首页 > 最新文献

2019 26th Asia-Pacific Software Engineering Conference (APSEC)最新文献

英文 中文
Verification of CTL_BDI Properties by Symbolic Model Checking 用符号模型检查验证CTL_BDI属性
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00023
Ran Chen, Wenhui Zhang
The Belief-Desire-Intention (BDI) architecture is a framework for studying computational agents capable of rational behaviors. The behaviors of such agents may be modeled by possible world structures, for the specification of the behaviors, CTLBDI may be used. As multi-agent systems are increasingly complex, the problem of their verification is acquiring importance. This work develops a symbolic model checking approach for the verification of CTLBDI properties within the BDI-architecture. In addition, we develop a symbolic approach for checking whether a model satisfies the weak and strong realism constraints. The approaches for model checking and realism checking have been implemented, and the experimental data show that the approaches are able to handle models with a fairly large number of possible worlds.
信念-欲望-意图(BDI)架构是研究具有理性行为的计算智能体的一个框架。这些智能体的行为可以通过可能的世界结构来建模,对于行为的规范,可以使用CTLBDI。随着多智能体系统的日益复杂,其验证问题越来越重要。这项工作开发了一种符号模型检查方法,用于验证bdi体系结构中的CTLBDI属性。此外,我们开发了一种符号方法来检查模型是否满足弱和强现实主义约束。实现了模型检验和真实感检验的方法,实验数据表明,该方法能够处理具有相当多可能世界的模型。
{"title":"Verification of CTL_BDI Properties by Symbolic Model Checking","authors":"Ran Chen, Wenhui Zhang","doi":"10.1109/APSEC48747.2019.00023","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00023","url":null,"abstract":"The Belief-Desire-Intention (BDI) architecture is a framework for studying computational agents capable of rational behaviors. The behaviors of such agents may be modeled by possible world structures, for the specification of the behaviors, CTLBDI may be used. As multi-agent systems are increasingly complex, the problem of their verification is acquiring importance. This work develops a symbolic model checking approach for the verification of CTLBDI properties within the BDI-architecture. In addition, we develop a symbolic approach for checking whether a model satisfies the weak and strong realism constraints. The approaches for model checking and realism checking have been implemented, and the experimental data show that the approaches are able to handle models with a fairly large number of possible worlds.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130049705","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Automatic Classifying Self-Admitted Technical Debt Using N-Gram IDF 基于N-Gram IDF的自承认技术债务自动分类
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00050
Supatsara Wattanakriengkrai, Napat Srisermphoak, Sahawat Sintoplertchaikul, Morakot Choetkiertikul, Chaiyong Ragkhitwetsagul, T. Sunetnanta, Hideaki Hata, Ken-ichi Matsumoto
Technical Debt (TD) introduces a quality problem and increases maintenance cost since it may require improvements in the future. Several studies show that it is possible to automatically detect TD from source code comments that developers intentionally created, so-called self-admitted technical debt (SATD). Those studies proposed to use binary classification technique to predict whether a comment shows SATD. However, SATD has different types (e.g. design SATD and requirement SATD). In this paper, we therefore propose an approach using N-gram Inverse Document Frequency (IDF) and employ a multi-class classification technique to build a model that can identify different types of SATD. From the empirical evaluation on 10 open-source projects, our approach outperforms alternative methods (e.g. using BOW and TF-IDF). Our approach also improves the prediction performance over the baseline benchmark by 33%.
