WER2025 - 28th Workshop on Requirements Engineering


SafeSecRETS: A Project Planning Tool for Critical IoT Systems

Ernesto Fonseca Veiga; Karlla Loane Santos Lima; Taciana Novo Kudo; Renato de Freitas Bulcão-Neto

10.29327/1588952.28-22

PDF Scholar

Abstract

Assuring safety and security from the earliest stages of development in critical IoT systems requires a clear understanding of the system’s objectives, boundaries, and operational context. This paper presents SafeSecRETS, a software tool for agile project planning of critical IoT systems. Through a canvas-based approach, SafeSecRETS supports requirements engineers and stakeholders in project scope definition and system requirements elicitation. The tool features a collaborative pipeline with interconnected building blocks, fostering engagement among information, people, and decision-making. Moreover, it assists in identifying key elements of the critical IoT system, such as components, safety and security aspects, and potential risks, by preparing the requirements analysis and specification through methods based on STPA (Systems Theoretic Process Analysis). Built on a layered event-driven architecture, SafeSecRETS leverages modern, scalable technologies to provide a high-quality web application. We also demonstrate how the tool supports the planning of an automated insulin delivery system.

Keywords: Safety; Security; IoT; Planning; Canvas.