发布求助
文献互助 智能选刊 最新文献

2014 IEEE 25th International Symposium on Software Reliability Engineering最新文献

筛选
英文 中文
Why Does my Spreadsheet Compute Wrong Values? 为什么我的电子表格计算错误的值?
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.23
Birgit Hofer, F. Wotawa
{"title":"Why Does my Spreadsheet Compute Wrong Values?","authors":"Birgit Hofer, F. Wotawa","doi":"10.1109/ISSRE.2014.23","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.23","url":null,"abstract":"Spreadsheets are by far the most used programs that are written by end-users. They often build the basis for decisions in companies and governmental organizations and therefore they have a high impact on our daily life. Ensuring correctness of spreadsheets is thus an important task. But what happens after detecting a faulty behavior? This question has not been sufficiently answered. Therefore, we focus on fault localization techniques for spreadsheets. In this paper, we introduce a novel dependency-based approach for model-based fault localization in spreadsheets. This approach improves diagnostic accuracy while keeping computation times short, thus making the automated fault localization more appropriate for practical applications. The presented approach allows for an acceptable fault localization time of less than a second, and reduces the number of computed root cause candidates by 15 % on average, when compared with another dependency-based approach.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126779100","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 13
An Empirical Study on the Scalability of Selective Mutation Testing 选择性突变检测可扩展性的实证研究
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.27
Jie M. Zhang, Muyao Zhu, Dan Hao, Lu Zhang
{"title":"An Empirical Study on the Scalability of Selective Mutation Testing","authors":"Jie M. Zhang, Muyao Zhu, Dan Hao, Lu Zhang","doi":"10.1109/ISSRE.2014.27","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.27","url":null,"abstract":"Software testing plays an important role in ensuring software quality by running a program with test suites. Mutation testing is designed to evaluate whether a test suite is adequate in detecting faults. Due to the expensive cost of mutation testing, selective mutation testing was proposed to select a subset of mutants whose effectiveness is similar to the whole set of generated mutants. Although selective mutation testing has been widely investigated in recent years, many people still doubt whether it can suit well for large programs. To study the scalability of selective mutation testing, we systematically explore how the program size impacts selective mutation testing through four projects (including 12 versions all together). Based on the empirical study, for programs smaller than 16 KLOC, selective mutation testing has surprisingly good scalability. In particular, for a program whose number of lines of executable code is E, the number of mutants used in selective mutation testing is proportional to Ec, where c is a constant whose value is between 0.05 and 0.25.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115071226","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 33
More Debugging in Parallel 更多并行调试
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.29
Wolfgang Hogerle, F. Steimann, M. Frenkel
{"title":"More Debugging in Parallel","authors":"Wolfgang Hogerle, F. Steimann, M. Frenkel","doi":"10.1109/ISSRE.2014.29","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.29","url":null,"abstract":"Programs may contain multiple faults, in which case their debugging can be parallelized. However, effective parallelization requires some guarantees that parallel debugging tasks do not address the same fault, an inherent problem of earlier, clustering-based approaches to parallel debugging. In this paper, we identify a number of fundamental trade-offs to be made when selecting algorithms for parallel debugging, and explore these trade-offs using one clustering algorithm and three algorithms from integer linear programming. Results of an evaluation involving a total of 75,000 faulty versions (with up to 32 injected faults) of 15 subject programs suggest that depending on the number of faults present and the trade-offs one is willing to accept, speed-ups much larger than previously reported can be achieved, even if all derived parallel debugging tasks are handled sequentially.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121322589","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 28
Effective Bug Triage Based on Historical Bug-Fix Information 基于历史Bug修复信息的有效Bug分类
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.17
Hao-Ji Hu, Hongyu Zhang, J. Xuan, Weigang Sun
{"title":"Effective Bug Triage Based on Historical Bug-Fix Information","authors":"Hao-Ji Hu, Hongyu Zhang, J. Xuan, Weigang Sun","doi":"10.1109/ISSRE.2014.17","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.17","url":null,"abstract":"For complex and popular software, project teams could receive a large number of bug reports. It is often tedious and costly to manually assign these bug reports to developers who have the expertise to fix the bugs. Many bug triage techniques have been proposed to automate this process. In this paper, we describe our study on applying conventional bug triage techniques to projects of different sizes. We find that the effectiveness of a bug triage technique largely depends on the size of a project team (measured in terms of the number of developers). The conventional bug triage methods become less effective when the number of