Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319078
B. Thuraisingham
Data mining is the process of posing queries and extracting patterns, often previously unknown from large quantities of data using pattern matching or other reasoning techniques. Cyber security is the area that deals with protecting from cyber terrorism. Cyber attacks include access control violations, unauthorized intrusions, and denial of service as well as insider threat. The presentation provides an overview of data mining techniques and cyber threats and discusses developments in applying data mining for cyber security.
{"title":"Data mining and cyber security","authors":"B. Thuraisingham","doi":"10.1109/QSIC.2003.1319078","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319078","url":null,"abstract":"Data mining is the process of posing queries and extracting patterns, often previously unknown from large quantities of data using pattern matching or other reasoning techniques. Cyber security is the area that deals with protecting from cyber terrorism. Cyber attacks include access control violations, unauthorized intrusions, and denial of service as well as insider threat. The presentation provides an overview of data mining techniques and cyber threats and discusses developments in applying data mining for cyber security.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"456 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117315278","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319093
Kazutaka Maruyama, M. Terada
Many programmers have had to deal with an overwritten variable resulting for example from an aliasing problem. The culprit is obviously the last write-access to that memory location before the manifestation of the bug. The usual technique for removing such bugs starts with the debugger by (1) finding the last write and (2) moving the control point of execution back to that time by re-executing the program from the beginning. We call the feature to implement this process "reverse watchpoint" and believe automating it is important. In this paper we propose a new concept, "position ", that is, a point in the program execution trace, as needed for step (2) above. The position enables debuggers to automate the control of program execution to support common debugging activities. We have implemented position in Java with a bytecode transformer. Measurements show that position can be provided with an acceptable amount of overhead.
{"title":"Debugging with reverse watchpoint","authors":"Kazutaka Maruyama, M. Terada","doi":"10.1109/QSIC.2003.1319093","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319093","url":null,"abstract":"Many programmers have had to deal with an overwritten variable resulting for example from an aliasing problem. The culprit is obviously the last write-access to that memory location before the manifestation of the bug. The usual technique for removing such bugs starts with the debugger by (1) finding the last write and (2) moving the control point of execution back to that time by re-executing the program from the beginning. We call the feature to implement this process \"reverse watchpoint\" and believe automating it is important. In this paper we propose a new concept, \"position \", that is, a point in the program execution trace, as needed for step (2) above. The position enables debuggers to automate the control of program execution to support common debugging activities. We have implemented position in Java with a bytecode transformer. Measurements show that position can be provided with an acceptable amount of overhead.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"127 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132270541","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319118
Miguel A. Serrano, C. M. D. Oca, Karina Cedillo
We describe our experience on how we used the team software process (TSP/sup SM/) as a foundation for implementing a software process improvement (SPI) initiative in a small software development company. The Capability Maturity Model for software (SW-CMM/sup TM/) was chosen as the model to follow and the IDEAL model as the organizational improvement model for planning and implementing the improvement actions. The TSP to SW-CMM gap analysis and a Capability Maturity Model based assessment for internal process improvement (CBA IPI) self assessment were used to diagnose and guide the SPI efforts. In this paper, we present our findings and experiences on this SPI initiative.
{"title":"An experience on using the team software process for implementing the Capability Maturity Model for software in a small organization","authors":"Miguel A. Serrano, C. M. D. Oca, Karina Cedillo","doi":"10.1109/QSIC.2003.1319118","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319118","url":null,"abstract":"We describe our experience on how we used the team software process (TSP/sup SM/) as a foundation for implementing a software process improvement (SPI) initiative in a small software development company. The Capability Maturity Model for software (SW-CMM/sup TM/) was chosen as the model to follow and the IDEAL model as the organizational improvement model for planning and implementing the improvement actions. The TSP to SW-CMM gap analysis and a Capability Maturity Model based assessment for internal process improvement (CBA IPI) self assessment were used to diagnose and guide the SPI efforts. In this paper, we present our findings and experiences on this SPI initiative.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126437546","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319123
Z. Li, Makoto Nonaka, Aki Kakurai, M. Azuma
This study reports a measurement support system, which was developed based on the XForms-format user interface (UI) specifications in order to facilitate the process of measuring the functional size of interactive software. XForms is the next generation of Web forms. As it is capable of describing the purpose and the presentation of the Web form separately, the semantics of user-computer interactions, which is essential to the functional size measurement (FSM), can be extracted from the specification. In this study, we propose several extensions to the current W3C's XForms for its application in FSM. The procedure of measuring the functional size, which was proposed in our past study, is further automated based on the XForms-format UI specifications. The interactive part of a car-navigation software product was measured with the support system and the results suggest that this system is effective in generating reliable results and reducing measurement costs.
