{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T06:32:54Z","timestamp":1777703574837,"version":"3.51.4"},"reference-count":57,"publisher":"SAGE Publications","issue":"2","license":[{"start":{"date-parts":[[2019,7,4]],"date-time":"2019-07-04T00:00:00Z","timestamp":1562198400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/journals.sagepub.com\/page\/policies\/text-and-data-mining-license"}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["Journal of Intelligent &amp; Fuzzy Systems"],"published-print":{"date-parts":[[2019,9,9]]},"abstract":"<jats:p>\n                    \u00a0Resource limitations in software projects rarely allow for the security requirements to be fully realized. As such,\n                    <jats:italic>Prioritization and Selection<\/jats:italic>\n                    (PAS) techniques are used to find an optimal subset of the requirements. Consequently, some of the security requirements will be ignored. But ignoring security requirements may (a) leave some of the security threats unattended and (b) negatively impact the effectiveness of the selected requirements. To mitigate this, we have proposed a fuzzy framework, referred to as\n                    <jats:italic>Prioritization And Partial Selection<\/jats:italic>\n                    (PAPS), that reduces the number of ignored security requirements by allowing for partial satisfaction of those requirements. We achieve this by relaxing the satisfaction conditions of security requirements, when tolerated, based on their priorities specified by a fuzzy inference system. Taking into account the partiality of security in PAPS mitigates the adverse impact of ignoring security requirements and enhances the accuracy of prioritization and selection. Our proposed framework is scalable to a large number of requirements.\n                  <\/jats:p>","DOI":"10.3233\/jifs-182907","type":"journal-article","created":{"date-parts":[[2019,7,5]],"date-time":"2019-07-05T10:54:28Z","timestamp":1562324068000},"page":"2671-2686","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":14,"title":["A fuzzy framework for prioritization and partial selection of security requirements in software projects"],"prefix":"10.1177","volume":"37","author":[{"given":"Davoud","family":"Mougouei","sequence":"first","affiliation":[{"name":"Faculty of IT, Monash University, Melbourne, VIC, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David M.W.","family":"Powers","sequence":"additional","affiliation":[{"name":"College of Science and Engineering, Flinders University, Adelaide, SA, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Elahe","family":"Mougouei","sequence":"additional","affiliation":[{"name":"Faculty of Computer Engineering, Islamic Azad University, Najafabad, Isfahan, Iran"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","published-online":{"date-parts":[[2019,7,4]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.11.003"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.entcs.2018.03.038"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00262-6_12"},{"key":"e_1_3_2_5_2","first-page":"1","article-title":"Modeling and selection of interdependent software requirements using fuzzy graphs","author":"Mougouei D.","year":"2017","unstructured":"MougoueiD. and PowersD.M., Modeling and selection of interdependent software requirements using fuzzy graphs, International Journal of Fuzzy Systems (2017), 1\u201317.","journal-title":"International Journal of Fuzzy Systems"},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-016-0950-1"},{"key":"e_1_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1177\/1548512917690278"},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2014.02.001"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.5539\/mas.v12n2p62"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-014-9334-8"},{"key":"e_1_3_2_11_2","first-page":"444","volume-title":"International Conference on Computational Collective Intelligence","author":"Achimugu P.","year":"2014","unstructured":"AchimuguP., SelamatA. and IbrahimR., A web-based multicriteria decision making tool for software requirements prioritization, in: International Conference on Computational Collective Intelligence, Springer, 2014, pp. 444\u2013453."