developers increases. To further improve the effectiveness of bug triage for large projects, we propose a novel recommendation method called Bug Fixer, which recommends developers for a new bug report based on historical bug-fix information. Bug Fixer constructs a Developer-Component-Bug (DCB) network, which models the relationship between developers and source code components, as well as the relationship between the components and their associated bugs. A DCB network captures the knowledge of \"who fixed what, where\". For a new bug report, Bug Fixer uses a DCB network to recommend to triager a list of suitable developers who could fix this bug. We evaluate Bug Fixer on three large-scale open source projects and two smaller industrial projects. The experimental results show that the proposed method outperforms the existing methods for large projects and achieves comparable performance for small projects.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132295777","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 87
Runtime Verification of Web Services for Interconnected Medical Devices 互联医疗设备Web服务运行时验证
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.16
Normann Decker, Franziska Kühn, Daniel Thoma
{"title":"Runtime Verification of Web Services for Interconnected Medical Devices","authors":"Normann Decker, Franziska Kühn, Daniel Thoma","doi":"10.1109/ISSRE.2014.16","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.16","url":null,"abstract":"This paper presents a framework to ensure the correctness of service-oriented architectures based on runtime verification techniques. Traditionally, the reliability of safety critical systems is ensured by testing the complete system including all subsystems. When those systems are designed as service-oriented architectures, and independently developed subsystems are composed to new systems at runtime, this approach is no longer viable. Instead, the presented framework uses runtime monitors synthesised from high-level specifications to ensure safety constraints. The framework has been designed for the interconnection of medical devices in the operating room. As a case study, the framework is applied to the interconnection of an ultrasound dissector and a microscope. Benchmarks show that the monitoring overhead is negligible in this setting.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131671204","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
Predicting Vulnerable Components: Software Metrics vs Text Mining 预测易受攻击组件:软件度量与文本挖掘
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.32
J. Walden, Jeff Stuckman, R. Scandariato
{"title":"Predicting Vulnerable Components: Software Metrics vs Text Mining","authors":"J. Walden, Jeff Stuckman, R. Scandariato","doi":"10.1109/ISSRE.2014.32","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.32","url":null,"abstract":"Building secure software is difficult, time-consuming, and expensive. Prediction models that identify vulnerability prone software components can be used to focus security efforts, thus helping to reduce the time and effort required to secure software. Several kinds of vulnerability prediction models have been proposed over the course of the past decade. However, these models were evaluated with differing methodologies and datasets, making it difficult to determine the relative strengths and weaknesses of different modeling techniques. In this paper, we provide a high-quality, public dataset, containing 223 vulnerabilities found in three web applications, to help address this issue. We used this dataset to compare vulnerability prediction models based on text mining with models using software metrics as predictors. We found that text mining models had higher recall than software metrics based models for all three applications.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128383219","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 176
Assessing Direct Monitoring Techniques to Analyze Failures of Critical Industrial Systems 评估直接监测技术以分析关键工业系统的故障
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.30
M. Cinque, Domenico Cotroneo, Raffaele Della Corte, A. Pecchia
{"title":"Assessing Direct Monitoring Techniques to Analyze Failures of Critical Industrial Systems","authors":"M. Cinque, Domenico Cotroneo, Raffaele Della Corte, A. Pecchia","doi":"10.1109/ISSRE.2014.30","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.30","url":null,"abstract":"The analysis of monitoring data is extremely valuable for critical computer systems. It allows to gain insights into the failure behavior of a given system under real workload conditions, which is crucial to assure service continuity and downtime reduction. This paper proposes an experimental evaluation of different direct monitoring techniques, namely event logs, assertions, and source code instrumentation, that are widely used in the context of critical industrial systems. We inject 12,733 software faults in a real-world air traffic control (ATC) middleware system with the aim of analyzing the ability of mentioned techniques to produce information in case of failures. Experimental results indicate that each technique is able to cover a limited number of failure manifestations. Moreover, we observe that the quality of collected data to support failure diagnosis tasks strongly varies across the techniques considered in this study.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125297869","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 28
