DOCSLIB.ORG

Sixth Workshop on Software Quality Analysis, Monitoring, Improvement, and Applications

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Sixth Workshop on Software Quality Analysis, Monitoring, Improvement, and Applications Zoran Budimac (Editor) Sixth Workshop on Software Quality Analysis, Monitoring, Improvement, and Applications SQAMIA 2017 Belgrade, Serbia, 11–13.09.2017 Proceedings Department of mathematics and informatics Faculty of Sciences University of Novi Sad, Serbia 2017 Volume Editor Zoran Budimac University of Novi Sad Faculty of Sciences, Department of Mathematics and Informatics Trg Dositeja Obradovića 4, 21 000 Novi Sad, Serbia E-mail: [email protected] Publisher: University of Novi Sad, Faculty of Sciences, Department of mathematics and informatics Trg Dositeja Obradovića 3, 21000 Novi Sad, Serbia www.pmf.uns.ac.rs Typesetting: Doni Pracner Papers are copyrighted c 2017 by the papers’ authors. Copying permitted only for private and academic purposes. This volume is published and copyrighted by its editors. Proceedings also appeared in ISBN 978-86-7031-355-2, Faculty of Sciences, University of Novi Sad. The contents of the published papers express the opinions of their respective authors, not the volume publisher or the editors. Typeset in LATEX and Microsoft Word by Doni Pracner and the authors of individual papers. ISBN: 978-86-7031-355-2 ii Preface This volume contains papers presented at the Sixth Workshop on Software Quality Analysis, Monitoring, Improvement, and Applications (SQAMIA 2017). SQAMIA 2017 was held during September 11 – 13, 2017., at the Hotel Prag, Belgrade, Serbia. SQAMIA 2017 continued the tradition of successful SQAMIA workshops previously held in Novi Sad, Serbia (in 2012 and 2013), Lovran, Croatia (2014), Maribor, Slovenia (2015) and Budapest, Hungary (2016). The first SQAMIA workshop was organized within the 5th Balkan Conference in Informatics (BCI 2012). In 2013, SQAMIA became a standalone event intended to be an annual gathering of researchers and practitioners in the field of software quality. The main objective of the SQAMIA series of workshops is to provide a forum for presentation, discussion and dissemination of the latest scientific achievements in the area of software quality, and to promote and improve interaction and collaboration among scientists and young researchers from the region and beyond. The workshop especially welcomes position papers, papers describing work in progress, tool demonstration papers, technical reports, and papers designed to provoke debate on present knowledge, open questions, and future research trends in software quality. The SQAMIA 2017 workshop consisted of regular sessions with technical contributions reviewed and selected by an international program committee, as well as two invited talks by Nuno Antunes and Stéphane Ducasse. In total 19 papers were accepted and published in this proceedings volume. All published papers were at least double reviewed, and in some cases even quadruple reviewed. We are grateful to all PC members for submitting careful and timely opinions on the papers. Our special thanks are also addressed to the members of the SQAMIA Initiative (sqamia.org) without who this and previous workshops could not be possible: Zoran Budimac (Novi Sad, Serbia), Tihana Galinac Grbac (Rijeka, Croatia), Marjan Heričko (Maribor, Slovenia), Zoltán Horváth (Budapest, Hungary) and Hannu Jaakkola (Pori, Finland) We extend special thanks to the SQAMIA 2017 Organizing Committee from the Department of Mathematics and Informatics, Faculty of Sciences, University of Novi Sad, especially to the two co-chairs Nataša Sukur and Tijana Vislavski for their hard work and dedication to make this workshop the best it can be. Further we’d like to thank Doni Pracner for his patience and diligent work on making the proceedings. This workshop is endorsed by COST action IC1402 Runtime verification beyond monitoring (ARVI). And last, but not least, we thank all the participants of SQAMIA 2017 for their contributions that made all the work that went into SQAMIA 2017 worthwhile. September 2017 Zoran Budimac iii Workshop Organization General and Program Chair Zoran Budimac (University of Novi Sad, Serbia) Program Committee Nuno Antunes (University of Coimbra, Portugal) Tihana Galinac Grbac (co-chair, University of Rijeka, Croatia) Marjan Heričko (co-chair, University of Maribor, Slovenia) Zoltán Horváth (co-chair, Eötvös Loránd University, Hungary) Hannu