Systems, Software and Services Process Improvement: 30th European Conference, EuroSPI 2023, Grenoble, France, August 30 – September 1, 2023, ... in Computer and Information Science, 1890)

Preface
Recommended Further Reading
Acknowledgements
Organization
Contents – Part I
Contents – Part II
SPI and Emerging and Multidisciplinary Approaches to Software Engineering
Sustained Enablement of AI Ethics in Industry
	1 Introduction
	2 State of the Art
		2.1 Terms in Research Around AI Ethics
		2.2 Trustworthy AI Values in Research
		2.3 Enablement Approaches in AI Ethics
	3 Research Question and Methodology
	4 Development of the Enablement of AI Ethics
		4.1 Introduction to a Practical AI Ethics Concept
		4.2 Trustworthy AI Values
		4.3 AI Ethics Action Fields
		4.4 Embedding AI Ethics into Industrial Context
	5 Enabling of AI Ethics
		5.1 Feasibility Aspects of AI Ethics in Industry
		5.2 Measurement Approach for AI Ethics
	6 Discussion
	7 Conclusions
	8 Relationship with the SPI Manifesto
	References
Investigating Sources and Effects of Bias in AI-Based Systems – Results from an MLR
	1 Introduction
	2 Research Methodology
		2.1 Methodology
		2.2 Search Queries
		2.3 Inclusion/Exclusion
		2.4 Methodology Limitations
	3 Literature Review
		3.1 RQ1: What Are AI-Based Systems?
		3.2 RQ2: What Are the Types of Bias in AI-Based Systems?
		3.3 RQ3: What Are the Potential Risks/Effects of Bias in AI-Based Systems?
		3.4 RQ4: How Can Bias Be Resolved/Prevented in AI-Based Systems?
	4 Limitations of Research
	5 Directions for Future Research
	6 Conclusion
	References
Quality Assurance in Low-Code Applications
	1 Introduction
	2 Quality Assurance Factors
		2.1 Layouts and Corporate Designs
		2.2 Adherence to Internal Processes
		2.3 Performance and Security
	3 Quality Assurance Approach
		3.1 Application Meta-model
		3.2 Company Rules (prosa)
		3.3 Formalized Rules
		3.4 Low-Code Application
		3.5 Application Model
		3.6 Quality Engine
		3.7 Test Results
		3.8 Knowledge Base
		3.9 Feedback Generator
	4 Initial Evaluation: Microsoft PowerApps
		4.1 Application “Meta-model”
		4.2 Low-Code Application for Test
		4.3 Company Rules (prosa)
		4.4 Formalized Rules
		4.5 Quality Engine and Feedback Generator
		4.6 Feedback from Low-Code Developers
	5 Related Work
	6 Summary and Outlook
	References
Towards a DevSecOps-Enabled Framework for Risk Management of Critical Infrastructures
	1 Introduction
	2 Related Work
	3 Towards a DevSecOps Environment that Fosters Risk Management
		3.1 Feasibility Analysis
		3.2 Risk Management Perspective
		3.3 DevSecOps Proposal
		3.4 Evaluation by Experts
		3.5 Improvements (Continuous Feedback)
		3.6 Implementation
		3.7 Critical Infrastructure Performance
	4 Conclusion and Future Work
	References
Gamified Focus Group for Empirical Research in Software Engineering: A Case Study
	1 Introduction
	2 Background
	3 Method
	4 Results
		4.1 Gamified Focus Group
		4.2 Execution of Gamified Focus Group
		4.3 Consolidation of Results
	5 Discussion
	6 Conclusions and Future Work
	References
Exploring Metaverse-Based Digital Governance of Gambia: Obstacles, Citizen Perspectives, and Key Factors for Success
	1 Introduction
	2 Literature Review
		2.1 Digital Governance in The Gambia
		2.2 The Metaverse
	3 Research Methodology
		3.1 Research Design
		3.2 Sample Selection
		3.3 Data Collection Methods
		3.4 Descriptive Analysis
	4 Results
		4.1 Validation of the Measurement Scales
		4.2 Hypothesis Testing
	5 Discussion
	6 Conclusion
	References
Identification of the Personal Skills Using Games
	1 Introduction
	2 Related Works
	3 Process to Select or Develop Games for Analyzing Soft Skills
	4 Games to Evaluate Flexibility to Change
		4.1 Case Study Design and Performance
		4.2 Case Study Performance
		4.3 Analysis of Data Collected
		4.4 Results
		4.5 Discussion
	5 Conclusion
	References
Identifying Key Factors to Distinguish Artificial and Human Avatars in the Metaverse: Insights from Software Practitioners
	1 Introduction
	2 Background
	3 Methodology
	4 Findings
	5 Conclusion and Future Work
	References
Digitalisation of Industry, Infrastructure and E-Mobility
An Approach to the Instantiation of the EU AI Act: A Level of Done Derivation and a Case Study from the Automotive Domain
