Mary Luz Sanchez Gordon

• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Gama, Kiev & Hubin, Aliaksandr (2026). Demystifying Knowledge Hiding in Software Testing: Insights from Practitioners. IEEE/ACM International Conference on Software Engineering: Software Engineering in Society Track (ICSE-SEIS). ISSN 2832-7608. 2026, s. 148–153. doi: 10.1145/3786581.3786937. Fulltekst i vitenarkiv Vis sammendrag

  Software development is a knowledge-intensive and collaborativeactivity. However, practitioners may sometimes deliberately conceal or withhold information, ideas, or expertise relevant to softwaretasks, even when a teammate explicitly requests such knowledge.This is known as knowledge hiding behaviour (KHBs). This study explores what knowledge is hidden in software testing. A survey was designed based on measures of work conditions, KHBs, andknowledge related to software testing. Responses from 102 software practitioners were collected and analysed. Although only13 participants reported KHBs, these should not be overlooked. Findings highlight the contextual nature of KHBs, suggesting that exploring KHBs in software teams is a promising avenue for future research.

• Chaaban, Omar; Sánchez-Gordón, Mary & Demi, Selina (2026). Perceptions of Undesirable Software Development Tasks among Computer Science Students. Applied Human Factors and Ergonomics International (AHFE International). 231, s. 88–99. doi: 10.54941/ahfe1007999. Fulltekst i vitenarkiv Vis sammendrag

  Software development projects include both technical and non-technical tasks, some of which may be perceived as undesirable by developers. While prior research has examined how developers perceive and manage such tasks, students’ perspectives remain unexplored.Therefore, this study aims to explore task undesirability for students. A survey-based approach was adopted to gather insights from 30 participants enrolled in IT-related programs at Østfold University College. The preliminary results revealed that back-end related tasks, bug fixing and writing documentation were among the most undesirable tasks, leading to negative emotional responses, such as frustration and demotivation among students. In addition, strategies such as “Just Do It” and working in groups were commonly employed to cope with these tasks. Although further research is needed to better understand support mechanisms that enhance students’ engagement and well-being, findings suggest that coping strategies arise when students’ experiences are not sufficiently supported. This provides an opportunity to design courses that enhance learning experiences by not only mitigating the negative impact of undesirable tasks but also making these tasks more desirable for students.

• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Gordon, Alex Sanchez & Hubin, Aliaksandr (2026). The role of voice and silence behaviors in software development: a structural equation modeling analysis. Information and Software Technology. ISSN 0950-5849. 190. doi: 10.1016/j.infsof.2025.107972. Fulltekst i vitenarkiv Vis sammendrag

  Context Most software companies strive to have high-performing teams and mitigate withdrawal behaviors like being present but unproductive. In this context, psychological safety and developers’ perceived impact are suggested as potential drivers of voice and silence behaviors. However, understanding these social aspects of software development entails the incorporation of social science theories. Objective This study aims to empirically explore the relationships among software professionals’ perceived impact, psychological safety, voice and silence behaviors, burnout particularly withdrawal and performance using a theoretical model. Method A survey questionnaire was conducted, resulting in 158 valid responses from software development teams. Then, we analyzed the responses using structural equation modeling (SEM) and a novel semi-confirmatory SEM. All variables were measured using pre-validated instruments. Results The findings supported the theoretical model, showing that psychological safety was more related to silence than voice, whereas perceived impact showed a stronger relationship with voice than with silence. Furthermore, silence contributed to higher burnout, whereas voice alleviated it. In contrast, silence showed a negative association with performance, whereas voice was positively associated with it. Conclusions This study examines the direct effects of perceived impact and psychological safety on voice and silence behaviors. Additionally, it examines the direct effects of these behaviors on burnout and task performance among software professionals. Consequently, the findings offer both theoretical and practical insights.

• Peters, Carl-Hendrik & Sánchez-Gordón, Mary (2025). Reservoir Computing as a Promising Approach for False Data Injection Attack Detection in Smart Grids. NIKT: Norsk IKT-konferanse for forskning og utdanning. ISSN 1892-0713. 37(3). doi: 10.5324/hyp73c69. Fulltekst i vitenarkiv Vis sammendrag

  Smart grids are highly digitalized electricity networks that are increasingly at risk from False Data Injection Attacks (FDIAs), which threaten grid stability. Although traditional machine learning techniques are well‑established for detecting such anomalies, a neuromorphic computing approach like Reservoir Computing (RC) offers a promising alternative. Therefore, this study aims to explore RC for FDIA detection in Smart grids by conducting a Systematic Mapping Study to identify the current research trends and a Benchmark Evaluation of seven models across 21 simulated attack scenarios. The evaluation included the following three metrics: accuracy, robustness, and training‑time efficiency. Findings show that the two traditional approaches included in this evaluation lead with up to 99 % accuracy and minimal training time. Among the five RC approaches, a Delayed Feedback Reservoir with Latency Encoding and Multi-Layer Perceptrons readout achieved ~93 % accuracy (albeit with longer training), while pairing that reservoir with a Logistic Regression readout delivered ~86 % accuracy in under 0.02 s. These findings suggest that appropriately coded and read‑out RC models can serve as robust, resource‑efficient solutions for real‑time FDIA detection.

• Oruma, Samson O.; Sánchez-Gordón, Mary & Gkioulos, Vasileios (2025). Enhancing security, privacy, and usability in social robots: A software development framework. Computer Standards & Interfaces. ISSN 0920-5489. 96. doi: 10.1016/j.csi.2025.104052. Fulltekst i vitenarkiv Vis sammendrag

  The field of social robotics is witnessing a transformative shift in public interaction and service provision with the advent of Social Robots in Public Spaces (SRPS). However, this progress brings forth significant software security challenges. Developers and stakeholders struggle with designing secure SRPS software without specific standards and frameworks. Existing Secure Software Development Life Cycles fall short in addressing the intricate security needs of SRPS, often prioritizing functionality over security. Integrating various technologies within SRPS and the dynamic nature of public spaces compounds the challenge of ensuring security and user acceptance. To bridge this gap, this study proposes SecuRoPS, a framework designed specifically to address the unique security, safety, and usability requirements of SRPS throughout the software development lifecycle by emphasizing stakeholder engagement, regulatory compliance, and continuous iterative improvements. Built on a robust technology transfer model, the framework is validated through expert interviews, real-world use cases, and laboratory testing, ensuring practical applicability and adaptability to evolving threats. This iterative framework aims to guide various stakeholders, including software developers, organizations, researchers, and end-users, fostering wider acceptance and facilitating the safe integration of social robots into everyday life.

