SECURE BUG TRACKING SYSTEM a Project Presented

Total Page:16

File Type:pdf, Size:1020Kb

SECURE BUG TRACKING SYSTEM a Project Presented SECURE BUG TRACKING SYSTEM A Project Presented to the faculty of the Department of Computer Science California State University, Sacramento Submitted in partial satisfaction of the requirements for the degree of MASTER OF SCIENCE in Computer Science by Nikhita Kamble SPRING 2018 © 2018 Nikhita Kamble ALL RIGHTS RESERVED ii SECURE BUG TRACKING SYSTEM A Project by Nikhita Kamble Approved by: ______________________, Committee Chair Dr. Xiaoyan Sun ______________________, Second Reader Dr. Ahmed Salem _______________________ Date iii Student: Nikhita Kamble I certify that this student has met the requirements for format contained in the University format manual, and that this project is suitable for shelving in the Library and credit is to be awarded for the project. __________________________, Graduate Coordinator ___________________ Dr. Jinsong Ouyang Date Department of Computer Science iv Abstract of SECURE BUG TRACKING SYSTEM by Nikhita Kamble Bug tracking is defined as a procedure of tracking reported software bugs of any product of an organization. While developing any product or software, there are chances of bug occurrences. Keeping track of these bugs/issues manually is not feasible. At the same time, it is also important to keep a detailed record of the bug fixing information, such as the person who fixed the bug, the time of bug fixing, etc. Such information will help developers to resolve similar issues if they occur in future. Therefore, developing a tool for bug tracking is essential. Using a web based bug tracking system would not only satisfy the company needs of bug tracking, but would also facilitate the discussion and problem solving among teams at different locations. Tools such as JIRA, Redmine, and so on are used by many organizations for bug tracking. However, issues such as high cost, unrequired features, non-user friendly interface might create hassle for small start-up companies. The free tools available usually contain advertisements and require installation of unnecessary software. v This results in waste of memory space and creates potential security problems. Attackers could possibly leverage such free tools to conduct attacks towards the host machine. The purpose of this project is to develop a tool which is user-friendly, inexpensive, advertisement free, and secure for start-up organizations. The proposed bug tracking system is user friendly, easy to install, and light-weight. It has low system requirement. Cryptography technique has been used for encrypting some fields of issues to protect the information credentiality. In addition, customized version can be developed given specific features required by organizations. ______________________, Committee Chair Dr. Xiaoyan Sun ______________________ Date vi ACKNOWLEDGEMENTS I thank my guide, Dr. Xiaoyan Sun, for all the guidance and support that she provided me throughout the project. I thank her for having confidence in me and keeping me inspired throughout the duration of my project. I thank my second reader, Dr. Ahmed Salem for reviewing my report and giving valuable feedback for improvising it. I would also like to express gratitude to my graduate coordinator, Dr. Jinsong Ouyang for providing his valuable feedback. Moreover, I thank Computer Science Department at California State University, Sacramento for giving me an opportunity to implement this concept of bug tracking system. Lastly, I would like to thank my parents and siblings for having faith in me and urging me to seek a graduate degree in the U.S. vii TABLE OF CONTENTS Page Acknowledgements .................................................................................................... vii List of Figures ............................................................................................................. ix Chapter 1. INTRODUCTION ................................................................................................ 1 1.1 Problem Statement and Proposed Solution................................................ 1 1.2 Related Work ............................................................................................. 2 2. SYSTEM DESIGN .................................................................................................. 5 2.1 Three-Tier Architecture ............................................................................. 5 2.2 Advantages of Three-Tier Architecture...................................................... 8 3. IMPLEMENTATION....................................................................................... 10 3.1 Technologies, Tools and IDEs ................................................................ 10 3.2 Methodology........................................................................................... 13 4. RESULTS AND TESTING ............................................................................... 19 4.1 Results....................................................................................................... 19 4.2 Testing........................................................................................................ 38 5. CONCLUSION AND FUTURE WORK.............................................................. 42 5.1 Conclusion ............................................................................................... 42 5.2 Future Enhancements.............................................................................. 43 Bibliography ................................................................................................................. 