Zen-CC: An Automated and Incremental Conformance Checking Solution to Support Interactive Product Configuration Zen-CC:支持交互式产品配置的自动化和增量一致性检查解决方案
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.13
Hong Lu, T. Yue, Shaukat Ali, Kunming Nie, Li Zhang
{"title":"Zen-CC: An Automated and Incremental Conformance Checking Solution to Support Interactive Product Configuration","authors":"Hong Lu, T. Yue, Shaukat Ali, Kunming Nie, Li Zhang","doi":"10.1109/ISSRE.2014.13","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.13","url":null,"abstract":"In the context of product line engineering (PLE), providing immediate feedback on the correctness of a manual configuration step to users has a practical impact on whether a configuration process with tool support can be successfully adopted in practice. Model-based PLE has brought opportunities to enable automated product configuration and derivation for large-scale systems/software, in which models are used as the abstract specification of commonalities and variabilities of products of a product line. In our previous work, we have proposed a UML-based variability modeling methodology and an interactive configuration process. Based on these work, in this paper, we propose an automated and incremental conformance checking approach to ensure that the manual configuration to each variation point conforms to a set of pre-defined conformance rules specified in OCL. The proposed approach, called Zen-CC is implemented as a component of our product configuration and derivation tool, named as Zen-Configurator. The proposed approach is evaluated with two real-world case studies and results showed that the performance of Zen-CC is significantly better than a baseline algorithm checking all the conformance rules at each configuration step. Moreover, the performance of Zen-CC rarely varies during the configuration process, suggesting that our approach is scalable for configuring products with a large number of configuration points.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128559591","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 13
Security Benchmarks for Web Serving Systems Web服务系统的安全基准
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.38
N. Mendes, H. Madeira, J. Durães
{"title":"Security Benchmarks for Web Serving Systems","authors":"N. Mendes, H. Madeira, J. Durães","doi":"10.1109/ISSRE.2014.38","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.38","url":null,"abstract":"The security of software-based systems is one of the most difficult issues when accessing the suitability of systems to most application scenarios. However, security is very hard to evaluate and quantify, and there are no standard methods to benchmark the security of software systems. This work proposes a novel methodology for benchmarking the security of software-based systems. This methodology uses the notion of risk in a quantifiable way and allows the comparison of functionally-equivalent systems (or different configurations of the same system) to enable users and system integrators to identify and select the most secure one. The benchmark methodology is based on both analytical and experimental steps and can be applicable to any software system. The benchmark procedures and rules guide users on how to instantiate the methodology to specific scenarios and how to execute the benchmark. In this paper we also present an instantiation of the methodology to a case study of web-serving systems and show how to use the results to identify the most secure system under benchmark.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122629981","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
Experience Report: Orthogonal Classification of Safety Critical Issues 经验报告:安全关键问题正交分类
2014 IEEE 25th International Symposium on Software Reliability Engineering Pub Date : 2014-11-03 DOI: 10.1109/ISSRE.2014.25
N. Silva, M. Vieira
{"title":"Experience Report: Orthogonal Classification of Safety Critical Issues","authors":"N. Silva, M. Vieira","doi":"10.1109/ISSRE.2014.25","DOIUrl":"https://doi.org/10.1109/ISSRE.2014.25","url":null,"abstract":"Techniques to classify defects have been used for decades, providing relevant information on how to improve systems. Such techniques heavily rely on human experience and have been generalized to cover different types of systems at different maturity levels. However, their application to safety-critical systems development and operation phases neither is very common, or at least not spread publicly, nor disseminated in the industrial and academic worlds. This practical experience report presents the results and conclusions from applying a mature Orthogonal Defect Classification (ODC) to a large set of safety-critical issues. The work is based on the analysis of more than 240 real issues (defects) identified during all the lifecycle phases of 4 safety-critical systems in the aerospace and space domains. The outcomes reveal the challenges in properly classifying this specific type of issues with the broader ODC approach. The difficulties are identified and systematized and specific proposals for improvement are proposed.","PeriodicalId":214247,"journal":{"name":"2014 IEEE 25th International Symposium on Software Reliability Engineering","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124119241","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 13
下一页 尾页
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整，为了账户安全，请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们：info@booksci.cn Book学术提供免费学术资源搜索服务，方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号：604180095
Book学术官方微信
小红书