The EVerest Dataset for Secure Software Engineering

About

The EVerest dataset is a multi-artifact resource based on EVerest, an industry-driven open-source software stack for Electric Vehicle (EV) charging stations.

The dataset includes 93 manually elicited and annotated security requirements with security objectives, 1,521 fine-grained security elements (components, entities, data, data flows, states, etc.), acceptance windows, coreferences, and architectural trace links, as well as the EVerest software architecture model, source code, and natural language documentation. 

During dataset creation, a real security weakness (CWE-1295) was identified, disclosed to the project maintainers, and subsequently fixed. The dataset is available under the Apache License 2.0.

A short video is available at https://youtu.be/pnn1uqpomvQ  or can be found here as EVerestDataset.mp4

Overview

Path
Purpose

reproduction-package
Reproduction package for the requirements elicitation.

code/
Snapshot of EVerest repositories, libraries, tools, demos, and external components used as dataset context.

pcm-model/
Palladio Component Model artifacts and related files for architecture-level modeling/analysis.

texts/
Curated textual sources and annotations for requirement classification & analyses.

texts/everest-requirements
from developers elicited security requirements. For more information on labels read the paper or the annotation_guideline.

texts/everest-documentation/
from the documentation retrieved texts about the software architecture of EVerest. For more information on the retrieval read the contained info.

LICENSE
Dataset licensing information for this repository.

For more details take a look into the ReadMe.md

Change Log

Version v2

Filtering of non-conformant requirements: 9 requirement texts were labeled as no requirements as they described rather the current state of the system than a required property

Fixed spelling mistakes

Fixed PCM model (some data flow annotations were insufficient in version 1)