The International Arab Journal of Information Technology (IAJIT)

..............................
..............................
..............................


A Machine Learning Attempt for Anatomizing Software Risks in Small and Medium Agile Enterprises

The ultimate aim of customer satisfaction and the increasing number of unexpected risks in a changing Agile Software Development (ASD) environment, one of the most important rising demands is in the area of systematic but light-weight risk management tools and methodologies. Risk analysis is a significant phase in the process of risk assessment, which helps to evaluate the risks in order to mitigate them effectively within a limited duration. Recently, machine learning algorithms have become popular for solving problems in various domains, including software risk analysis and prioritization, due to their better performance and efficiency. With this aspect, an approach for predicting the level of software risks with the proposed risk dataset has been attempted in this study with the basic machine learning algorithms for risk classification purposes. The logistic regression, decision tree, Support Vector Machine (SVM), naïve bayes, and K-Nearest Neighbor (KNN) algorithms were implemented in the experimental analysis. The results reveal that the proposed dataset renders better outcomes with logistic regression (70% accuracy) and SVM (65% accuracy). Out of the five algorithms, the exclusion of the Agile Software Risk Identification (ASRI) framework attribute ‘Risk Nature’ from the overall proposed risk dataset has a more negative impact on the performance of the logistic regression, decision tree, and KNN models than the exclusion of the Goal-driven Software development Risk Management (GSRM) framework attribute ‘performance goal affected’. This indicates that the ‘Risk Nature’ attribute plays a significant role in analyzing the risks and predicting their level of importance.

[1] Andrat H. and Jaswal S., “An Alternative Approach for Risk Assessment in Scrum,” in Proceedings of the International Conference on Computing and Network Communications, Trivandrum, pp. 535-539, 2015. DOI:10.1109/CoCoNet.2015.7411239

[2] Anes V., Abreu A., and Santos R., “A New Risk Assessment Approach for Agile Projects,” in Proceedings of the International Young Engineers Forum (YEF-ECE), Costa da Caparica, pp. 67-72, 2020. DOI:10.1109/YEF- ECE49388.2020.9171808

[3] Bhukya S. and Pabboju S., “Software Engineering: Risk Features in Requirement Engineering,” Cluster Computing, vol. 22, pp. 14789-14801, 2019. https://doi.org/10.1007/s10586-018-2417-3

[4] Boranbayev A., Boranbayev S., Nurusheva A., Yersakhanov K., and Seitkulov Y., “A Software System for Risk Management of Information Systems,” in Proceedings of the 12th International Conference on Application of Information and Communication Technologies, Almaty, pp. 1-6, 2018. DOI:10.1109/ICAICT.2018.8747045

[5] Bumbary K., “Using Velocity, Acceleration, and Jerk to Manage Agile Schedule Risk,” in Proceedings of the International Conference on Information Systems Engineering, Los Angeles, pp. 73-80, 2016. DOI:10.1109/ICISE.2016.21

[6] Canavese D., Regano L., Basile C., Coppens B., and De Sutter B., “Man-at-the-End Software Protection as a Risk Analysis Process,” arXiv Preprint, vol. arXiv:2011.07269, pp. 1-25, 2022. https://doi.org/10.48550/arXiv.2011.07269

[7] Carvallo J., Oktaba H., and Hernandez E., “Risk Assessment Forum,” in Proceedings of the 6th International Conference in Software Engineering Research and Innovation (CONISOFT), San Luis Potosi, pp. 160-164, 2018. DOI:10.1109/CONISOFT.2018.8645949

[8] Filippetto A., Lima R., and Barbosa J., “A Risk Prediction Model for Software Project Management Based on Similarity Analysis of Context Histories,” Information and Software Technology, vol. 131, pp. 106497, 2021. https://doi.org/10.1016/j.infsof.2020.106497

[9] Gasca-Hurtado G., Gomez-Alvarez M., Munoz M., and Pena A., “A Gamified Proposal for Software Risk Analysis in Agile Methodologies,” in Proceedings of the 26th European Conference on Edinburgh Systems, Software and Services Process Improvement, Edinburgh, pp. 272-285, 2019. https://doi.org/10.1007/978-3-030-28005- 5_21

[10] Ghobadi S. and Mathiassen L., “A Model for Assessing and Mitigating Knowledge Sharing Risks in Agile Software Development,” Information Systems Journal, vol. 27, no. 6, pp. 1- 33, 2016. file:///C:/Users/user/Downloads/ISJ2- May2016.pdf

