2011 33rd International Conference on Software Engineering (ICSE)最新文献_第10页

A formal approach to software synthesis for architectural platforms 一种用于架构平台的软件合成的正式方法

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1986023

H. Bagheri

引用次数: 2

Mining service abstractions: NIER track 挖掘服务抽象:NIER轨道

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1985954

Dionysis Athanasopoulos, A. Zarras, Panos Vassiliadis, V. Issarny

引用次数: 12

First workshop on developing tools as plug-ins: (TOPI 2011) 第一次以插件形式开发工具的研讨会:(TOPI 2011)

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1986060

J. Bishop, D. Notkin, K. Breitman

引用次数: 1

Systematizing security test case planning using functional requirements phrases 使用功能需求短语系统化安全测试用例计划

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1986019

Benjamin H. Smith

{"title":"Systematizing security test case planning using functional requirements phrases","authors":"Benjamin H. Smith","doi":"10.1145/1985793.1986019","DOIUrl":"https://doi.org/10.1145/1985793.1986019","url":null,"abstract":"Security experts use their knowledge to attempt attacks on an application in an exploratory and opportunistic way in a process known as penetration testing. However, building security into a product is the responsibility of the whole team, not just the security experts who are often only involved in the final phases of testing. Through the development of a black box security test plan, software testers who are not necessarily security experts can work proactively with the developers early in the software development lifecycle. The team can then establish how security will be evaluated such that the product can be designed and implemented with security in mind. The goal of this research is to improve the security of applications by introducing a methodology that uses the software system's requirements specification statements to systematically generate a set of black box security tests. We used our methodology on a public requirements specification to create 137 tests and executed these tests on five electronic health record systems. The tests revealed 253 successful attacks on these five systems, which are used to manage the clinical records for approximately 59 million patients, collectively. If non-expert testers can surface the more common vulnerabilities present in an application, security experts can attempt more devious, novel attacks.","PeriodicalId":412454,"journal":{"name":"2011 33rd International Conference on Software Engineering (ICSE)","volume":"79 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121661908","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17

Tracing architecturally significant requirements: a decision-centric approach 跟踪架构上重要的需求:以决策为中心的方法

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1986014

Mehdi Mirakhorli

引用次数: 10

Covana: precise identification of problems in pex Covana:精确识别pex中的问题

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1985976

Xusheng Xiao, Tao Xie, N. Tillmann, J. D. Halleux

{"title":"Covana: precise identification of problems in pex","authors":"Xusheng Xiao, Tao Xie, N. Tillmann, J. D. Halleux","doi":"10.1145/1985793.1985976","DOIUrl":"https://doi.org/10.1145/1985793.1985976","url":null,"abstract":"Achieving high structural coverage is an important goal of software testing. Instead of manually producing test inputs that achieve high structural coverage, testers or developers can employ tools built based on automated test-generation approaches, such as Pex, to automatically generate such test inputs. Although these tools can easily generate test inputs that achieve high structural coverage for simple programs, when applied on complex programs in practice, these tools face various problems, such as the problems of dealing with method calls to external libraries or generating method-call sequences to produce desired object states. Since these tools are currently not powerful enough to deal with these various problems in testing complex programs, we propose cooperative developer testing, where developers provide guidance to help tools achieve higher structural coverage. In this demo, we present Covana, a tool that precisely identifies and reports problems that prevent Pex from achieving high structural coverage. Covana identifies problems primarily by determining whether branch statements containing not-covered branches have data dependencies on problem candidates.","PeriodicalId":412454,"journal":{"name":"2011 33rd International Conference on Software Engineering (ICSE)","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115339930","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

How do programmers ask and answer questions on the web?: NIER track 程序员如何在网络上提问和回答问题?: NIER轨道

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1985907

Christoph Treude, Ohad Barzilay, M. Storey

引用次数: 405

Does the initial environment impact the future of developers 初始环境是否会影响开发者的未来

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1985831

Minghui Zhou, A. Mockus

{"title":"Does the initial environment impact the future of developers","authors":"Minghui Zhou, A. Mockus","doi":"10.1145/1985793.1985831","DOIUrl":"https://doi.org/10.1145/1985793.1985831","url":null,"abstract":"Software developers need to develop technical and social skills to be successful in large projects. We model the relative sociality of developer as a ratio between the size of her communication network and the number of tasks she participates in. We obtain both measures from the problem tracking systems. We use her workflow peer network to represent her social learning, and the issues she has worked on to represent her technical learning. Using three open source and three traditional projects we investigate how the project environment reflected by the sociality measure at the time a developer joins, affects her future participation. We find: a) the probability that a new developer will become one of long-term and productive developers is highest when the project sociality is low; b) times of high sociality are associated with a higher intensity of new contributors joining the project; c) there are significant differences between the social learning trajectories of the developers who join in low and in high sociality environments; d) the open source and commercial projects exhibit different nature in the relationship between developer's tenure and the project's environment at the time she joins. These findings point out the importance of the initial environment in determining the future of the developers and may lead to better training and learning strategies in software organizations.","PeriodicalId":412454,"journal":{"name":"2011 33rd International Conference on Software Engineering (ICSE)","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127159175","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 61

A comparison of model-based and judgment-based release planning in incremental software projects 增量软件项目中基于模型和基于判断的发布计划的比较

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1985901

Hans Christian Benestad, J. Hannay

{"title":"A comparison of model-based and judgment-based release planning in incremental software projects","authors":"Hans Christian Benestad, J. Hannay","doi":"10.1145/1985793.1985901","DOIUrl":"https://doi.org/10.1145/1985793.1985901","url":null,"abstract":"Numerous factors are involved when deciding when to implement which features in incremental software development. To facilitate a rational and efficient planning process, release planning models make such factors explicit and compute release plan alternatives according to optimization principles. However, experience suggests that industrial use of such models is limited. To investigate the feasibility of model and tool support, we compared input factors assumed by release planning models with factors considered by expert planners. The former factors were cataloged by systematically surveying release planning models, while the latter were elicited through repertory grid interviews in three software organizations. The findings indicate a substantial overlap between the two approaches. However, a detailed analysis reveals that models focus on only select parts of a possibly larger space of relevant planning factors. Three concrete areas of mismatch were identified: (1) continuously evolving requirements and specifications, (2) continuously changing prioritization criteria, and (3) authority-based decision processes. With these results in mind, models, tools and guidelines can be adjusted to address better real-life development processes.","PeriodicalId":412454,"journal":{"name":"2011 33rd International Conference on Software Engineering (ICSE)","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-05-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123826928","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 27

Towards quantitative software reliability assessment in incremental development processes 面向增量开发过程中软件可靠性的定量评估

2011 33rd International Conference on Software Engineering (ICSE) Pub Date : 2011-05-21 DOI: 10.1145/1985793.1985800

Toshiya Fujii, T. Dohi, T. Fujiwara

引用次数: 32