2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)最新文献_第9页

Processing Large Datasets of Fined Grained Source Code Changes 处理细粒度源代码更改的大型数据集

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-09-01 DOI: 10.1109/ICSME.2019.00064

S. Levin, A. Yehudai

引用次数: 0

SmartEmbed: A Tool for Clone and Bug Detection in Smart Contracts through Structural Code Embedding SmartEmbed:通过结构代码嵌入在智能合约中进行克隆和错误检测的工具

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-08-22 DOI: 10.1109/ICSME.2019.00067

Zhipeng Gao, Vinoj Jayasundara, Lingxiao Jiang, Xin Xia, D. Lo, J. Grundy

{"title":"SmartEmbed: A Tool for Clone and Bug Detection in Smart Contracts through Structural Code Embedding","authors":"Zhipeng Gao, Vinoj Jayasundara, Lingxiao Jiang, Xin Xia, D. Lo, J. Grundy","doi":"10.1109/ICSME.2019.00067","DOIUrl":"https://doi.org/10.1109/ICSME.2019.00067","url":null,"abstract":"Ethereum has become a widely used platform to enable secure, Blockchain-based financial and business transactions. However, a major concern in Ethereum is the security of its smart contracts. Many identified bugs and vulnerabilities in smart contracts not only present challenges to the maintenance of blockchain, but also lead to serious financial loses. There is a significant need to better assist developers in checking smart contracts and ensuring their reliability. In this paper, we propose a web service tool, named SmartEmbed, which can help Solidity developers to find repetitive contract code and clone-related bugs in smart contracts. Our tool is based on code embeddings and similarity checking techniques. By comparing the similarities among the code embedding vectors for existing solidity code in the Ethereum blockchain and known bugs, we are able to efficiently identify code clones and clone-related bugs for any solidity code given by users, which can help to improve the users' confidence in the reliability of their code. In addition to the uses by individual developers, SmartEmbed can also be applied to studies of smart contracts in a large scale. When applied to more than 22K solidity contracts collected from the Ethereum blockchain, we found that the clone ratio of solidity code is close to 90%, much higher than traditional software, and 194 clone-related bugs can be identified efficiently and accurately based on our small bug database with a precision of 96%.","PeriodicalId":106748,"journal":{"name":"2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2019-08-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114545937","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 37

Do Energy-Oriented Changes Hinder Maintainability? 以能源为导向的改变会阻碍可维护性吗?

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-08-22 DOI: 10.1109/ICSME.2019.00013

Luis Cruz, R. Abreu, J. Grundy, Li Li, Xin Xia

{"title":"Do Energy-Oriented Changes Hinder Maintainability?","authors":"Luis Cruz, R. Abreu, J. Grundy, Li Li, Xin Xia","doi":"10.1109/ICSME.2019.00013","DOIUrl":"https://doi.org/10.1109/ICSME.2019.00013","url":null,"abstract":"Energy efficiency is a crucial quality requirement for mobile applications. However, improving energy efficiency is far from trivial as developers lack the knowledge and tools to aid in this activity. In this paper we study the impact of changes to improve energy efficiency on the maintainability of Android applications. Using a dataset containing 539 energy efficiency-oriented commits, we measure maintainability – as computed by the Software Improvement Group's web-based source code analysis service Better Code Hub (BCH) – before and after energy efficiency-related code changes. Results show that in general improving energy efficiency comes with a significant decrease in maintainability. This is particularly evident in code changes to accommodate the Power Save Mode and Wakelock Addition energy patterns. In addition, we perform manual analysis to assess how real examples of energy-oriented changes affect maintainability. Our results help mobile app developers to 1) avoid common maintainability issues when improving the energy efficiency of their apps; and 2) adopt development processes to build maintainable and energy-efficient code. We also support researchers by identifying challenges in mobile app development that still need to be addressed.","PeriodicalId":106748,"journal":{"name":"2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2019-08-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133019836","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 23

Do as I Do, Not as I Say: Do Contribution Guidelines Match the GitHub Contribution Process? 做我所做的，而不是我所说的:贡献指南是否与GitHub贡献流程相匹配?

