首页 > 最新文献

2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)最新文献

英文 中文
Towards Mobile Twin Peaks for App Development 面向移动应用开发的双峰
G. Avellis, Julian Harty, Y. Yu
Requirements of mobile apps are often hard to elicit from massive numbers of users, although it is important for the solution architecture to meet them. Mobile Twin Peaks approach is proposed as a process of developing apps concurrently and iteratively that incorporates bidirectional communications within a mobile app. The communications allow both requirements engineers and software architects to reach a consensus on functionalities and quality constraints and to adapt architectural design decisions appropriately. To recommend architectural design decisions to the developers, we aim to obtain architecture-critical requirements from a set of general apps by combining, for example, analytics, ethnographic study, and information retrieval. We argue that the effectiveness of these techniques could be evaluated by experimental case studies and by engaging with industry partners to perform action research.
移动应用程序的需求通常很难从大量用户中引出,尽管解决方案架构满足这些需求很重要。移动双峰方法被提议为一个同时迭代开发应用程序的过程,在移动应用程序中包含双向通信。通信允许需求工程师和软件架构师就功能和质量约束达成共识,并适当地调整架构设计决策。为了向开发人员推荐架构设计决策,我们的目标是通过结合分析、人种学研究和信息检索,从一组通用应用程序中获得架构关键需求。我们认为,这些技术的有效性可以通过实验案例研究和与行业合作伙伴进行行动研究来评估。
{"title":"Towards Mobile Twin Peaks for App Development","authors":"G. Avellis, Julian Harty, Y. Yu","doi":"10.1109/MOBILESoft.2017.10","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.10","url":null,"abstract":"Requirements of mobile apps are often hard to elicit from massive numbers of users, although it is important for the solution architecture to meet them. Mobile Twin Peaks approach is proposed as a process of developing apps concurrently and iteratively that incorporates bidirectional communications within a mobile app. The communications allow both requirements engineers and software architects to reach a consensus on functionalities and quality constraints and to adapt architectural design decisions appropriately. To recommend architectural design decisions to the developers, we aim to obtain architecture-critical requirements from a set of general apps by combining, for example, analytics, ethnographic study, and information retrieval. We argue that the effectiveness of these techniques could be evaluated by experimental case studies and by engaging with industry partners to perform action research.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116235023","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Just-In-Time Bug Prediction in Mobile Applications: The Domain Matters! 移动应用程序中的即时漏洞预测:领域问题!
Gemma Catolino
Bug prediction allows developers to focus testing eorts onspecic areas of software systems. While this topic has beenextensively studied for traditional applications, investiga-tions on mobile apps are still missing. In this paper wepreliminarily study the eectiveness of a previously denedJust-In-Time bug prediction model applied onve mobileapps. Key results indicate the poor performance of the modeland the need of further research on the topic.
Bug预测允许开发人员将测试工作集中在软件系统的特定区域。虽然这一主题已经在传统应用程序中得到了广泛的研究,但对移动应用程序的调查仍然缺失。本文初步研究了一种应用于移动应用程序的即时缺陷预测模型的有效性。关键结果表明,该模型的性能较差,需要进一步研究。
{"title":"Just-In-Time Bug Prediction in Mobile Applications: The Domain Matters!","authors":"Gemma Catolino","doi":"10.1109/MOBILESoft.2017.58","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.58","url":null,"abstract":"Bug prediction allows developers to focus testing eorts onspecic areas of software systems. While this topic has beenextensively studied for traditional applications, investiga-tions on mobile apps are still missing. In this paper wepreliminarily study the eectiveness of a previously denedJust-In-Time bug prediction model applied onve mobileapps. Key results indicate the poor performance of the modeland the need of further research on the topic.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122485512","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 23
IFMLEdit.org: Model Driven Rapid Prototyping of Mobile Apps IFMLEdit.org:模型驱动的移动应用快速原型
Carlo Bernaschina, S. Comai, P. Fraternali
We demonstrate IFMLEdit.org, an online tool for the rapid prototyping of web and mobile applications.IFMLEdit.org is based on the Interaction Flow Modeling Language (IFML), an OMG standard for the description of the interaction between users and applications by means of flows of information in reaction to user events. In the demo, attendees will be able to edit IFML specifications with IFMLEdit.org, investigate their properties by transforming them into Place Chart Nets, a variant of Petri Nets, and generate the code of web and mobile applications from the validated IFML model.Video: https://youtu.be/y_hDVeUbi7g.
