User acceptance for extended function point analysis in software security costing

Abstract

This paper explains the user acceptance used in evaluating the Extended Function Point Analysis (Extended FPA) in software security costing. The construct of Software Security Characteristics Model (SSCM), the validation of SSCM, prototype as well as adaptation of the user acceptance models, are discussed in this paper. This paper also emphasize on the user acceptance test for the prototype. The experiment construct includes the variables selection, subject selection, hypotheses formulation, and treatment. User acceptance questionnaire is setup followed by the experiment. Results show that Extended FPA is perceived ease to use, more useful as well as more likely to use, rather than IFPUG FPA in calculating software security cost. © 2011 Springer-Verlag.