Jaakkola (co-chair, Tampere University of Technology, Finland) Harri Keto (Tampere University of Technology, Finland) Vladimir Kurbalija (University of Novi Sad, Serbia) Goran Mauša (University of Rijeka, Croatia) Anastas Mishev (University of Sts. Cyril and Methodius, FYR Macedonia) Zoltán Porkoláb (Eötvös Loránd University, Hungary) Valentino Vranić (Slovak University of Technology in Bratislava, Slovakia) Additional Reviewers Michal Bystrický Ivano Elia Ján Lang Rui Oliveira Karol Rástočný Organizing Committee Nataša Sukur (co-chair, University of Novi Sad, Serbia) Tijana Vislavski (co-chair, University of Novi Sad, Serbia) Doni Pracner (University of Novi Sad, Serbia) Ivan Pribela (University of Novi Sad, Serbia) Organizing Institution University of Novi Sad, Serbia Faculty of Sciences Department of Mathematics and Informatics Technical Editor Doni Pracner (University of Novi Sad, Serbia) iv Table of Contents ◦ Approaches for Software Metrics Threshold Derivation: A Preliminary Review . 1:1–1:08 Tina Beranič, Marjan Heričko ◦ Two Dimensional Visualization of Software Metrics . 2:1–2:06 Tibor Brunner, Zoltán Porkoláb ◦ Tests of Graphics Rendering in Browsers . 3:1–3:10 Jaak Henno, Hannu Jaakkola, Jukka Mäkelä ◦ Improvement of Requirements Engineering Course – Medical Software Case Study . 4:1–4:09 Mirjana Ivanović, Amelia Badica, Maria Ganzha, Costin Badica, Marcin Paprzycki ◦ Technology and the Reincarnation Cycles of Software . 5:1–5:10 Hannu Jaakkola, Jaak Henno, Jukka Mäkelä ◦ A Preliminary Empirical Exploration of Quality Measurement for Javascript Solutions . 6:1–6:06 David Kostanjevec, Maja Pušnik, Marjan Heričko, Boštjan Šumak, Gordana Rakić, Zoran Budimac ◦ Identifying Up-to-the-Minute Topics in Software Process Improvement Research . 7:1–7:08 Harri Keto, Hannu Jaakkola ◦ Blockchain Implementation Quality Challenges: A Literature Review . 8:1–8:08 Bojana Koteska, Elena Karafiloski, Anastas Mishev ◦ Barriers and Facilitators of Digitalization in Organizations . 9:1–9:07 Markku Kuusisto ◦ Relationship Between Design and Defects for Software in Evolution . 10:1–10:10 Matija Miletić, Monika Vukušić, Goran Mauša, Tihana Galinac Grbac ◦ A Practical Tutorial for FermaT and WSL Transformations . 11:1–11:08 Doni Pracner, Zoran Budimac ◦ A Temporal File System for Student’s Assignments in The System Svetovid . 12:1–12:08 Ivan Pribela, Doni Pracner ◦ Case Study: Using Model Based Component Generator for Upgrade Projects . 13:1–13:08 Petar Rajkovic, Ivan Petkovic, Dragan Jankovic ◦ Containerized A/B Testing . 14:1–14:08 Ádám Révész, Norbert Pataki ◦ Energy Consumption Measurement of C/C++ Programs Using Clang Tooling . 15:1–15:08 Mário Santos, João Saraiva, Zoltán Porkoláb, Dániel Krupp ◦ Evaluating State Modeling Techniques in Alloy . 16:1–16:09 Allison Sullivan, Kaiyuan Wang, Sarfraz Khurshid, Darko Marinov ◦ Measuring Mangled Name Ambiguity in Large C / C++ Projects . 17:1–17:09 Richárd Szalay, Zoltán Porkoláb, Dániel Krupp ◦ Comparison of Software Structures in Java and Erlang Programming Languages . 18:1–18:08 Ana Vranković, Tihana Galinac Grbac, Melinda Tóth ◦ The Case for Non-Cohesive Packages . 19:1–19:18 Nicolas Anquetil, Muhammad Ussman Bhatti, Stéphane Ducasse, Andre Hora, Jannik Laval v 1 Approaches for Software Metrics Threshold Derivation: A Preliminary Review TINA BERANICˇ and MARJAN HERICKO,ˇ University of Maribor Knowing the reliable software metrics threshold can contribute to product quality evaluation and, consequently, increase the usefulness of software metrics in practice. How to derive software metrics thresholds is a topic of many researchers, either proposing new approaches, or verifying existing methods on different practical projects. A literature review was conducted to summarise the available knowledge in this area. The aim was to find approaches for software metric threshold derivation and extract relevant information, such as programming language for which an approach was proposed and tested, what metrics were derived, and if approaches are automated with supporting tools. Data extracted from 14 primary studies reveal that the majority of studies present new approaches and approaches usually apply statistical analysis for threshold derivation. Primary programming language for which metrics are derived is Java, followed by C, C++ and C#. We also came across some tools used for threshold derivation, but in practise their use was not detected. Metrics derived, purpose of metrics derivation