},{"key":"e_1_3_2_12_2","first-page":"1","article-title":"Framework for fuzzy rule based automatic intrusion response selection system (frairss) using fuzzy analytic hierarchy process and fuzzy topsis","author":"Singh D.K.","year":"2018","unstructured":"SinghD.K. and KaushikP., Framework for fuzzy rule based automatic intrusion response selection system (frairss) using fuzzy analytic hierarchy process and fuzzy topsis, Journal of Intelligent & Fuzzy Systems (Preprint) (2018), 1\u201313.","journal-title":"Journal of Intelligent & Fuzzy Systems (Preprint)"},{"issue":"6","key":"e_1_3_2_13_2","first-page":"3921","article-title":"A fuzzy decision making methodology based on fuzzy ahp and fuzzy topsis with a case study for information systems outsourcing decisions","volume":"32","author":"Nazari-Shirkouhi S.","year":"2017","unstructured":"Nazari-ShirkouhiS., Miri-NargesiS. and AnsarinejadA., A fuzzy decision making methodology based on fuzzy ahp and fuzzy topsis with a case study for information systems outsourcing decisions, Journal of Intelligent&Fuzzy Systems 32(6) (2017), 3921\u20133943.","journal-title":"Journal of Intelligent&Fuzzy Systems"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-33515-5_3"},{"key":"e_1_3_2_15_2","first-page":"281","article-title":"Security in the software development lifecycle","author":"Assal H.","year":"2018","unstructured":"AssalH. and ChiassonS., Security in the software development lifecycle, in: Fourteenth Symposium on Usable Privacy and Security (SOUPS 2018), 2018, pp. 281\u2013296.","journal-title":"Fourteenth Symposium on Usable Privacy and Security (SOUPS 2018)"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-6313-6.ch001"},{"key":"e_1_3_2_17_2","first-page":"884","volume-title":"Proceedings of the 31st IEEE\/ACM International Conference on Automated Software Engineering, ASE 2016","author":"Mougouei D.","year":"2016","unstructured":"MougoueiD. and Factoring requirement dependencies in software requirement selection using graphs and integer programming, in: Proceedings of the 31st IEEE\/ACM International Conference on Automated Software Engineering, ASE 2016, ACM, New York, NY, USA, 2016, pp. 884\u2013887."},{"key":"e_1_3_2_18_2","first-page":"198","volume-title":"Proceedings of the 39th International Conference on Software Engineering Companion, ICSE-C \u201917","author":"Mougouei D.","year":"2017","unstructured":"MougoueiD., PowersD.M.W. and MoeiniA., Dependencyaware software release planning, in: Proceedings of the 39th International Conference on Software Engineering Companion, ICSE-C \u201917, IEEE Press, Piscataway, NJ, USA, 2017, pp. 198\u2013200."},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCE.2012.6271180"},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-171142"},{"key":"e_1_3_2_21_2","first-page":"1","article-title":"A new fuzzy inference system for time series forecasting and obtaining the probabilistic forecasts via subsampling block bootstrap","author":"Yolcu U.","year":"2018","unstructured":"YolcuU., BasE. and EgriogluE., A new fuzzy inference system for time series forecasting and obtaining the probabilistic forecasts via subsampling block bootstrap, Journal of Intelligent & Fuzzy Systems (Preprint) (2018), 1\u201310.","journal-title":"Journal of Intelligent & Fuzzy Systems (Preprint)"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-010-0101-0"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-012-9188-5"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2003.07.002"},{"issue":"3","key":"e_1_3_2_25_2","article-title":"Value based intelligent requirement prioritization (virp): Expert driven fuzzy logic based prioritization technique","volume":"7","author":"Ramzan M.","unstructured":"RamzanM., JaffarM.A. and ShahidA.A., Value based intelligent requirement prioritization (virp): Expert driven fuzzy logic based prioritization technique, International Journal Of Innovative Computing, Information And Control 7(3).","journal-title":"International Journal Of Innovative Computing, Information And Control"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2005.30"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.09.011"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-152630"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.3233\/IFS-152016"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.5121\/ijcsit.2014.6103"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2014.06.002"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2014.11.038"},{"key":"e_1_3_2_33_2","first-page":"222","volume-title":"International Symposium on Distributed Computing and Artificial Intelligence","author":"Urrutia A.T.","year":"2018","unstructured":"UrrutiaA.T., An approach to measuring complexity within the boundaries of a natural language fuzzy grammar, in: International Symposium on Distributed Computing and Artificial Intelligence, Springer, 2018, pp. 222\u2013230."