Enhancing Security Requirements Engineering by Organisational Learning

More and more software projects today are security-related in one way or the other. Requirements engineers often fail to recognise indicators for security problems which is a major source of security problems in practice. Identifying security-relevant requirements is labour-intensive and errorprone. In order to facilitate the security requirements elicitation process, we present an approach supporting organisational learning on security requirements by establishing company-wide experience resources, and a socio-technical network to benefit from them. The approach is based on modelling the flow of requirements and related experiences. Based on those models, we enable people to exchange experiences about security-requirements while they write and discuss project requirements. At the same time, the approach enables participating stakeholders to learn while they write requirements. This can increase security awareness and facilitate learning on both individual and organisational levels. As a basis for our approach, we introduce heuristic assistant tools which support reuse of existing security-related experiences. In particular, they include Bayesian classifiers which issue a warning automatically when new requirements seem to be security-relevant. Our results indicate that this is feasible, in particular if the classifier is trained with domain specific data and documents from previous projects. We show how the ability to identify security-relevant requirements can be improved using this approach. We illustrate our approach by providing a step-by-step example of how we improved the security requirements engineering process at the European Telecommunications Standards Institute (ETSI) and report on experiences made in this application.

HIV positive men as fathers: Accounts of displacement, ir/responsibility and paternal emergence

It is now apparent that socio-cultural constructions of masculinity variously impact men’s experiences of their HIV positive status, yet how being a father can feature in this mix remains under-researched. This study employed in-depth semi-structured interviews and Foucauldian-informed discourse analysis to explore the accounts of six self-identifying heterosexual fathers (four black African migrants, two white European) who had been living with HIV from five to 24 years. While the HIV-related literature calls for the need to subvert ‘traditional’ expressions of masculinity as a means of promoting HIV prevention and HIV health, we argue that the lived experience for HIV positive men as fathers is more socially, discursively and thus more psychologically nuanced. We illustrate this by highlighting ways in which HIV positive men as fathers are not simply making sense of themselves as a HIV positive man for whom the modern (new) man and father positions are useful strategies for adapting to HIV and combating associated stigma. Discourses of modern and patriarchal fatherhoods, a gender-specific discourse of irresponsibility, and the neoliberal conflation of heath and self-responsibility are also at work in the sense making frames that HIV positive men, who are also fathers, can variously deploy. Our analysis shows how this discursive mix can underpin possibilities of often conflicted meaning and identity when living as a man and father with HIV in the UK, and specifically how discourses of fatherhood and HIV ‘positive’ health can complicate these men’s expressions and inhabitations of masculinity.

Refugee crisis and re-emergence of forgotten infections in Europe

Makeshift shelters are becoming increasingly evident in European cities as a consequence of the momentous influx of refugees seeking asylum in European countries. These individuals have endured long gruelling journeys to reach their target countries, often having to have survived appalling living conditions (figure 1a). One of the routes chosen by migrants is that from East Africa, through Sudan and Libya before reaching North Africa and eventually Europe (see figure 1b). Not unsurprisingly, this has led to the introduction of infectious diseases rarely encountered in developed nations, most notably louse-borne relapsing fever (LBRF).