技术债务(TD)引入了质量问题并增加了维护成本,因为它可能需要在未来进行改进。一些研究表明,从开发人员有意创建的源代码注释中自动检测TD是可能的,即所谓的自我承认的技术债务(SATD)。这些研究提出使用二元分类技术来预测评论是否存在SATD。然而,SATD有不同的类型(例如,设计SATD和需求SATD)。因此,在本文中,我们提出了一种使用N-gram逆文档频率(IDF)的方法,并采用多类分类技术来构建一个可以识别不同类型SATD的模型。从对10个开源项目的实证评估来看,我们的方法优于其他方法(例如使用BOW和TF-IDF)。我们的方法还将基准基准的预测性能提高了33%。
{"title":"Automatic Classifying Self-Admitted Technical Debt Using N-Gram IDF","authors":"Supatsara Wattanakriengkrai, Napat Srisermphoak, Sahawat Sintoplertchaikul, Morakot Choetkiertikul, Chaiyong Ragkhitwetsagul, T. Sunetnanta, Hideaki Hata, Ken-ichi Matsumoto","doi":"10.1109/APSEC48747.2019.00050","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00050","url":null,"abstract":"Technical Debt (TD) introduces a quality problem and increases maintenance cost since it may require improvements in the future. Several studies show that it is possible to automatically detect TD from source code comments that developers intentionally created, so-called self-admitted technical debt (SATD). Those studies proposed to use binary classification technique to predict whether a comment shows SATD. However, SATD has different types (e.g. design SATD and requirement SATD). In this paper, we therefore propose an approach using N-gram Inverse Document Frequency (IDF) and employ a multi-class classification technique to build a model that can identify different types of SATD. From the empirical evaluation on 10 open-source projects, our approach outperforms alternative methods (e.g. using BOW and TF-IDF). Our approach also improves the prediction performance over the baseline benchmark by 33%.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"411 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134070011","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Towards the Mechanized Semantics and Refinement of UML Class Diagrams UML类图的机械化语义和细化
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00016
Feng Sheng, Huibiao Zhu, Zongyuang Yang
Model Driven Engineering (MDE) uses models to represent the core part of the software systems. The Unified Model Language (UML) is a widely accepted standard for modeling software systems. Although UML provides numbers of concepts and diagrams to describe the system, there is still an unsolved problem that the semantics and refinement relations of models are not formally defined. In this paper, we apply the constructive type theory to formalize the class diagrams and object diagrams. A suitable subset of UML static models is identified and formally defined. The theorem assistant Coq is applied to encode the semantics of class diagrams. Moreover the refinement relations are also formalized in Coq. The whole approach is supported by tools that do not constrain the semantic definition's expressiveness and flexibility while making it machine-checkable. Our approach offers a novel way for giving a precise foundation in UML and contributes to the goal of improving the overall trustworthy software systems by combining theoretical and practical techniques.
模型驱动工程(MDE)使用模型来表示软件系统的核心部分。统一模型语言(UML)是一种被广泛接受的软件系统建模标准。尽管UML提供了大量的概念和图表来描述系统,但仍然存在一个未解决的问题,即模型的语义和细化关系没有正式定义。本文应用构造类型理论形式化了类图和对象图。确定并正式定义UML静态模型的合适子集。应用Coq定理辅助工具对类图的语义进行编码。此外,还在Coq中形式化了精化关系。整个方法由工具支持,这些工具不限制语义定义的表达性和灵活性,同时使其可由机器检查。我们的方法提供了一种新颖的方法,可以在UML中给出精确的基础,并通过结合理论和实践技术来实现改进整个可信赖的软件系统的目标。
{"title":"Towards the Mechanized Semantics and Refinement of UML Class Diagrams","authors":"Feng Sheng, Huibiao Zhu, Zongyuang Yang","doi":"10.1109/APSEC48747.2019.00016","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00016","url":null,"abstract":"Model Driven Engineering (MDE) uses models to represent the core part of the software systems. The Unified Model Language (UML) is a widely accepted standard for modeling software systems. Although UML provides numbers of concepts and diagrams to describe the system, there is still an unsolved problem that the semantics and refinement relations of models are not formally defined. In this paper, we apply the constructive type theory to formalize the class diagrams and object diagrams. A suitable subset of UML static models is identified and formally defined. The theorem assistant Coq is applied to encode the semantics of class diagrams. Moreover the refinement relations are also formalized in Coq. The whole approach is supported by tools that do not constrain the semantic definition's expressiveness and flexibility while making it machine-checkable. Our approach offers a novel way for giving a precise foundation in UML and contributes to the goal of improving the overall trustworthy software systems by combining theoretical and practical techniques.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132267299","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A Framework for Internet of Things Search Engines Engineering 物联网搜索引擎工程框架
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00039
N. Tran, M. Babar, Quan Z. Sheng, J. Grundy
The content of the Internet of Things (IoT), notably sensor data and virtual representation of physical devices, has been increasingly delivered via Web protocols and available on the World Wide Web (WWW). Internet of Things Search Engine (IoTSE) systems are catalytic to utilize this influx of data. They enable users to discover and retrieve relevant IoT content. While a general IoTSE system – the next "Google" – is beyond the horizon due to the vast diversity of IoT content and types of queries for them, specific IoTSE systems that target subsets of query types and IoT infrastructure are feasible and beneficial. A component-based engineering approach, in which prior IoTSE systems and research prototypes are reassembled as building blocks for new IoTSE systems, could be a time-and cost-effective solution to engineering IoTSE systems. This paper presents the design, implementation, and evaluation of a framework to facilitate a component-based approach to engineering IoTSE systems. As an evaluation, we developed eight IoTSE components and composed them into eight proof-of-concept IoTSE systems, using a reference implementation of the proposed framework. An analysis on Source Line of Code (SLOC) revealed that the complexity handled transparently by the IoTSE framework could account for over 90% of the code base of a simple IoTSE system.
