Abstract-Software product line engineering is an efficient means to generate a set of tailored software products from a common implementation. However, adopting a product-line approach poses a major challenge and significant risks, since typically legacy code must be migrated toward a product line. Our aim is to lower the adoption barrier by providing semiautomatic tool support-called variability mining-to support developers in locating, documenting, and extracting implementations of product-line features from legacy code. Variability mining combines prior work on concern location, reverse engineering, and variability-aware type systems, but is tailored specifically for the use in product lines. Our work pursues three technical goals: (1) we provide a consistency indicator based on a variability-aware type system, (2) we mine features at a fine level of granularity, and (3) we exploit domain knowledge about the relationship between features when available. With a quantitative study, we demonstrate that variability mining can efficiently support developers in locating features.

No abstract

No abstract

Information systems development methods pay little attention to security aspects. While several alternative approaches for designing and managing secure information systems have been proposed; these lack fully comprehensive modeling schemes in terms of security. No single method covers all modeling needs. Rarely can these approaches be integrated into existing development methods. Also, these approaches constrain the autonomy of developers. This paper develops a framework that explains the limitations of the alternative secure information systems design approaches. We illustrate the normative value of this framework with a case study of a frameworkbased solution: meta-notation for adding security into information systems development methods.