44 viii LIST OF FIGURES Figures Page 1. Related work.....................................................................................................................3 2. Three-tier architecture .........................................................................................5 3. Admin creates user .......................................................................................................14 4. Activity diagram of super admin approving admin’s request...............................16 5. Activity diagram of admin creating project .......................................................17 6. Activity diagram of user creating issue .............................................................18 7. Super admin registration form ...........................................................................19 8. Super admin login form .....................................................................................20 9. Super admin types of issue form .......................................................................21 10. Number of active admins form ........................................................................22 11. Number of non-active admins form.................................................................23 12. Admin registration form .................................................................................23 13. Admin registration confirmation message .......................................................24 14. Super admin gets admins request ....................................................................24 15. Super admin approves admins request ............................................................25 16. Admin login page ............................................................................................26 17. Admin profile setup .........................................................................................26 18. Information about projects ...............................................................................27 19. Information about issue ...................................................................................27 ix 20. Explanation of an issue ....................................................................................28 21. Explanation about keys of a project .................................................................28 22. Explanation of an assignee ..............................................................................29 23. Explanation of status in project .......................................................................29 24. Explanation of issue workflow ........................................................................30 25. Tour completion page ......................................................................................30 26. Project name and key creation .........................................................................31 27. Creating a project .............................................................................................31 28. Inactive users in project ...................................................................................32 29. Active users in project .....................................................................................33 30. User login page ................................................................................................33 31. User profile page .............................................................................................34 32. Create issue page .............................................................................................35 33. User becomes active, seen by admin ...............................................................35 34. Filtering an issue ..............................................................................................36 35. Welcome page .................................................................................................37 36. Contact us page ................................................................................................37
Recommended publications
  • Defect Tracking System Project Documentation
    Defect Tracking System Project Documentation Tottering Barr azotise some Faust and gyps his surplices so sweetly! Northrup remains impellent after Sigfried havers nominally or fluorescing any good-byes. Remus orientalize thunderously? So much like automation and project defect tracking documentation but not win any kind of the organization tries to track the list by the beginning development team and let an. The amount of tracking system project defect tracking system! All comments are moderated before publication and desire meet our guidelines. Testing is a lousy part of mature software life cycle, and recent trends in software engineering evidence the importance all this activity all survey the development process. Diving deeper into program language theory is a great way data grow outside a developer. Your comment has been received. Bug reporting by the Web and email. Her homeland of interests are Wireless Networks and Database Management Systems. As projects grow in size and complexity, the limits of an Excel story for tracking issues begin to show which quickly. Thank who for using our services. Ten reports engine is a few lines of system project defect tracking documentation appears every single pane contains the. Defect tracking is responsible system authority is applied for any system software so run system performs well. User interface and learning curve the system user interfaces are more user friendly than others. Switch to fullscreen mode always show business bug attributes at once. Some custom structure for large body usually, evaluating and tracking system project defect documentation related documents, planning with your development organization efficiently and eliminate bad.
    [Show full text]
  • Tuto Documentation Release 0.1.0
    Tuto Documentation Release 0.1.0 DevOps people 2020-05-09 09H16 CONTENTS 1 Documentation news 3 1.1 Documentation news 2020........................................3 1.1.1 New features of sphinx.ext.autodoc (typing) in sphinx 2.4.0 (2020-02-09)..........3 1.1.2 Hypermodern Python Chapter 5: Documentation (2020-01-29) by https://twitter.com/cjolowicz/..................................3 1.2 Documentation news 2018........................................4 1.2.1 Pratical sphinx (2018-05-12, pycon2018)...........................4 1.2.2 Markdown Descriptions on PyPI (2018-03-16)........................4 1.2.3 Bringing interactive examples to MDN.............................5 1.3 Documentation news 2017........................................5 1.3.1 Autodoc-style extraction into Sphinx for your JS project...................5 1.4 Documentation news 2016........................................5 1.4.1 La documentation linux utilise sphinx.............................5 2 Documentation Advices 7 2.1 You are what you document (Monday, May 5, 2014)..........................8 2.2 Rédaction technique...........................................8 2.2.1 Libérez vos informations de leurs silos.............................8 2.2.2 Intégrer la documentation aux processus de développement..................8 2.3 13 Things People Hate about Your Open Source Docs.........................9 2.4 Beautiful docs.............................................. 10 2.5 Designing Great API Docs (11 Jan 2012)................................ 10 2.6 Docness.................................................