	1 Introduction
	2 Literature
	3 Methodology
	4 Derivation of LoD Layer EU AI Act
	5 Case Study for Crosscheck Validation in a Real Project Setups
	6 Discussion and Limitations
	7 Conclusion and Outlook
	References
An Investigation of Green Software Engineering
	1 Introduction
	2 Research Methodology
		2.1 Search Strings
		2.2 Inclusion/Exclusion
	3 Analysis
		3.1 What Are the Principles and Practices of Green Software Engineering?
		3.2 How Can Software Developers Reduce the Energy Consumption of Software?
		3.3 What Are the Challenges Facing Green Software Engineering?
		3.4 Green Software Engineering is Part of Green System Engineering?
		3.5 How Can We Measure and Quantify the Impact of Green Software Engineering on the Environment?
	4 Research Limitations
	5 Directions for Future Research
	6 Conclusions
	References
Developing a Blueprint for Vocational Qualification of Blockchain Specialists Under the European CHAISE Initiative
	1 Introduction
	2 The Problem Background
	3 Research Question and Methodology
	4 Scope and Structure of the CHAISE Blueprint
	5 Occupational Profiles
		5.1 Blockchain Developer
		5.2 Blockchain Architect
		5.3 Blockchain Manager
	6 Program Specifications and Delivery
		6.1 Program Outline
		6.2 Learning Outcomes
		6.3 Entry Requirements
		6.4 Thematic Coverage
		6.5 Delivery Methods
		6.6 Assessment Criteria
	7 Certification Pathways
		7.1 National Certification
		7.2 ECQA Certification
		7.3 Grading and Passing Requirements
	8 Requirements for Training Providers
		8.1 Resources and Equipment
		8.2 Teaching Staff
	9 Summary, Conclusion and Outlook
	10 Relationship with the SPI Manifesto
	References
Trustful Model-Based Information Exchange in Collaborative Engineering
	1 Collaboration Along the Supply Chain
	2 Related Work and Background
		2.1 Collaborative Engineering
		2.2 Threat Modeling
		2.3 ISO/IEC 270xx
	3 Research Approach
	4 Insights and Assumptions
	5 Collaborative Engineering Scenario
	6 Data Security Threats
	7 Data Security Guidelines
		7.1 Data Minimization
		7.2 ISO/IEC 27010-Compliant Model Exchange
	8 Discussion
	9 Conclusion
	References
Supporting the Growth of Electric Vehicle Market Through the E-DRIVETOUR Educational Program
	1 Introduction
	2 The E-DRIVETOUR Initiative
	3 Training Curriculum
	4 Program and Course Assessment
	5 Project Sustainability
	6 Discussion and Conclusions
	7 Relationship with the SPI Manifesto
	References
Towards User-Centric Design Guidelines for PaaS Systems: The Case of Home Appliances
	1 Introduction
	2 State of the Art
		2.1 PaaS Systems Concepts
		2.2 Design and Consumer Acceptance
		2.3 Discrete Choice Experiment
	3 Methodology
	4 Results
	5 Conclusions
	6 Relationship with the SPI Manifesto
	References
Boosting the EU-Wide Collaboration on Skills Agenda in the Automotive-Mobility Ecosystem
	1 Background
		1.1 Automotive Skills Alliance (ASA) - PfS Large-Scale Partnership
		1.2 Project FLAMENCO - Boosting the Collaboration
	2 Research on Collaboration Needs and Requirements
		2.1 Collaboration Needs
		2.2 Collaboration Framework
		2.3 Collaboration Outcomes
		2.4 Collaboration Challenges and Risks Encountered in Past Collaboration
	3 A Way Forward
	4 Relationship with the SPI Manifesto
	References
Automotive Data Management SPICE Assessment – Comparison of Process Assessment Models
	1 Introduction
	2 Background and Related Work
		2.1 Automotive SPICE Assessment
		2.2 Data Management
		2.3 Current Research Status
	3 Research Question and Methodology
	4 Data Management SPICE
		4.1 An Automotive Example Scenario and Its Interpretation
	5 PAM Mapping and Analysis
	6 Evaluation and Discussion
	7 Conclusion and Outlook
	8 Relationship with the SPI Manifesto
	References
A Knowledge Management Strategy for Seamless Compliance with the Machinery Regulation
	1 Introduction
	2 Background
		2.1 Machinery Directive
		2.2 Machinery Directive-Related Harmonised Standards
		2.3 Machinery Regulation
		2.4 MR-Related Regulations
		2.5 Centrifugal Pumps
		2.6 Multi-concern Assurance
		2.7 Variability Management via Base Variability Resolution
	3 Knowledge Management Strategy
	4 Exemplification of the Strategy
	5 Discussion and Synergy with the SPI Manifesto
	6 Related Work
	7 Conclusion and Future Work
	References
SPI and Good/Bad SPI Practices in Improvement
Corporate Memory – Fighting Rework with a Simple Principle and a Practical Implementation
	1 Introduction
	2 The Problem Today
