Journal of Software-Evolution and Process最新文献

筛选
英文 中文
Towards More Trustworthy Online Examinations: Formal Modeling and Verification Using CPNs 迈向更可信的在线考试:使用cpn的形式化建模和验证
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-29 DOI: 10.1002/smr.70088
Wenbo Zhou, Yiyuan Wang, Minghao Yin
{"title":"Towards More Trustworthy Online Examinations: Formal Modeling and Verification Using CPNs","authors":"Wenbo Zhou,&nbsp;Yiyuan Wang,&nbsp;Minghao Yin","doi":"10.1002/smr.70088","DOIUrl":"10.1002/smr.70088","url":null,"abstract":"<div>\u0000 \u0000 <p>Online examinations are among the most effective ways to evaluate students' learning outcomes. The reliable design of online examination systems is crucial to ensuring the correctness of examination procedures. While existing approaches focus on isolated aspects (for example, state-level verification via UPPAAL or secure data transmission via cryptography), they lack the capability for comprehensive verification of the entire examination workflow. To address this gap, we use colored Petri nets (CPNs), which enable end-to-end modeling of concurrent processes and data-token interactions. In this paper, we develop a comprehensive CPN-based framework to model the entire online examination workflow. We formalize eight critical properties (e.g., correct total score) using ASK-CTL and verify them through state-space exploration and scenario simulation in CPN Tools. The verification results demonstrate that the model satisfies all eight properties, with no deadlocks or property violations found among 62,292 state-space nodes. This work provides a formal verification framework for designing trustworthy online examination systems, reducing risks of logical errors and security vulnerabilities in real-world implementations.</p>\u0000 </div>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 4","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147683972","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Mitigating Communication-Related Process Loss in Agile Teams: A Case Study on Common Ground and Role-Based Interaction 减轻敏捷团队中与沟通相关的过程损失:基于共同基础和基于角色的交互的案例研究
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-24 DOI: 10.1002/smr.70096
Jacqueline Vitacco, Thomas Bosshard
{"title":"Mitigating Communication-Related Process Loss in Agile Teams: A Case Study on Common Ground and Role-Based Interaction","authors":"Jacqueline Vitacco,&nbsp;Thomas Bosshard","doi":"10.1002/smr.70096","DOIUrl":"https://doi.org/10.1002/smr.70096","url":null,"abstract":"<p>Agile software development frameworks such as Scrum were designed around structured communication ceremonies intended to keep teams aligned. Yet the alignment fostered by ceremonies does not automatically translate into a shared understanding, leaving a gap that remains a major source of communication-related process inefficiency. This case study investigates how a lack of common ground undermines effective collaboration—a key driver of project success in Agile settings. Based on semi-structured interviews with experienced Agile team leaders, the study reveals that Agile ceremonies alone are indeed insufficient to ensure the knowledge sharing and common ground necessary for efficient collaboration. The findings highlight the need to distinguish communication purposes across stakeholder roles, introducing the concept of role-based communication interfaces as a means of strengthening shared understanding of objectives, requirements, and priorities. By viewing Agile teams as social systems, this study identifies targeted strategies to mitigate process loss through structured, purpose-driven communication frameworks. The study contributes to the understanding of how Agile practices can evolve to better address communication challenges, offering practical guidance for improving software development processes in real-world team environments.</p>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1002/smr.70096","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147615028","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
PSCSelector: Appropriate Program Slicing Criteria Selection Based on Parameter-Efficient Lightweight LLM PSCSelector:基于参数高效轻量级LLM的适当程序切片标准选择
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-22 DOI: 10.1002/smr.70092
Jianming Chang, Lulu Wang, Zaixing Zhang, Mei Han, Jiahao Ren, Bixin Li