物联网(IoT)的内容,特别是传感器数据和物理设备的虚拟表示,已经越来越多地通过Web协议交付,并在万维网(WWW)上可用。物联网搜索引擎(IoTSE)系统是利用这些涌入的数据的催化剂。它们使用户能够发现和检索相关的物联网内容。由于物联网内容和查询类型的巨大多样性,通用IoTSE系统(下一个“谷歌”)还遥不可及,但针对查询类型子集和物联网基础设施的特定IoTSE系统是可行且有益的。基于组件的工程方法,将先前的IoTSE系统和研究原型重新组装为新IoTSE系统的构建模块,可能是一种既省时又经济的IoTSE系统工程解决方案。本文介绍了一个框架的设计、实现和评估,以促进基于组件的方法来设计IoTSE系统。作为评估,我们开发了8个IoTSE组件,并使用所提议框架的参考实现将它们组成8个概念验证IoTSE系统。对源代码行(SLOC)的分析表明,IoTSE框架透明处理的复杂性可能占简单IoTSE系统代码库的90%以上。
{"title":"A Framework for Internet of Things Search Engines Engineering","authors":"N. Tran, M. Babar, Quan Z. Sheng, J. Grundy","doi":"10.1109/APSEC48747.2019.00039","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00039","url":null,"abstract":"The content of the Internet of Things (IoT), notably sensor data and virtual representation of physical devices, has been increasingly delivered via Web protocols and available on the World Wide Web (WWW). Internet of Things Search Engine (IoTSE) systems are catalytic to utilize this influx of data. They enable users to discover and retrieve relevant IoT content. While a general IoTSE system – the next \"Google\" – is beyond the horizon due to the vast diversity of IoT content and types of queries for them, specific IoTSE systems that target subsets of query types and IoT infrastructure are feasible and beneficial. A component-based engineering approach, in which prior IoTSE systems and research prototypes are reassembled as building blocks for new IoTSE systems, could be a time-and cost-effective solution to engineering IoTSE systems. This paper presents the design, implementation, and evaluation of a framework to facilitate a component-based approach to engineering IoTSE systems. As an evaluation, we developed eight IoTSE components and composed them into eight proof-of-concept IoTSE systems, using a reference implementation of the proposed framework. An analysis on Source Line of Code (SLOC) revealed that the complexity handled transparently by the IoTSE framework could account for over 90% of the code base of a simple IoTSE system.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"132 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134115593","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Understanding the Effect of Developer Sentiment on Fix-Inducing Changes: An Exploratory Study on GitHub Pull Requests 理解开发者情绪对修复诱导变更的影响:对GitHub拉取请求的探索性研究
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00075
Syed Fatiul Huq, Ali Zafar Sadiq, K. Sakib
Developer emotion or sentiment in a software development environment has the potential to affect performance, and consequently, the software itself. Sentiment analysis, conducted to analyze online collaborative artifacts, can derive effects of developer sentiment. This study aims to understand how developer sentiment is related to bugs, by analyzing the difference of sentiment between regular and Fix-Inducing Changes (FIC) - changes to code that introduce bugs in the system. To do so, sentiment is extracted from Pull Requests of 6 well known GitHub repositories, which contain both code and contributor discussion. Sentiment is calculated using a tool specializing in the software engineering domain: SentiStrength-SE. Next, FICs are detected from Commits by filtering the ones that fix bugs and tracking the origin of the code these remove. Commits are categorized based on FICs and assigned separate sentiment scores (-4 to +4) based on different preceding artifacts - Commits, Comments and Reviews from Pull Requests. The statistical result shows that FICs, compared to regular Commits, contain more positive Comments and Reviews. Commits that precede an FIC have more negative messages. Similarly, all the Pull Request artifacts combined are more negative for FICs than regular Commits.