and other information are also summarised in the tables bellow. Categories and Subject Descriptors: D.2.8 [Software Engineering] Metrics; D.2.9 [Software Engineering] Management- Software quality assurance (SQA) General Terms: Software Metrics Threshold Derivation Additional Key Words and Phrases: Software Metrics, Thresholds, Reference Values, Object-oriented, Literature Review 1. INTRODUCTION To deliver software product in required quality, it is crucial to address and manage the quality assur- ance domain properly. Software metrics can be used for reflection of the qualitative characteristics of software modules in a quantitative way [Arar and Ayan 2016], presenting a control instrument in a software development and maintenance process [Alves et al. 2010]. Software metrics assess software from different views and, therefore,
Load more

Recommended publications
  • A Specification-Oriented Semantics for the Refinement of Real-Time Systems
    View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Elsevier - Publisher Connector Theoretical Computer Science 131 (1994) 219-241 219 Elsevier A specification-oriented semantics for the refinement of real-time systems David Scholefield and Hussein Zedan Formal Systems Research Group, Department of ComputerScience, University of York, Heslington, York, UK He Jifeng Programming Research Group. Oxford University, Keble Road, Oxford, UK Communicated by I. Mitrani Received November 1992 Revised February 1993 Abslract Scholefield, D., H. Zedan and H. Jifeng, A specification-oriented semantics for the refinement of real-time systems, Theoretical Computer Science 131 (1994) 2199241. A refinement calculus for the development of real-time systems is presented. The calculus is based upon a wide-spectrum language called the temporal agent model (TAM), within which both functional and timing properties can be expressed in either abstract or concrete terms. A specifica- tion-oriented semantics for the language is given. Program development is considered as a refine- ment process, i.e. the calculation of a structured program from an unstructured specification. A calculus of decomposition is defined. An example program is developed. 1. Introduction The formal development of a computer system is traditionally separated into four tasks: the formulation of a specification, the formulation of a design, verification between specification and design, and the translation of the design into an implemen- tation. In real-time systems, verification must take into account both functional correctness and the timeliness of results - a consideration which adds further com- plexity to an already difficult task. Correspondence to: D.
    [Show full text]
  • Removing Redundant Refusals: Minimal Complete Test Suites for Failure Trace Semantics
    Removing Redundant Refusals: Minimal Complete Test Suites for Failure Trace Semantics Maciej Gazda Robert M. Hierons Department of Computer Science Department of Computer Science University of Sheffield, UK University of Sheffield, UK Abstract—We explore the problem of finding a minimal com- in which no action in X is enabled. Most work uses ioco [21] plete test suite for a refusal trace (or failure trace) semantics. or one of its variants; see [22] for an overview. In ioco, an Since complete test suites are typically infinite, we consider the observation is a trace that can contain instances of quiescence: setting with a bound ` on the length of refusal traces of interest. A test suite T is thus complete if it is failed by all processes that the situation in which the system under test (SUT) cannot contain a disallowed refusal trace of length at most `. produce output or change state without first receiving input. The proposed approach is based on generating a minimal com- The ioco test theory assumes that the SUT cannot refuse inputs plete set of forbidden refusal traces. Our solution utilises several (is input-enabled) and the environment cannot block outputs, interesting insights into refusal trace semantics. In particular, which is why quiescence is the only type of refusal. we identify a key class of refusals called fundamental refusals which essentially determine the refusal trace semantics, and the A refusal of a set X is observed through the tester offering associated fundamental equivalence relation. We then propose a the actions in X and subsequent deadlock (detected through small but not necessarily minimal test suite based on our theory, a timeout).