{"title":"PSCSelector: Appropriate Program Slicing Criteria Selection Based on Parameter-Efficient Lightweight LLM","authors":"Jianming Chang,&nbsp;Lulu Wang,&nbsp;Zaixing Zhang,&nbsp;Mei Han,&nbsp;Jiahao Ren,&nbsp;Bixin Li","doi":"10.1002/smr.70092","DOIUrl":"https://doi.org/10.1002/smr.70092","url":null,"abstract":"<div>\u0000 \u0000 <p>Program slicing is widely used in downstream software engineering tasks, such as bug localization and code feature extraction in deep learning. For program slicing, existing research focuses on dependency analysis during slicing while lacking the selection of slicing criteria before slicing. As the starting point of dependency analysis, the slicing criterion directly determines the results of the program slicing application. However, existing criterion selection is only based on empirical judgment and lacks an effective slicing criterion selection method. In this paper, we propose PSCSelector, an appropriate Program Slicing Criterion Selection framework based on a popular lightweight LLM CodeBERT. PSCSelector first constructs the detailed substatement level system dependency graph to obtain the context of the slicing criterion. CodeBERT is then fine-tuned in a parameter-efficient way to jointly embed the slicing criterion context and the application texts to capture the appropriate criterion pattern. To validate the effectiveness of PSCSelector in downstream tasks, we choose bug localization as the example application and build the corresponding PSCSelector. In the experiment, we evaluate the effectiveness of PSCSelector in bug dataset Defects4J by calculating the number of searched bugs and the size of the search scope. The experimental results show that the PSCSelector-selected slicing criterion can effectively search 74% of bugs and reduce 69% of the original slice, which uses the bug-triggering statement as the slicing criterion.</p>\u0000 </div>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147568191","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Experiences With New SW Paradigms for Systems Software and Service Process Improvement and Innovation 系统软件和服务过程改进与创新的新软件范例的经验
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-17 DOI: 10.1002/smr.70098
Ricardo Colomo-Palacios, Richard Messnarz, Miklós Biró
{"title":"Experiences With New SW Paradigms for Systems Software and Service Process Improvement and Innovation","authors":"Ricardo Colomo-Palacios,&nbsp;Richard Messnarz,&nbsp;Miklós Biró","doi":"10.1002/smr.70098","DOIUrl":"https://doi.org/10.1002/smr.70098","url":null,"abstract":"&lt;p&gt;This special issue comprises a selected set of high-quality and extended articles of the 31st Systems, Software and Services Process Improvement (EuroSPI) Conference, held in 2024 in Munich, Germany.&lt;/p&gt;&lt;p&gt;Conferences were held in Dublin (Ireland) in 1994, in Vienna (Austria) in 1995, in Brighton (UK) in 1996, in Budapest (Hungary) in 1997, in Gothenburg (Sweden) in 1998, in Pori (Finland) in 1999, in Copenhagen (Denmark) in 2000, in Limerick (Ireland) in 2001, in Nuremberg (Germany) in 2002, in Graz (Austria) in 2003, in Trondheim (Norway) in 2004, in Budapest (Hungary) in 2005, in Joensuu (Finland) in 2006, in Potsdam (Germany) in 2007, in Dublin (Ireland) in 2008, in Alcala (Spain) in 2009, in Grenoble (France) in 2010, in Roskilde (Denmark) in 2011, in Vienna (Austria) in 2012, in Dundalk (Ireland) in 2013, in Luxembourg in 2014, in Ankara (Turkey) in 2015, in Graz (Austria) in 2016, in Ostrava (Czech Republic) in 2017, in Bilbao (Spain) in 2018, in Edinburgh (UK) in 2019, in Düsseldorf (Germany) in 2020, in Krems (Austria) in 2021, in Salzburg (Austria) in 2022, in Grenoble (France) in 2023, and in Munich (Germany) in 2024.&lt;/p&gt;&lt;p&gt;EuroSPI had a cooperation with the EU Blueprint for Batteries project ALBATTS (2020–2023) where leading European industry discussed and established a skills agenda to build a European battery production capability for the electrification of European e-mobility.&lt;/p&gt;&lt;p&gt;EuroSPI had a cooperation with the EU project FLAMENCO (2023–2024) where EuroSPI founded the innovation agent task force (later promoted to a persistent working group) to develop an ISO 560xx compliant innovation capability assessment and to experiment with AI and GenAI in innovation projects.&lt;/p&gt;&lt;p&gt;EuroSPI has a cooperation with the EU Blueprint project TRIREME (2024–2028, Digital &amp; Green Skills Towards Future of The Mobility Ecosystem) in which a Europe-wide Skills Hub for key job roles and qualifications for a future Green Mobility ecosystem are set up. Job roles supported by EuroSPI become integrated to the Skills Hub.&lt;/p&gt;&lt;p&gt;EuroSPI within ASA and TRIREME develops the new job role, training, assessment tool, and GenAI-based SmartSPI data analysis tool for innovation agents who in future support the implementation of ISO 560xx in the automotive ecosystem.&lt;/p&gt;&lt;p&gt;EuroSPI signed a full partner agreement with Automotive Skills Alliance (ASA) who is the pact for skills partners in the Eu Erasmus+ program.&lt;/p&gt;&lt;p&gt;EuroSPI has established the SPI Manifesto (SPI = Systems, Software and Services Process Improvement), a set of social media groups including a selection of presentations and key notes freely available on YouTube and access to job-role–based qualification through the European Certification and Qualification Association (www.ecqa.org).&lt;/p&gt;&lt;p&gt;A typical characterization of EuroSPI is reflected in a statement made by a company: “… the biggest value of EuroSPI lies in its function as a European knowledge and experience exchange mechanism for SPI a","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1002/smr.70098","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147566718","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Robust AI-Driven Artifact Model Generation for Development Standards in Regulated Domains 面向规范领域开发标准的鲁棒人工智能驱动工件模型生成
