2015 IEEE International Conference on Software Quality, Reliability and Security最新文献_第2页

Fault Localization in the Light of Faulty User Input 基于用户输入错误的故障定位

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.47

Birgit Hofer, F. Wotawa

引用次数: 2

Abstracting Program Dependencies Using the Method Dependence Graph 使用方法依赖图抽象程序依赖

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.18

Haipeng Cai, Raúl A. Santelices

{"title":"Abstracting Program Dependencies Using the Method Dependence Graph","authors":"Haipeng Cai, Raúl A. Santelices","doi":"10.1109/QRS.2015.18","DOIUrl":"https://doi.org/10.1109/QRS.2015.18","url":null,"abstract":"While empowering a wide range of software engineering tasks, the traditional fine-grained software dependence (TSD) model can face great scalability challenges that hinder its applications. Many dependence abstraction approaches have been proposed, yet most of them either target very specific clients or model partial dependencies only, while others have not been fully evaluated for their accuracy with respect to the TSD model, especially in approximating forward dependencies on object-oriented programs. To fill this gap, we present a new dependence abstraction called the method dependence graph (MDG) that approximates the TSD model at method level, and compare it against a recent TSD abstraction, called the Static-Exectue-After (SEA), concerning forward-dependence approximation. We also evaluate the cost-effectiveness of both approaches in the application context of impact analysis. Our results show that the MDG can approximate TSD safely, for method-level forward dependence at least, with little loss of precision yet huge gain in efficiency, and for the same purpose, while both are safe, the MDG can achieve significantly higher precision than SEA at practical costs.","PeriodicalId":361839,"journal":{"name":"2015 IEEE International Conference on Software Quality, Reliability and Security","volume":"31 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-08-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125003720","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Are Anti-patterns Coupled? An Empirical Study 反模式是否耦合?实证研究

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.43

Wanwangying Ma, Lin Chen, Yuming Zhou, Baowen Xu, Xiaoyu Zhou

引用次数: 6

On the Relationship between Model Coverage and Code Coverage Using MATLAB's Simulink 利用MATLAB的Simulink研究模型覆盖率与代码覆盖率的关系

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.39

Yunwei Dong, Zhe Li, D. Towey

引用次数: 1

Is Learning-to-Rank Cost-Effective in Recommending Relevant Files for Bug Localization? 学习排序在为Bug定位推荐相关文件时是否具有成本效益?

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.49

Fei Zhao, Yaming Tang, Yibiao Yang, Hongmin Lu, Yuming Zhou, Baowen Xu

{"title":"Is Learning-to-Rank Cost-Effective in Recommending Relevant Files for Bug Localization?","authors":"Fei Zhao, Yaming Tang, Yibiao Yang, Hongmin Lu, Yuming Zhou, Baowen Xu","doi":"10.1109/QRS.2015.49","DOIUrl":"https://doi.org/10.1109/QRS.2015.49","url":null,"abstract":"Software bug localization aiming to determine the locations needed to be fixed for a bug report is one of the most tedious and effort consuming activities in software debugging. Learning-to-rank (LR) is the state-of-the-art approach proposed by Ye et al. to recommending relevant files for bug localization. Ye et al.'s experimental results show that the LR approach significantly outperforms previous bug localization approaches in terms of \"precision\" and \"accuracy\". However, this evaluation does not take into account the influence of the size of the recommended files on the efficiency in detecting bugs. In practice, developers will generally spend more code inspection effort to detect bugs if larger files are recommended. In this paper, we use six large-scale open-source Java projects to evaluate the LR approach in the context of effort-aware bug localization. Our results, surprisingly, show that, when taking into account the code inspection effort to detect bugs, the LR approach is similar to or even worse than the standard VSM (Vector Space Model), a naïve IR-based bug localization approach.","PeriodicalId":361839,"journal":{"name":"2015 IEEE International Conference on Software Quality, Reliability and Security","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-08-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132601162","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 10

On the Viability of Using SRGMs for IT Help Desk Incident Predictions 关于使用srgm进行IT帮助台事件预测的可行性