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-08-06 DOI: 10.1109/ICSME.2019.00043

Omar Elazhary, M. Storey, Neil A. Ernst, A. Zaidman

{"title":"Do as I Do, Not as I Say: Do Contribution Guidelines Match the GitHub Contribution Process?","authors":"Omar Elazhary, M. Storey, Neil A. Ernst, A. Zaidman","doi":"10.1109/ICSME.2019.00043","DOIUrl":"https://doi.org/10.1109/ICSME.2019.00043","url":null,"abstract":"Developer contribution guidelines are used in social coding sites like GitHub to explain and shape the process a project expects contributors to follow. They set standards for all participants and \"save time and hassle caused by improperly created pull requests or issues that have to be rejected and re-submitted\" (GitHub). Yet, we lack a systematic understanding of the content of a typical contribution guideline, as well as the extent to which these guidelines are followed in practice. Additionally, understanding how guidelines may impact projects that use Continuous Integration as part of the contribution process is of particular interest. To address this knowledge gap, we conducted a mixed-methods study of 53 GitHub projects with explicit contribution guidelines and coded the guidelines to extract key themes. We then created a process model using GitHub activity data (e.g., commit, new issue, new pull request) to compare the actual activity with the prescribed contribution guidelines. We show that approximately 68% of these projects diverge significantly from the expected process.","PeriodicalId":106748,"journal":{"name":"2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2019-08-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133066784","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 22

Business-Driven Technical Debt Prioritization 业务驱动的技术债务优先级

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-08-01 DOI: 10.1109/ICSME.2019.00096

R. R. Almeida

引用次数: 4

Learning to Identify Security-Related Issues Using Convolutional Neural Networks 学习使用卷积神经网络识别安全相关问题

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-08-01 DOI: 10.1109/ICSME.2019.00024

David N. Palacio, Daniel McCrystal, Kevin Moran, Carlos Bernal-Cárdenas, D. Poshyvanyk, Chris Shenefiel

{"title":"Learning to Identify Security-Related Issues Using Convolutional Neural Networks","authors":"David N. Palacio, Daniel McCrystal, Kevin Moran, Carlos Bernal-Cárdenas, D. Poshyvanyk, Chris Shenefiel","doi":"10.1109/ICSME.2019.00024","DOIUrl":"https://doi.org/10.1109/ICSME.2019.00024","url":null,"abstract":"Software security is becoming a high priority for both large companies and start-ups alike due to the increasing potential for harm that vulnerabilities and breaches carry with them. However, attaining robust security assurance while delivering features requires a precarious balancing act in the context of agile development practices. One path forward to help aid development teams in securing their software products is through the design and development of security-focused automation. Ergo, we present a novel approach, called SecureReqNet, for automatically identifying whether issues in software issue tracking systems describe security-related content. Our approach consists of a two-phase neural net architecture that operates purely on the natural language descriptions of issues. The first phase of our approach learns high dimensional word embeddings from hundreds of thousands of vulnerability descriptions listed in the CVE database and issue descriptions extracted from open source projects. The second phase then utilizes the semantic ontology represented by these embeddings to train a convolutional neural network capable of predicting whether a given issue is security-related. We evaluated SecureReqNet by applying it to identify security-related issues from a dataset of thousands of issues mined from popular projects on GitLab and GitHub. In addition, we also applied our approach to identify security-related requirements from a commercial software project developed by a major telecommunication company. Our preliminary results are encouraging, with SecureReqNet achieving an accuracy of 96% on open source issues and 71.6% on industrial requirements.","PeriodicalId":106748,"journal":{"name":"2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2019-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128967693","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Tracy: A Business-Driven Technical Debt Prioritization Framework Tracy:业务驱动的技术债务优先级框架

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-07-31 DOI: 10.1109/ICSME.2019.00028

