurrence that causes the system to exhibit some predictable form of behavior 0 action—process that occurs as a consequence of making a transition 78

Behavioral Modeling 0 make a list of the different states of a system (How does the system behave?) 0 indicate how the system makes a transition from one state to another (How does the system change state?) 0 indicate event 0 indicate action 0 draw a state diagram or a sequence diagram 79

Sequence Diagram 80 Sequence diagram (partial) for the SafeHome security function

Requirements Documentation 0 This is the way of representing requirements in a consistent format 0 called Software Requirements Specifications (SRS) document 0 SRS serves many purposes depending upon who is writing it. 0 written by customer and/or developer 0 Serves as contract between customer & developer. 0 SRS Should 0 Correctly define all requirements 0 not describe any design details 0 not impose any additional constraints 81

Requirements Documentation 0 Characteristics of a good SRS 0 Correct : An SRS is correct if and only if every requirement stated therein is one that the software shall meet. 0 Unambiguous : An SRS is unambiguous if and only if, every requirement stated therein has only one interpretation. 0 Complete : An SRS is complete if and only if, it includes the following elements 0 All significant requirements, whether related to functionality, performance, design constraints, attributes or external interfaces. 0 Responses to both valid & invalid inputs. 0 Full Label and references to all figures, tables and diagrams in the SRS and definition of all terms and units of measure. 82

Requirements Documentation (cont.) 0 Characteristics of a good SRS (continued) 0 Consistent : An SRS is consistent if and only if, no subset of individual requirements described in it conflict. 0 Ranked for important and/or stability : If an identifier is attached to every requirement to indicate either the importance or stability of that particular requirement. 0 Verifiable : An SRS is verifiable, if and only if, every requirement stated therein is verifiable. 83

Requirements Documentation (cont.) Characteristics of a good SRS (continued) – Modifiable : An SRS is modifiable, if and only if, its structure and style are such that any changes to the requirements can be made easily, completely, and consistently while retaining structure and style. – Traceable : An SRS is traceable, if the origin of each of the requirements is clear and if it facilitates the referencing of each requirement in future development or enhancement documentation. 84

Requirements Documentation Organization of the SRS – IEEE has published guidelines and standards to organize an SRS. 1. Introduction 1.1 Purpose 1.2 Scope 1.3 Definition, Acronyms and abbreviations 1.4 References 1.5 Overview 85

Requirements Documentation 2. The Overall Description 2.1 Product Perspective2.2 Product Functions System Interfaces2.3 User Characteristics Interfaces2.4 Constraints Hardware Interfaces2.5 Assumptions for dependencies Software Interfaces2.6 Apportioning of requirements Communication Interfaces Memory Constraints Operations Site Adaptation Requirements 86

Requirements Documentation 3. Specific Requirements 3.1 External Interfaces 3.2 Functions 3.3 Performance requirements 3.4 Logical database requirements 3.5 Design Constraints 3.6 Software System attributes 3.7 Organization of specific requirements 3.8 Additional Comments. 87

Writing the Software Specification Everyone knew exactly what had to be done until someone wrote it down!

Specification Guidelines 89

Specification Guidelines 90

Specification Guidelines 91