我们展示了IFMLEdit.org,一个用于快速构建web和移动应用程序原型的在线工具。IFMLEdit.org基于交互流建模语言(IFML),这是一种OMG标准,用于通过对用户事件的反应的信息流来描述用户和应用程序之间的交互。在演示中,与会者将能够使用IFMLEdit.org编辑IFML规范,通过将其转换为Place Chart Nets (Petri Nets的一种变体)来研究其属性,并从经过验证的IFML模型生成web和移动应用程序的代码。视频:https://youtu.be/y_hDVeUbi7g。
{"title":"IFMLEdit.org: Model Driven Rapid Prototyping of Mobile Apps","authors":"Carlo Bernaschina, S. Comai, P. Fraternali","doi":"10.1109/MOBILESoft.2017.15","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.15","url":null,"abstract":"We demonstrate IFMLEdit.org, an online tool for the rapid prototyping of web and mobile applications.IFMLEdit.org is based on the Interaction Flow Modeling Language (IFML), an OMG standard for the description of the interaction between users and applications by means of flows of information in reaction to user events. In the demo, attendees will be able to edit IFML specifications with IFMLEdit.org, investigate their properties by transforming them into Place Chart Nets, a variant of Petri Nets, and generate the code of web and mobile applications from the validated IFML model.Video: https://youtu.be/y_hDVeUbi7g.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129248018","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 27
The Soot-Based Toolchain for Analyzing Android Apps 基于烟尘的Android应用分析工具链
Steven Arzt, Siegfried Rasthofer, E. Bodden
Due to the quality and security requirements that come with an always-on mobile device processing large amounts of highly sensitive information, Android apps are an important target for automated program analysis. Yet, research on new approaches in this field often requires a significant amount of work to be spent on engineering tasks that are not central to the concrete research question at hand. These programming and debugging tasks can significantly delay the progress of the field. We therefore argue that research in the field greatly benefits from having a universal platform of readily usable components and well-tested fundamental algorithms on top of which researchers can build their own prototypes. Besides decreasing the required engineering effort for each new piece of research, such a platform also provides a base for comparing different approaches within one uniform framework, thereby fostering comparability and reproducibility. In this paper, we present the Soot framework for program analysis and various highly integrated open-source tools and components built on top of it that were designed with re-usability in mind. These artifacts are already at the core of many research and commercial projects worldwide. Due to the shared platform, results from one tool can not only be used as inputs for the others, but individual data objects can be passed around to form one large API with which one can build new research prototypes with ease.
由于始终在线的移动设备处理大量高度敏感的信息所带来的质量和安全要求,Android应用程序是自动化程序分析的重要目标。然而,研究该领域的新方法通常需要将大量的工作花在与手头具体研究问题无关的工程任务上。这些编程和调试任务可能会大大延迟该领域的进展。因此,我们认为,该领域的研究极大地受益于拥有一个易于使用的组件和经过良好测试的基本算法的通用平台,研究人员可以在此基础上构建自己的原型。除了减少每项新研究所需的工程努力外,这样的平台还提供了一个在统一框架内比较不同方法的基础,从而促进了可比性和可重复性。在本文中,我们介绍了用于程序分析的Soot框架,以及构建在该框架之上的各种高度集成的开源工具和组件,这些工具和组件在设计时考虑到了可重用性。这些人工制品已经成为世界范围内许多研究和商业项目的核心。由于共享平台,来自一个工具的结果不仅可以用作其他工具的输入,而且单个数据对象可以传递,形成一个大的API,可以轻松地构建新的研究原型。
{"title":"The Soot-Based Toolchain for Analyzing Android Apps","authors":"Steven Arzt, Siegfried Rasthofer, E. Bodden","doi":"10.1109/MOBILESOFT.2017.2","DOIUrl":"https://doi.org/10.1109/MOBILESOFT.2017.2","url":null,"abstract":"Due to the quality and security requirements that come with an always-on mobile device processing large amounts of highly sensitive information, Android apps are an important target for automated program analysis. Yet, research on new approaches in this field often requires a significant amount of work to be spent on engineering tasks that are not central to the concrete research question at hand. These programming and debugging tasks can significantly delay the progress of the field. We therefore argue that research in the field greatly benefits from having a universal platform of readily usable components and well-tested fundamental algorithms on top of which researchers can build their own prototypes. Besides decreasing the required engineering effort for each new piece of research, such a platform also provides a base for comparing different approaches within one uniform framework, thereby fostering comparability and reproducibility. In this paper, we present the Soot framework for program analysis and various highly integrated open-source tools and components built on top of it that were designed with re-usability in mind. These artifacts are already at the core of many research and commercial projects worldwide. Due to the shared platform, results from one tool can not only be used as inputs for the others, but individual data objects can be passed around to form one large API with which one can build new research prototypes with ease.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122142081","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 19