R. R. Almeida, Christoph Treude, U. Kulesza

引用次数: 14

Comprehending Test Code: An Empirical Study 理解测试代码:一个实证研究

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-07-31 DOI: 10.1109/ICSME.2019.00084

C. S. Yu, Christoph Treude, M. Aniche

{"title":"Comprehending Test Code: An Empirical Study","authors":"C. S. Yu, Christoph Treude, M. Aniche","doi":"10.1109/ICSME.2019.00084","DOIUrl":"https://doi.org/10.1109/ICSME.2019.00084","url":null,"abstract":"Developers spend a large portion of their time and effort on comprehending source code. While many studies have investigated how developers approach these comprehension tasks and what factors influence their success, less is known about how developers comprehend test code specifically, despite the undisputed importance of testing. In this paper, we report on the results of an empirical study with 44 developers to understand which factors influence developers when comprehending Java test code. We measured three dependent variables: the total time spent reading a test suite, the ability to identify the overall purpose of a test suite, and the ability to produce additional test cases to extend a test suite. The main findings of our study, with several implications for future research and practitioners, are that (i) prior knowledge of the software project decreases the total reading time, (ii) experience with Java affects the proportion of time spent on the Arrange and Assert sections of test cases, (iii) experience with Java and prior knowledge of the software project positively influence the ability to produce additional test cases of certain categories, and (iv) experience with automated tests is an influential factor towards understanding and extending an automated test suite.","PeriodicalId":106748,"journal":{"name":"2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2019-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123509309","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Syntax and Stack Overflow: A Methodology for Extracting a Corpus of Syntax Errors and Fixes 语法和堆栈溢出:一种提取语法错误语料库和修复的方法

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-07-17 DOI: 10.1109/ICSME.2019.00048

A. W. Wong, Amir Salimi, S. Chowdhury, Abram Hindle

{"title":"Syntax and Stack Overflow: A Methodology for Extracting a Corpus of Syntax Errors and Fixes","authors":"A. W. Wong, Amir Salimi, S. Chowdhury, Abram Hindle","doi":"10.1109/ICSME.2019.00048","DOIUrl":"https://doi.org/10.1109/ICSME.2019.00048","url":null,"abstract":"One problem when studying how to find and fix syntax errors is how to get natural and representative examples of syntax errors. Most syntax error datasets are not free, open, and public, or they are extracted from novice programmers and do not represent syntax errors that the general population of developers would make. Programmers of all skill levels post questions and answers to Stack Overflow which may contain snippets of source code along with corresponding text and tags. Many snippets do not parse, thus they are ripe for forming a corpus of syntax errors and corrections. Our primary contribution is an approach for extracting natural syntax errors and their corresponding human made fixes to help syntax error research. A Python abstract syntax tree parser is used to determine preliminary errors and corrections on code blocks extracted from the SOTorrent data set. We further analyzed our code by executing the corrections in a Python interpreter. We applied our methodology to produce a public data set of 62,965 Python Stack Overflow code snippets with corresponding tags, errors, and stack traces. We found that errors made by Stack Overflow users do not match errors made by student developers or random mutations, implying there is a serious representativeness risk within the field. Finally we share our dataset openly so that future researchers can re-use and extend our syntax errors and fixes.","PeriodicalId":106748,"journal":{"name":"2019 IEEE International Conference on Software Maintenance and Evolution (ICSME)","volume":null,"pages":null},"PeriodicalIF":0.0,"publicationDate":"2019-07-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130908645","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

MigrationMiner: An Automated Detection Tool of Third-Party Java Library Migration at the Method Level MigrationMiner:第三方Java库在方法级迁移的自动检测工具

2019 IEEE International Conference on Software Maintenance and Evolution (ICSME) Pub Date : 2019-07-05 DOI: 10.1109/ICSME.2019.00072

Hussein Alrubaye, Mohamed Wiem Mkaouer, Ali Ouni

引用次数: 21