Enhancing Security Requirements Engineering by Organisational Learning

More and more software projects today are security-related in one way or the other. Requirements engineers often fail to recognise indicators for security problems which is a major source of security problems in practice. Identifying security-relevant requirements is labour-intensive and errorprone. In order to facilitate the security requirements elicitation process, we present an approach supporting organisational learning on security requirements by establishing company-wide experience resources, and a socio-technical network to benefit from them. The approach is based on modelling the flow of requirements and related experiences. Based on those models, we enable people to exchange experiences about security-requirements while they write and discuss project requirements. At the same time, the approach enables participating stakeholders to learn while they write requirements. This can increase security awareness and facilitate learning on both individual and organisational levels. As a basis for our approach, we introduce heuristic assistant tools which support reuse of existing security-related experiences. In particular, they include Bayesian classifiers which issue a warning automatically when new requirements seem to be security-relevant. Our results indicate that this is feasible, in particular if the classifier is trained with domain specific data and documents from previous projects. We show how the ability to identify security-relevant requirements can be improved using this approach. We illustrate our approach by providing a step-by-step example of how we improved the security requirements engineering process at the European Telecommunications Standards Institute (ETSI) and report on experiences made in this application.

Developmental Antecedents of Proactive and Reactive Rebelliousness: The Role of Parenting Style, Childhood Adversity, and Attachment

Adolescence is a time of developmental transition that for one in five young people is characterised by feelings of oppositionality, rebellion, and negativism. Despite the prevalent experience of teen turbulence and despite its significance within the phenomenological framework provided by reversal theory (RT), the childhood antecedents of rebelliousness in adolescence and adulthood have not been given extensive empirical attention within RT, although such work has been carried out using other constructs and theories. We examined recalled parenting style, childhood adversity, and attachment style in adulthood as correlates of proactive and reactive rebelliousness in a sample of 80 participants, aged 18 to 50 years. Each participant responded to a questionnaire package containing the revised Adult Attachment Scale, the Parental Bonding Instrument, the Childhood Experience of Care and Abuse Questionnaire, and the Negativism Dominance Scale. We found that paternal abusive parenting, followed by paternal parenting style, paternal neglect, and paternal antipathy were independently predictive of scores on proactive rebelliousness, the sensation-seeking form. Maternal and paternal indifferent parenting styles each were found to equivalently and independently predict scores on reactive rebelliousness, the interpersonal disaffection form. The results of this study suggest these two forms of rebelliousness may have distinctly different antecedents. A longitudinal study is needed to examine the potentially causal pathways that are suggested by the results of this cross-sectional research. We consider reversal theory explanations of these results and contrast them with complementary theoretical frameworks.

Emotional Responses to Disfigured Faces: The Influences of Perceived Anonymity, Empathy, and Disgust Sensitivity

Two experiments investigated self-reported emotional reactions to photographs of people with attractive, unattractive or structurally disfigured faces. In Experiment 1 participants viewing disfigured faces reported raised levels of sorrow and curiosity but not raised levels of negative emotions. In Experiment 2 there was more negative emotion and less positive emotion reported under conditions of relatively high anonymity, compared to low anonymity, specific to disfigured faces, suggesting that self-reports are influenced by social desirability. Trait empathy was associated with sorrow and negative emotions when viewing disfigured faces. Disgust sensitivity was associated with negative emotions and inversely associated with positive emotions.

‘Not like rose-tinted glasses… like taking a pair of dirty glasses off’: A pilot intervention using positive emotions in expressive writing

Studies conducted in various contexts and with varied populations have found expressive writing enhances physical and psychological wellbeing. This pilot intervention study countered the predominantly quantitative evidence by adopting a qualitative methodology, exploring the experience of using positive emotions in expressive writing. Participants (n = 10), who all had previous experience in expressive writing, were asked to select one of ten positive emotion cards (PECs) each day for three days. Participants were then asked to write expressively through the ‘lens’ of their chosen emotion. Semi-structured interviews were conducted and experiences were evaluated using Thematic Analysis. The results identified two main themes that compared the experience of expressive writing both with and without the PECs. The first theme, Processing (without the PECs) contained three sub-themes: sense of relief, habitual perspective and reactive to experience. The second main theme, Progressing (with the PECs) contained three different sub-themes: sense of direction, changed perspective and interactive with experience. This study found that, for expressive writers, positive emotions may function in three ways: to relate to others or self-expand, to move past challenges cognitively or change unconstructive perspectives, and finally as a way to interactively link or ‘bridge’ from the written subject matter to constructive action, thus breaking cycles of reactive writing and rumination. Implications of the study on the practice of expressive writing and its potential as a positive psychology intervention (PPI) are discussed.

An Empirical Evaluation of the Reversal Theory State Measure Using Three Running Brand Video Commercials

This paper reports on the first known empirical use of the Reversal Theory State Measure (RTSM) since its publication by Desselles et al. (2014). The RTSM was employed to track responses to three purposely-selected video commercials in a between-subjects design. Results of the study provide empirical support for the central conceptual premise of reversal theory, the experience of metamotivational reversals and the ability of the RTSM to capture them. The RTSM was also found to be psychometrically sound after adjustments were made to two of its three component subscales. Detailed account and rationale is provided for the analytical process of assessing the psychometric robustness of the RTSM, with a number of techniques and interpretations relating to component structure and reliability discussed. Agreeability and critique of the two available versions of the RTSM – the bundled and the branched – is also examined. Researchers are encouraged to assist development of the RTSM through further use, taking into account the analysis and recommendations presented.