Abstract:A software ecosystem (SECO) is an interaction, communication, cooperation, and synergy among a set of players. Depending on the actors type of interaction with others, each one can play a different role. These interactions provide a set of positive relationships (symbiosis) between actors who work together around a common technology platform or a service. SECO has been explored in several studies, some related to their general characteristics and others focusing on a specific topic (e.g., requirements, governance, open-source, mobile). There are many literature reviews of different natures (e.g., systematic literature reviews and systematic mapping studies). This study presents the status of the SECO field motivated by analyzing several secondary studies published over the years. To do so, we conducted a tertiary study. From an initial set of 518 studies on the subject, we selected 22 studies. We identified the theoretical foundations used by researchers and their influences and relationships with other ecosystems. We performed a thematic synthesis and identified one high-order theme, 5 themes, 10 subthemes, and 206 categories. As a result, we proposed a thematic model for SECO containing five themes, namely: social, technical, business, management, and an evaluation theme named Software Ecosystems Assessment Models (SEAM). Our main conclusion is that relationships between SECO themes should not be seen in isolation, and it must be interpreted in a holistic approach, given the number of implications to other themes mainly related to the distinction of governance and management activities in the SECO interactions. Finally, this work provides an overview of the field and points out areas for future research, such as the need of SECO community to further investigate the results from other ecosystems, mainly from the Digital Ecosystem and Digital Business Ecosystem communities.

Towards an Incident Management Framework in Proprietary Software Ecosystems

A compliance assessment system for incident management process

Towards Intelligent Incident Management: Why We Need It and How We Make It

Framework for Operational Resilience Management of Critical Infrastructures and Organizations

Strategic Patterns to Foster the Evolution of Emerging Software Ecosystems

A framework for Model-Driven Engineering of resilient software-controlled systems

A Contribution Management Framework for Firms Engaged in Open Source Software Ecosystems -- A Research Preview

A Risk Assessment Framework and Software Toolkit for Cloud Service Ecosystems

Integrated Solution Modeling Software: A New Paradigm on Information Security Review and Assessment

An incident information management framework based on data integration, data mining, and multi-criteria decision making

Integrated Solution Modeling Software: A New Paradigm on Information Security Review

Automated Cyber and Privacy Risk Management Toolkit

PHOENI2X -- A European Cyber Resilience Framework With Artificial-Intelligence-Assisted Orchestration, Automation and Response Capabilities for Business Continuity and Recovery, Incident Response, and Information Exchange

Proactive Software Supply Chain Risk Management Framework (P-SSCRM) Version 1

Approaching Unanticipated Consequences

Framework Design for Operational Scenario-Based Emergency Response System.

Planning, Managing and Monitoring Technological Security Infrastructures

Emergency Management in Critical Infrastructures: A Complex-Event-Processing Paradigm

Software Ecosystems: A Tertiary Study and a Thematic Model

Managing Collaborative Risks of Integrated Open-Innovation and Hybrid Stage-Gate Model by Applying Social Network Analysis—A Case Study

FIRMa: A Framework to Support the Requirements Management Process Based on Information Management Tools