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.23

A. Andrews, Joseph Lucente

引用次数: 1

Known XML Vulnerabilities Are Still a Threat to Popular Parsers and Open Source Systems 已知的XML漏洞仍然是流行解析器和开源系统的威胁

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.42

S. Jan, Duy Cu Nguyen, L. Briand

{"title":"Known XML Vulnerabilities Are Still a Threat to Popular Parsers and Open Source Systems","authors":"S. Jan, Duy Cu Nguyen, L. Briand","doi":"10.1109/QRS.2015.42","DOIUrl":"https://doi.org/10.1109/QRS.2015.42","url":null,"abstract":"The Extensible Markup Language (XML) is extensively used in software systems and services. Various XML-based attacks, which may result in sensitive information leakage or denial of services, have been discovered and published. However, due to development time pressures and limited security expertise, such attacks are often overlooked in practice. In this paper, following a rigorous and extensive experimental process, we study the presence of two types of XML-based attacks: BIL and XXE in 13 popular XML parsers. Furthermore, we investigate whether open-source systems that adopt a vulnerable XML parser apply any mitigation to prevent such attacks. Our objective is to provide clear and solid scientific evidence about the extent of the threat associated with such XML-based attacks and to discuss the implications of the obtained results. Our conclusion is that most of the studied parsers are vulnerable and so are systems that use them. Such strong evidence can be used to raise awareness among software developers and is a strong motivation for developers to provide security measures to thwart BIL and XXE attacks before deployment when adopting existing XML parsers.","PeriodicalId":361839,"journal":{"name":"2015 IEEE International Conference on Software Quality, Reliability and Security","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-08-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124980366","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19

Formalizing Semantic Differences between Combining Algorithms in XACML 3.0 Policies 形式化XACML 3.0策略中组合算法的语义差异

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.32

Dianxiang Xu, Yunpeng Zhang, Ning Shen

引用次数: 7

An Empirical Study of Highly Impactful Bugs in Mozilla Projects Mozilla项目中高影响bug的实证研究

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.45

Le An, Foutse Khomh

{"title":"An Empirical Study of Highly Impactful Bugs in Mozilla Projects","authors":"Le An, Foutse Khomh","doi":"10.1109/QRS.2015.45","DOIUrl":"https://doi.org/10.1109/QRS.2015.45","url":null,"abstract":"Bug triaging is the process that consists in screening and prioritising bugs to allow a software organisation to focus its limited resources on bugs with high impact on software quality. In a previous work, we proposed an entropy-based crash triaging approach that can help software organisations identify crash-types that affect a large user base with high frequency. We refer to bugs associated to these crash-types as highly-impactful bugs. The proposed triaging approach can identify highly-impactful bugs only after they have led to crashes in the field for a certain period of time. Therefore, to reduce the impact of highly-impactful bugs on user perceived quality, an early identification of these bugs is necessary. In this paper, we examine the characteristics of highly-impactful bugs in Mozilla Firefox and Fennec for Android, and propose statistical models to help software organisations predict them early on before they impact a large population of users. Results show that our proposed prediction models can achieve a precision up to 64.2% (in Firefox) and a recall up to 98.3% (in Fennec). We also evaluate the benefits of our proposed models and found that, on average, they could help reduce 23.0% of Firefox' crashes and 13.4% of Fennec's crashes, while reducing 28.6% of impacted machine profiles for Firefox and 49.4% for Fennec. Software organisations could use our prediction models to catch highly-impactful bugs early during the triaging process, preventing them from impacting a larger user base.","PeriodicalId":361839,"journal":{"name":"2015 IEEE International Conference on Software Quality, Reliability and Security","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-08-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116152724","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

How Effective Are Code Coverage Criteria? 代码覆盖标准有多有效?

2015 IEEE International Conference on Software Quality, Reliability and Security Pub Date : 2015-08-03 DOI: 10.1109/QRS.2015.30

H. Hemmati

引用次数: 61