[11] González-Cruz T., Botella-Carrubi D., and Martinez-Fuentes C., “The Effect of Firm Complexity and Founding Team Size on Agile Internal Communication in Startups,” International Entrepreneurship and Management Journal, vol. 16, pp. 1101-1121, 2020. https://doi.org/10.1007/s11365-019-00633-1

[12] Han W., “Discriminating Risky Software Project Using Neural Networks,” Computer Standards and Interfaces, vol. 40, pp. 15-22, 2015. https://doi.org/10.1016/j.csi.2015.01.001

[13] Hassan H., Abdel-Fattah M., and Ghoneim A., “Risk Prediction Applied to Global Software Development using Machine Learning Methods,” International Journal of Advanced Computer Science and Applications, vol. 13, no. 9, pp. 111- 120, 2022. DOI: 10.14569/IJACSA.2022.0130913

[14] Hoodat H. and Rashidi H., “Classification and Analysis of Risks in Software Engineering,” International Journal of Computer and Information Engineering, vol. 56, pp. 446-452, 2009. https://www.academia.edu/573832/Classification _and_Analysis_of_Risks_in_Software_Engineeri ng

[15] Ingale S., Paraye M., and Ambawade D., “Enhancing Multi-Step Attack Prediction Using Hidden Markov Model and Naive Bayes,” in Proceedings of the International Conference on Electronics and Sustainable Communication Systems, Coimbatore, pp. 36-44, 2020. DOI:10.1109/ICESC48915.2020.9155895

[16] Islam S., Mouratidis H., and Weippl E., “An Empirical Study on the Implementation and 558 The International Arab Journal of Information Technology, Vol. 22, No. 3, May 2025 Evaluation of a Goal-Driven Software Development Risk Management Model,” Information and Software Technology, vol. 56, no. 2, pp. 117-133, 2014. https://doi.org/10.1016/j.infsof.2013.06.003

[17] Kalluri R., “A Human Factors Study of Risk Management of Complex Agile Scrum Projects in Large Enterprises,” International Journal of Business and Management Studies, vol. 3, no. 8, pp. 38-44, 2022. DOI:10.56734/ijbms.v3n8a6

[18] Khan M., Mirza A., and Saleem I., “Software Risk Analysis with the Use of Classification Techniques: A Review,” Engineering, Technology and Applied Science Research, vol. 10, no. 3, pp. 5678-5682, 2020. https://doi.org/10.48084/etasr.3440

[19] Kremljak Z. and Kafol C., “Types of Risk in a System Engineering Environment and Software Tools for Risk Analysis,” Procedia Engineering, vol. 69, pp. 177-183, 2014. https://doi.org/10.1016/j.proeng.2014.02.218

[20] Linh N., Hung P., Diep V., and Tung T., “Risk Management in Projects Based on Open-Source Software,” in Proceedings of the 8th International Conference on Software and Computer Applications, Penang, pp. 178-183, 2019. https://doi.org/10.1145/3316615.3316648

[21] Lopes S., Souza R., Contessoto A., Oliveira A., and Braga R., “A Risk Management Framework for Scrum Projects,” in Proceedings of the 23rd International Conference on Enterprise Information Systems, Virtual, pp. 30-40, 2021. DOI:10.5220/0010448300300040

[22] Machado J. and Do Lago Pereira S., “Automatic Risk Identification in Software Projects: An Approach Based on Inductive Learning,” Intelligent Information Management, vol. 4, no. 5, pp. 291-295, 2012. http://dx.doi.org/10.4236/iim.2012.425041

[23] Marques R., Costa G., Mira da Silva M., Goncalves D., and Goncalves P., “A Gamification Solution for Improving Scrum Adoption,” Empirical Software Engineering, vol. 25, no. 4, pp. 2583-2629, 2020. https://doi.org/10.1007/s10664-020-09816-9

[24] Molokken-Ostvold K. and Furulund K., “The Relationship between Customer Collaboration and Software Project Overruns,” in Proceedings of the Agile, Washington (DC), pp. 72-83, 2007. DOI:10.1109/AGILE.2007.57

[25] Nikiforova O., Babris K., and Kristapsons J., “Survey on Risk Classification in Agile Software Development Projects in Latvia,” Applied Computer Systems, vol. 25, no. 2, pp. 105-116, 2020. https://doi.org/10.2478/acss-2020-0012

[26] Oehmen J., Gunther A., Herrmann J., Schulte J., and Willumsen P., Proceedings of the Design Society: DESIGN Conference, Cambridge University Press, 2020. https://doi.org/10.1017/dsd.2020.27

