Metodología de desarrollo de modelos de calidad orientados a dominio y su aplicación al dominio de los productos finales de seguridad de tecnologías de la información

Abstract

Quality models are an essential part of today´s development and quality evaluation processes of software. Their use has been generalized above all since the appearance of standard quality models. These models, according to their nature of standards, are generics and not directly applicables in the daily practice so it is required an effort to fit them to each specific application domain and evaluation approach. Due to this, there are many research works with the main objective of the definition of reusable quality models oriented to specific application domains which save time because you do not have to define them from scratch each time. Moreover, this type of models may offer a more accurate evaluation because of their properties can be more precisely defined. Later to carry out a systematic review of the today domain-oriented quality models, we concluded that these models are based on the knowledge and/or experience of the researchers and, therefore, they can not be generalized to others environment or projects, which is the main advantage of them. On the other hand, these quality models define only software characteristics and attributes not obtaining or validating their relative importance or weitht, neither the influence relations between the different model´s characteristics, both of them main properties of quantitative evaluations, above all when there is not user requirements or they are not reliable. Our approach define a systematic process for quality models development which generate domain-oriented quality models based on the knowledge and experience of a wide number of experts, obtaining not only the factors, but also the relative importance or weigth and the influence relationships between them. In order to support this approach, we include an extensive validation. To fullfil this validation process, next to obtain the attributes from standards and other related literature, we carry out an early validation to confirm their applicability through their use in three real world study cases for two software development companies. This early validation allowed us to obtain multiple lessons learned which provide the basis of the process here presented. Moreover, we conducted a later validation on both the utility and necessity of these quality models and their applicability by means of a case study on Information Technology Security field.