• Hyrynsalmi, Sonja M; Sánchez-Gordón, Mary; Szlavi, Anna & Jaccheri, Maria Letizia (2025). The Tech DEI Backlash - The Changing Landscape of Diversity, Equity, and Inclusion in Software Engineering. I Li, Jingyue (Red.), FSE Companion '25: Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering. Association for Computing Machinery (ACM). ISSN 9798400712760. s. 1582–1592. doi: 10.1145/3696630.3728695. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary; Mohanani, Rahul & Colomo-Palacios, Ricardo (2025). Inequity in Software Engineering: Looks that Matter. I Hoda, Rashina (Red.), 2025 IEEE/ACM 18th International Conference on Cooperative and Human Aspects of Software Engineering: CHASE '25. IEEE (Institute of Electrical and Electronics Engineers). ISSN 9798331538712. s. 57–62. doi: 10.1109/CHASE66643.2025.00015. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Guevara-Vega, Cathy; Quiña-Mera, Antonio & Hubin, Aliaksandr (2025). The Effect of Stereotypes on Perceived Competence of Indigenous Software Practitioners: A Study of Dress Style in Professional Photos. Empirical Software Engineering. ISSN 1382-3256. 30. doi: 10.1007/s10664-025-10675-5. Fulltekst i vitenarkiv Vis sammendrag

  Context. Potential employers can easily access job candidates’ photos online and attempt to infer a candidate’s ft or alignment based on their dress style. In this context, for candidates from marginalized groups like Indigenous people, traditional clothing holds cultural signifcance as it serves as a lively expression of belonging, participation in ceremonies, and resistance. Objective. This exploratory study aims to empirically demonstrate whether dress manipulation in a picture afects the perceived competence of equally qualifed candidates for a position like a software developer in which this cue should not be crucial. Method. We conducted a quasi-experiment based on a survey. It involved job candidates (photo models) and participants (evaluators) from IT companies located in Ecuador. The analysis was performed by ftting a linear mixed-efects (LME) model based on dress style, gender and race/ethnicity of the candidates as well as evaluators’ gender and experience in hiring. Also, a thematic analysis was conducted. Results. Findings show that dress manipulation hardly infuences the evaluators’ evaluation of candidates’ competence, as no statistically signifcant diferences were found in our sample. Most of the unexplained variance (64.461%) stems from variability in scores across evaluators. Likewise, the thematic analysis revealed notable evaluator discrepancies indicating varying judgments and outcomes that suggest idiosyncrasies, which are not noise or error. Conclusions. This study demonstrates the value of contextual factors - such as gender, race/ethnicity and cultural background— in software engineering studies and calls for valuing individual software developers and their human aspects. Perceived competence extends beyond hiring situations as it can infuence initial trust and cooperative behaviors among software development team members when interacting with unfamiliar collaborators.

• Ramaj, Xhesika; Sánchez-Gordón, Mary; Gkioulos, Vasileios & Colomo-Palacios, Ricardo (2024). On DevSecOps and Risk Management in Critical Infrastructures: Practitioners' Insights on Needs and Goals. I Esnoul, Coralie; Jee, Eunkyoung; Le, Triet Huynh Minh; Babar, Ali N.; Colomo-Palacios, Ricardo & Rashid, Awais (Red.), 2024 ACM/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE/ACM Second International Workshop on Software Vulnerability (EnCyCriS/SVM '24). Association for Computing Machinery (ACM). ISSN 9798400705656. s. 45–52. doi: 10.1145/3643662.3643954. Fulltekst i vitenarkiv Vis sammendrag

  Risk management is essential for ensuring the sustained viability of organizations over the long term. It plays a pivotal role in business by helping identify potential threats and vulnerabilities, enabling well-informed decision-making. Within the context of critical infrastructures (CIs), it takes on even greater significance. DevSecOps is an innovative approach to bolstering security of software applications. This approach is being heralded as a transformative solution that encourages the adoption of robust security practices, reduces risk, and ensures uninterrupted business continuity. This qualitative study explores the needs and goals of implementing DevSecOps in CIs from the perspective of DevOps, developers, and security experts. Findings show that the relevance of DevSecOps in CIs emerges from the need for proactive work, increased efficiency, automation, monitoring mechanisms, security, and outstanding products and services. Findings also identify the goals for establishing a stronger market presence, increasing revenues, and maintaining a leading position in the market. The study provides valuable insights on DevSevOps in risk management, that can potentially encourage the adoption of DevSecOps and guide practitioners interested in leveraging the inherent benefits of this approach in the context of CIs.

• Ramaj, Xhesika; Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo & Gkioulos, Vasileios (2024). Training and Security Awareness Under the Lens of Practitioners: A DevSecOps Perspective Towards Risk Management. I Moallem, Abbas (Red.), HCI for Cybersecurity, Privacy and Trust: 6th International Conference, HCI-CPT 2024, Held as Part of the 26th HCI International Conference, HCII 2024, Washington, DC, USA, June 29–July 4, 2024, Proceedings, Part II. Springer Nature. ISSN 9783031613814. s. 84–97. doi: 10.1007/978-3-031-61382-1_6. Fulltekst i vitenarkiv
• Akbarzadeh, Aida; Chockalingam, Sabarathinam; Ramaj, Xhesika; Amro, Lama Mohammad Saed; Gordon, Mary Luz Sanchez & Gkioulos, Vasileios [Vis alle 10 forfattere av denne artikkelen] (2024). Workshop on Cybersecurity of Critical Infrastructures, Privacy and Identity Management. Sharing in a Digital World. Springer Nature. ISSN 9783031579783. s. 325–339. doi: https:/link.springer.com/content/pdf/10.1007/978-3-031-57978-3.pdf#page=334. Fulltekst i vitenarkiv Vis sammendrag

  This paper reports the presentation and discussion during the Cybersecurity of Critical Infrastructures workshop organized as a part of the 18 th IFIP Summer School on Privacy and Identity Management. Furthermore, this paper also pointed to several promising future research directions. This workshop was primarily aimed at empowering PhD candidates, MSc students, and early-career researchers with insights into Critical Infrastructure (CI) security. The workshop provided participants with guidance on navigating the intricacies of safeguarding CIs, such as those in the energy and oil and gas sectors. It encompasses various aspects, from familiarizing participants with cybersecurity standards and frameworks to understanding tools and approaches that adversaries might leverage to target a system. Additionally, it also addresses how to mitigate socio-legal implications and security issues, particularly in relation to human factors. This initiative embraced a holistic approach to cybersecurity education, covering vital components like rigorous risk management, comprehensive cybersecurity training and awareness programs. This in turn would equip participants with some essential knowledge and skills to fortify critical operations against the ever-evolving cyber threat landscape.

• Timbi-Sisalima, Cristian; Sánchez-Gordón, Mary; Otón-Tortosa, Salvador & Mendoza-González, Ricardo (2024). Self-Assessment Guide to Quality in Accessible Virtual Education: An Expert Validation. Sustainability. 16(22). doi: 10.3390/su162210011. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2024). Exploring Intersectional Perspectives in Software Engineering Through Narratives. I Damian, Daniela; Blincoe, Kelly; Ford, Denae; Serebrenik, Alexander & Masood, Zainab (Red.), Equity, Diversity, and Inclusion in Software Engineering: Best Practices and Insights. Apress Berkeley. ISSN 9781484296509. s. 185–205. doi: 10.1007/978-1-4842-9651-6_12. Fulltekst i vitenarkiv
• Mendoza-González, Ricardo; Timbi-Sisalima, Cristian; Sánchez-Gordón, Mary & Otón-Tortosa, Salvador (2024). A framework to foster accessibility in post-pandemic virtual higher education. Heliyon. 10(14). doi: 10.1016/j.heliyon.2024.e34273. Fulltekst i vitenarkiv Vis sammendrag

  The SARS-CoV-2 Coronavirus pandemic (COVID-19) forced educational institutions to move their programmes to the virtual world. Several tech-based solutions –including virtual training and tutoring, discussion forums, access to content and information, collaborative platforms, and Open Educational Resources (OER)– were implemented to address this shift and continue to be used in the post-pandemic era due to the advantages they offer, especially for hybrid and blended learning. However, the implementation of these tech-based solutions also revealed several accessibility issues that need to be addressed to fully leverage the technological benefits. This study aims to provide a framework to facilitate the adoption of good practices related to technological accessibility in virtual Higher Education. The implementation of the framework is divided into four basic actions, each of which should be tailored to the constraints and needs for improving accessibility in Higher Education Institutions (HEIs). The framework’s instantiation in four HEIs serves as a proof-of-concept in real-world scenarios. The preliminary results suggest that the proposal is promising, as it was adaptable to the specific needs of each HEI fostering accessibility and inclusion through technological alternatives that align with their organisational structures and current levels of attention to accessibility.

• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo & Gordon, Alex Sanchez (2024). Characterizing Role Models in Software Practitioners' Career: An Interview Study. I Graziotin, Daniel (Red.), 2024 IEEE/ACM 17th International Conference on Cooperative and Human Aspects of Software Engineering: CHASE '24. Association for Computing Machinery (ACM). ISSN 9798400705335. s. 164–169. doi: 10.1145/3641822.3641883. Fulltekst i vitenarkiv
• Waqas, Muhammad; Ali, Zohaib; Sánchez-Gordón, Mary & Holone, Monica Kristiansen (2024). Using LowCode and NoCode Tools in DevOps: A Multivocal Literature Review. I Mejia, Jezreel; Muñoz, Mirna; Alvaro, Rocha; Pérez, Yasmin Hernández & Avila-George, Himer (Red.), New Perspectives in Software Engineering. Springer Nature. ISSN 9783031505898. s. 71–87. doi: 10.1007/978-3-031-50590-4_5. Fulltekst i vitenarkiv
• Sanchez-Gordon, Sandra; Arias-Flores, Hugo & Sánchez-Gordón, Mary (2024). Web Accessibility and Inclusion in Online National Population Censuses: Insights from Ecuador. I Terán, Luis; Pincay, Jhonny; Vaca, Carmen & Riofrío, Daniel (Red.), 2024 Ninth International Conference on eDemocracy & eGovernment (ICEDEG). IEEE (Institute of Electrical and Electronics Engineers). ISSN 9798350365535. s. 1–7. doi: 10.1109/ICEDEG61611.2024.10702051. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2024). On the Intersectionality of Software Practitioners and Role Models. I O’Conner, Lisa (Red.), GE@ICSE '24: Proceedings of the 5th ACM/IEEE Workshop on Gender Equality, Diversity, and Inclusion in Software Engineering. Association for Computing Machinery (ACM). ISSN 9798400705755. s. 22–26. doi: 10.1145/3643785.3648483. Fulltekst i vitenarkiv
• Demi, Selina; Sánchez-Gordón, Mary; Holone, Monica Kristiansen & Larrucea, Xabier (2024). Trustworthy and collaborative traceability management: Experts’ feedback on a blockchain-enabled framework. Journal of Software: Evolution and Process (JSEP). ISSN 2047-7473. 36(11). doi: 10.1002/smr.2707. Fulltekst i vitenarkiv Vis sammendrag

  Blockchain technology has attracted significant attention in both academia and industry. Recently, the application of blockchain has been advocated in software engineering. The global software engineering paradigm exacerbates trust issues, as distributed and cross-organizational teams need to share software artifacts. In such a context, there is a need for a decentralized yet reliable traceability knowledge base to keep track of what/how/when/by whom software artifacts were created or changed. This study presents a blockchain-enabled framework for trustworthy and collaborative traceability management and identifies benefits, challenges, and potential improvements based on the feedback of software engineering experts. A qualitative approach was followed in this study through semistructured interviews with software engineering (SE) experts. Transcripts were analyzed by applying the content analysis technique. The results indicated the emergence of five categories, further grouped into three main categories: experts' perceptions, blockchain-based software process improvement, and experts' recommendations. In addition, the findings suggested four archetypes of organizations that may be interested in blockchain technology: distributed organizations, organizations with contract-based projects, organizations in regulated domains, and regulators who may push the use of this technology. Further efforts should be devoted to the integration of the proposal with tools used throughout the software development lifecycle and leveraging the potential of smart contracts in validating the implementation of requirements automatically.

• Khakpour, Alireza; Colomo-Palacios, Ricardo; Martini, Antonio & Sánchez-Gordón, Mary (2023). The Use of Domain-Specific Languages for Visual Analytics: A Systematic Literature Review. Technologies. 11(2). doi: 10.3390/technologies11020037. Fulltekst i vitenarkiv Vis sammendrag

  Visual Analytics (VA) is a multidisciplinary field that requires various skills including but not limited to data analytics, visualizations, and the corresponding domain knowledge. Recently, many studies proposed creating and using Domain-Specific Languages (DSLs) for VA in order to abstract complexities and assist designers in developing better VAs for different data domains. However, development methods and types of DSLs vary for different applications and objectives. In this study, we conducted a systematic literature review to overview DSL methods and their intended applications for VA systems. Moreover, the review outlines the benefits and limitations of each of these methods. The aim is to provide decision support for both the research and development communities to choose the most compatible approach for their application. We think the communication of this research delivers a broad figure of previous relevant research and assists with the transfer and adaptation of the results to other domains.

• Sánchez-Gordón, Mary; Tovar, Edmundo; Colomo-Palacios, Ricardo; Piedra, Nelson & Castro, Manuel (2023). Educating Augmented Programmers. Computer. ISSN 0018-9162. 56(12), s. 100–104. doi: 10.1109/MC.2023.3313325. Fulltekst i vitenarkiv
• Kvalvik, Petter; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2023). What Does Data Valuation Literature Tell Us About Methods and Dimensions? Implications for City Data Marketplaces. I Sætra, Henrik Skaug (Red.), Technology and Sustainable Development: The Promise and Pitfalls of Techno-Solutionism. Routledge. ISSN 9781032350561. s. 215–228. doi: 10.1201/9781003325086-16. Fulltekst i vitenarkiv
• Esnoul, Coralie; Gordon, Mary Luz Sanchez; Jee, Eunkyoung; Colomo-Palacios, Ricardo; Chockalingam, Sabarathinam & Simensen, John Eidar [Vis alle 7 forfattere av denne artikkelen] (2023). Report on the 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS - 2023). Software engineering notes. ISSN 0163-5948. 48(4), s. 41–45. doi: 10.1145/3617946.3617954. Fulltekst i vitenarkiv Vis sammendrag

  Critical Infrastructures (CIs) are vital for modern societies, encompassing diverse sectors such as healthcare, banking, emergency services, energy, water distribution, oil and gas, and transportation. Over time, these CIs have become increasingly reliant on technology to ensure their seamless operations. The reliable and secure operation of these CIs holds paramount importance for a nation's economy and the well-being of society. This paper presents the findings and discussions from the 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS - 2023). The main purpose of this EnCyCriS workshop is to collect contributions from practitioners and researchers working on challenges and solutions for engineering and cybersecurity of critical systems in the Fourth Revolution (4IR). The 2023 edition has accepted and presented six papers. In addition, there was a keynote talk from a Senior Research Scientist in safety and security of digital technologies within safety critical industries in addition to an open discussion about the "Future of IT and OT". This workshop was co-located with the 45th International Conference on Software Engineering (ICSE - 2023), which took place on 20th May 2023.

• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Guevara-Vega, Cathy & Quiña-Mera, Antonio (2023). The Effect of Stereotypes on Perceived Competence of Indigenous Software Practitioners: A Professional Photo. arXiv.org. ISSN 2331-8422. doi: 10.48550/arXiv.2308.14695. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Akbar, Muhammad Azeem & Holone, Monica Kristiansen (2023). A Perspective on the Role of Human Behaviors in Software Development: Voice and Silence. arXiv.org. ISSN 2331-8422. doi: 10.48550/arXiv.2304.12903. Fulltekst i vitenarkiv
• Ramaj, Xhesika; Colomo-Palacios, Ricardo; Gordon, Mary Luz Sanchez & Gkioulos, Vasileios (2023). Towards a DevSecOps-Enabled Framework for Risk Management of Critical Infrastructures. I Yilmaz, Murat; Clarke, Paul; Riel, Andreas & Messnarz, Richard (Red.), Systems, Software and Services Process Improvement: 30th European Conference, EuroSPI 2023, Grenoble, France, August 30 – September 1, 2023, Proceedings, Part I. Springer Publishing Company. ISSN 9783031423062. s. 47–58. doi: 10.1007/978-3-031-42307-9_4. Fulltekst i vitenarkiv
• Rijal, Laxmi; Colomo-Palacios, Ricardo & Sánchez-Gordón, Mary (2022). AIOps: A Multivocal Literature Review. I Misra, Sanjay; Tyagi, Amit Kumar; Piuri, Vincenzo & Garg, Lalit (Red.), Artificial Intelligence for Cloud and Edge Computing. Springer. ISSN 9783030808204. s. 31–50. doi: 10.1007/978-3-030-80821-1_2. Fulltekst i vitenarkiv
• Demi, Selina; Colomo-Palacios, Ricardo; Sánchez-Gordón, Mary; Velasco, Carlos & Cano, Ramón (2022). A Neural Blockchain for Requirements Traceability: BC4RT Prototype. I Yilmaz, Murat; Clarke, Paul; Messnarz, Richard & Wöran, Bruno (Red.), Systems, Software and Services Process Improvement: 29th European Conference, EuroSPI 2022, Proceedings. Springer. ISSN 9783031155598. s. 45–59. doi: 10.1007/978-3-031-15559-8_4. Fulltekst i vitenarkiv
• Mendoza-González, Ricardo; Luján-Mora, Sergio; Otón-Tortosa, Salvador; Sánchez-Gordón, Mary; Rodríguez-Díaz, Mario Alberto & Reyes-Acosta, Ricardo Emmanuel (2022). Guidelines to Establish an Office of Student Accessibility Services in Higher Education Institutions. Sustainability. 14(5). doi: 10.3390/su14052635. Fulltekst i vitenarkiv Vis sammendrag

  The objective of this paper is to propose a set of guidelines to establish an office of Student Accessibility Services (SAS) in Higher Education Institutions (HEIs). The proposed guidelines help to integrate disjointed knowledge to facilitate its interpretation and implementation during deployment of basic support services in favor of students with disability. These guidelines can help to mitigate complexity in providing SAS for the first time in HEIs. These guidelines cover both the design and implementation of an office of SAS and its management. Knowledge was found through a multivocal literature review (MLR), which allowed to capture not only academic approaches but also vantage points and experiences from practice. Key concepts and aspects were organized into eight components (five related to the design and implementation, and three associated with the management context). An expert appraisal method was used as a proof of concept, which complemented a previously performed preliminary implementation example. Obtained results demonstrated the pertinence of the conceptual proposal and confirmed guidelines capability for full implementation in a real-world scenario.

• Timbi-Sisalima, Cristian; Sánchez-Gordón, Mary; Hilera-González, José Ramón & Otón-Tortosa, Salvador (2022). Quality Assurance in E-learning: A Proposal from Accessibility to Sustainability. Sustainability. 14(5). doi: 10.3390/su14053052. Fulltekst i vitenarkiv Vis sammendrag

  Given the importance of developing and offering accessible education for all, indispensable aspects of education for sustainable development (ESD) are needed. This study addresses that need by proposing a quality self-assessment for virtual education from an accessibility perspective. This proposal is based on previous literature about quality assurance in e-learning that considered accessibility and its application in the field of higher education. The bibliographic review was conducted by following Multivocal Literature Review (MLR) guidelines. The initial search returned 999 items from 5 academic databases and 32,200 professional sources from Google. After reviewing the sources, 37 of them were included. Then, the accessibility criteria were identified and integrated into an evaluation model. Such a model is divided into four dimensions: (1) organization, (2) student body, (3) teaching, and (4) infrastructure. The model also includes a set of standards (16), requirements (48), and evidence (63) that apply to each dimension. Moreover, self-assessment guidelines for accessible virtual education were proposed. They included a conceptual and theoretical framework, a self-assessment model, and a methodology for applying the model. The methodology included five phases: planning, model tuning or refinement of the model, evaluation, results, and continuous improvement. As future work, the implementation and validation of the guidelines will be carried out.

• Demi, Selina; Sánchez-Gordón, Mary & Kristiansen, Monica Lind (2022). Blockchain for requirements traceability: A qualitative approach. Journal of Software: Evolution and Process (JSEP). ISSN 2047-7473. doi: 10.1002/smr.2493. Fulltekst i vitenarkiv Vis sammendrag

  Blockchain technology has emerged as a “disruptive innovation” that has received significant attention in academic and organizational settings. However, most of the existing research is focused on technical issues of blockchain systems, overlooking the organizational perspective. This study adopted a grounded theory to unveil the blockchain implementation process in organizations from the lens of blockchain experts. The results revealed three main categories: key activities, success factors, and challenges related to blockchain implementation in organizations, the latter being identified as the core category, along with 17 other concepts. Findings suggested that the majority of blockchain projects stop at the pilot stage and outlined organizational resistance to change as the core challenge. According to the experts, the following factors contribute to the organizational resistance to change: innovation–production gap, conservative management, and centralized mentality. The study aims to contribute to the existing blockchain literature by providing a holistic and domain-agnostic view of the blockchain implementation process in organizational settings. This can potentially encourage the development and implementation of blockchain solutions and guide practitioners who are interested in leveraging the inherent benefits of this technology. In addition, the results are used to improve a blockchain-enabled requirements traceability framework proposed in our previous paper.

• Ramaj, Xhesika; Sánchez-Gordón, Mary; Chockalingam, Sabarathinam & Colomo-Palacios, Ricardo (2022). Unveiling the Safety Aspects of DevSecOps: Evolution, Gaps and Trends. Recent Advances in Computer Science and Communications. ISSN 2666-2558. doi: 10.2174/2666255816666220804143918. Fulltekst i vitenarkiv Vis sammendrag

  Background: The popularity of DevSecOps is on the rise because it promises to integrate a greater degree of security into software delivery pipelines. However, there is also an unacceptable risk related to safety that cannot be overlooked, given the importance of this aspect in many industries. Objective: The objective of this study is to provide an overview of the safety aspects reported in the literature on DevSecOps. This study also characterizes such aspects and identifies the gaps that may lead to future research work. Method: A systematic literature review was conducted using five well-known academic databases. The search was executed in September 2021 and March 2022 to identify relevant studies. Results: The search returned 114 academic studies. After the screening process, five primary studies published between 2019 and 2021 were selected. These studies were analyzed thoroughly to identify the safety aspects. Then, we categorized them into three main groups: (i) risk-related safety aspects, (ii) human-related aspects, and (iii) management aspects. Conclusion: Safety is an important characteristic that is becoming more critical as the number of critical systems grows. This review reveals that only a scarce number of studies are focusing on safety in DevSecOps. However, those studies gave us some insights into this topic. Therefore, our main observation is that this topic has not yet been completely explored in the academic literature. This review can encourage reflection and discussion between the safety and security communities.