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-16 DOI: 10.1002/smr.70093
Philipp Straub, Mustafa Bülbül, Robin Korfmann, Jürgen Münch, Marco Kuhrmann
{"title":"Robust AI-Driven Artifact Model Generation for Development Standards in Regulated Domains","authors":"Philipp Straub,&nbsp;Mustafa Bülbül,&nbsp;Robin Korfmann,&nbsp;Jürgen Münch,&nbsp;Marco Kuhrmann","doi":"10.1002/smr.70093","DOIUrl":"https://doi.org/10.1002/smr.70093","url":null,"abstract":"<p>In regulated domains such as aerospace or automotive software, compliance with standards like ECSS and ISO/IEC 26262 is mandatory to ensure safety and reliability. Artifacts, such as process or product models, lay the foundation for planning and managing development projects, as well as for measurement and evaluation tasks. Manually extracting such artifacts from PDF-based standards is time-consuming and error-prone. To address this issue, we developed a large language model (LLM)-based approach for automatically generating artifact models from standards. However, the evolution of AI models constitutes a challenge, since the extraction results might differ when updating the LLM to a newer version. In this article, we present an enhanced approach that strengthens the artifact-generation process against such challenges. The approach generates machine-readable artifact models that allow for automated measurement systems, for example, for monitoring compliance and controlling complex projects. The performance of the artifact model generation was evaluated using the ECSS standards from the aerospace domain and resulted in an average completeness of 100.00% and an average precision of 71.33% of the generated models.</p>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1002/smr.70093","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147566123","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Exploring Indicators of Developers' Sentiment Perceptions in Student Software Projects 探索学生软件项目中开发人员情绪感知的指标
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-12 DOI: 10.1002/smr.70089
Martin Obaidi, Marc Herrmann, Jendrik Martensen, Jil Klünder, Kurt Schneider
{"title":"Exploring Indicators of Developers' Sentiment Perceptions in Student Software Projects","authors":"Martin Obaidi,&nbsp;Marc Herrmann,&nbsp;Jendrik Martensen,&nbsp;Jil Klünder,&nbsp;Kurt Schneider","doi":"10.1002/smr.70089","DOIUrl":"https://doi.org/10.1002/smr.70089","url":null,"abstract":"<p>Communication is a crucial social factor in the success of software projects, as positively or negatively perceived statements can influence how recipients feel and affect team collaboration through emotional contagion. Whether a developer perceives a written message as positive, negative, or neutral is likely shaped by multiple factors. In this paper, we investigate how mood traits and states, life circumstances, project phases, and group dynamics relate to the perception of text-based messages in software development. We conducted a four-round survey study with 81 students in team-based software projects. Across rounds, participants reported these factors and labeled 30 decontextualized statements for sentiment, including meta-data on labeling rationale and uncertainty. Our results show: (1) Sentiment perception is only moderately stable within individuals, and label changes concentrate on ambiguity-prone statements; (2) correlation-level signals are small and do not survive global multiple-testing correction; (3) in statement-level repeated-measures models (GEE), higher mood trait and reactivity are associated with more positive (and less neutral) labeling, while predictors of negative labeling are weaker and at most trend-level (e.g., task conflict); (4) we find no clear evidence of systematic project-phase effects. Overall, sentiment perception varies within persons and is strongly statement-dependent. Although our study was conducted in an academic setting, the observed variability and ambiguity effects suggest caution when interpreting sentiment analysis outputs and motivate future work with contextualized, in-project communication.</p>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1002/smr.70089","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147565327","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Optimizing Managerial Decision-Making Through Agile Practices: A Software Engineering Management Team Perspective 通过敏捷实践优化管理决策:一个软件工程管理团队的视角