[27] Patil S. and Ade R., Information Systems Design and Intelligent Applications: Advances in Intelligent Systems and Computing, Springer, 2015. https://doi.org/10.1007/978-81-322-2247- 7_78

[28] Perera C. and Perera I., “The Impact of Client Involvement towards Agile Project Success in Sri Lankan Software Industry,” in Proceedings of the Moratuwa Engineering Research Conference, Moratuwa, pp. 279-284, 2019. DOI:10.1109/MERCon.2019.8818800

[29] Ray M. and Mohapatra D., “Risk Analysis: A Guiding Force in the Improvement of Testing,” IET Software, vol. 7, no. 1, pp. 29-46, 2013. https://doi.org/10.1049/iet-sen.2011.0081

[30] Salazar-Salazar G., Mora M., Duran-Limon H., Alvarez-Rodriguez F., and Munoz-Zavala A., “Review of Agile SDLC for Big Data Analytics Systems in the Context of Small Organizations Using Scrum-XP,” The International Arab Journal of Information Technology, vol. 21, no. 6, pp. 1089-1110, 2024. DOI: 10.34028/iajit/21/6/12

[31] Shaukat Z., Naseem R., and Zubair M., “A Dataset for Software Requirements Risk Prediction,” in Proceedings of the IEEE International Conference on Computational Science and Engineering, Bucharest, pp. 112-118, 2018. DOI:10.1109/CSE.2018.00022

[32] Shrivastava S. and Rathod U., “A Goal-Driven Risk Management Approach for Distributed Agile Development Projects,” Australasian Journal of Information Systems, vol. 23, pp. 1-30, 2019. https://doi.org/10.3127/ajis.v23i0.1843

[33] Sinha R., Shameem M., and Kumar C., “SWOT: Strength, Weaknesses, Opportunities, and Threats for Scaling Agile Methods in Global Software Development,” in Proceedings of the 13th Innovations in Software Engineering Conference on Formerly Known as India Software Engineering Conference, Jabalpur, pp. 1-10, 2020. https://doi.org/10.1145/3385032.3385037

[34] Sousa A., Faria J., and Mendes-Moreira J., “An Analysis of the State of the Art of Machine Learning for Risk Assessment in Software Projects,” in Proceedings of the 33rd International Conference on Software Engineering and Knowledge Engineering, Pittsburgh, pp. 217-222, 2021. https://ksiresearchorg.ipage.com/seke/Proceeding s/seke/SEKE2021_Proceedings.pdf

[35] Szwaczyk S., Wrona K., and Amanowicz M., “Applicability of Risk Analysis Methods to Risk- Aware Routing in Software-Defined Networks,” in Proceedings of the International Conference on Military Communications and Information Systems, Warsaw, pp. 1-7, 2018. A Machine Learning Attempt for Anatomizing Software Risks in Small and Medium ... 559 DOI:10.1109/ICMCIS.2018.8398688

[36] Tavares B., Da Silva C., and De Souza A., “Risk Management Analysis in Scrum Software Projects,” International Transactions in Operational Research, vol. 26, no. 5, pp. 1884- 1905, 2019. https://doi.org/10.1111/itor.12401

[37] Thieme C., Mosleh A., Utne I., and Hegde J., “Incorporating Software Failure in Risk Analysis- Part 1: Software Functional Failure Mode Classification,” Reliability Engineering and System Safety, vol. 197, pp. 106803, 2020. https://doi.org/10.1016/j.ress.2020.106803

[38] Thieme C., Mosleh A., Utne I., and Hegde J., “Incorporating Software Failure in Risk Analysis- Part 2: Risk Modeling Process and Case Study,” Reliability Engineering and System Safety, vol. 198, pp. 106804, 2020. https://doi.org/10.1016/j.ress.2020.106804

[39] Thool A. and Brown C., “Securing Agile: Assessing the Impact of Security Activities on Agile Development,” in Proceedings of the 28th International Conference on Evaluation and Assessment in Software Engineering, Salerno, pp. 668-678, 2024. https://doi.org/10.1145/3661167.3661280

[40] Zahedi M., Kashanaki A., and Farahani E., “Risk Management Framework in Agile Software Development Methodology,” International Journal of Electrical and Computer Engineering, vol. 13, no. 4, pp. 4379-4387, 2023. https://ijece.iaescore.com/index.php/IJECE/articl e/view/29151/16756

[41] Zhang L., Wang Y., and Wu X., “Cluster-based Information Fusion for Probabilistic Risk Analysis in Complex Projects under Uncertainty,” Applied Soft Computing, vol. 104, pp. 107189, 2021. https://doi.org/10.1016/j.asoc.2021.107189