    [Show full text]
  • A Comprehensive Survey of Trends in Oracles for Software Testing
    1 A Comprehensive Survey of Trends in Oracles for Software Testing Mark Harman, Phil McMinn, Muzammil Shahbaz and Shin Yoo Abstract—Testing involves examining the behaviour of a system in order to discover potential faults. Determining the desired correct behaviour for a given input is called the “oracle problem”. Oracle automation is important to remove a current bottleneck which inhibits greater overall test automation; without oracle automation, the human has to determine whether observed behaviour is correct. The literature on oracles has introduced techniques for oracle automation, including modelling, specifications, contract-driven development and metamorphic testing. When none of these is completely adequate, the final source of oracle information remains the human, who may be aware of informal specifications, expectations, norms and domain specific information that provide informal oracle guidance. All forms of oracle, even the humble human, involve challenges of reducing cost and increasing benefit. This paper provides a comprehensive survey of current approaches to the oracle problem and an analysis of trends in this important area of software testing research and practice. Index Terms—Test oracle; Automatic testing; Testing formalism. F 1 INTRODUCTION undecidable problem. For example, attempting to cover all branches [6], [10], [16], [64], [77], Much work on testing seeks to automate as [159], [177] in a system under test can never be much of the test process as practical and de- complete because branch reachability is known sirable, in order to make testing faster, cheaper to be undecidable in general [192]. and more reliable. In order to automate testing, The problem of generating test inputs to we need an oracle, a procedure that determines achieve coverage of test adequacy criterion what the correct behaviour of a system should has been the subject of research interest for be for all input stimuli with which we wish nearly four decades [48], [106] and has been to subject the system under test.
    [Show full text]
  • Interval Temporal Logic
    Interval Temporal Logic Antonio Cau and Ben Moszkowski 2021-04-09 HTML version of the ITL home page Abstract Interval Temporal Logic (ITL) is a flexible notation for both propositional and first-order reasoning about periods of time found in descriptions of hardware and software systems. Unlike most temporal logics, ITL can handle both sequential and parallel composition and offers powerful and extensible specification and proof techniques for reasoning about properties involving safety, liveness and pro- jected time [134]. Timing constraints are expressible and furthermore most imperative programming constructs can be viewed as formulas in a slightly modified version of ITL [125]. Tempura provides an executable framework for developing and experimenting with suitable ITL specifications. In addi- tion, ITL and its mature executable subset Tempura [157] have been extensively used to specify the properties of real-time systems where the primitive circuits can directly be represented by a set of simple temporal formulae. In addition, Tempura has been applied to hardware simulation and other areas where timing is important. 1 Contents 1 Finite Interval Temporal Logic3 1.1 Syntax............................................3 1.2 Semantics..........................................3 1.3 Derived Constructs......................................5 1.4 Propositional proof system..................................7 1.5 First order proof system...................................7 2 Finite and Infinite Interval Temporal Logic8 2.1 Syntax............................................8
    [Show full text]
  • Issue 2005 2 June 2005
    , . Issue 2005-2 FACS June 2005 A FM E C A A C ~v1 L F (~ T ~J1 ETHODS C 1 BCS R S(:S(: M S Z A UM L I FM SI G E E E E E BCS The Newsletter of the Formal Aspects of 6 FACS Computing Science (FACS) Specialist Group ISSN 0950-1231 , " -40 , . FACS FACTS Iss ue 2005-2 June 2005 :~::;'::i(t::·::!:\,,: h\boJi EACS.FACTS .. '::':--'}U},;"";",::,:::: '}::::-::/:W::::::'" :,:':':t\i{\, '::;:=/';tt::-:· . , . EAG,sFACi,s[ I S$N:Q950~12311 U S ! h ~ Q~W~letter . of ·ihe BQ$ Specialist · (Sfoup 8h .·· FpribaIAsp~ Cts ·otCornputihg ·S§ience(FACS}; 'FACSFAGTS.• is· dfstributed in electronic form !ball FACS members. · .... A~from ';605 : FACS ?A hs ~ lii ' b~ ~clbl: g~~a foJ~\iinesayea 6 Mar c ti : • June; September and December. Submissions are always welcome .. p l g<!s~seetQe <3d¥~rt.. .or1 page2~fo r fU~herde! <! i ls of·yisil thenew§lg!ter .•.• areaOfthe FACS websile [ http: //www .bcs ~facs . org/newsletterr .. .. ............ .- ... -..... -,'- . Back issU~s . of FAGSFA GTS~re avai l ~ bl e t6 .downlda d frorTE The FACS FACTS Tea m . ..,., . Newsletted ::ditor . Paul B6ca [editor@fac;sfacts ci nfol Editori.al Team J61lathanBowerl,J udith Ca rlton, John Cooke; . Kevin Lano., Mike Siannett Colu rn nist~.i •. ' Din es Bj0rn er (The •~ ai l waY.oClm a i r1) ...•. Judith Carlton(Puzzles) " ....... ... Contribqtors .to t h.isJsSU€) ; Dines Bj0mer, Eerke Boiten, Jonathan . Bowen , Judith Ca ri ton, Roger Carsley, J o hn . D E! r ri 9~• . George E lef~er<;lki§ ; J ose ; Fiade i ro , Joh n F i tzg~ta l d, Carroll Morgan, Fiona Polack, F.X.
