{"title":"Advances in Artefact Quality Analysis for Safety-Critical Systems","authors":"Eugenio Parra, Luis Alonso, Roy Mendieta, J. Vara","doi":"10.1109/ISSREW.2019.00047","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00047","url":null,"abstract":"Safety-critical systems are subject to rigorous verification and validation activities to guarantee that their quality is sufficient and acceptable. Quality analysis does not only need to be performed on the systems themselves, but also on their associated artefacts, e.g. system specifications. Such an analysis is essential for early quality assessment and so that system development progresses in compliance with standards. However, the analysis is challenging and labour-intensive for large complex systems, thus practitioners need means that facilitate it. This paper presents recent advances in artefact quality analysis for safety-critical systems. The presented industrial tools and practices are part of the products and services provided by The REUSE Company, have been developed in collaborative research projects, and are already available to its customers. We introduce the management and use of requirements metrics, model metrics, checklists, quality evolution, and connectors. This information demonstrates (1) how artefact quality analysis is progressing in practice and (2) what artefact quality analysis needs are being fulfilled.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"69 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124897683","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Advancing Monitoring in Microservices Systems","authors":"M. Cinque, Raffaele Della Corte, A. Pecchia","doi":"10.1109/ISSREW.2019.00060","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00060","url":null,"abstract":"Monitoring is a core reliability engineering practice to gain insights into production systems. New trends in microservices exacerbate the role of monitoring. This paper discusses key challenges in microservices monitoring. We introduce our proposal for a novel monitoring framework, which aims to cope with existing challenges by means of non-intrusive techniques that capitalize on passive tracing and log analysis. We present our ongoing work on the topic and preliminary outcomes.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121898472","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Antonio Guerriero, R. Mirandola, R. Pietrantuono, S. Russo
{"title":"A Hybrid Framework for Web Services Reliability and Performance Assessment","authors":"Antonio Guerriero, R. Mirandola, R. Pietrantuono, S. Russo","doi":"10.1109/ISSREW.2019.00070","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00070","url":null,"abstract":"We present a framework for assessing operational reliability and performance of Web Services. The framework, named WS-REPAS, is hybrid in that it combines a modelling approach, based on Discrete Time Markov Chains (DTMC), with monitoring and in vivo testing of the service under assessment. Through the passive observation of the software in operation, field data are gathered and used to continuously update values of the parameters of the service DTMC model; changes in the service provisioning, or in the way it is used, trigger an active strategy, which executes proper testing sessions, ultimately yielding faithful estimates of the current service reliability and/or performance. We illustrate the framework and the automated support it provides. We show how it works describing experiments with a Web service publicly available in the Github repository.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"183 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121049160","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The Performance and Dependability of Control Plane in OpenFlow Networks","authors":"Zhihao Shang","doi":"10.1109/ISSREW.2019.00054","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00054","url":null,"abstract":"OpenFlow is an innovative approach to manage networks. It separates the control plane out of forwarding devices and uses a centralized controller to manipulate all the forwarding devices. The separation offers many benefits in terms of network flexibility and management. However, these benefits come with a performance penalty. Since the controller manipulates all the forwarding devices, the performance of the controller impacts the performance of the whole network. In addition, the controller is a single point failure of an OpenFlow network. I investigate the performance and dependability of OpenFlow controllers during my PhD. I implement a benchmark tool for OpenFlow controllers to fit the response time of an OpenFlow controller into a PH (PHase-type) distribution. Based on the distribution of response time, I can build queueing models for multiple controllers in an OpenFlow network. Based on the queueing models, the parameters that can minimize the response time of the controllers will be determined. I also use a stochastic model to evaluate the dependability of multiple controllers.