{"title":"Measuring functional size of interactive software: a support system based on XForms-format user interface specifications","authors":"Z. Li, Makoto Nonaka, Aki Kakurai, M. Azuma","doi":"10.1109/QSIC.2003.1319123","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319123","url":null,"abstract":"This study reports a measurement support system, which was developed based on the XForms-format user interface (UI) specifications in order to facilitate the process of measuring the functional size of interactive software. XForms is the next generation of Web forms. As it is capable of describing the purpose and the presentation of the Web form separately, the semantics of user-computer interactions, which is essential to the functional size measurement (FSM), can be extracted from the specification. In this study, we propose several extensions to the current W3C's XForms for its application in FSM. The procedure of measuring the functional size, which was proposed in our past study, is further automated based on the XForms-format UI specifications. The interactive part of a car-navigation software product was measured with the support system and the results suggest that this system is effective in generating reliable results and reducing measurement costs.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"134 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132808802","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319128
Jessica Chen, Kun Wang
Executions with internal nondeterministic choices make the testing procedure non-repeatable. A natural solution is to artificially enforce and direct the execution to take the desired path so that a test can be reproduced. With geographically distributed processes and heterogeneous platform architectures, distributed systems have raised new dimensions of challenges to develop effective techniques for the reproducible testing. In this paper, we discuss the architectural and design issues on constructing an environment to automate such a testing for distributed Java applications. Our focus is on controlling the order of input and remote call events in the application under test during the test procedure. The testing environment is by itself distributed and does not require code intrusion.
{"title":"Constructing a reproducible testing environment for distributed Java applications","authors":"Jessica Chen, Kun Wang","doi":"10.1109/QSIC.2003.1319128","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319128","url":null,"abstract":"Executions with internal nondeterministic choices make the testing procedure non-repeatable. A natural solution is to artificially enforce and direct the execution to take the desired path so that a test can be reproduced. With geographically distributed processes and heterogeneous platform architectures, distributed systems have raised new dimensions of challenges to develop effective techniques for the reproducible testing. In this paper, we discuss the architectural and design issues on constructing an environment to automate such a testing for distributed Java applications. Our focus is on controlling the order of input and remote call events in the application under test during the test procedure. The testing environment is by itself distributed and does not require code intrusion.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116137650","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319115
Hyung-Min Park, Ho-Won Jung
As software process assessment (SPA) involves a subjective procedure, its reliability is an important issue. Two types of reliability have intensively been investigated in SPA: internal consistency (internal reliability) and interrater agreement (external reliability). This study investigates interrater agreement. Cohen's Kappa coefficient has been a popular measure for estimating interrater agreement. However, the application of Kappa coefficient in certain situations is incorrect due to the "Kappa Paradoxes". To cope with the insufficiency of Kappa coefficient, this study applied the intraclass correlation coefficient (ICC) to estimate interrater agreement. The ICC has not been employed in the SPA context. In addition, we examined the stability of the estimated ICC value by using a bootstrap resampling method. Results show that ICC could be applied where the Kappa coefficient could not be applied, but not all cases.
{"title":"Evaluating interrater agreement with intraclass correlation coefficient in SPICE-based software process assessment","authors":"Hyung-Min Park, Ho-Won Jung","doi":"10.1109/QSIC.2003.1319115","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319115","url":null,"abstract":"As software process assessment (SPA) involves a subjective procedure, its reliability is an important issue. Two types of reliability have intensively been investigated in SPA: internal consistency (internal reliability) and interrater agreement (external reliability). This study investigates interrater agreement. Cohen's Kappa coefficient has been a popular measure for estimating interrater agreement. However, the application of Kappa coefficient in certain situations is incorrect due to the \"Kappa Paradoxes\". To cope with the insufficiency of Kappa coefficient, this study applied the intraclass correlation coefficient (ICC) to estimate interrater agreement. The ICC has not been employed in the SPA context. In addition, we examined the stability of the estimated ICC value by using a bootstrap resampling method. Results show that ICC could be applied where the Kappa coefficient could not be applied, but not all cases.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"26 10","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120979131","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319080
V. Alagar, O. Ormandjieva, M. Zheng
Self-evolving software systems in time-critical domains adapt themselves automatically to changes in external situations and internal conditions. This paper presents a black-box method for incrementally generating test cases for self-evolving systems.
