Context: Trustworthiness of software has become a first-class concern of users (e.g., to understand software-made decisions). Also, there is increasing demand to demonstrate regulatory compliance of software and end users want to understand how software-intensive systems make decisions that affect them. Objective: We aim to provide a step towards understanding provenance needs of the software industry to support trustworthy software. Provenance is information about entities, activities, and people involved in producing data, software, or output of software, and used to assess software quality, reliability and trustworthiness of digital products and services. Method: Based on data from in-person and questionnaire-based interviews with professionals in leadership roles we develop an ``influence map'' to analyze who drives provenance, when provenance is relevant, what is impacted by provenance and how provenance can be managed. Results: The influence map helps decision makers navigate concerns related to provenance. It can also act as a checklist for initial provenance analyses of systems. It is empirically-grounded and designed bottom-up (based on perceptions of practitioners) rather than top-down (from regulations or policies). Conclusion: We present an imperfect first step towards understanding provenance based on current perceptions and offer a preliminary view ahead.
翻译:上下文:软件的可信性已成为用户的首要关注点(例如,用于理解软件做出的决策)。同时,对软件监管合规性的需求日益增长,最终用户希望了解软件密集型系统如何做出影响他们的决策。目标:我们旨在为理解软件行业的溯源需求迈出一步,以支持可信软件。溯源是关于参与生成数据、软件或软件输出的实体、活动及人员的信息,用于评估数字产品与服务的软件质量、可靠性和可信性。方法:基于对担任领导角色的专业人员的面对面及问卷访谈数据,我们构建了一个"影响地图",以分析谁驱动溯源、何时需考虑溯源、溯源影响什么以及如何管理溯源。结果:该影响地图帮助决策者处理与溯源相关的关切点,也可作为系统初始溯源分析的检查清单。它是基于实证研究、自下而上(依据从业者认知)而非自上而下(依据法规或政策)设计的。结论:我们基于当前认知展示了迈向溯源理解的不完美第一步,并提供了初步的前瞻性视图。