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-11 DOI: 10.1002/smr.70095
Hannes Salin, Yves Rybarczyk, Roger G. Nyberg, Mengjie Han
{"title":"Optimizing Managerial Decision-Making Through Agile Practices: A Software Engineering Management Team Perspective","authors":"Hannes Salin,&nbsp;Yves Rybarczyk,&nbsp;Roger G. Nyberg,&nbsp;Mengjie Han","doi":"10.1002/smr.70095","DOIUrl":"https://doi.org/10.1002/smr.70095","url":null,"abstract":"<p>In today's landscape of rapidly evolving software engineering, managers face a multitude of challenges and complex decision-making scenarios. Within the Swedish Transport Administration (STA), software engineering managers take on dual roles as both strategists and traditional managers, increasing the complexity of their decision-making environment. We investigate how management teams in this context can use and adopt agile practices for better decision-making. The aim is to explore if agile software development team practices can be used for software engineering management teams, with the goal of identifying agile success factors that can be mapped to management success. We employ an industrial case study with a mixed-method research approach, combining quantitative agile data using project tracking software, and qualitative data using structured interviews with the management teams. Unlike previous research that has primarily examined agile adoption within software development teams or emphasized the manager's supportive role, this work investigates management teams themselves as adopters of agile practices and metrics. To our knowledge, this is the first study to develop a mapping model that systematically connects Scrum-based practices, roles, and metrics to the context of software engineering management teams. Our study showed that Scrum-based agile practices, such as stand-ups and retrospectives, can be adapted to software engineering management teams, and that certain agile software development metrics can be transformed into a managerial setting using our proposed model.</p>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://onlinelibrary.wiley.com/doi/epdf/10.1002/smr.70095","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147614842","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Exploring Neural Network Structure Code Reuse in the Open-Source Community for Improving Maintenance 探索神经网络结构代码在开源社区中的重用,以改善维护
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-03-08 DOI: 10.1002/smr.70090
Xiaoning Ren, Yuekun Wang, Chongyang Liu, Yueming Wu, Qiang Hu, Lijun Zhang, Yinxing Xue
{"title":"Exploring Neural Network Structure Code Reuse in the Open-Source Community for Improving Maintenance","authors":"Xiaoning Ren,&nbsp;Yuekun Wang,&nbsp;Chongyang Liu,&nbsp;Yueming Wu,&nbsp;Qiang Hu,&nbsp;Lijun Zhang,&nbsp;Yinxing Xue","doi":"10.1002/smr.70090","DOIUrl":"https://doi.org/10.1002/smr.70090","url":null,"abstract":"<div>\u0000 \u0000 <p>Neural networks (NNs) have rapidly advanced, demonstrating exceptional performance across various fields, leading to a surge in open-source NN projects. The complexity and rapid growth of these projects pose significant challenges for maintenance within the open-source community. Given that NN architecture code is the core asset of NN projects, understanding its reuse in the open-source community is essential for effective maintenance, such as reducing redundancy and identifying potential intellectual property violations. While prior studies have examined code reuse in open-source projects, they have two key limitations: They do not specifically address NN structure code, and they rely on manually selected small-scale datasets that do not sufficiently represent the broader open-source ecosystem. To address these limitations, this study explores reuse patterns in a large-scale dataset of 20,000 open-source projects on GitHub, focusing specifically on NN structure code. Specially, we categorize NN structure reuse into three types: (1) exact reuse with no changes; (2) shallow reuse with minor adjustments like renaming variables or adjusting parameters; and (3) conceptual reuse with significant modifications, while retaining the same layer sequence. We then propose a detection framework, <i>NNReuse</i>, to identify these reuse types and conduct an empirical evaluation of their prevalence and characteristics. As a practical application, we also assess potential license conflicts based on <i>NNReuse</i>. Extensive experiments show that 55.6% of projects and 54.17% of NN structures exhibit structural similarities that are consistent with potential NN structure reuse in open-source projects. Among these, exact reuse is particularly common and introduces significant redundancy, with an estimated storage optimization potential of up to 34.49%. Reuse primarily occurs at a high level, with 43.3% involving the reuse of overall network architecture. Additionally, in projects with license protection, as much as 64.3% may present potential license conflicts, highlighting the importance of strengthened license compliance and proactive IP risk mitigation in the open-source community.</p>\u0000 </div>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 3","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-03-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"147612881","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A State-Aware Fuzzing Method for Trusted Execution Environment Kernels 可信执行环境内核的状态感知模糊测试方法