在软件开发环境中,开发人员的情绪或情绪有可能影响性能,从而影响软件本身。情感分析用于分析在线协作工件,可以得出开发人员情感的影响。本研究旨在通过分析常规更改和修复诱导更改(Fix-Inducing Changes, FIC)之间的情绪差异,了解开发人员的情绪与bug之间的关系。为了做到这一点,情感是从6个著名的GitHub存储库的Pull Requests中提取出来的,其中包含代码和贡献者的讨论。情感是使用专门用于软件工程领域的工具来计算的:SentiStrength-SE。接下来,从提交中检测fic,方法是过滤修复了错误的fic,并跟踪这些错误删除的代码的来源。提交基于fic进行分类,并根据不同的先前工件(来自拉取请求的提交、评论和评论)分配单独的情感分数(-4到+4)。统计结果表明,与常规提交相比,fic包含了更多积极的Comments和Reviews。在FIC之前的提交有更多的负面消息。类似地,与常规提交相比,所有的Pull Request工件组合起来对fic更不利。
{"title":"Understanding the Effect of Developer Sentiment on Fix-Inducing Changes: An Exploratory Study on GitHub Pull Requests","authors":"Syed Fatiul Huq, Ali Zafar Sadiq, K. Sakib","doi":"10.1109/APSEC48747.2019.00075","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00075","url":null,"abstract":"Developer emotion or sentiment in a software development environment has the potential to affect performance, and consequently, the software itself. Sentiment analysis, conducted to analyze online collaborative artifacts, can derive effects of developer sentiment. This study aims to understand how developer sentiment is related to bugs, by analyzing the difference of sentiment between regular and Fix-Inducing Changes (FIC) - changes to code that introduce bugs in the system. To do so, sentiment is extracted from Pull Requests of 6 well known GitHub repositories, which contain both code and contributor discussion. Sentiment is calculated using a tool specializing in the software engineering domain: SentiStrength-SE. Next, FICs are detected from Commits by filtering the ones that fix bugs and tracking the origin of the code these remove. Commits are categorized based on FICs and assigned separate sentiment scores (-4 to +4) based on different preceding artifacts - Commits, Comments and Reviews from Pull Requests. The statistical result shows that FICs, compared to regular Commits, contain more positive Comments and Reviews. Commits that precede an FIC have more negative messages. Similarly, all the Pull Request artifacts combined are more negative for FICs than regular Commits.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124477944","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
Enhancing Unsupervised Requirements Traceability with Sequential Semantics 用顺序语义增强无监督需求的可追溯性
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00013
Lei Chen, Dandan Wang, Junjie Wang, Qing Wang
Requirements traceability provides important support throughout all software life cycle; however, creating such links manually is time-consuming and error-prone. Supervised automated solutions use machine learning or deep learning techniques to generate trace links, but require large labeled dataset to train an effective model. Unsupervised solutions as word embedding approaches can generate links by capturing the semantic meaning of artifacts and are gaining more attention. Despite that, our observation revealed that, besides the semantic information, the sequential information of terms in the artifacts would provide additional assistance for building the accurate links. This paper proposes an unsupervised requirements traceability approach (named S2Trace) which learns the Sequential Semantics of software artifacts to generate the trace links. Its core idea is to mine the sequential patterns and use them to learn the document embedding representation. Evaluation is conducted on five public datasets, and results show that our approach outperforms three typical baselines. The modeling of sequential information in this paper provides new insights into the unsupervised traceability solutions, and the improvement in the traceability accuracy further proves the usefulness of the sequential information.
