10/25/2005USC-CSE1 Ye Yang, Barry Boehm USC-CSE COCOTS Risk Analyzer COCOMO II Forum, Oct. 25 th, 2005 Betsy Clark Software Metrics, Inc.

10/25/2005USC-CSE2 Outline Motivation COCOTS Model COCOTS Risk Analyzer Evaluation Future Work

10/25/2005USC-CSE3 Motivation Enable COTS integration risks analysis with COCOTS inputs Identify relative risk levels of COTS-based applications Provide recommendations to improve risk management of COTS-based applications

10/25/2005USC-CSE4 COCOTS Model

10/25/2005USC-CSE5 COCOTS Glue Code Submodel

10/25/2005USC-CSE6 COCOTS Risk Analyzer

10/25/2005USC-CSE7 Cost Driver Transformation Size Driver Others

10/25/2005USC-CSE8 Risk Taxonomy Risk Situations Based on COCOTS

10/25/2005USC-CSE9 Risk Levels Weighting Scheme: Severe – 4 Significant – 2 General - 1

10/25/2005USC-CSE10 Risk Quantification Project Overall Risk: Risk interpretation: –Normalized scale: 0 ~ 100 –100 represents the situation where each cost factor is rated at its most expensive extremity –0 ~ 5: low risk; 5 ~ 15: medium risk; 15 ~ 50: high risk; 50 ~ 50: very high risk

10/25/2005USC-CSE11 Risk Mitigation Recommendations Knowledge base built on previous work results on “top CBA risks and risk mitigations” –B. Boehm, D. Port, Y. Yang, and J. Buhta, “Not All CBS Are Created Equally: COTS-Intensive Project Types,” Proceedings, ICCBSS’03, Ottawa, Canada, Feb. 2003, pp –D. Port, and Y. Yang, “Empirical Analysis of COTS Activity Effort Sequences,” Proceedings, ICCBSS’04, Los Angeles, California, USA, Feb

10/25/2005USC-CSE12 Evaluation Results - USC E-services Project Data

10/25/2005USC-CSE13 Evaluation Results (cont.) - COCOTS Calibration Data

10/25/2005USC-CSE14 Future Work Perform broader expert Delphi to refine the risk taxonomy Extend to cover/support risk analysis for COTS Assessment and Tailoring activities Apply COCOTS Risk Analyzer within CBD to help determining the “sweet spot” amount of effort that need to be allocated to perform COTS assessment, tailoring, and glue code development and integration