2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE)最新文献

Assessing the Release Readiness of Engine Control Software 发动机控制软件发布准备评估

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194099

Sichao Wen, Chris Nilsson, M. Staron

引用次数: 0

Prioritizing Alerts from Multiple Static Analysis Tools, Using Classification Models 使用分类模型对来自多个静态分析工具的警报进行优先级排序

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194100

Lori Flynn, William Snavely, David Svoboda, Nathan M. VanHoudnos, Richard Qin, Jennifer Burns, D. Zubrow, R. Stoddard, Guillermo Marce-Santurio

{"title":"Prioritizing Alerts from Multiple Static Analysis Tools, Using Classification Models","authors":"Lori Flynn, William Snavely, David Svoboda, Nathan M. VanHoudnos, Richard Qin, Jennifer Burns, D. Zubrow, R. Stoddard, Guillermo Marce-Santurio","doi":"10.1145/3194095.3194100","DOIUrl":"https://doi.org/10.1145/3194095.3194100","url":null,"abstract":"Static analysis (SA) tools examine code for flaws without executing the code, and produce warnings (\"alerts\") about possible flaws. A human auditor then evaluates the validity of the purported code flaws. The effort required to manually audit all alerts and repair all confirmed code flaws is often too much for a project's budget and schedule. An alert triaging tool enables strategically prioritizing alerts for examination, and could use classifier confidence. We developed and tested classification models that predict if static analysis alerts are true or false positives, using a novel combination of multiple static analysis tools, features from the alerts, alert fusion, code base metrics, and archived audit determinations. We developed classifiers using a partition of the data, then evaluated the performance of the classifier using standard measurements, including specificity, sensitivity, and accuracy. Test results and overall data analysis show accurate classifiers were developed, and specifically using multiple SA tools increased classifier accuracy, but labeled data for many types of flaws were inadequately represented (if at all) in the archive data, resulting in poor predictive accuracy for many of those flaws.","PeriodicalId":103582,"journal":{"name":"2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE)","volume":"196 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-05-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125169829","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 24

Learning-Based Response Time Analysis in Real-Time Embedded Systems: A Simulation-Based Approach 实时嵌入式系统中基于学习的响应时间分析:基于仿真的方法

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194097

M. H. Moghadam, Mehrdad Saadatmand, Markus Borg, M. Bohlin, B. Lisper

{"title":"Learning-Based Response Time Analysis in Real-Time Embedded Systems: A Simulation-Based Approach","authors":"M. H. Moghadam, Mehrdad Saadatmand, Markus Borg, M. Bohlin, B. Lisper","doi":"10.1145/3194095.3194097","DOIUrl":"https://doi.org/10.1145/3194095.3194097","url":null,"abstract":"Response time analysis is an essential task to verify the behavior of real-time systems. Several response time analysis methods have been proposed to address this challenge, particularly for real-time systems with different levels of complexity. Static analysis is a popular approach in this context, but its practical applicability is limited due to the high complexity of the industrial real-time systems, as well as many unpredictable runtime events in these systems. In this work-in-progress paper, we propose a simulation-based response time analysis approach using reinforcement learning to find the execution scenarios leading to the worst-case response time. The approach learns how to provide a practical estimation of the worst-case response time through simulating the program without performing static analysis. Our initial study suggests that the proposed approach could be applicable in the simulation environments of the industrial real-time control systems to provide a practical estimation of the execution scenarios leading to the worst-case response time.","PeriodicalId":103582,"journal":{"name":"2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE)","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-05-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116819220","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Towards a Classification of Bugs to Facilitate Software Maintainability Tasks 对bug进行分类以促进软件可维护性任务

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194101

Mathieu Nayrolles, A. Hamou-Lhadj

{"title":"Towards a Classification of Bugs to Facilitate Software Maintainability Tasks","authors":"Mathieu Nayrolles, A. Hamou-Lhadj","doi":"10.1145/3194095.3194101","DOIUrl":"https://doi.org/10.1145/3194095.3194101","url":null,"abstract":"Software maintainability is an important software quality attribute that defines the degree by which a software system is understood, repaired, or enhanced. In recent years, there has been an increase in attention in techniques and tools that mine large bug repositories to help software developers understand the causes of bugs and speed up the fixing process. These techniques, however, treat all bugs in the same way. Bugs that are fixed by changing a single location in the code are examined the same way as those that require complex changes. After examining more than 100 thousand bug reports of 380 projects, we found that bugs can be classified into four types based on the location of their fixes. Type 1 bugs are the ones that fixed by modifying a single location in the code, while Type 2 refers to bugs that are fixed in more than one location. Type 3 refers to multiple bugs that are fixed in the exact same location. Type 4 is an extension of Type 3, where multiple bugs are resolved by modifying the same set of locations. This classification can help companies put the resources where they are needed the most. It also provides useful insight into the quality of the code. Knowing, for example, that a system contains a large number of bugs of Type 4 suggests that high maintenance efforts. This classification can also be used for other tasks such as predicting the type of incoming bugs for an improved bug handling process. For example, if a bug is found to be of Type 4 then it should be directed to experienced developers","PeriodicalId":103582,"journal":{"name":"2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE)","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-05-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127796528","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

Software Quality through the Eyes of the End-User and Static Analysis Tools: A Study on Android OSS Applications 终端用户眼中的软件质量与静态分析工具——基于Android OSS应用的研究

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194096

Kamonphop Srisopha, Reem Alfayez

{"title":"Software Quality through the Eyes of the End-User and Static Analysis Tools: A Study on Android OSS Applications","authors":"Kamonphop Srisopha, Reem Alfayez","doi":"10.1145/3194095.3194096","DOIUrl":"https://doi.org/10.1145/3194095.3194096","url":null,"abstract":"Source code analysis tools have been the vehicle for measuring and assessing the quality of a software product for decades. However, recently many studies have shown that post-deployment end-user reviews provide a wealth of insight into the quality of a software product and how it should evolve and be maintained. For example, end-user reviews help to identify missing features or inform developers about incorrect or unexpected software behavior. We believe that analyzing end-user reviews and utilizing analysis tools are a crucial step towards understanding the complete picture of the quality of a software product, as well as towards reasoning about the evolution history of it. In this paper, we investigate whether both methods correlate with one another. In other words, we explore if there exists a relationship between user satisfaction and the application's internal quality characteristics. To conduct our research, we analyze a total of 46 actual releases of three Android open source software (OSS) applications on the Google Play Store. For each release, we employ multiple static analysis tools to assess several aspects of the application's software quality. We retrieve and manually analyze the complete reviews after each release of each application from its store page, totaling 1004 reviews. Our initial results suggest that having high or low code quality does not necessary ensure user overall satisfaction.","PeriodicalId":103582,"journal":{"name":"2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE)","volume":"346 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-05-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114736116","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

The Quality of Junit Tests: An Empirical Study Report 单元测试的质量:一个实证研究报告

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194102

Dor Ma'ayan

引用次数: 10

Timing Verification of Component-Based Vehicle Software with Rubus-ICE: End-User's Experience 基于Rubus-ICE的基于组件的车辆软件时序验证:终端用户体验

2018 IEEE/ACM 1st International Workshop on Software Qualities and their Dependencies (SQUADE) Pub Date : 2018-05-28 DOI: 10.1145/3194095.3194103

S. Mubeen, Mattias Gålnander, Alessio Bucaioni, John Lundbäck, Kurt-Lennart Lundbäck

引用次数: 3