区块链物联网系统中的非功能需求到代码的可追溯性：一项实证研究
NFR-to-Code Traceability in a Blockchain-IoT System: An Empirical Study
浏览论文内容
中文总结 AI 辅助
研究基于实际区块链物联网项目的非功能需求到代码的可追溯性，设计注释协议构建追溯链接子集，评估四个检索基线，发现FR到代码追溯更易，安全相关NFR最难，主要挑战在于代码中实现证据的分布与定位。
中文摘要 AI 辅助
需求到代码的可追溯性已得到广泛研究，但现有研究和公共基准主要集中在功能需求（FR）上。相比之下，非功能需求（NFR）的可追溯性更难且研究不足，这阻碍了对安全等关键质量问题的验证。本文基于一个实际的区块链物联网项目研究NFR到代码的可追溯性。我们设计了一种注释协议来构建跨异构工件的追溯链接，并构建了一个包含FR和NFR链接的手动策划子集。利用该子集，我们研究了NFR可追溯性的特征，并进一步评估了四个代表性的检索基线：TF-IDF、BM25、LSI和WMD。结果表明，FR到代码的追溯比NFR到代码的追溯始终更容易，而与安全相关的NFR是最难的子集。结果还表明，NFR可追溯性的主要挑战不在于需求的可用性，而在于分布在代码中且未明确本地化的实现证据。
英文摘要
Requirement-to-Code traceability has been widely studied, yet existing research and public benchmarks remain largely centered on functional requirements (FRs). In contrast, traceability for non-functional requirements (NFRs) remains more difficult and underexplored, which hinders the verification of critical quality concerns such as security and reliability.This paper studies NFR-to-Code traceability based on a real-world blockchain-IoT project. We design an annotation protocol for constructing trace links across heterogeneous artifacts and build a manually curated subset containing both FR and NFR links. Using this subset, we examine the characteristics of NFR traceability and further evaluate four representative retrieval baselines: TF-IDF, BM25, LSI, and WMD. The results show that FR-to-Code tracing is consistently easier than NFR-to-Code tracing, while security-related NFRs are the most difficult subset. They further indicate that the main challenge of NFR traceability lies not in requirement availability, but in implementation evidence that is distributed and not clearly localized in code.