{"title":"Incremental testing for self-evolving timed systems","authors":"V. Alagar, O. Ormandjieva, M. Zheng","doi":"10.1109/QSIC.2003.1319080","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319080","url":null,"abstract":"Self-evolving software systems in time-critical domains adapt themselves automatically to changes in external situations and internal conditions. This paper presents a black-box method for incrementally generating test cases for self-evolving systems.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127751653","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319126
V. Narayana, Rajashekara Swamy
Implementation of a disciplined engineering approach to software development requires the existence of an adequate supporting measurement & analysis system. Due to demands for increased efficiency and effectiveness of software processes, measurement models need to be created to characterize and describe the various processes usefully. The data derived from these models should then be analyzed quantitatively to assess the effects of new techniques and methodologies. In recent times, statistical and process thinking principles have led software organizations to appreciate the value of applying statistical process control techniques. As part of the journey towards SW-CMM/spl reg/ Level 5 at the Motorola Malaysia Software Center, which the center achieved in October 2001, considerable effort was spent on exploring SPC techniques to establish process control while focusing on the quantitative process management KPA of the SW-CMM/spl reg/. This paper discusses the evolutionary learning experiences, results and lessons learnt by the center in establishing appropriate analysis techniques using statistical and other derivative techniques. The paper discusses the history of analysis techniques that were explored with specific focus on characterizing the inspection process. Future plans to enhance existing techniques and to broaden the scope to cover analysis of other software processes are also discussed.
{"title":"Experiences in the inspection process characterization techniques","authors":"V. Narayana, Rajashekara Swamy","doi":"10.1109/QSIC.2003.1319126","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319126","url":null,"abstract":"Implementation of a disciplined engineering approach to software development requires the existence of an adequate supporting measurement & analysis system. Due to demands for increased efficiency and effectiveness of software processes, measurement models need to be created to characterize and describe the various processes usefully. The data derived from these models should then be analyzed quantitatively to assess the effects of new techniques and methodologies. In recent times, statistical and process thinking principles have led software organizations to appreciate the value of applying statistical process control techniques. As part of the journey towards SW-CMM/spl reg/ Level 5 at the Motorola Malaysia Software Center, which the center achieved in October 2001, considerable effort was spent on exploring SPC techniques to establish process control while focusing on the quantitative process management KPA of the SW-CMM/spl reg/. This paper discusses the evolutionary learning experiences, results and lessons learnt by the center in establishing appropriate analysis techniques using statistical and other derivative techniques. The paper discusses the history of analysis techniques that were explored with specific focus on characterizing the inspection process. Future plans to enhance existing techniques and to broaden the scope to cover analysis of other software processes are also discussed.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117104853","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319089
Ysong Yueh Yu, S. Ng, E. Chan
The classification-tree method provides a systematic way for software testers to derive test cases by considering important relevant aspects that are identified from the specification. The method has been used in many real-life applications and shown to be effective. This paper presents several enhancements to the method by annotating the classification tree with additional information to reduce manual effort in the generation, selection and prioritization of test cases. A tool for supporting this enhanced process is also described.
{"title":"Generating, selecting and prioritizing test cases from specifications with tool support","authors":"Ysong Yueh Yu, S. Ng, E. Chan","doi":"10.1109/QSIC.2003.1319089","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319089","url":null,"abstract":"The classification-tree method provides a systematic way for software testers to derive test cases by considering important relevant aspects that are identified from the specification. The method has been used in many real-life applications and shown to be effective. This paper presents several enhancements to the method by annotating the classification tree with additional information to reduce manual effort in the generation, selection and prioritization of test cases. A tool for supporting this enhanced process is also described.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114306874","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Pub Date : 2003-11-06DOI: 10.1109/QSIC.2003.1319098
M. S. Lund
This paper proposes a general technique for testing decomposition of component specifications based on rules for formal verification. Component specifications are expressed as pairs of two models: a context assumption and a component guarantee. Thereby they capture the contract-like nature between the component to be developed and the context in which it is supposed to work. The paper provides empirical evidence that A/G rules developed for formal methods are highly relevant as patterns for testing decomposition of component specifications. More explicitly, that testing the validity of decomposition based on A/G rules is valid, and moreover, that testing based on A/G rules is more efficient that a conventional approach for the same kind of test-quality.
{"title":"Testing decomposition of component specifications based on a rule for formal verification","authors":"M. S. Lund","doi":"10.1109/QSIC.2003.1319098","DOIUrl":"https://doi.org/10.1109/QSIC.2003.1319098","url":null,"abstract":"This paper proposes a general technique for testing decomposition of component specifications based on rules for formal verification. Component specifications are expressed as pairs of two models: a context assumption and a component guarantee. Thereby they capture the contract-like nature between the component to be developed and the context in which it is supposed to work. The paper provides empirical evidence that A/G rules developed for formal methods are highly relevant as patterns for testing decomposition of component specifications. More explicitly, that testing the validity of decomposition based on A/G rules is valid, and moreover, that testing based on A/G rules is more efficient that a conventional approach for the same kind of test-quality.","PeriodicalId":145980,"journal":{"name":"Third International Conference on Quality Software, 2003. Proceedings.","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2003-11-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121892535","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
京公网安备 11010802042870号
京ICP备2023020795号-1
扫码关注我们
求助内容：
应助结果提醒方式：