    [Show full text]
  • Interval Temporal Logic
    Interval Temporal Logic Antonio Cau, Ben Moszkowski and Hussein Zedan Software Technology Research Laboratory December 6, 2007 HTML version of the ITL home page ITL-course: A not so short introduction to ITL Abstract Interval Temporal Logic (ITL) is a flexible notation for both propositional and first-order reasoning about periods of time found in descriptions of hardware and software systems. Unlike most temporal logics, ITL can handle both sequential and parallel composition and offers powerful and extensible specification and proof techniques for reasoning about properties involving safety, liveness and projected time[15]. Timing constraints are expressible and furthermore most imperative pro- gramming constructs can be viewed as formulas in a slightly modified version of ITL [25]. Tempura provides an executable framework for developing and experimenting with suitable ITL specifications. In addition, ITL and its mature executable subset Tempura [9] have been extensively used to specify the properties of real-time systems where the primitive circuits can directly be represented by a set of simple tempo- ral formulae. In addition, various researchers have applied Tempura to hardware simulation and other areas where timing is important. 1 Syntax The key notion of ITL is an interval. An interval σ is considered to be a (in)finite sequence of states σ0; σ1 :::, where a state σi is a mapping from the set of variables Var to the set of values V al. The length jσj of an interval σ0 : : : σn is equal to n (one less than the number of states in the interval (this has always been a convention in ITL), i.e., a one state interval has length 0).
    [Show full text]
  • Community Engagement
    Community Engagement Annual Report 2016-2017 2 2 2 COMMUNITY ENGAGEMENT ANNUAL REPORT 2016 - 2017 PREPARED FOR COMMUNITY ENGAGEMENT OFFICE APPLIED SCIENCE UNIVERSITY Copyright © 2017 by Applied Science University All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher. NOVEMBER 2017 3 4 CONTENTS UNIVERSITY VISION, MISSION, OBJECTIVES AND VALUES VISION The vision of Applied Science University is to be one of the leading private universities supporting practical learning and scientific research in Bahrain and the Gulf. MISSION ASU is committed to offering an education that is accessible to academically competent students of Bahrain, the Gulf and beyond, and to deliver academic programmes of quality that graduate students equipped with knowledge and skills relevant locally and regionally. ASU is further dedicated to the promotion of a culture of learning and scientific research for its students, staff and faculty regionally and globally to engage meaningfully with the community at large. OBJECTIVES · To acknowledge social responsibility and to serve the local and regional community. · To enhance a superior scientific research standard in all fields of knowledge. · To offer new specializations to meet the market demands. · To maintain abreast of scientific development and to provide all the means of academic success. VALUES · Integrity: ASU’s community values honesty, fairness and academic integrity as fundamental to its vision and mission. It recognizes, affirms and upholds this value in a responsible and committed manner. · Collaboration and Team Spirit: ASU’s community recognizes collaboration and team spirit to be at the heart of the institutional culture and to promote these values in a dedicated manner.