    [Show full text]
  • The Opendaylight Open Source Project
    UNIVERSIDAD REY JUAN CARLOS Master´ Universitario en Software Libre Curso Academico´ 2014/2015 Proyecto Fin de Master´ The OpenDaylight Open Source Project Autor: Sergio Najib Arroutbi Braojos Tutor: Dr. Gregorio Robles 2 Agradecimientos A mi familia y a mi pareja, por su apoyo incondicional Al equipo de Libresoft de la Universidad Rey Juan Carlos, por su afan´ en ensenar˜ el que´ y el porque´ del Software Libre Dedicatoria Para todos aquellos´ que hacen posible el fenomeno´ del Software Libre 4 (C) 2014 Sergio Najib Arroutbi Braojos. Some rights reserved. This document is distributed under the Creative Commons Attribution-ShareAlike 3.0 license, available in http://creativecommons.org/licenses/by-sa/3.0/ Source files for this document are available at http://github.com/sarroutbi/MFP/opendaylight/ 6 Contents 1 Introduction 19 1.1 Terminology.................................... 19 1.1.1 Open Source Programmable Networking................ 19 1.2 About this document............................... 20 1.2.1 Document structure............................ 20 1.2.2 Scope................................... 21 1.2.3 Methodology............................... 21 2 Goals and Objectives 23 2.1 General Objectives................................ 23 2.2 Subobjectives................................... 23 2.2.1 Acquire competence on OpenDaylight project.............. 23 2.2.2 Analyze OpenDaylight project from an Open Source perspective.... 24 2.2.3 Statistics and measures of the OpenDaylight project.......... 24 3 OpenDaylight: A first view 25 3.1 OpenDaylight Project............................... 25 3.2 SDN........................................ 29 3.2.1 What is SDN?.............................. 29 3.2.2 SDN: Market share and expectations................... 31 3.3 NFV........................................ 34 3.3.1 What is NFV?.............................. 35 3.3.2 SDN/NFV relationship.......................... 36 3.3.3 NFV benefits..............................
    [Show full text]
  • Atlassian Is Primed to Widen Its Appeal Beyond IT
    Seth Agulnick, [email protected] REPORT Atlassian Is Primed to Widen Its Appeal Beyond IT Companies: CA, CRM, GOOG/GOOGL, HPE, IBM, JIVE, MSFT, NOW, ORCL, TEAM, ZEN February 11, 2016 Report Type: Initial Coverage ☐ Previously Covered Full Report ☐ Update Report Research Question: Will Atlassian’s workflow tools continue to grow quickly with software development teams while also expanding into new use cases? Summary of Findings Silo Summaries . Atlassian Corp. Plc’s (TEAM) tracking and collaboration tools, widely 1) Atlassian Software Users considered the best-in-class for software development, are gaining JIRA and Confluence are both effective tools for team traction among nontechnical teams. collaboration. JIRA can be customized to suit nearly any team’s development process, though setup is . The company’s two flagship products, JIRA and Confluence, are complicated. Confluence is much easier to use and slowly being rolled out in departments like human resources, sales, tends to be deployed more widely. Atlassian’s biggest customer support and product management. These represent a advantage is the way all of its software pieces work together. Atlassian products—which already are being much larger market than Atlassian’s traditional core in IT. branched out beyond software development—can grow . JIRA was praised for its flexibility and advanced customization even further with business teams. options, though the latter trait makes setup and maintenance a challenge. It has great potential for sales growth with any business 2) Users of Competing Software Three of these five sources said Atlassian’s JIRA is not team that needs to track numerous tasks through a multistage the right fit for every company.