• Sandeep, R.C.; Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo & Kristiansen, Monica Lind (2022). Effort Estimation in Agile Software Development: A Exploratory Study of Practitioners’ Perspective. I Przybyłek, Adam; Jarzębowicz, Aleksander; Luković, IVan & Ng, Yen Ying (Red.), Lean and Agile Software Development: 6th international conference, LASD 2022, virtual event, January 22, 2022, proceedings. Springer. ISSN 9783030942373. s. 136–149. doi: 10.1007/978-3-030-94238-0_8. Fulltekst i vitenarkiv
• Oruma, Samson Ogheneova; Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Gkioulos, Vasileios & Hansen, Joakim Klevmo (2022). A Systematic Review on Social Robots in Public Spaces: Threat Landscape and Attack Surface. Computers. 11(12). doi: 10.3390/computers11120181. Fulltekst i vitenarkiv Vis sammendrag

  There is a growing interest in using social robots in public spaces for indoor and outdoor applications. The threat landscape is an important research area being investigated and debated by various stakeholders. Objectives: This study aims to identify and synthesize empirical research on the complete threat landscape of social robots in public spaces. Specifically, this paper identifies the potential threat actors, their motives for attacks, vulnerabilities, attack vectors, potential impacts of attacks, possible attack scenarios, and mitigations to these threats. Methods: This systematic literature review follows the guidelines by Kitchenham and Charters. The search was conducted in five digital databases, and 1469 studies were retrieved. This study analyzed 21 studies that satisfied the selection criteria. Results: Main findings reveal four threat categories: cybersecurity, social, physical, and public space. Conclusion: This study completely grasped the complexity of the transdisciplinary problem of social robot security and privacy while accommodating the diversity of stakeholders’ perspectives. Findings give researchers and other stakeholders a comprehensive view by highlighting current developments and new research directions in this field. This study also proposed a taxonomy for threat actors and the threat landscape of social robots in public spaces.

• Ramaj, Xhesika; Gordon, Mary Luz Sanchez; Gkioulos, Vasileios; Chockalingam, Sabarathinam & Colomo-Palacios, Ricardo (2022). Holding on to Compliance While Adopting DevSecOps: An SLR. Electronics (Basel). 11(22), s. 1–19. doi: 10.3390/electronics11223707. Fulltekst i vitenarkiv Vis sammendrag

  The software industry has witnessed a growing interest in DevSecOps due to the premises of integrating security in the software development lifecycle. However, security compliance cannot be disregarded, given the importance of adherence to regulations, laws, industry standards, and frameworks. This study aims to provide an overview of compliance aspects in the context of DevSecOps and explore how compliance is ensured. Furthermore, this study reveals the trends of compliance according to the extant literature and identifies potential directions for further research in this context. Therefore, we carried out a systematic literature review on the integration of compliance aspects in DevSecOps, which rigorously followed the guidelines proposed by Kitchenham and Charters. We found 934 articles related to the topic by searching five bibliographic databases (163) and Google Scholar (771). Through a rigorous selection process, we selected 15 papers as primary studies. Then, we identified the compliance aspects of DevSecOps and grouped them into three main categories: compliance initiation, compliance management, and compliance technicalities. We observed a low number of studies; therefore, we encourage further efforts into the exploration of compliance aspects, their automated integration, and the development of metrics to evaluate such a process in the context of DevSecOps.

• Kvalvik, Petter; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2022). Beyond technology in smart cities: a multivocal literature review on data governance. Aslib Journal of Information Management. ISSN 2050-3806. doi: 10.1108/AJIM-04-2022-0196. Fulltekst i vitenarkiv
• Sadaqat, Mubashra; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2022). Benchmarking Serverless Computing: Performance and Usability. Journal of Information Technology Research. ISSN 1938-7857. 15(1). doi: 10.4018/JITR.299374. Fulltekst i vitenarkiv
• Matthies, Christoph; Sánchez-Gordón, Mary; Jørgensen, Jens Bæk & Prechelt, Lutz (2022). "Communication Is a Scarce Resource!'': A Summary of CHASE'22 Conference Discussions. arXiv.org. ISSN 2331-8422. doi: 10.48550/arXiv.2207.00054. Fulltekst i vitenarkiv Vis sammendrag

  Background: Software Engineering regularly views communication between project participants as a tool for solving various problems in software development. Objective: Formulate research questions in areas related to CHASE. Method: A day-long discussion of five participants at the in-person day of the 15th International Conference on Cooperative and Human Aspects of Software Engineering (CHASE 2022) on May 23rd 2022. Results: It is not rare in industrial SE projects that communication is not just a tool or technique to be applied but also represents a resource, which, when lacking, threatens project success. This situation might arise when a person required to make decisions (especially regarding requirements, budgets, or priorities) is often unavailable. It may be helpful to frame communication as a scarce resource to understand the key difficulty of such situations. Conclusion: We call for studies that focus on the allocation and management of scarce communication resources of stakeholders as a lens to analyze software engineering projects.

• Rafi, Saima; Akbar, Muhammad Azeem; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2022). DevOps Practitioners’ Perceptions of the Low-code Trend. I Madeiral, Fernanda; Lassenius, Casper; Conte, Tayana & Männistö, Tomi (Red.), Proceedings of the 16th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement. Association for Computing Machinery (ACM). ISSN 9781450394277. s. 301–306. doi: 10.1145/3544902.3546635. Fulltekst i vitenarkiv Vis sammendrag

  Background: DevOps is currently one of the main trends in software development. Low-Code is also an emerging tendency that, combined with DevOps, may offer significant value to software businesses by improving the process. However, how DevOps practices and low-code are combined is little known. Aim: This study aims to understand the practitioner's perspectives on low-code trends. Method: Twelve interviews with IT professionals who deal with low-code in the context of DevOps were conducted. Then, a grounded theory approach was used to theme the interview quotes into emergent categories. Results: The main result of this exploratory study reveals that such an approach is the most common response to the skill shortages of software professionals. Conclusion: This study suggests the emergence of DevOps and low-code could significantly contribute to the development of quality products with low-cost and time.

• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2021). Managing software development risk: Risks of introducing the role of agile coach – a multivocal literature review. I Engemann, Kurt J. & O'Connor, Rory V. (Red.), Project Risk Management: Managing Software Development Risk. De Gruyter Brill. ISSN 9783110648232. s. 25–47. doi: 10.1515/9783110652321-003. Fulltekst i vitenarkiv Vis sammendrag

  Managing risk is essential for every organization. However, significant opportunities may be lost by concentrating on the negative aspects of risk without bearing in mind the positive attributes. The objective of Project Risk Management: Managing Software Development Risk is to provide a distinct approach to a broad range of risks and rewards associated with the design, development, implementation and deployment of software systems. The traditional perspective of software development risk is to view risk as a negative characteristic associated with the impact of potential threats. The perspective of this book is to explore a more discerning view of software development risks, including the positive aspects of risk associated with potential beneficial opportunities. A balanced approach requires that software project managers approach negative risks with a view to reduce the likelihood and impact on a software project, and approach positive risks with a view to increase the likelihood of exploiting opportunities. Project Risk Management: Managing Software Development Risk explores software development risk both from a technological and business perspective. Issues regarding strategies for software development are discussed and topics including risks related to technical performance, outsourcing, cybersecurity, scheduling, quality, costs, opportunities and competition are presented. Bringing together concepts across the broad spectrum of software engineering with a project management perspective, this volume represents both a professional and scholarly perspective on the topic. Separates risk into two viewpoints: Positive Risk - an opportunity to the project – and Negative Risk - a threat to the project, which is a unique approach.

• Demi, Selina; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2021). What have we learnt from the challenges of (semi-) automated requirements traceability? A discussion on blockchain applicability. IET Software. ISSN 1751-8806. 15(6), s. 391–411. doi: 10.1049/sfw2.12035. Fulltekst i vitenarkiv Vis sammendrag

  Over the last 3 decades, researchers have attempted to shed light into the requirements traceability problem by introducing tracing tools, techniques, and methods with the vision of achieving ubiquitous traceability. Despite the technological advances, requirements traceability remains problematic for researchers and practitioners. This study aims to identify and investigate the main challenges in implementing (semi-)automated requirements traceability, as reported in the recent literature. A systematic literature review was carried out based on the guidelines for systematic literature reviews in software engineering, proposed by Kitchenham. We retrieved 4530 studies by searching five major bibliographic databases and selected 70 primary studies. These studies were analysed and classified according to the challenges they present and/or address. Twenty-one challenges were identified and were classified into five categories. Findings reveal that the most frequent challenges are technological challenges, in particular, low accuracy of traceability recovery methods. Findings also suggest that future research efforts should be devoted to the human facet of tracing, to explore traceability practices in organisational settings, and to develop traceability approaches that support agile and DevOps practices. Finally, it is recommended that researchers leverage blockchain technology as a suitable technical solution to ensure the trustworthiness of traceability information in interorganisational software projects.