Who Added That Permission to My App? An Analysis of Developer Permission Changes in Open Source Android Apps 谁给我的应用添加了权限?开源Android应用中开发者权限变化分析
Daniel E. Krutz, Nuthan Munaiah, Anthony S Peruma, Mohamed Wiem Mkaouer
Android applications rely on a permission-based model to carry out core functionality. Appropriate permission usage is imperative for ensuring device security and protecting the user's desired privacy levels. But who is making the important decisions of which permissions the app should request? Are they experienced developers with the appropriate project knowledge to make such important decisions, or are these crucial choices being made by those with relatively minor amounts of contributions to the project? When are these permission-related decisions being made in the app's development life cycle? We examined 1,402 Android version control repositories containing over 331,318 commits including 18,751 AndroidManifest.xml versions to better understand when, why, and who is adding permissions to apps. We found that (I) developers with more experience are more likely to make permission-based changes (II) permissions are typically added earlier in apps' commit lifetime, but their removal is more sustained throughout the commit lifetime (III) developers reverting permission-based changes are typically more experienced than developers who initially made the change being reverted.
Android应用程序依赖于基于权限的模型来执行核心功能。适当的权限使用对于确保设备安全和保护用户所需的隐私级别至关重要。但是谁来决定应用程序应该申请哪些权限呢?他们是经验丰富的开发人员,具有适当的项目知识来做出如此重要的决定,还是这些关键的选择是由那些对项目贡献相对较小的人做出的?在应用程序的开发生命周期中,这些与权限相关的决策是什么时候做出的?我们检查了1,402个Android版本控制库,其中包含超过331,318个提交,包括18,751个AndroidManifest.xml版本,以更好地了解何时,为什么以及谁在向应用程序添加权限。我们发现:(1)经验丰富的开发人员更有可能进行基于权限的更改;(2)权限通常在应用程序提交生命周期的早期被添加,但在整个提交生命周期中它们的移除更持久;(3)恢复基于权限的更改的开发人员通常比最初进行更改的开发人员更有经验。
{"title":"Who Added That Permission to My App? An Analysis of Developer Permission Changes in Open Source Android Apps","authors":"Daniel E. Krutz, Nuthan Munaiah, Anthony S Peruma, Mohamed Wiem Mkaouer","doi":"10.1109/MOBILESoft.2017.5","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.5","url":null,"abstract":"Android applications rely on a permission-based model to carry out core functionality. Appropriate permission usage is imperative for ensuring device security and protecting the user's desired privacy levels. But who is making the important decisions of which permissions the app should request? Are they experienced developers with the appropriate project knowledge to make such important decisions, or are these crucial choices being made by those with relatively minor amounts of contributions to the project? When are these permission-related decisions being made in the app's development life cycle? We examined 1,402 Android version control repositories containing over 331,318 commits including 18,751 AndroidManifest.xml versions to better understand when, why, and who is adding permissions to apps. We found that (I) developers with more experience are more likely to make permission-based changes (II) permissions are typically added earlier in apps' commit lifetime, but their removal is more sustained throughout the commit lifetime (III) developers reverting permission-based changes are typically more experienced than developers who initially made the change being reverted.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130526209","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 18
An Approach to Modeling Call Response Behavior on Mobile Phones Based on Multi-Dimensional Contexts 基于多维上下文的手机呼叫响应行为建模方法
Iqbal H. Sarker, M. A. Kabir, A. Colman, Jun Han
Due to the popularity of context-aware computingand the rapid growth of the smart phone devices, modeling anindividual's phone call response behavior may assist them intheir daily activities for managing call interruptions. A key stepof such modeling is to discovering call response behavioral rulesbased on multi-dimensional contexts related to individual'sbehavior. Currently, researchers use classification rule learnersfor modeling individual's mobile phone behavior. However, theproblem is that such learning techniques produce only rulesthat include maximal number of contexts albeit ordered byrelevance. This results in many rules with low-reliability thatdecrease the accuracy of the modeling approach. In this paper, we propose an approach (Tmodel) to modeling individual'sphone call response behavior utilizing mobile phone data. Thisapproach produces not only general rules that capture individual'sbehavior at a particular level of confidence with a minimalnumber of contexts, but also produce rules that express specificexceptions to the general rules when more context-dimensionsare taken into account. Experimental evaluation shows thatour approach outperforms existing approaches to modelingindividual's phone call response behavior based on multidimensional contexts.