	3 Corporate Memory Principle
	4 Grundfos Case
		4.1 Requirements
		4.2 Features
		4.3 Work
		4.4 Test
		4.5 Correlation Between Requirements and Test
		4.6 Risks
		4.7 Baselining
		4.8 Application - Production and Traceability
		4.9 Grand Model
		4.10 Overview
		4.11 Credits
	5 Conclusion
	6 Relationship with the SPI Manifesto
	References
Managing Ethical Requirements Elicitation
	1 Introduction
		1.1 Requirements Elicitation
		1.2 Computer Ethics
		1.3 SPI Manifesto
	2 Ethical Challenges in Requirements Elicitation: A Literature Review
	3 Defensible Ethical Principles
		3.1 Deontological Principles
		3.2 Telelogical Principles
	4 Heuristics
	5 Conclusions
	References
Process Improvement Based on Symptom Analysis
	1 Introduction
	2 Literature
	3 Method
	4 A Survey of Symptoms
	5 Symptoms, Causes, and Consequences
	6 Mapping from Root Causes to CMMI
		6.1 Symptom 22 “We Don’t Know our Performance on Different Tasks”
		6.2 Symptom 24: “We Cannot Get the Competences and Resources Needed for the Project”
	7 Discussion
	8 Conclusion
	9 Further Work and the Relationship to the SPI Manifesto
	References
SPI and Functional Safety and Cybersecurity
The New Cybersecurity Challenges and Demands for Automotive Organisations and Projects - An Insight View
	1 Introduction
	2 Example Cybersecurity Item Definition
	3 TARA Explanation and Hints
		3.1 Asset Identification and Impact Rating
		3.2 Threat Scenario Identification
		3.3 Attack Path Analysis and Attack Feasibility Rating
		3.4 Risk Value Determination and Risk Treatment Decision
		3.5 General Remarks/Hints
	4 Cybersecurity Design and Requirements at System Level
	5 Cybersecurity Design and Requirements at Software Level
	6 Automotive SPICE® for Cybersecurity Experiences so Far and Outlook
	References
An Open Software-Based Framework for Automotive Cybersecurity Testing
	1 Introduction
	2 Related Work
		2.1 Automotive Security Testbed Implementations
		2.2 PENNE Inspiration: PASTA Portable Automotive Security Testbed with Adaptability
	3 PENNE Testbed Design
		3.1 Vehicle Function ECUs
		3.2 Graphical User Interface
		3.3 Attacks of the PENNE Testbed
		3.4 Security Measures of the PENNE Testbed
	4 Results and Evaluation
		4.1 Testbed Capabilities
		4.2 Message Timings
		4.3 Attack Prevention
	5 Conclusion
	6 Relation to SPI Manifesto
	References
Requirements Engineering for Cyber-Physical Products
	1 Introduction
	2 Literature Review
	3 Hypotheses and Objectives
		3.1 Hypothesis
		3.2 Research Questions
	4 Sample Concepts
		4.1 Learning from Samples
		4.2 Avoiding Racial or Gender Bias
		4.3 Protecting Lives
		4.4 Learning Concepts
	5 Continuous Requirements Engineering
		5.1 Collecting Feedback and User Reactions
		5.2 Net Promoter® Score (NPS) for Interpreting Feedback
		5.3 Importance and Satisfaction with a Product
		5.4 Automatization Within the DevOps Cycle
	6 Requirements Elicitation
		6.1 Modeling Functionality
		6.2 Functional Effectiveness
		6.3 Embracing Change
		6.4 Requirements for Intelligent Systems Using Concepts
	7 Limitations
	8 Conclusions
	References
Consistency of Cybersecurity Process and Product Assessments in the Automotive Domain
	1 Introduction
	2 Types of Audits
		2.1  Automotive SPICE for Cybersecurity
		2.2 Automotive Cybersecurity Management System (ACSMS) Audit
		2.3 ISO 21434 Product Assessment
	3 Implementation of Links Between Product Evaluation and Project Assessment
		3.1 Background
		3.2 Discussion
		3.3 Conclusion
		3.4 Implementation
	4 Conclusion
	5 Relation to SPI Manifesto
	References
A Low-Cost Environment for Teaching Fundamental Cybersecurity Concepts in CPS
	1 Introduction
	2 Related Works and Concepts
	3 Methodology
	4 Experimentation on Cyberattacks-Based Scenarios
		4.1 Procedure and Steps for Experimental Setup
		4.2 Cyberattack Scenarios
		4.3 Discussion
	5 Conclusion and Future Work
	6 Relationship with the SPI Manifesto
	References
CYBERENG - Training Cybersecurity Engineer and Manager Skills in Automotive - Experience
	1 Introduction
	2 Automotive Cybersecurity Training Concept and Highlights
	3 Training Units and Elements - Overview and Knowledge Examples
		3.1 U.1 Cybersecurity Management
		3.2 U.2 Cybersecurity Operation and Maintenance
		3.3 U.3 Engineering Aspects of Cybersecurity
		3.4 U.4 Testing Aspects of Cybersecurity
	4 Course Implementation – Experience
	5 Summary and Conclusions
	6 Future of the CYBERENG Training
	7 Relation to SPI Manifesto
	References
Author Index