• Ingavélez‑Guerra, Paola; Otón‑Tortosa, Salvador; Hilera‑González, José & Sánchez-Gordón, Mary (2021). The use of accessibility metadata in e‑learning environments: a systematic literature review. Universal Access in the Information Society. ISSN 1615-5289. 22(2), s. 445–461. doi: 10.1007/s10209-021-00851-x. Fulltekst i vitenarkiv Vis sammendrag

  E-learning environments constitute an essential element in education, as they help students to ensure their pass their courses and graduate on time. Although guidelines, techniques, and methods have been presented in some literature in recent years to contribute to the development of accessible e-learning environments that promote digital inclusion, their implementation is challenging. In this context, the use of accessibility metadata not only provides a way to enhance the description of adapted educational resources but also facilitates their search according to the needs and preferences of students, in particular those with disabilities. In this paper, a systematic review was conducted in order to provide the state of the art regarding the use of accessibility metadata in e-learning environments. A total of 746 documents were found during the period from 2012 to 2019, of which 31 were selected according to the inclusion and exclusion criteria relevant to our review. The findings revealed an intensive use of models and standards of accessibility in e-learning environments, however, using accessibility metadata remains underused. In fact, the evaluation of accessibility and adaptability through the use of its metadata was not found. The fndings obtained also helped to establish challenges and opportunities in this research feld as well as to provide an overview that could support those who generate educational resources to keep their interest in making them accessible.

• Sánchez-Gordón, Mary (2021). Connecting the Dots Between Human Factors and Software Engineering. I Negrón, Adriana Peña Pérez & Muñoz, Mirna (Red.), Latin American Women and Research Contributions to the IT Field. IGI Global. ISSN 9781799875529. s. 263–279. doi: 10.4018/978-1-7998-7552-9.ch012. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo & Mendoza-González, Ricardo (2021). Design Thinking in Practice. IT Professional Magazine. ISSN 1520-9202. 23(4), s. 95–100. doi: 10.1109/MITP.2020.2993113. Fulltekst i vitenarkiv Vis sammendrag

  Technology companies are under enormous pressure to remain competitive. In this situation, the time it takes to reach the market for an innovative idea about a product or service is crucial. Large corporations in the IT industry, such as SAP, Google, IBM, Microsoft, Apple, and startups acknowledge that Design Thinking (DT)-along with other approaches-is one promising avenue to become more innovative and helps to accelerate the process. This article presents a brief overview of DT as well as what, in practice, technology companies are actually implementing under the rubric of “Design Thinking” and the challenges reported on a survey conducted among professionals in this field.

• Demi, Selina; Colomo-Palacios, Ricardo & Sánchez-Gordón, Mary (2021). Software Engineering Applications enabled by Blockchain Technology: A Systematic Mapping Study. Applied Sciences. 11(7). doi: 10.3390/app11072960. Fulltekst i vitenarkiv Vis sammendrag

  The novel, yet disruptive blockchain technology has witnessed growing attention, due to its intrinsic potential. Besides the conventional domains that benefit from such potential, such as finance, supply chain and healthcare, blockchain use cases in software engineering have emerged recently. In this study, we aim to contribute to the body of knowledge of blockchain-oriented software engineering by providing an adequate overview of the software engineering applications enabled by blockchain technology. To do so, we carried out a systematic mapping study and identified 22 primary studies. Then, we extracted data within the research type, research topic and contribution type facets. Findings suggest an increasing trend of studies since 2018. Additionally, findings reveal the potential of using blockchain technologies as an alternative to centralized systems, such as GitHub, Travis CI, and cloud-based package managers, and also to establish trust between parties in collaborative software development. We also found out that smart contracts can enable the automation of a variety of software engineering activities that usually require human reasoning, such as the acceptance phase, payments to software engineers, and compliance adherence. In spite of the fact that the field is not yet mature, we believe that this systematic mapping study provides a holistic overview that may benefit researchers interested in bringing blockchain to the software industry, and practitioners willing to understand how blockchain can transform the software development industry.

• Demi, Selina; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2021). A Blockchain-enabled Framework for Requirements Traceability. I Yilmaz, Murat; Clarke, Paul & Messnarz, Richard (Red.), Systems, Software and Services Process Improvement: 28th European Conference, EuroSPI 2021, Proceedings. Springer. ISSN 9783030855208. s. 3–13. doi: 10.1007/978-3-030-85521-5_1. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2021). A Framework for Intersectional Perspectives in Software Engineering. I Hoda, Rashina & Fagerholm, Fabian (Red.), 2021 IEEE/ACM 13th International Workshop on Cooperative and Human Aspects of Software Engineering: CHASE 2021: [Proceedings]. IEEE (Institute of Electrical and Electronics Engineers). ISSN 9781665414098. s. 121–122. doi: 10.1109/CHASE52884.2021.00025. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2020). Security as Culture: A Systematic Literature Review of DevSecOps. I Rothermel, Gregg & Bae, Doo-Hwan (Red.), ICSEW'20: Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops. ACM Publications. ISSN 9781450379632. s. 266–269. doi: 10.1145/3387940.3392233. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary; Rijal, Laxmi & Colomo-Palacios, Ricardo (2020). Beyond Technical Skills in Software Testing: Automated versus Manual Testing. I Rothermel, Gregg & Bae, Doo-Hwan (Red.), ICSEW'20: Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops. ACM Publications. ISSN 9781450379632. s. 161–164. doi: 10.1145/3387940.3392238. Fulltekst i vitenarkiv
• Demi, Selina; Colomo-Palacios, Ricardo; Johansen, Stig Henning & Sánchez-Gordón, Mary (2020). Mapping human values and scrum roles: a study on students' preferences. I Rothermel, Gregg & Bae, Doo-Hwan (Red.), ICSEW'20: Proceedings of the IEEE/ACM 42nd International Conference on Software Engineering Workshops. ACM Publications. ISSN 9781450379632. s. 570–576. doi: 10.1145/3387940.3391467. Fulltekst i vitenarkiv Vis sammendrag

  Despite the long tradition on the study of human values, the impact of this field in the software engineering domain is rarely studied. To these regards, this study focuses on applying human values to agile software development process, more specifically to scrum roles. Thus, the goal of the study is to explore possible associations between human values and scrum roles preferences among students. Questionnaires are designed by employing the Short Schwartz's Value Survey and are distributed among 57 students. The results of the quantitative analysis process consisting of descriptive statistics, linear regression models and Pearson correlation coefficients, revealed that values such as power and self-direction influence the preference for the product owner role, the value of hedonism influences the preference for scrum masters and self-direction is associated with team members' preference.