由于上下文感知计算的普及和智能手机设备的快速增长,对个人的电话响应行为进行建模可以帮助他们在日常活动中管理电话中断。这种建模的一个关键步骤是发现基于与个体行为相关的多维上下文的呼叫响应行为规则。目前,研究人员使用分类规则学习器对个人的手机行为进行建模。然而,问题是这种学习技术只产生包含最大数量上下文的规则,尽管是按相关性排序的。这导致许多低可靠性的规则降低了建模方法的准确性。本文提出了一种利用手机数据对个人电话应答行为进行建模的方法(Tmodel)。这种方法不仅产生了在最小数量的背景下在特定信心水平上捕捉个人行为的一般规则,而且还产生了在考虑更多背景维度时表达一般规则的特定例外的规则。实验评估表明,我们的方法优于现有的基于多维上下文的个人电话响应行为建模方法。
{"title":"An Approach to Modeling Call Response Behavior on Mobile Phones Based on Multi-Dimensional Contexts","authors":"Iqbal H. Sarker, M. A. Kabir, A. Colman, Jun Han","doi":"10.1109/MOBILESoft.2017.38","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.38","url":null,"abstract":"Due to the popularity of context-aware computingand the rapid growth of the smart phone devices, modeling anindividual's phone call response behavior may assist them intheir daily activities for managing call interruptions. A key stepof such modeling is to discovering call response behavioral rulesbased on multi-dimensional contexts related to individual'sbehavior. Currently, researchers use classification rule learnersfor modeling individual's mobile phone behavior. However, theproblem is that such learning techniques produce only rulesthat include maximal number of contexts albeit ordered byrelevance. This results in many rules with low-reliability thatdecrease the accuracy of the modeling approach. In this paper, we propose an approach (Tmodel) to modeling individual'sphone call response behavior utilizing mobile phone data. Thisapproach produces not only general rules that capture individual'sbehavior at a particular level of confidence with a minimalnumber of contexts, but also produce rules that express specificexceptions to the general rules when more context-dimensionsare taken into account. Experimental evaluation shows thatour approach outperforms existing approaches to modelingindividual's phone call response behavior based on multidimensional contexts.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130219071","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
Towards Native Code Offloading Platforms for Image Processing in Mobile Applications: A Case Study 面向移动应用中图像处理的本地代码卸载平台:一个案例研究
Guillermo Valenzuela, H. A. Neyem, J. I. Benedetto, Jaime C. Navón, Pablo Sanabria, Juan A. Karmy, Felipe Balbontin
In this paper, we present a real-life case study to show the advantages of a new code offloading solution focused on improving both performance and energy consumption for image processing mobile applications. From our experiments, we found that offloading an image processing task would allow up to 5.7x speedup and 85% of reduction in energy consumption for low-end devices, and 1.7x speedup and 64.3% of reduction in energy consumption for high-end devices.