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114892461","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Automated Repair of Cross-Site Scripting Vulnerabilities through Unit Testing","authors":"Mahmoud Mohammadi, Bill Chu, H. Lipford","doi":"10.1109/ISSREW.2019.00098","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00098","url":null,"abstract":"Many web applications are vulnerable to Cross Site Scripting (XSS) attacks enabling attackers to steal sensitive information and commit frauds. Much research in this area have focused on detecting vulnerable web pages using static and dynamic program analysis. The best practice to prevent XSS vulnerabilities is to encode untrusted dynamic content. However, a common programming error is the use of a wrong type of encoder to sanitize untrusted data, leaving the application vulnerable. We propose a new approach that can automatically fix this common type of XSS vulnerability in many situations. This approach is integrated into the software maintenance life cycle through unit testing. Vulnerable codes are refactored to reflect the suggested encoder and then verified using an attack evaluating mechanism to find a proper repair. Evaluation of this approach has been conducted on an open source medical record application with over 200 web pages written in JSP.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"12 3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127020174","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Avoiding Faults due to Dangling Dependencies by Synchronization in Microservices Applications","authors":"Antonio De Iasio, E. Zimeo","doi":"10.1109/ISSREW.2019.00068","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00068","url":null,"abstract":"Microservices architecture and containerization are promising software development approaches. In spite of their claimed autonomy, microservices often depend on other microservices to complete their tasks. Since each microservice of an application has its own life-cycle, dependencies may cause faults if they are not satisfied due to the unreadiness of target microservices. To address this problem, we argue the necessity of a mechanism to synchronize microservices according to their running states: dependent microservices should wait for unready ones, so avoiding useless and faulty interactions. In this paper, we propose a new framework, implemented as a service at platform level, able to support synchronization among microservices by exploiting distributed registries for collecting health/state information about deployed containers and related microservices. The service has been implemented for the OpenShift/Kubernetes platform and experimented with different use cases. We mainly focus on avoiding faults due to dangling dependencies during the bootstrap of microservices applications. The valuable effects of the proposed service provided us useful feedback to extend its adoption to other use cases even through its integration in existing microservices frameworks.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114331951","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A State Space Suppression Method for Formal Verification of Secure Routing Protocols With SPIN","authors":"Hideharu Kojima, Naoto Yanai","doi":"10.1109/ISSREW.2019.00061","DOIUrl":"https://doi.org/10.1109/ISSREW.2019.00061","url":null,"abstract":"ISDSR has been recently introduced as a secure routing protocol of wireless multi-hop networks to guarantee the reliability of routes between nodes by using single signatures from any source to its destination. In this paper, we propose a method for formal verification of ISDSR with SPIN. The proposed method is based on symmetry reduction to mitigate the state space explosion. We also implement the proposed method and conduct preliminary experiments with the original DSR. As a promising result, the proposed method is able to suppress state space and memory usage. However, we also found some technical problem via experiments with ISDSR. Hence, we further discuss improving the proposed method.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"72 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130538456","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Message from the GAUSS 2019 Workshop Chairs","authors":"","doi":"10.1109/issrew.2019.00013","DOIUrl":"https://doi.org/10.1109/issrew.2019.00013","url":null,"abstract":"","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131801669","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"ISSRE Cares: How the Software Reliability Engineering Community Can Give Back to Society","authors":"J. Hayes, Tingting Yu","doi":"10.1109/issrew.2019.00056","DOIUrl":"https://doi.org/10.1109/issrew.2019.00056","url":null,"abstract":"The reliability engineering community should consider undertaking activities that benefit society as an integral part of their major conferences such as ISSRE. The requirements engineering community adopted a philanthropic activity combining to assist an organization in the locale of the IEEE Requirements Engineering (RE) conference, called RE Cares. At the conference, a live requirements elicitation is performed. Then, developed artifacts are used by the open source community to continue development of the application. The reliability engineering community could adopt a similar model and serve the locale of their ISSRE conference via ISSRE Cares. Rather than requirements and prototyping, ISSRE Cares would perform reliability engineering of an important application that helps serve the public interest, by, for example, applying testing techniques and expertise.","PeriodicalId":166239,"journal":{"name":"2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"93 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133677235","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}