},{"issue":"2","key":"e_1_3_2_34_2","first-page":"99","article-title":"A fuzzy-based technique for deD. scribing security requirements of intrusion tolerant systems","volume":"7","author":"Mougouei D.","year":"2013","unstructured":"MougoueiD. and NurhayatiW., A fuzzy-based technique for deD. scribing security requirements of intrusion tolerant systems, International Journal of Software Engineering and its Applications 7(2) (2013), 99\u2013112.","journal-title":"International Journal of Software Engineering and its Applications"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-004-0194-4"},{"key":"e_1_3_2_36_2","first-page":"79","article-title":"Relax: Incorporating uncertainty into the specification of selfadaptive systems","author":"Whittle J.","year":"2009","unstructured":"WhittleJ., SawyerP., BencomoN., ChengB.H. and BruelJ.-M., Relax: Incorporating uncertainty into the specification of selfadaptive systems, in: 2009 17th IEEE International Requirements Engineering Conference, IEEE, 2009, pp. 79\u201388.","journal-title":"2009 17th IEEE International Requirements Engineering Conference, IEEE"},{"key":"e_1_3_2_37_2","first-page":"148","volume-title":"Proceedings of the 26th International Conference on Software Engineering, IEEE Computer Society","author":"Van A.","year":"2004","unstructured":"VanA., Lamsweerde, Elaborating security requirements by construction of intentional anti-models, in: Proceedings of the 26th International Conference on Software Engineering, IEEE Computer Society, 2004, pp. 148\u2013157."},{"key":"e_1_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.09.004"},{"key":"e_1_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-6313-6.ch004"},{"key":"e_1_3_2_40_2","first-page":"1","article-title":"Smart-tv security: Risk analysis and experiments on smart-tv communication channels","author":"Bachy Y.","year":"2018","unstructured":"BachyY., NicometteV., Ka\u00e2nicheM. and AlataE., Smart-tv security: Risk analysis and experiments on smart-tv communication channels, Journal of Computer Virology and Hacking Techniques (2018), 1\u201316.","journal-title":"Journal of Computer Virology and Hacking Techniques"},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/52.605933"},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2018.05.047"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ecolind.2018.07.011"},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1016\/S0019-9958(65)90241-X"},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.3233\/IFS-151853"},{"key":"e_1_3_2_46_2","doi-asserted-by":"crossref","unstructured":"LewisR.W. Programming industrial control systems using IEC 1131-3 no. 50 Iet 1998.","DOI":"10.1049\/PBCE050E"},{"key":"e_1_3_2_47_2","doi-asserted-by":"publisher","DOI":"10.3233\/IFS-130915"},{"key":"e_1_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1049\/piee.1974.0328"},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-171292"},{"key":"e_1_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1145\/322796.322806"},{"key":"e_1_3_2_51_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.fss.2005.11.005"},{"key":"e_1_3_2_52_2","doi-asserted-by":"publisher","DOI":"10.1109\/QRS-C.2017.87"},{"key":"e_1_3_2_53_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2016.03.068"},{"key":"e_1_3_2_54_2","first-page":"427","article-title":"A framework managing conflicts between security and privacy requirements","author":"Alkubaisy D.","year":"2017","unstructured":"AlkubaisyD., A framework managing conflicts between security and privacy requirements, in: 2017 11th International Conference on Research Challenges in Information Science (RCIS), 2017, pp. 427\u2013432.","journal-title":"2017 11th International Conference on Research Challenges in Information Science (RCIS)"},{"key":"e_1_3_2_55_2","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2013.2288306"},{"key":"e_1_3_2_56_2","doi-asserted-by":"crossref","unstructured":"BeranderP. and AndrewsA. Requirements prioritization in: Engineering and managing software requirements Springer 2005 pp. 69\u201394.","DOI":"10.1007\/3-540-28244-0_4"},{"key":"e_1_3_2_57_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23716-4_8"},{"key":"e_1_3_2_58_2","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-009-0079-7"}],"container-title":["Journal of Intelligent &amp; Fuzzy Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JIFS-182907","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.3233\/JIFS-182907","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JIFS-182907","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T09:39:01Z","timestamp":1777455541000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.3233\/JIFS-182907"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,7,4]]},"references-count":57,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2019,9,9]]}},"alternative-id":["10.3233\/JIFS-182907"],"URL":"https:\/\/doi.org\/10.3233\/jifs-182907","relation":{},"ISSN":["1064-1246","1875-8967"],"issn-type":[{"value":"1064-1246","type":"print"},{"value":"1875-8967","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,7,4]]}}}