• Sanchez-Gordon, Sandra; Luján-Mora, Sergio & Sánchez-Gordón, Mary (2020). E-Government Accessibility in Ecuador: A Preliminary Evaluation. I Terán, Luis; Pincay, Jhonny & Portmann, Edy (Red.), 2020 Seventh International Conference on eDemocracy & eGovernment (ICEDEG). IEEE (Institute of Electrical and Electronics Engineers). ISSN 9781728158822. s. 50–57. doi: 10.1109/ICEDEG48599.2020.9096766. Fulltekst i vitenarkiv Vis sammendrag

  The National Council for Equal Disabilities of Ecuador reports that there are 471,020 citizens with disabilities registered in the country. This represents the 2.75% of the population. From them, 290,148 are adult citizens who are potential beneficiaries of accessible public websites. In 2016, the Ecuadorian Institute for Standardization published the Ecuadorian technical regulation RTE INEN 288 that applies to web content published on public and private Ecuadorian websites that provide public services. The regulation establishes that the level of conformity A of the Web Content Accessibility Guidelines (WCAG) version 2.0 must have been fully satisfied by 2018 and the level AA should be complied by August 2020. Soon, this regulation should be updated to the current version 2.1 published in June 2018. This study presents the results of a preliminary evaluation carried out with a sample of the five most visited Ecuadorian e-Government websites that provide online services to citizens. Two automated web accessibility evaluation tools were used: WAVE and Cynthia Says. The results reveal that all the evaluated websites have accessibility issues and fail to comply with the Ecuadorian regulation. The three most recurrent accessibility errors were a lack of alternative texts (WCAG Success Criteria 1.1.1 Non-text Content, Level A) and empty links (WCAG Success Criteria 2.4.4 Link Purpose, Level A). Overall, 74.8% of the issues found corresponded to Level A while 25.2% corresponded to Level AA.

• Colomo-Palacios, Ricardo; Sánchez-Gordón, Mary & Arias-Aranda, Daniel (2020). A critical review on Blockchain assessment initiatives: a technology evolution viewpoint. Journal of Software: Evolution and Process (JSEP). ISSN 2047-7473. 32(11). doi: 10.1002/smr.2272. Fulltekst i vitenarkiv Vis sammendrag

  Blockchain is considered as a major emerging technology that is having an everincreasing spread both in industrial and academic contexts. As the usage of blockchain keeps increasing, a fourth generation of blockchain platforms is being proposed. Thus, applications of blockchain have evolved towards wider scopes than cryptocurrency and asset management. In this context, it is important for practitioners to have deep understanding of various blockchain assessment initiatives. Therefore, this work discusses blockchain assessment initiatives from a technology evolution viewpoint. Furthermore, a mapping was conducted to identify factors that impact blockchain initiatives, synthesize available evidence, and identify gaps between relevant approaches available in the literature. As a result, nine selected works were analyzed based on applicability, research approach, assessment process, blockchain adoption process, and blockchain waves. The findings can help practitioners to understand the main assessment factors that undermine blockchain implementations.

• Khakpour, Alireza; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2020). What We Know About the Greenability of Reality Technologies: A Systematic Literature Review. I Vanessa, Ratten (Red.), Entrepreneurship and Organizational Change. Springer Nature. ISSN 9783030354145. s. 89–113. doi: 10.1007/978-3-030-35415-2_5. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary; Colomo-Palacios, Ricardo; Sanchez, Alex & Sanchez-Gordon, Sandra (2020). Integrating Approaches in Software Development: A Case Analysis in a Small Software Company. I Yilmaz, Murat; Niemann, J.; Clarke, Paul & Messnarz, Richard (Red.), Systems, Software and Services Process Improvement. Springer. ISSN 9783030564407. s. 95–106. doi: 10.1007/978-3-030-56441-4_7. Fulltekst i vitenarkiv
• Castillo-Salinas, Luis; Sanchez-Gordon, Sandra; Villarroel-Ramos, Jorge & Sánchez-Gordón, Mary (2020). Evaluation of the implementation of a subset of ISO/IEC 29110 software implementation process in four teams of undergraduate students of Ecuador. An empirical software engineering experiment. Computer Standards & Interfaces. ISSN 0920-5489. 70. doi: 10.1016/j.csi.2020.103430. Fulltekst i vitenarkiv Vis sammendrag

  The competitiveness of software development companies depends on their ability to offer software products with quality attributes within approved budget and schedule. Most Very Small Entities (VSEs) that develop software do not see the benefits of implementing software standards. Consequently, they limit their potential to be recognised as quality software development entities. In this study, the authors present results obtained through the application of empirical software engineering in an experiment in which the ISO/IEC TR 29110–5–1–2 “Software engineering – Lifecycle profiles for Very Small Entities (VSEs) – Part 5–1–2: Management and engineering guide: Generic profile group: Basic profile” was used. The guide includes two processes: Project Management (PM) process and Software Implementation (SI) process. The objective of the project was the development of a software product for the scheduling of medical appointments for the Student Wellness Center of a university of Ecuador. Four teams of undergraduate students were involved. Two of them (controlled teams) implemented a subset of the SI process, while the other two (non-controlled teams) had freedom to choose development activities that were subsequently mapped with the activities of the standard. All teams developed the software product using the SCRUM framework within the same timeframe. Although the experiment was focused on the SI process, the teams also used a tailored version of the PM process defined by the professors. The experiment execution encountered several difficulties. For example, the timeframe of six weeks established in the design of the experiment was too short since students worked part time in the project. All the teams experienced this difficulty, especially when they had to construct and test the software components. Overall, the teams that used the ISO/IEC TR 29110–5–1–2 guide achieved better scores in the quality evaluation of their software processes.

• Tortosa, Salvador Otón; Ingavélez-Guerra, Paola Cristina; Sanchez-Gordon, Sandra & Sánchez-Gordón, Mary (2020). Evolution of Accessibility Metadata in Educational Resources. I Mendoza-González, Ricardo; Luna-García, Huizilopoztli & Mendoza-González, Alfredo (Red.), UXD and UCD Approaches for Accessible Education. IGI Global. ISSN 9781799823254. s. 1–20. doi: 10.4018/978-1-7998-2325-4.ch001. Fulltekst i vitenarkiv
• Lie, Martin Forsberg; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2020). DevOps in an ISO 13485 regulated environment: A multivocal literature review. International Symposium on Empirical Software Engineering and Measurement. ISSN 1949-3770. doi: 10.1145/3382494.3410679. Fulltekst i vitenarkiv
• Lie, Martin Forsberg; Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2020). DevOps in an ISO 13485 Regulated Environment: A Multivocal Literature Review. I Baldassarre, Teresa & Lanubile, Filippo (Red.), Proceedings of the 14th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement. Association for Computing Machinery (ACM). ISSN 9781450375801. doi: 10.1145/3382494.3410679. Fulltekst i vitenarkiv
• Sanchez-Gordon, Sandra; Sánchez-Gordón, Mary Luz; Yilmaz, Murat & O'Connor, Rory V. (2019). Integration of accessibility design patterns with the software implementation process of ISO/IEC 29110. Journal of Software: Evolution and Process (JSEP). ISSN 2047-7473. 31(1). doi: 10.1002/smr.1987. Fulltekst i vitenarkiv Vis sammendrag

  The Web Content Accessibility Guidelines was developed by World Wide Web Consortium with a goal of providing a single shared standard for web content accessibility that meets the needs of individuals, organizations, and governments. Given that there is a large percentage of very small entities that develop software who also utilize the ISO/IEC software process standard, the purpose of this study is the development of software design patterns for users with visual disabilities. As a result, four accessibility design patterns are defined: Authentication adapter, Blindness adapter, Dichromatic color vision adapter, and Blurry vision adapter. These patterns will help to improve the design of the web applications built using them while being compliant with the ISO/IEC 29110 standard. The use of design patterns also enables the transfer of design experience to programming practices and improves the software documentation. To validate the set of patterns, an online course for Spanish speakers was developed, and the evaluation was carried out using simulators, automated tools, experts, and users. Simulators and automated tools showed no accessibility errors and experts evaluated 10 heuristics principles and did not identify any severity issues. Taken together, our results provide positive evidence that users with visual disabilities could benefit from the proposed features.

• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2019). Developing SPI culture in the SME arena: An exploratory study. I Walker, Alistair; O'Connor, Rory V. & Messnarz, Richard (Red.), Systems, Software and Services Process Improvement. Springer. ISSN 9783030280048. s. 222–234. doi: 10.1007/978-3-030-28005-5_17. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2019). Taking the emotional pulse of software engineering - A systematic literature review of empirical studies. Information and Software Technology. ISSN 0950-5849. 115, s. 23–43. doi: 10.1016/j.infsof.2019.08.002. Fulltekst i vitenarkiv
• Gordon, Mary Luz Sanchez & Colomo-Palacios, Ricardo (2018). Characterizing DevOps Culture: A Systematic Literature Review. I Stamelos, I; O'Connor, Rory; Rout, Terry & Dorling, Alec (Red.), Software Process Improvement and Capability Determination: 18th International Conference, SPICE 2018, Thessaloniki, Greece, October 9–10, 2018, Proceedings. Springer. ISSN 9783030006228. s. 3–15. doi: 10.1007/978-3-030-00623-5_1. Fulltekst i vitenarkiv Vis sammendrag

  Time and quality pressures are affecting software process in all its stages. One of the proposed solutions to these pressures is DevOps. DevOps is aimed to increase the frequency, quality and speed of deploying software from development into production by means of new organizational structures and processes with a high degree of automation. Several authors underlined the fact, that beyond the tool chain, DevOps is a culture shift. However, to date the characterization of DevOps culture remains unclear. In this paper, authors tackle this problem by means of a Systematic Literature Review. Results provide a deeper understanding of the phenomena from human factor´s perspective.

• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2018). From Certifications to International Standards in Software Testing: Mapping from ISQTB to ISO/IEC/IEEE 29119-2. I Larrucea, Xabier; O'Connor, Rory & Messnarz, Richard (Red.), Systems, Software and Services Process Improvement : 25th European Conference, EuroSPI 2018, Bilbao, Spain, September 5-7, 2018, Proceedings. Springer. ISSN 9783319979243. s. 43–55. doi: 10.1007/978-3-319-97925-0_4. Fulltekst i vitenarkiv Vis sammendrag

  In today’s software development industry, software testing allows one to ensure the quality but it cannot be done exhaustively and it requires selective and careful planning. That means a test process which is not only time-consuming but also useful and crucial because today, more than ever software is becoming part of our personal and professional life. Software testing is gradually gaining relevance among software practitioners and researchers. Due to that, several organizations, which offer personal certifications, have emerged and international standards have been developed. However, there is still a need to support software practitioners in gaining awareness and understanding about them. The aim of this study is to perform a mapping from all major activities of ISTQB Foundation Level Certification (CTFL), to corresponding processes of ISO/IEC/IEEE 29119-2. Thus an analysis has performed to identify the differences and overlap between the two approaches, which allows a better understanding of them. The findings show that the test process of ISTQB CTFL is largely covered by the ISO/IEC/IEEE 29119-2. In addition, a tailored conformance was also outlined to ISO/IEC/IEEE 29119-2.

• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2018). A Multivocal Literature Review on the use of DevOps for e-learning systems. I Garcia-Penalvo, Francisco José (Red.), Proceedings of the Sixth International Conference on Technological Ecosystems for Enhancing Multiculturality (TEEM 2018). Association for Computing Machinery (ACM). ISSN 9781450365185. s. 883–888. doi: 10.1145/3284179.3284328. Fulltekst i vitenarkiv Vis sammendrag

  DevOps is an approach to reduce software development times by integrating a set of tools in order to get a better and automated transition towards production. DevOps is highly connected to tools and to Cloud Computing. On the other hand, e-Learning tools are also evolving towards the cloud. In this scenario, the connection of this two research fields seems to be promising. However, to the best of authors' knowledge the interaction of both has not been studied in deep. To bridge this gap, in this paper, a multivocal literature review is presented. By means of this systematic approach, authors analyze scientific and professional literature on the topic. Results reveal a nascent but still modest interest in DevOps in e-Learning solutions. Authors believe that the increasing adoption of cloud e-Learning solutions and the increasing pressure to deploy new versions of software with boost the interest in this research field.

Se alle arbeider i NVA

• Esnoul, Coralie; Jee, Eunkyoung; Simensen, John Eidar; Ryan, Ita; Sánchez-Gordón, Mary & Lau, Nathan (2025). 2025 IEEE/ACM 6th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS). IEEE (Institute of Electrical and Electronics Engineers). ISBN 9798331538101. doi: https:/ieeexplore.ieee.org/xpl/conhome/11029521/proceeding. Fulltekst i vitenarkiv

Se alle arbeider i NVA

• Robles-Bykbaev, Vladimir; Luján-Mora, Sergio; López-Nores, Martín; Tortosa, Salvador Otón; Sánchez-Gordón, Mary & Mendoza-González, Ricardo (2026). Artificial Intelligence and emerging technologies for inclusive and innovative education. Frontiers in Computer Science. 8, s. 1–3. doi: 10.3389/fcomp.2026.1892105. Fulltekst i vitenarkiv
• Esnoul, Coralie; Jee, Eunkyoung; Simensen, John Eidar; Ryan, Ita; Sánchez-Gordón, Mary & Lau, Nathan (2025). Foreword to the 6th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS). I Esnoul, Coralie; Jee, Eunkyoung; Simensen, John Eidar; Ryan, Ita; Sánchez-Gordón, Mary & Lau, Nathan (Red.), 2025 IEEE/ACM 6th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS). IEEE (Institute of Electrical and Electronics Engineers). ISSN 9798331538101. doi: 10.1109/encycris66464.2025.00005. Fulltekst i vitenarkiv Vis sammendrag

  This marks the 6th edition of the International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) at the ICSE conference. For industrial critical systems, although the previous premises of increasing system interconnectivity, decentralization, and introduction of new, more intelligent technologies still hold true, there is an increased societal awareness with regards to cybersecurity. This has led to clearer regulation, sharper requirements, and higher expectations for industry. At the same time, the availability of readily deployable competence, methods, tools, and solutions is lacking, which should be considered a critical societal risk. In the current international political climate, cyber security, and safety of critical infrastructures across industry, are more important than ever before. The EnCyCriS workshop facilitates discourse and discussion amongst researchers, practitioners, and students who are working on challenges and solutions related to industrial critical infrastructure. It has a particular focus on sharing industry experience and project results pertaining to cyber threats on critical systems, secure systems engineering, and attack detection and response mechanisms.

• Sánchez-Gordón, Mary (2024). Ingenieria de Software: Un Enfoque en Aspectos Humanos. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary (2023). Prólogo. I Tortosa, Salvador Otón; Paola, Ingavélez‑Guerra & Pérez, Angel A. (Red.), Tecnologías y accesibilidad en la educación superior virtual: Guías para favorecer la inclusión y la accesibilidad. Editorial Universitaria Abya-Yala. ISSN 9789978107973. s. 17–19. doi: 10.17163/abyaups.8. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2022). Challenges in Recruiting Andean Indigenous Participants for Software Engineering Research. Fulltekst i vitenarkiv Vis sammendrag

  This paper reports on the recruiting challenges we faced in our study on the factors influencing software engineering career choice of Andean indigenous. It also emphasizes that Indigenous people are hard-to-reach, hidden, and vulnerable samples.

• Sánchez-Gordón, Mary (2022). Aspectos Humanos y Sociales de la Ingeniería de Software. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary (2022). Ingeniería de Software en la Sociedad. Fulltekst i vitenarkiv
• Sánchez-Gordón, Mary & Colomo-Palacios, Ricardo (2020). Factors influencing software engineering career choice of andean indigenous. Proceedings - International Conference on Software Engineering. ISSN 0270-5257. s. 264–265. doi: 10.1145/3377812.3390899. Fulltekst i vitenarkiv

Se alle arbeider i NVA