2009 Ninth International Conference on Quality Software最新文献

ADAM: Web Anomaly Detection Assistant Based on Feature Matrix ADAM:基于特征矩阵的Web异常检测助手

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.24

Sungdeok Cha, Junsup Lee, Sangrok Kim, Sanghyun Cho

{"title":"ADAM: Web Anomaly Detection Assistant Based on Feature Matrix","authors":"Sungdeok Cha, Junsup Lee, Sangrok Kim, Sanghyun Cho","doi":"10.1109/QSIC.2009.24","DOIUrl":"https://doi.org/10.1109/QSIC.2009.24","url":null,"abstract":"Importance of web security cannot be overemphasized in the era of web-based economy. Although anomaly detection has long been considered a promising alternative to signature-based misuse detection technique, most studies to date used either small scale or artificially generated attack data. In this paper, based on security analysis applied on anonymous www.microsoft.com log of about 250GB,we propose Anomaly Feature Matrix (AFM) as an effective framework to characterize anomalies. Feature selection of AFM is based on the characteristics of well-known (e.g., DDoS) attacks as well as patterns of anomalous logs found in the Microsoft data. Independent security analysis performed on the same data by Microsoft security engineers concluded that 1) We did not miss any major attacks; and 2) AFM is a general enough framework to characterize likely web attacks. In order to assist AFM-based anomaly analysis in large organizations, we implemented an interactive and visual analysis tool named ADAM (Anomaly Detection Assistant based on feature Matrix). Integrated with mapping software such as Virtual Earth, ADAM enables efficient and focused security analysis on web logs.","PeriodicalId":219917,"journal":{"name":"2009 Ninth International Conference on Quality Software","volume":"74 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-08-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126163044","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Towards Selecting Test Data Using Topological Structure of Boolean Expressions 利用布尔表达式的拓扑结构选择测试数据

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.13

Lian Yu, W. Tsai, Wei Zhao, Jun Zhu, Qianxing Wang

引用次数: 4

An Intuitive Approach for Specifying Interface Constraint 一种指定接口约束的直观方法

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.62

Qianxiang Wang

引用次数: 0

Are Fault Failure Rates Good Estimators of Adequate Test Set Size? 故障故障率是测试集大小的良好估计吗?

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.38

V. Debroy, W. E. Wong

引用次数: 2

Increasing Diversity in Coverage Test Suites Using Model Checking 使用模型检查增加覆盖测试套件的多样性

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.36

G. Fraser, F. Wotawa

引用次数: 2

Tag-Based Techniques for Black-Box Test Case Prioritization for Service Testing 服务测试黑盒测试用例优先级的基于标记技术

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.12

Lijun Mei, W. Chan, T. Tse, Robert G. Merkel

引用次数: 32

A Hybrid Approach to Detecting Security Defects in Programs 一种检测程序安全缺陷的混合方法

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.10

Lian Yu, Jun Zhou, Yue Yi, Jianchu Fan, Qianxiang Wang

引用次数: 6

A Robot Fault-Tolerance Approach Based on Fault Type 基于故障类型的机器人容错方法

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.46

Bingu Shim, B. Baek, Suntae Kim, S. Park

引用次数: 4

A Constraint-Oriented Approach to Software Architecture Design 面向约束的软件架构设计方法

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.59

M. Berg, A. Tang, R. Farenhorst

引用次数: 9

A Bayesian Approach for the Detection of Code and Design Smells 一种检测代码和设计气味的贝叶斯方法

2009 Ninth International Conference on Quality Software Pub Date : 2009-08-24 DOI: 10.1109/QSIC.2009.47

Foutse Khomh, S. Vaucher, Yann-Gaël Guéhéneuc, H. Sahraoui

{"title":"A Bayesian Approach for the Detection of Code and Design Smells","authors":"Foutse Khomh, S. Vaucher, Yann-Gaël Guéhéneuc, H. Sahraoui","doi":"10.1109/QSIC.2009.47","DOIUrl":"https://doi.org/10.1109/QSIC.2009.47","url":null,"abstract":"The presence of code and design smells can have a severe impact on the quality of a program. Consequently, their detection and correction have drawn the attention of both researchers and practitioners who have proposed various approaches to detect code and design smells in programs. However, none of these approaches handle the inherent uncertainty of the detection process. We propose a Bayesian approach to manage this uncertainty. First, we present a systematic process to convert existing state-of-the-art detection rules into a probabilistic model. We illustrate this process by generating a model to detect occurrences of the Blob antipattern. Second, we present results of the validation of the model: we built this model on two open-source programs, GanttProject v1.10.2 and Xerces v2.7.0, and measured its accuracy. Third, we compare our model with another approach to show that it returns the same candidate classes while ordering them to minimise the quality analysts' effort. Finally, we show that when past detection results are available, our model can be calibrated using machine learning techniques to offer an improved, context-specific detection.","PeriodicalId":219917,"journal":{"name":"2009 Ninth International Conference on Quality Software","volume":"96 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-08-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134346498","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 221