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-02-16 DOI: 10.1002/smr.70085
Qiang Zhang, Mengjun Guo, Yunfei Qiu, Qingyang Meng
{"title":"A State-Aware Fuzzing Method for Trusted Execution Environment Kernels","authors":"Qiang Zhang,&nbsp;Mengjun Guo,&nbsp;Yunfei Qiu,&nbsp;Qingyang Meng","doi":"10.1002/smr.70085","DOIUrl":"https://doi.org/10.1002/smr.70085","url":null,"abstract":"<div>\u0000 \u0000 <p>Trusted execution environments (TEEs) are widely used, and their kernel security has become a significant area of focus. Fuzzing, a powerful technique for detecting vulnerabilities in operating systems, has increasingly been applied to the security analysis of TEEs. However, conventional fuzzing tools cannot be directly used for TEE kernels due to their isolation. Coverage-guided fuzzers often discard test cases that trigger new states but cover the same code, which limits their effectiveness in discovering vulnerabilities. To address these challenges, we propose a state-aware fuzzing method specifically designed for TEE kernels. Initially, we develop a modeling and tracing approach to represent the program state through state-variable values, overcoming the limitations of coverage-guided fuzzers. Subsequently, we propose a new communication scheme to address the issues resulting from the isolation of TEEs. Additionally, new seed preservation and selection algorithms are put forward to better guide the fuzzer in exploring vulnerabilities. Finally, we employ the N-gram model to enhance the test case generation process and optimize the framework's performance. We have implemented a prototype called Trusty-Statefuzz and evaluated it on Fuchsia, our self-developed microkernel operating system Nebula, and the OP-TEE. The evaluation results show that Trusty-Statefuzz is effective at detecting both new code and vulnerabilities. Trusty-Statefuzz discovers nine unknown vulnerabilities and 23 known vulnerabilities. Additionally, it achieves 13% higher code coverage and 27% higher state coverage than the state-of-the-art fuzzer Syzkaller.</p>\u0000 </div>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 2","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-02-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"146217266","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Impact of Selected JavaScript Engines on the Performance of Mobile Hybrid Applications 选定的JavaScript引擎对移动混合应用性能的影响
IF 1.8 4区 计算机科学
Journal of Software-Evolution and Process Pub Date : 2026-02-12 DOI: 10.1002/smr.70086
Łukasz Kurant, Jarosław Bylina
{"title":"Impact of Selected JavaScript Engines on the Performance of Mobile Hybrid Applications","authors":"Łukasz Kurant,&nbsp;Jarosław Bylina","doi":"10.1002/smr.70086","DOIUrl":"https://doi.org/10.1002/smr.70086","url":null,"abstract":"<div>\u0000 \u0000 <p>This study presents a comprehensive comparative analysis of the performance of different JavaScript engines in the context of React Native hybrid applications, with a particular focus on the differences between JavaScript Interface (JSI) and bridge architectures. The study conducted a series of performance tests on the most popular JavaScript engines, including Hermes, JavaScriptCore (JSC), and V8, using a set of standard benchmarks and use cases. As part of the research, a QuickJS engine communication layer was created, and necessary changes were proposed to the React Native framework and engine code. The testing methodology included measurements of application package size, interaction time, memory usage, UI rendering performance, and operation execution speed. Tests were conducted on identical components implemented in both React Native architectures, allowing a direct comparison of the impact of architecture on JavaScript engine performance. The results of the experiment indicate differences in engine performance depending on the scenario and describe the differences between their use in bridge and JSI architectures.</p>\u0000 </div>","PeriodicalId":48898,"journal":{"name":"Journal of Software-Evolution and Process","volume":"38 2","pages":""},"PeriodicalIF":1.8,"publicationDate":"2026-02-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"146224213","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":4,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书