在本文中,我们提出了一个现实生活中的案例研究,以展示一种新的代码卸载解决方案的优势,该解决方案专注于提高图像处理移动应用程序的性能和能耗。从我们的实验中,我们发现卸载图像处理任务可以使低端设备的加速速度提高5.7倍,能耗降低85%;对于高端设备,加速速度提高1.7倍,能耗降低64.3%。
{"title":"Towards Native Code Offloading Platforms for Image Processing in Mobile Applications: A Case Study","authors":"Guillermo Valenzuela, H. A. Neyem, J. I. Benedetto, Jaime C. Navón, Pablo Sanabria, Juan A. Karmy, Felipe Balbontin","doi":"10.1109/MOBILESoft.2017.27","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.27","url":null,"abstract":"In this paper, we present a real-life case study to show the advantages of a new code offloading solution focused on improving both performance and energy consumption for image processing mobile applications. From our experiments, we found that offloading an image processing task would allow up to 5.7x speedup and 85% of reduction in energy consumption for low-end devices, and 1.7x speedup and 64.3% of reduction in energy consumption for high-end devices.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"50 4","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120908163","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Authentication in Selected Mobile Data Collection Systems: Current State, Challenges, Solutions and Gaps 选定移动数据收集系统中的身份验证:现状、挑战、解决方案和差距
Marriette Katarahweire, Engineer Bainomugisha, K. Mughal
Mobile data collection systems (MDCS) in the health sector are of great benefit to health care providers and community workers especially in low-resource settings. MDCS enable the extension and provision of health services closer to the community by enabling data collection and diagnosis without the patient being in a hospital setting. MDCS, however, face a number security challenges including authentication and authorization of users, secure communication between a mobile client and the server, and secure application deployment. This paper provides a criteria and guidelines for evaluating an authentication model for MDCS. The criteria encompass key authentication dimensions including proper local and remote authentication, password management and recovery especially with no Internet connectivity. We assess the authentication models using two reference systems that are widely used in low-resource settings, namely, District Health Information Software (DHIS 2) and mUzima. The findings reveal gaps in the authentication model of the reference systems including insecure authentication, insecure storage of user credentials on the mobile device and no proper automatic logouts, among others.
卫生部门的移动数据收集系统(MDCS)对卫生保健提供者和社区工作者大有裨益,特别是在资源匮乏的环境中。MDCS能够在病人不住院的情况下进行数据收集和诊断,从而使卫生服务的扩展和提供更接近社区。然而,MDCS面临着许多安全挑战,包括用户的身份验证和授权、移动客户端和服务器之间的安全通信以及应用程序的安全部署。本文提供了评估MDCS认证模型的标准和指南。这些标准包括关键身份验证维度,包括适当的本地和远程身份验证、密码管理和恢复,尤其是在没有互联网连接的情况下。我们使用在低资源环境中广泛使用的两个参考系统,即区域卫生信息软件(DHIS 2)和mUzima来评估认证模型。调查结果揭示了参考系统的身份验证模型存在缺陷,包括不安全的身份验证、在移动设备上不安全的用户凭证存储以及没有适当的自动注销等。
{"title":"Authentication in Selected Mobile Data Collection Systems: Current State, Challenges, Solutions and Gaps","authors":"Marriette Katarahweire, Engineer Bainomugisha, K. Mughal","doi":"10.1109/MOBILESoft.2017.9","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.9","url":null,"abstract":"Mobile data collection systems (MDCS) in the health sector are of great benefit to health care providers and community workers especially in low-resource settings. MDCS enable the extension and provision of health services closer to the community by enabling data collection and diagnosis without the patient being in a hospital setting. MDCS, however, face a number security challenges including authentication and authorization of users, secure communication between a mobile client and the server, and secure application deployment. This paper provides a criteria and guidelines for evaluating an authentication model for MDCS. The criteria encompass key authentication dimensions including proper local and remote authentication, password management and recovery especially with no Internet connectivity. We assess the authentication models using two reference systems that are widely used in low-resource settings, namely, District Health Information Software (DHIS 2) and mUzima. The findings reveal gaps in the authentication model of the reference systems including insecure authentication, insecure storage of user credentials on the mobile device and no proper automatic logouts, among others.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"94 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124261557","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Detecting Android Smells Using Multi-Objective Genetic Programming 利用多目标遗传规划检测Android气味
M. Kessentini, Ali Ouni
The evolution rate of mobile applications is much higher than regular software applications having shorter release deadlines and smaller code base. Mobile applications tend to be evolved quickly by developers to meet several new customer requirements and fix discovered bugs. However, evolving the existing features and design may introduce bad design practices, also called code smells, which can highly decrease the maintainability and performance of these mobile applications. However, unlike the area of object-oriented software systems, the detection of code smells in mobile applications received a very little of attention. Recent, few studies defined a set of quality metrics for Android applications and proposed a support to manually write a set of rules to detect code smells by combining these quality metrics. However, finding the best combination of metrics and their thresholds to identify code smells is left to the developer as a manual process. In this paper, we propose to automatically generate rules for the detection of code smells in Android applications using a multi-objective genetic programming algorithm (MOGP). The MOGP algorithm aims at finding the best set of rules that cover a set of code smell examples of Android applications based on two conflicting objective functions of precision and recall. We evaluate our approach on 184 Android projects with source code hosted in GitHub. The statistical test of our results show that the generated detection rules identified 10 Android smell types on these mobile applications with an average correctness higher than 82% and an average relevance of 77% based on the feedback of active developers of mobile apps.