需求可追溯性在整个软件生命周期中提供重要的支持;但是,手动创建这样的链接既耗时又容易出错。监督式自动化解决方案使用机器学习或深度学习技术来生成跟踪链接,但需要大型标记数据集来训练有效的模型。作为词嵌入方法的无监督解决方案可以通过捕获工件的语义来生成链接,并且越来越受到关注。尽管如此,我们的观察表明,除了语义信息之外,工件中术语的顺序信息将为构建准确的链接提供额外的帮助。本文提出了一种无监督的需求跟踪方法(命名为S2Trace),该方法通过学习软件构件的顺序语义来生成跟踪链接。其核心思想是挖掘序列模式并利用序列模式学习文档嵌入表示。在五个公共数据集上进行了评估,结果表明我们的方法优于三个典型的基线。本文对序列信息的建模为无监督跟踪解决方案提供了新的见解,而跟踪精度的提高进一步证明了序列信息的有用性。
{"title":"Enhancing Unsupervised Requirements Traceability with Sequential Semantics","authors":"Lei Chen, Dandan Wang, Junjie Wang, Qing Wang","doi":"10.1109/APSEC48747.2019.00013","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00013","url":null,"abstract":"Requirements traceability provides important support throughout all software life cycle; however, creating such links manually is time-consuming and error-prone. Supervised automated solutions use machine learning or deep learning techniques to generate trace links, but require large labeled dataset to train an effective model. Unsupervised solutions as word embedding approaches can generate links by capturing the semantic meaning of artifacts and are gaining more attention. Despite that, our observation revealed that, besides the semantic information, the sequential information of terms in the artifacts would provide additional assistance for building the accurate links. This paper proposes an unsupervised requirements traceability approach (named S2Trace) which learns the Sequential Semantics of software artifacts to generate the trace links. Its core idea is to mine the sequential patterns and use them to learn the document embedding representation. Evaluation is conducted on five public datasets, and results show that our approach outperforms three typical baselines. The modeling of sequential information in this paper provides new insights into the unsupervised traceability solutions, and the improvement in the traceability accuracy further proves the usefulness of the sequential information.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"44 5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115816743","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 8
BLINKER: A Blockchain-Enabled Framework for Software Provenance BLINKER:一个支持区块链的软件来源框架
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00010
R.P. Jagadeesh Chandra Bose, Kanchanjot Kaur Phokela, Vikrant S. Kaulgud, Sanjay Podder
There has been a considerable shift in the way how software is built and delivered today. Most deployed software systems in modern times are created by (autonomous) distributed teams in heterogeneous environments making use of many artifacts, such as externally developed libraries, drawn from a variety of disparate sources. Stakeholders such as developers, managers, and clients across the software delivery value chain are interested in gaining insights such as how and why an artifact came to where it is, what other artifacts are related to it, and who else is using this. Software provenance encompasses the origins of artifacts, their evolution, and usage and is critical for comprehending, managing, decision-making, and analyzing software quality, processes, people, issues etc. In this paper, we propose an extensible framework based on standard provenance model specifications and blockchain technology for capturing, storing, exploring, and analyzing software provenance data. Our framework (i) enhances trustworthiness of provenance data (ii) uncovers non-trivial insights through inferences and reasoning, and (iii) enables interactive visualization of provenance insights. We demonstrate the utility of the proposed framework using open source project data.
如今,软件的构建和交付方式已经发生了相当大的变化。在现代,大多数已部署的软件系统都是由异构环境中的(自治的)分布式团队创建的,这些团队使用了许多工件,例如从各种不同的来源提取的外部开发的库。跨软件交付价值链的开发人员、管理人员和客户等涉众对获得诸如工件如何以及为什么到达它所在的位置、与它相关的其他工件以及谁在使用它等见解感兴趣。软件来源包括工件的起源、它们的演化和使用,并且对于理解、管理、决策和分析软件质量、过程、人员、问题等是至关重要的。在本文中,我们提出了一个基于标准来源模型规范和区块链技术的可扩展框架,用于捕获、存储、探索和分析软件来源数据。我们的框架(i)提高了来源数据的可信度(ii)通过推断和推理揭示了重要的见解,以及(iii)实现了来源见解的交互式可视化。我们使用开源项目数据演示了所建议的框架的实用性。
{"title":"BLINKER: A Blockchain-Enabled Framework for Software Provenance","authors":"R.P. Jagadeesh Chandra Bose, Kanchanjot Kaur Phokela, Vikrant S. Kaulgud, Sanjay Podder","doi":"10.1109/APSEC48747.2019.00010","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00010","url":null,"abstract":"There has been a considerable shift in the way how software is built and delivered today. Most deployed software systems in modern times are created by (autonomous) distributed teams in heterogeneous environments making use of many artifacts, such as externally developed libraries, drawn from a variety of disparate sources. Stakeholders such as developers, managers, and clients across the software delivery value chain are interested in gaining insights such as how and why an artifact came to where it is, what other artifacts are related to it, and who else is using this. Software provenance encompasses the origins of artifacts, their evolution, and usage and is critical for comprehending, managing, decision-making, and analyzing software quality, processes, people, issues etc. In this paper, we propose an extensible framework based on standard provenance model specifications and blockchain technology for capturing, storing, exploring, and analyzing software provenance data. Our framework (i) enhances trustworthiness of provenance data (ii) uncovers non-trivial insights through inferences and reasoning, and (iii) enables interactive visualization of provenance insights. We demonstrate the utility of the proposed framework using open source project data.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129798066","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
