Inferring user stories from user traces in web applications

当前一代面向安全的产品存在一个主要问题。理想情况下，它们将由具有正确领域知识的开发团队使用，以最大限度地从使用这些工具中获益。但是，开发团队通常对安全问题的知识不足，无法有效地使用这些工具。因此，安全专家使用这些工具，但他们没有足够的领域知识来有效地使用这些工具。那么，我们如何打破这一困境呢？该项目旨在打破这一难题;特别是该项目旨在自动推断足够的领域知识，以允许安全专家更有效地执行。因此，该项目旨在从基于浏览器的Web应用程序中自动推断以人物角色为中心的用户故事描述。这些用户故事描述将来自大量记录的用户交互;这是发起组织的要求。这显然不同于从源代码中获取用户故事。 因此，准确地说，该项目的目标是：从基于浏览器的Web应用程序中自动推断交互驱动的用户故事。并使用安全工具，特别是我们赞助商提供的工具，向安全工程师提供信息（目的声明）。

The current generation of security-oriented products suffer from a major problem. Ideally, they would be used by the development team who have the correct domain knowledge to maximize the benefit from using these tools. However, the development team typically has insufficient knowledge about security problems to effectively use these tools. So instead a security specialist uses the tools, but they have insufficient domain knowledge to use the tools effectively. So how do we break this catch-22 situation? This project seeks to break this conundrum; specifically the project seeks to automatically infer sufficient domain knowledge to allow a security specialist to perform more effectively. Hence, the project seeks to automatically infer persona-centered user story descriptions from browser-based web-applications. These user story descriptions will be derived from a large number of recorded user-interactions; this is a requirement of the sponsoring organization. This is clearly different from deriving user stories from the source code. Hence, stated precisely the objective of the project is to: automatically infer interaction-driven user stories from browser-based web-applications. And to make the information (statement of purpose) available to security engineers using security tools, especially the tools available from our sponsor.