Inferring user stories from user traces in web applications

点击翻译按钮获取中文摘要

The current generation of security-oriented products suffer from a major problem. Ideally, they would be used by the development team who have the correct domain knowledge to maximize the benefit from using these tools. However, the development team typically has insufficient knowledge about security problems to effectively use these tools. So instead a security specialist uses the tools, but they have insufficient domain knowledge to use the tools effectively. So how do we break this catch-22 situation? This project seeks to break this conundrum; specifically the project seeks to automatically infer sufficient domain knowledge to allow a security specialist to perform more effectively. Hence, the project seeks to automatically infer persona-centered user story descriptions from browser-based web-applications. These user story descriptions will be derived from a large number of recorded user-interactions; this is a requirement of the sponsoring organization. This is clearly different from deriving user stories from the source code. Hence, stated precisely the objective of the project is to: automatically infer interaction-driven user stories from browser-based web-applications. And to make the information (statement of purpose) available to security engineers using security tools, especially the tools available from our sponsor.