    [Show full text]
  • Letter, If Not the Spirit, of One Or the Other Definition
    Producing Open Source Software How to Run a Successful Free Software Project Karl Fogel Producing Open Source Software: How to Run a Successful Free Software Project by Karl Fogel Copyright © 2005-2021 Karl Fogel, under the CreativeCommons Attribution-ShareAlike (4.0) license. Version: 2.3214 Home site: https://producingoss.com/ Dedication This book is dedicated to two dear friends without whom it would not have been possible: Karen Under- hill and Jim Blandy. i Table of Contents Preface ............................................................................................................................. vi Why Write This Book? ............................................................................................... vi Who Should Read This Book? ..................................................................................... vi Sources ................................................................................................................... vii Acknowledgements ................................................................................................... viii For the first edition (2005) ................................................................................ viii For the second edition (2021) .............................................................................. ix Disclaimer .............................................................................................................. xiii 1. Introduction ...................................................................................................................
    [Show full text]
  • Impact of Switching Bug Trackers: a Case Study on a Medium-Sized Open Source Project Théo Zimmermann, Annalí Casanueva Artís
    Impact of switching bug trackers: a case study on a medium-sized open source project Théo Zimmermann, Annalí Casanueva Artís To cite this version: Théo Zimmermann, Annalí Casanueva Artís. Impact of switching bug trackers: a case study on a medium-sized open source project. ICSME 2019 - International Conference on Software Maintenance and Evolution, Sep 2019, Cleveland, United States. hal-01951176v3 HAL Id: hal-01951176 https://hal.inria.fr/hal-01951176v3 Submitted on 26 Jul 2019 HAL is a multi-disciplinary open access L’archive ouverte pluridisciplinaire HAL, est archive for the deposit and dissemination of sci- destinée au dépôt et à la diffusion de documents entific research documents, whether they are pub- scientifiques de niveau recherche, publiés ou non, lished or not. The documents may come from émanant des établissements d’enseignement et de teaching and research institutions in France or recherche français ou étrangers, des laboratoires abroad, or from public or private research centers. publics ou privés. Impact of switching bug trackers: a case study on a medium-sized open source project Theo´ Zimmermann ([email protected]) Annal´ı Casanueva Art´ıs Universite´ de Paris, IRIF, CNRS, F-75013 Paris, France Paris School of Economics, F-75014 Paris, France Inria, π:r2 project-team Abstract—For most software projects, the bug tracker is an bugs fixed [6]. More generally, opening issues and discussing essential tool. In open source development, this tool plays an existing ones has been shown to be an important step on the even more central role as it is generally open to all users, who path to becoming an active contributor of an open source are encouraged to test the software and report bugs.
    [Show full text]
  • E-BUG TRACKING SYSTEM GUIDE: Mrs
    E-BUG TRACKING SYSTEM GUIDE: Mrs. Sathya Priya R1 R.B. Babu2, R. Marimuthu3, G. Gowtham4, V. Prakash5 1Assistant Professor, KSR Institute for Engineering and Technology, Tiruchengode. 2,3,4,5Department of Computer Science And Engineering, KSR Institute for Engineering and Technology, Tiruchengode. ABSTRACT This is the world of information. The ever-growing field Information Technology has its many advanced notable features which made it what it was now today. In this world, the information has to be processed, clearly distributed and must be efficiently reachable to the end users intended for that. Otherwise, we know it led to disastrous situations. The other coin of the same phase is it is absolutely necessary to know any bugs that are hither-to face by the end users. The project “e-bug tracking system” aims to provide the solution for that. The Bug Tracker can be made from any two types. The first one being the system side, the other being the services side. Our project deals with the second one. The paper is wholly dedicated to tracking the bugs that are hither- by arise. The administrator maintains the master details regarding to the bugs id, bugs type, bugs description, bugs severity, bugs status, user details. The administrator too has the authority to update the master details of severity level, status level, etc, modules of the paper. The administrator adds the users and assign them responsibility of completing the paper. Finally, on analysing the paper assigned to the particular user, the administrator can track the bugs, and it is automatically added to the tables containing the bugs, by order of severity and status.