Automatic Identifying Interaction Components in Collaborative Cyber-Physical Systems 协同信息物理系统中交互组件的自动识别
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00035
D. Horn, Nazakat Ali, Jang-Eui Hong
Due to diverse set of heterogeneous computing devices communicating with one another and fusing with physical components in Cyber-Physical Systems, software engineers may use different tools and/or modeling languages to formally describe or verify the system properties. As a result, the integration of these diverse constituents poses key challenges such as task for identifying interactions of components to be synthesized for a function in the systems. Although existing studies such as ontology and integration semantic languages have been used for specifying interactions of components in a Cyber-Physical System, these are still not applicable to discover the component interactions in collaborative Cyber-Physical Systems. It is due to the fact that functionalities of Cyber-Physical Systems are generally realized through interactions among multiple systems in a collaborative environment. This paper proposes a model interaction language, CyPhyML+ which can identify component interactions of realized functions in collaborative Cyber-Physical Systems. We show the proposed approach validity and applicability via an Automatic Incident Detection System.
由于在信息物理系统中,各种各样的异构计算设备相互通信并与物理组件融合,软件工程师可能会使用不同的工具和/或建模语言来正式描述或验证系统属性。因此,这些不同组件的集成提出了关键的挑战,例如确定要为系统中的功能合成的组件的相互作用的任务。虽然现有的研究如本体和集成语义语言已被用于描述信息物理系统中组件的相互作用,但这些研究仍不适用于发现协同信息物理系统中组件的相互作用。这是因为信息物理系统的功能通常是通过协作环境中多个系统之间的相互作用来实现的。本文提出了一种模型交互语言CyPhyML+,它可以识别协同信息物理系统中已实现功能的组件交互。我们通过一个自动事件检测系统验证了该方法的有效性和适用性。
{"title":"Automatic Identifying Interaction Components in Collaborative Cyber-Physical Systems","authors":"D. Horn, Nazakat Ali, Jang-Eui Hong","doi":"10.1109/APSEC48747.2019.00035","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00035","url":null,"abstract":"Due to diverse set of heterogeneous computing devices communicating with one another and fusing with physical components in Cyber-Physical Systems, software engineers may use different tools and/or modeling languages to formally describe or verify the system properties. As a result, the integration of these diverse constituents poses key challenges such as task for identifying interactions of components to be synthesized for a function in the systems. Although existing studies such as ontology and integration semantic languages have been used for specifying interactions of components in a Cyber-Physical System, these are still not applicable to discover the component interactions in collaborative Cyber-Physical Systems. It is due to the fact that functionalities of Cyber-Physical Systems are generally realized through interactions among multiple systems in a collaborative environment. This paper proposes a model interaction language, CyPhyML+ which can identify component interactions of realized functions in collaborative Cyber-Physical Systems. We show the proposed approach validity and applicability via an Automatic Incident Detection System.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"154 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124295998","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
History Coupling Space: A New Model to Represent Evolutionary Relations 历史耦合空间:一种表示演化关系的新模型
Pub Date : 2019-12-01 DOI: 10.1109/APSEC48747.2019.00026
Ran Mo, Mengya Zhan
During software evolution, files are usually changed together for accommodating modifications. Although co-change analysis has been widely adopted for difference studies, such as defect prediction, impact analysis, architectural relations identification etc., there has been little work characterizing co-changed files as a group and modeling the evolution of these files to represent software maintenance and evolution. In this paper, we present the concept of history coupling dependency, based on which, we propose a novel model, history coupling space (HCSpace), to link the co-changed files and represent how files are historically connected as a group. Our investigations on seven open source projects show that each HCSpace could be treated as a maintenance unit where the involved files are more likely to evolve together. The results also show that the HCSpaces have important impacts on a project's maintenance. In particular, we demonstrate that identified HCSpaces consumes a relatively large portion of maintenance effort spent on a project, and these HCSpaces are still actively evolving.