移动应用程序的发展速度比常规软件应用程序要快得多,因为它们的发布期限更短,代码库更小。开发人员往往会迅速开发移动应用程序,以满足一些新的客户需求并修复发现的漏洞。然而,发展现有的功能和设计可能会引入不良的设计实践,也称为代码气味,这可能会大大降低这些移动应用程序的可维护性和性能。然而,与面向对象的软件系统不同,在移动应用程序中检测代码气味很少受到关注。最近,一些研究为Android应用定义了一套质量指标,并提出了一种支持手动编写一套规则,通过结合这些质量指标来检测代码气味的方法。然而,找到度量和它们的阈值的最佳组合来识别代码气味是留给开发人员的手动过程。在本文中,我们提出使用多目标遗传规划算法(MOGP)自动生成用于检测Android应用程序中代码气味的规则。MOGP算法旨在基于准确率和召回率两个相互冲突的目标函数,寻找覆盖Android应用程序的一组代码气味示例的最佳规则集。我们在184个Android项目上评估了我们的方法,这些项目的源代码托管在GitHub上。对我们的结果进行统计测试表明,根据活跃的移动应用开发者的反馈,生成的检测规则识别出了这些移动应用上10种Android气味类型,平均正确率高于82%,平均相关性为77%。
{"title":"Detecting Android Smells Using Multi-Objective Genetic Programming","authors":"M. Kessentini, Ali Ouni","doi":"10.1109/MOBILESoft.2017.29","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.29","url":null,"abstract":"The evolution rate of mobile applications is much higher than regular software applications having shorter release deadlines and smaller code base. Mobile applications tend to be evolved quickly by developers to meet several new customer requirements and fix discovered bugs. However, evolving the existing features and design may introduce bad design practices, also called code smells, which can highly decrease the maintainability and performance of these mobile applications. However, unlike the area of object-oriented software systems, the detection of code smells in mobile applications received a very little of attention. Recent, few studies defined a set of quality metrics for Android applications and proposed a support to manually write a set of rules to detect code smells by combining these quality metrics. However, finding the best combination of metrics and their thresholds to identify code smells is left to the developer as a manual process. In this paper, we propose to automatically generate rules for the detection of code smells in Android applications using a multi-objective genetic programming algorithm (MOGP). The MOGP algorithm aims at finding the best set of rules that cover a set of code smell examples of Android applications based on two conflicting objective functions of precision and recall. We evaluate our approach on 184 Android projects with source code hosted in GitHub. The statistical test of our results show that the generated detection rules identified 10 Android smell types on these mobile applications with an average correctness higher than 82% and an average relevance of 77% based on the feedback of active developers of mobile apps.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"645 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116475904","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 50
Roaming Nairobi Roads: Instrumenting Roads under Resource Constraints 漫游内罗毕道路:在资源限制下测量道路
John Wamburu, David Kaguma, Michiaki Tatsubori, Aisha Walcott-Bryant, R. Bryant, Komminist Weldemariam
Many intelligent transportation systems (ITS) in cities with developed economies are making use of mobile technology as data sources (e.g., many crowd-sourced traffic-related applications) to improve the quality and efficiency of transportation networks. Often, these data sources are used to supplement existing traffic monitoring equipment (e.g., ground-loop detectors, traffic cameras), to provide greater insights into roadway infrastructure and traffic dynamics. For cities with emerging economies where traditional traffic monitoring equipment is cost prohibitive, the rise in mobile technology presents a unique opportunity to leverage smartphone sensors as an alternative data source for ITS. There are, however, challenges to using these sensors particularly with the cost of mobile data, network consistency, and on-device resources. In this paper, we present a mobile system that instruments roads under resource constraint while a vehicle is in motion. It determines when and what data to collect and/or upload using a number of on-device valuation and optimisation functions, by prioritising data collection over uploading or vis-versa. We deployed our mobile system on a fleet of heavy-duty waste-collection trucks in Nairobi, Kenya to collect a large volume of real-word road infrastructure and mobility data. Results show that a 42 % reduction in wireless transmissions costs can be achieved with minimal impact to the time in which important data are collected, uploaded and harmonized into a frequently updated map of road infrastructure and traffic.