    [Show full text]
  • Bug Tracker Net Documentation
    Bug Tracker Net Documentation Piscatorial and platelike Jean-Pierre backwash rigorously and immerge his pup pausingly and qualmishly. Glaucescent and nicotinic Sayers meditates anachronistically and reregulating his Bruges redolently and unemotionally. Jurassic Miguel befool whitely while Stevie always dedicating his squeezers marauds unthankfully, he miring so monumentally. The targeted project issue date. The predefined values should put left alone. Default user preference to enable filtering based on issue severity. Your comment has been received. Mantis Bug Tracker REST API Postman. It might been released, settings, you create and wade a script. NET Framework XML classes to steep and manipulate the data assess them. Compare to other products or configurations, take their moment to browse these introductory docs. Try upgrading to the latest stable version. The consider of filter fields to buy per row. We erect not, schedules, an object will be flagged. Alternatively, hence, we to submit a report back soon please report cannot be displayed on to main window. Automate data source between Sheets and Tracker. NET, remainder of the bugs are readable, their description etc in the cemetery of reports from time start time. It will no longer if possible login using this account. Then what problem behavior be solved more promptly. Someone hijacked my Google account. Kanban board for visualizing your project timeline. Default value list ON. The default value somewhere ON. Google users are affected. Specifies the LDAP or Active Directory server to key to. You can afford click the Updated column heading to which most recently updated issues at our top along the search results.
    [Show full text]
  • Modern Open Source Java EE-Based Process and Issue Tracker
    MASARYK UNIVERSITY FACULTY}w¡¢£¤¥¦§¨ OF I !"#$%&'()+,-./012345<yA|NFORMATICS Modern open source Java EE-based process and issue tracker DIPLOMA THESIS Monika Gottvaldová Brno, 2014 Declaration Hereby I declare, that this paper is my original authorial work, which I have worked out by my own. All sources, references and literature used or excerpted during elaboration of this work are properly cited and listed in complete reference to the due source. Monika Gottvaldová Advisor: doc. RNDr. Tomáš Pitner, Ph.D. ii Acknowledgement I would like to thank Ing. OndˇrejŽižka for his advice and help during the creation of this thesis. iii Abstract This thesis deals with the topic concerning issue tracking systems, their functionality and features. It compares several issue tracking systems, their advantages and disadvantages. It describes a development of such a sys- tem and the use of modern Java EE technologies – JPA, Wicket, and CDI. The main motivation for creating a new issue tracking system and the sub- sequent development is also described. The thesis analyses its basic design and implementation. iv Keywords Issue tracking system, Wicket, modern Java EE, issue, bug, workflow, cus- tomization v Contents 1 Introduction ...............................1 2 Issue Tracking Systems ........................3 2.1 Bugzilla . .4 2.2 Trac . .6 2.3 JIRA . .7 2.4 Mantis . .8 2.5 BugTracker.NET . .9 2.6 Redmine . 10 2.7 FogBugz . 11 3 Analysis of Relevant Processes in Red Hat ............. 14 3.1 RHEL 6 QE . 14 3.1.1 Process Phases Description . 14 3.1.2 Bugzilla Process . 15 3.2 Fedora QE . 16 3.2.1 Process Phases Description .
    [Show full text]
  • Ptest Method Documentation Release 1
    Ptest Method Documentation Release 1 Villalongue Maxime Dec 13, 2018 The Essentials 1 The Essentials Series 3 1.1 Cybersecurity in an Enterprise......................................3 1.2 Linux Basics............................................... 13 2 Infrastructure Pentest Series 35 2.1 Intelligence Gathering.......................................... 35 2.2 Vulnerability Analysis.......................................... 44 2.3 Exploitation............................................... 142 2.4 Post Exploitation............................................. 184 2.5 Reporting................................................. 211 2.6 Configuration Review.......................................... 212 2.7 Wireless Pentesting............................................ 220 3 Hardening Series 223 3.1 Securing your Debian.......................................... 223 4 Metasploit Documentation 231 4.1 Fundamentals............................................... 231 4.2 Information Gathering.......................................... 286 4.3 Vulnerability Scanning.......................................... 305 4.4 Fuzzers.................................................. 321 4.5 Exploit Development........................................... 326 4.6 Client Sides attacks............................................ 352 4.7 MSF Post Exploitation.......................................... 361 4.8 Meterpreter Scripting........................................... 396 4.9 Maintaining Access........................................... 412 4.10 MSF Extended Usage.........................................