    [Show full text]
  • June 2005 a C T S
    Issue 2005-2 FACS June 2005 A C T S The Newsletter of the Formal Aspects of Computing Science (FACS) Specialist Group ISSN 0950-1231 FACS FACTS Issue 2005-2 June 2005 About FACS FACTS FACS FACTS [ISSN: 0950-1231] is the newsletter of the BCS Specialist Group on Formal Aspects of Computing Science (FACS). FACS FACTS is distributed in electronic form to all FACS members. As from 2005, FACS FACTS will be published four times a year: March, June, September and December. Submissions are always welcome. Please see the advert on page 23 for further details or visit the newsletter area of the FACS website [http://www.bcs-facs.org/newsletter]. Back issues of FACS FACTS are available to download from: http://www.bcs-facs.org/newsletter/facsfactsarchive.html The FACS FACTS Team Newsletter Editor Paul Boca [[email protected]] Editorial Team Jonathan Bowen, Judith Carlton, John Cooke, Kevin Lano, Mike Stannett Columnists Dines Bjørner (The Railway Domain) Judith Carlton (Puzzles) Contributors to this Issue: Dines Bjørner, Eerke Boiten, Jonathan Bowen, Judith Carlton, Roger Carsley, John Derrick, George Eleftherakis, José Fiadeiro, John Fitzgerald, Carroll Morgan, Fiona Polack, F.X. Reid, Paola Spoletini, Marcel Verhoef, Jim Woodcock 2 FACS FACTS Issue 2005-2 June 2005 Contents Editorial 4 FACS AGM, 27 April, London 5 ZB2005 Conference Report 10 REFINE2005 Conference Report 17 Train Domain Column 19 Blocking Publication: An Adventure in Destructive Refereeing 24 An Example Railway Domain 29 Book Announcements 40 PhD Abstracts 41 Conference Announcements 45 Job Adverts 48 Formal Methods Coffee Time 49 And Finally 52 FACS Committee 53 3 FACS FACTS Issue 2005-2 June 2005 Editorial Jonathan Bowen, BCS-FACS Chair Welcome to another varied FACS FACTS Newsletter, ably compiled by Paul Boca.
    [Show full text]
  • Formal Specification of Scientific Applications Using Interval
    5 Formal Specification of Scientific Applications Using Interval Temporal Logic BOJANA KOTESKA and ANASTAS MISHEV, University SS. Cyril and Methodius, Faculty of Computer Science and Engineering, Skopje LJUPCO PEJOV, University SS. Cyril and Methodius, Faculty of Natural Science and Mathematics, Skopje Scientific applications simulate any natural phenomena in different scientific domains. Moreover, the problems they solve are usually represented by mathematical models. Taking that in advance, these problems can be described by using specific formal notation and mathematical formulas. Scientific applications are usually created by the scientists without using any software development engineering practices. Our main goal is to include formal methods in the testing process of scientific applications. In this paper, we adapt Interval Temporal Logic (ITL) as a flexible notation for describing software applications. We use Tempura framework and Ana Tempura tool for specifying the properties of the scientific software system. The correctness of the code is verified by comparing the results from the program output and functions written in Tempura. This process is especially important when some code changes or optimizations are made. To verify this concept we made a formal description of the code for calculating bound states of the Morse oscillator well. Categories and Subject Descriptors: D.2.4 [Software Engineering]: Software/Program Verification —Validation, Formal Meth- ods; G.4 [Mathematics of Computing]: Mathematical Software—Certification and testing, Documentation, Verification General Terms: Verification Additional Key Words and Phrases: Scientific application, Formal Specification, Interval Temporal Logic, Ana Tempura, Morse Oscillator 1. INTRODUCTION Scientific applications are widely used nowadays in different scientific domains. Numerical simulations performed by scientific applications can solve problems in many research fields such as: computational chemistry, physics, engineering, mathematics, mechanics, informatics, bioinformatics, etc.