发达经济体城市中的许多智能交通系统(ITS)正在利用移动技术作为数据源(例如,许多众包交通相关应用),以提高交通网络的质量和效率。通常,这些数据源用于补充现有的交通监控设备(例如,地面环路探测器、交通摄像头),以提供对道路基础设施和交通动态的更深入了解。对于传统交通监控设备成本过高的新兴经济体城市来说,移动技术的兴起为利用智能手机传感器作为ITS的替代数据源提供了独特的机会。然而,使用这些传感器存在挑战,特别是在移动数据、网络一致性和设备上资源的成本方面。在本文中,我们提出了一个移动系统,测量在资源约束下的道路,而车辆在运动。它使用一系列设备评估和优化功能,通过优先考虑数据收集而不是上传,来决定何时以及收集和/或上传哪些数据。我们在肯尼亚内罗毕的一个重型垃圾收集卡车车队上部署了移动系统,以收集大量真实的道路基础设施和交通数据。结果表明,在将重要数据收集、上传和协调成频繁更新的道路基础设施和交通地图的时间影响最小的情况下,可以实现无线传输成本降低42%。
{"title":"Roaming Nairobi Roads: Instrumenting Roads under Resource Constraints","authors":"John Wamburu, David Kaguma, Michiaki Tatsubori, Aisha Walcott-Bryant, R. Bryant, Komminist Weldemariam","doi":"10.1109/MOBILESoft.2017.8","DOIUrl":"https://doi.org/10.1109/MOBILESoft.2017.8","url":null,"abstract":"Many intelligent transportation systems (ITS) in cities with developed economies are making use of mobile technology as data sources (e.g., many crowd-sourced traffic-related applications) to improve the quality and efficiency of transportation networks. Often, these data sources are used to supplement existing traffic monitoring equipment (e.g., ground-loop detectors, traffic cameras), to provide greater insights into roadway infrastructure and traffic dynamics. For cities with emerging economies where traditional traffic monitoring equipment is cost prohibitive, the rise in mobile technology presents a unique opportunity to leverage smartphone sensors as an alternative data source for ITS. There are, however, challenges to using these sensors particularly with the cost of mobile data, network consistency, and on-device resources. In this paper, we present a mobile system that instruments roads under resource constraint while a vehicle is in motion. It determines when and what data to collect and/or upload using a number of on-device valuation and optimisation functions, by prioritising data collection over uploading or vis-versa. We deployed our mobile system on a fleet of heavy-duty waste-collection trucks in Nairobi, Kenya to collect a large volume of real-word road infrastructure and mobility data. Results show that a 42 % reduction in wireless transmissions costs can be achieved with minimal impact to the time in which important data are collected, uploaded and harmonized into a frequently updated map of road infrastructure and traffic.","PeriodicalId":281934,"journal":{"name":"2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)","volume":"53 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-05-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126201038","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
期刊
2017 IEEE/ACM 4th International Conference on Mobile Software Engineering and Systems (MOBILESoft)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1