The EVerest Dataset for Secure Software Engineering

About

The EVerest dataset is a multi-artifact resource based on EVerest, an industry-driven open-source software stack for Electric Vehicle (EV) charging stations.

The dataset includes 93 manually elicited and annotated security requirements with security objectives, 1,521 fine-grained security elements (components, entities, data, data flows, states, etc.), acceptance windows, coreferences, and architectural trace links, as well as the EVerest software architecture model, source code, and natural language documentation. 

During dataset creation, a real security weakness (CWE-1295) was identified, disclosed to the project maintainers, and subsequently fixed. The dataset is available under the Apache License 2.0.

A short video is available at https://youtu.be/pnn1uqpomvQ  or can be found here as EVerestDataset.mp4

Overview

Path
Purpose

reproduction-package
Reproduction package for the requirements elicitation.

code/
Snapshot of EVerest repositories, libraries, tools, demos, and external components used as dataset context.

pcm-model/
Palladio Component Model artifacts and related files for architecture-level modeling/analysis.

texts/
Curated textual sources and annotations for requirement classification & analyses.

texts/everest-requirements
from developers elicited security requirements. For more information on labels read the paper or the annotation_guideline.

texts/everest-documentation/
from the documentation retrieved texts about the software architecture of EVerest. For more information on the retrieval read the contained info.

LICENSE
Dataset licensing information for this repository.

For more details take a look into the ReadMe.md

Change Log

Version v2

Filtering of non-conformant requirements: 9 requirement texts were labeled as no requirements as they described rather the current state of the system than a required property

Fixed spelling mistakes

Fixed PCM model (some data flow annotations were insufficient in version 1)

关于本数据集
EVerest数据集是基于EVerest构建的多工件资源，EVerest是面向电动汽车（Electric Vehicle）充电站的行业驱动型开源软件栈。
本数据集包含93项人工征集并标注的安全需求（附带安全目标）、1521个细粒度安全元素（包括组件、实体、数据、数据流、状态等）、验收窗口、共指关系与架构追踪链接，同时涵盖EVerest软件架构模型、源代码及自然语言文档。
在数据集构建过程中，研究人员发现了一处真实存在的安全缺陷（CWE-1295），已向项目维护者披露并完成后续修复。本数据集采用Apache License 2.0开源协议发布。
可通过链接https://youtu.be/pnn1uqpomvQ观看介绍短视频，或在本仓库中以EVerestDataset.mp4文件名获取该视频。

概览
路径
用途

reproduction-package
用于需求征集工作的复现包。

code/
作为数据集上下文的EVerest代码仓库、依赖库、工具、演示程序与外部组件的快照版本。

pcm-model/
用于架构级建模与分析的Palladio组件模型（Palladio Component Model）工件及相关文件。

texts/
经过整理的文本数据源与标注文件，用于需求分类与分析工作。

texts/everest-requirements
由开发者征集得到的安全需求文本。若需了解标签相关详情，请参阅对应论文或annotation_guideline文件。

texts/everest-documentation/
从EVerest官方文档中提取的软件架构相关文本。若需了解文本提取的详细方式，请参阅目录内的info文件。

LICENSE
本仓库的数据集授权协议说明。

如需了解更多详情，请参阅仓库内的ReadMe.md文件。