    [Show full text]
  • The Developer Factor in Software Privacy
    The Developer Factor in Software Privacy Mohammad Tahaei Doctor of Philosophy School of Informatics University of Edinburgh 2021 Abstract Computer programming operates and controls our personal devices, cars, and infrastructures. These programs are written by software developers who use tools, software development platforms, and online resources to build systems used by billions of people. As we move towards societies that rely on computer programs, the need for private and secure systems increases. Developers, the workforce behind the data economy, impact these systems’ privacy, and consequently, the users and society. Therefore, understanding the developer factor in software privacy provides invaluable inputs to software companies, regulators, and tool builders. This thesis includes six research papers that look at the developer factor in software privacy. We find that developers impact software privacy and are also influenced by external entities such as tools, platforms, academia, and regulators. For example, changes in regulations create challenges and hurdles for developers, such as creating privacy policies, managing permissions, and keeping user data private and secure. Developers interactions with tools and software development platforms, shape their understanding of what privacy means, such as consent and access control. Presentation of privacy information and options on platforms also heavily impact developers’ decisions for their users’ privacy, and platforms may sometimes nudge developers into sharing more of their users’ data by using design (dark) patterns. Other places developers learn about privacy include universities, though they may not learn how to include privacy in software. Some organisations are making efforts to champion privacy as a concept inside development teams, and we find that this direction shows promise as it gives developers direct access to a champion who cares about privacy.
    [Show full text]
  • A Model-Driven Architecture Based Evolution Method and Its Application in an Electronic Learning System
    A Model-Driven Architecture based Evolution Method and Its Application in An Electronic Learning System PhD Thesis Yingchun Tian Software Technology Research Laboratory De Montfort University October, 2012 To my husband, Delin Jing and my mum, Ning Zhang for their love and support Declaration Declaration I declare that the work described in this thesis was originally carried out by me during the period of registration for the degree of Doctor of Philosophy at De Montfort University, U.K., from October 2008 to December 2011. It is submitted for the degree of Doctor of Philosophy at De Montfort University. Apart from the degree that this thesis is currently applying for, no other academic degree or award was applied for by me based on this work. I Acknowledgements Acknowledgements For many years I had been dreaming about receiving a PhD, I would like to thank many people who helped me in achieving this dream in different ways since I undertook the work of this thesis. My deepest gratitude goes to my supervisor, Professor Hongji Yang, for his guidance, support and encouragement throughout my PhD career. He always provided me with many invaluable comments and suggestions for the improvement of the thesis. I am grateful for his leading role fostering my academic, professional and personal growth. Many thanks go to Professor Hussein Zedan and Doctor Wenyan Wu, for examining my PhD thesis and providing many helpful suggestions. My research career will benefit tremendously from the research methodologies to which Professor Zedan and Doctor Wu introduced me. I would like to thank colleagues in Software Technology Research Laboratory at De Montfort University, for their support and feedback, and for providing such a stimulating working atmosphere, Professor Hussein Zedan, Doctor Feng Chen, Doctor Amelia Platt, Doctor Antonio Cau, and many other colleagues.
    [Show full text]
  • Set-Based Models for Cryptocurrency Software
    Set-Based Models for Cryptocurrency Software Gustavo Betarte1, Maximiliano Cristi´a2, Carlos Luna1, Adri´an Silveira1, and Dante Zanarini2 1 InCo, Facultad de Ingenier´ıa, Universidad de la Rep´ublica, Uruguay. {gustun,cluna,adrians}@fing.edu.uy 2 CIFASIS, Universidad Nacional de Rosario, Argentina. {cristia,zanarini}@cifasis-conicet.gov.ar Abstract. Emin G¨un Sirer once said3: It’s clear that writing a robust, secure smart contract requires extreme amounts of diligence. It’s more similar to writing code for a nuclear power reactor, than to writing loose web code [. ] Yet the current Solidity language and underlying EVM seems designed more for the latter. Formal methods (FM) are mathematics-based software development meth- ods aimed at producing “code for a nuclear power reactor”. That is, due application of FM can produce bug-free, zero-defect, correct-by- construction, guaranteed, certified software. However, the software in- dustry seldom use FM. One of the main reasons for such a situation is that there exists the perception (which might well be a fact) that FM increase software costs. On the other hand, FM can be partially applied thus producing high-quality software, although not necessarily bug-free. In this paper we outline some FM related techniques whose application the cryptocurrency community should take into consideration because they could bridge the gap between “loose web code” and “code for a nuclear power reactor”. 1 Introduction Given that cryptocurrency software deals with virtual money, software errors can produce irreparable loses. Furthermore, they are a valuable target of highly skilled attackers. Therefore, if a cryptocurrency software has an exploitable vul- arXiv:1908.00591v1 [cs.SE] 1 Aug 2019 nerability chances are that attackers will eventually use it to steal money.
    [Show full text]