在软件开发过程中,为了适应修改,文件通常会一起更改。尽管共变更分析已被广泛用于差异研究,如缺陷预测、影响分析、架构关系识别等,但很少有工作将共变更文件作为一个组进行表征,并对这些文件的演化建模,以表示软件维护和演化。本文提出了历史耦合依赖的概念,并在此基础上提出了一个新的模型——历史耦合空间(HCSpace),该模型用于将共更改文件连接起来,并表示文件如何作为一个组进行历史连接。我们对七个开源项目的调查表明,每个HCSpace都可以被视为一个维护单元,其中涉及的文件更有可能一起发展。结果还表明,HCSpaces对项目的维护有重要影响。特别是,我们证明了确定的HCSpaces消耗了项目中相对较大的维护工作,并且这些HCSpaces仍在积极发展。
{"title":"History Coupling Space: A New Model to Represent Evolutionary Relations","authors":"Ran Mo, Mengya Zhan","doi":"10.1109/APSEC48747.2019.00026","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00026","url":null,"abstract":"During software evolution, files are usually changed together for accommodating modifications. Although co-change analysis has been widely adopted for difference studies, such as defect prediction, impact analysis, architectural relations identification etc., there has been little work characterizing co-changed files as a group and modeling the evolution of these files to represent software maintenance and evolution. In this paper, we present the concept of history coupling dependency, based on which, we propose a novel model, history coupling space (HCSpace), to link the co-changed files and represent how files are historically connected as a group. Our investigations on seven open source projects show that each HCSpace could be treated as a maintenance unit where the involved files are more likely to evolve together. The results also show that the HCSpaces have important impacts on a project's maintenance. In particular, we demonstrate that identified HCSpaces consumes a relatively large portion of maintenance effort spent on a project, and these HCSpaces are still actively evolving.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"1854 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-12-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129878557","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Generating Mock Skeletons for Lightweight Web-Service Testing 为轻量级web服务测试生成模拟骨架
Pub Date : 2019-10-21 DOI: 10.1109/APSEC48747.2019.00033
T. Bhagya, Jens Dietrich, H. Guesgen
Modern application development allows applications to be composed using lightweight HTTP services. Testing such an application requires the availability of services that the application makes requests to. However, access to dependent services during testing may be restrained. Simulating the behaviour of such services is, therefore, useful to address their absence and move on application testing. This paper examines the appropriateness of Symbolic Machine Learning algorithms to automatically synthesise HTTP services' mock skeletons from network traffic recordings. These skeletons can then be customised to create mocks that can generate service responses suitable for testing. The mock skeletons have human-readable logic for key aspects of service responses, such as headers and status codes, and are highly accurate.
现代应用程序开发允许使用轻量级HTTP服务组合应用程序。测试这样的应用程序需要应用程序向其发出请求的服务的可用性。但是,在测试期间对依赖服务的访问可能受到限制。因此,模拟这些服务的行为有助于解决它们的缺失问题,并继续进行应用程序测试。本文研究了符号机器学习算法从网络流量记录中自动合成HTTP服务模拟骨架的适用性。然后可以对这些框架进行定制,以创建可以生成适合测试的服务响应的模拟。模拟骨架对于服务响应的关键方面(如标头和状态码)具有人类可读的逻辑,并且非常准确。
{"title":"Generating Mock Skeletons for Lightweight Web-Service Testing","authors":"T. Bhagya, Jens Dietrich, H. Guesgen","doi":"10.1109/APSEC48747.2019.00033","DOIUrl":"https://doi.org/10.1109/APSEC48747.2019.00033","url":null,"abstract":"Modern application development allows applications to be composed using lightweight HTTP services. Testing such an application requires the availability of services that the application makes requests to. However, access to dependent services during testing may be restrained. Simulating the behaviour of such services is, therefore, useful to address their absence and move on application testing. This paper examines the appropriateness of Symbolic Machine Learning algorithms to automatically synthesise HTTP services' mock skeletons from network traffic recordings. These skeletons can then be customised to create mocks that can generate service responses suitable for testing. The mock skeletons have human-readable logic for key aspects of service responses, such as headers and status codes, and are highly accurate.","PeriodicalId":325642,"journal":{"name":"2019 26th Asia-Pacific Software Engineering Conference (APSEC)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132133476","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
期刊
2019 26th Asia-Pacific Software Engineering Conference (APSEC)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1