    [Show full text]
  • SENG 371 LAB OUTLINE SOFTWARE EVOLUTION  Bug Tracking System
    3/22/2013 SENG 371 LAB OUTLINE SOFTWARE EVOLUTION Bug Tracking System Types of bug tracking system BUG TRACKING Bug Tracking Tools Bugzilla Prepared by 1 Pratik Jain 2 BUG TRACKING SYSTEM BUG TRACKING Bug Tracking system or issue tracking system or Not only Software Development Team need a bug defect tracking system, is a software application tracking system but sysadmin team, dba team, that keep tracks of reported bugs. network team all require some system to track their work. 3 4 WHY BUG TRACKING TOOLS? BENEFITS Collabortaive Work. Clear centralized overview of development requests(bugs and improvements). Software is a result of many people at different locations different timezones. It helps in next release of Software by using all logs. Communication is crucial, tool makes it easy. Generating reports on productivity of programmers at fixing bugs. Makes easier to track history and evolution of bugs. Improves Communication. 5 6 1 3/22/2013 TYPES OF BUG TRACKING SYSTEM LIFE CYCLE OF BUG Web browser based Client Server based model Distributed Bug Tracking :- Designed to be used with distributed revision control software like Fossil, Veracity and FogBugz. 7 8 MAJOR COMPONENTS BUG REPORT ATTRIBUTES Major Component of Bug tracking system is database that records facts about known bugs. Date : Open Date, Closed Date Status : New, Unconfirmed, Open, Closed, Facts can be :- Deleted, Assigned Request Id: Number Time Severity Detailed Description Identity Severity\Priority : - critical, major, minor\p1,p2 Resolution Category if any, like Gui, Installation or certain module 9 10 BUG REPORT ATTRIBUTES BUG TRACKING SOFTWARES Bugzilla Mantis Jira GNATS Flyspray IBM Rational ClearQuest FogBugz Trac Fossil 11 12 2 3/22/2013 PUBLIC BUG TRACKERS PUBLIC BUG TRACKERS USING BUGZILLA Lots of Open Source projects uses Bug Tracking Open Source Projects:- systems to report a bug.
    [Show full text]
  • D1.4 Project Standards and Infrastructure Document
    Grant Agreement nº 732463 Project Acronym: OpenReq Project Title: Intelligent Recommendation Decision Technologies for Community-Driven Requirements Engineering Call identifier: H2020-ICT-2016-1 Instrument: RIA (Research and Innovation Action) Topic ICT-10-16 Software Technologies Start date of project January 1st, 2017 Duration 36 months D1.4 Project standards and infrastructure document Lead contractor: TU Graz Author(s): TU Graz, ENG, HITEC, QT, SIEMENS, UH, UPC, VOGELLA, WINDTRE Submission date: June 2017 Dissemination level: PU Project co-funded by the European Commission under the H2020 Programme. D1.4 Project standards and infrastructure document Abstract: This document describes the technological framework and scope as well as specifies the project standards and the development infrastructure in place. This document by the OpenReq project is licensed under a Creative Commons Attribution- NonCommercial-ShareAlike 4.0 Unported License. This document has been produced in the context of the OpenReq project. The OpenReq project is part of the European Community's H2020 Programme and is as such funded by the European Commission. All information in this document is provided "as is" and no guarantee or warranty is given that the information is fit for any particular purpose. The user thereof uses the information at its sole risk and liability. For the avoidance of all doubts, the European Commission has no liability is respect of this document, which is merely representing the authors view. © HITEC, TUGRAZ, ENG, UPC, VOGELLA, SIEMENS, UH, QT, WINDTRE Page 2 of 32 D1.4 Project standards and infrastructure document Table of Contents 1. INTRODUCTION ............................................................ 6 2. DESCRIPTION OF TECHNOLOGICAL INFRASTRUCTURE .....................................................
    [Show full text]