检索结果-内蒙古大学图书馆

Reducing operational costs through MIPS management

SCIENCE OF COMPUTER PROGRAMMING 2015年第Part4期98卷 551-588页

作者： Kwiatkowski, Lukasz M. Verhoef, Chris Vrije Univ Amsterdam Dept Comp Sci NL-1081 HV Amsterdam Netherlands

We focus on an approach to reducing the costs of running applications. MIPS, which is a traditional acronym for millions of instructions per second, have evolved to become a measurement of processing power and CPU resource consumption. The need for controlling MIPS attributed costs is indispensable given their significant contribution to operational costs. In this paper we investigate a large mainframe production environment running 246 Cobol applications of an organization operating in the financial sector. We found that the vast majority of the top CPU intensive operations in the production environment involve the use of DB2. We propose approaching portfolio-wide efforts to reduce CPU resource consumption from the source code perspective. Our technique is low-risk, low-cost and involves SQL code improvements of small scale. We show how to analyze a mainframe environment in an industrial setting, and to locate the most promising source code segments for optimizing runtime usage. Our approach relies on the mainframe usage data, facts extracted from source code, and is supported by a real-world SQL tuning project. After applying our technique to a portfolio of Cobol applications running on the mainframe our estimates suggested a possible drop in the attributed monthly CPU usage by as much as 16.8%. The approach we present is suited for facilitation within a mainframe environment of a large organization. (C) 2014 Elsevier B.V. All rights reserved.

关键词： IT-portfolio management Cost reduction MIPS source code analysis SQL

来源：评论

学校读者我要写书评

暂无评论

Handover of managerial responsibilities in global software development: a case study of source code evolution and quality

引用

SOFTWARE QUALITY JOURNAL 2015年第4期23卷 539-566页

作者： Jabangwe, Ronald Borstler, Jurgen Petersen, Kai Blekinge Inst Technol S-37179 Karlskrona Sweden

Studies report on the negative effect on quality in global software development (GSD) due to communication and coordination-related challenges. However, empirical studies reporting on the magnitude of the effect are scarce. This paper presents findings from an embedded explanatory case study on the change in quality over time, across multiple releases, for products that were developed in a GSD setting. The GSD setting involved periods of distributed development between geographically dispersed sites as well as a handover of project management responsibilities between the involved sites. Investigations were performed on two medium-sized products from a company that is part of a large multinational corporation. Quality is investigated quantitatively using defect data and measures that quantify two source code properties, size and complexity. Observations were triangulated with subjective views from company representatives. There were no observable indications that the distribution of work or handover of project management responsibilities had an impact on quality on both products. Among the product-, process- and people-related success factors, we identified well-designed product architectures, early handover planning and support from the sending site to the receiving site after the handover and skilled employees at the involved sites. Overall, these results can be useful input for decision-makers who are considering distributing development work between globally dispersed sites or handing over project management responsibilities from one site to another. Moreover, our study shows that analyzing the evolution of size and complexity properties of a product's source code can provide valuable information to support decision-making during similar projects. Finally, the strategy used by the company to relocate responsibilities can also be considered as an alternative for software transfers, which have been linked with a decline in efficiency, productivity and quality.

关键词： Global software development Distributed development source code analysis Software transfers Object-oriented measures Case study

来源：评论

学校读者我要写书评

暂无评论

Empirical evidence on the link between object-oriented measures and external quality attributes: a systematic literature review

引用

EMPIRICAL SOFTWARE ENGINEERING 2015年第3期20卷 640-693页

作者： Jabangwe, Ronald Borstler, Jurgen Smite, Darja Wohlin, Claes Blekinge Inst Technol S-37179 Karlskrona Sweden

There is a plethora of studies investigating object-oriented measures and their link with external quality attributes, but usefulness of the measures may differ across empirical studies. This study aims to aggregate and identify useful object-oriented measures, specifically those obtainable from the source code of object-oriented systems that have gone through such empirical evaluation. By conducting a systematic literature review, 99 primary studies were identified and traced to four external quality attributes: reliability, maintainability, effectiveness and functionality. A vote-counting approach was used to investigate the link between object-oriented measures and the attributes, and to also assess the consistency of the relation reported across empirical studies. Most of the studies investigate links between object-oriented measures and proxies for reliability attributes, followed by proxies for maintainability. The least investigated attributes were: effectiveness and functionality. Measures from the C&K measurement suite were the most popular across studies. Vote-counting results suggest that complexity, cohesion, size and coupling measures have a better link with reliability and maintainability than inheritance measures. However, inheritance measures should not be overlooked during quality assessment initiatives;their link with reliability and maintainability could be context dependent. There were too few studies traced to effectiveness and functionality attributes;thus a meaningful vote-counting analysis could not be conducted for these attributes. Thus, there is a need for diversification of quality attributes investigated in empirical studies. This would help with identifying useful measures during quality assessment initiatives, and not just for reliability and maintainability aspects.

关键词： Systematic literature review Object-oriented system source code analysis source code measures Software metrics Software quality Static analysis

来源：评论

学校读者我要写书评

暂无评论

Searching Design Patterns Fast by Using Tree Traversals

引用

INTERNATIONAL JOURNAL OF ELECTRONICS AND TELECOMMUNICATIONS 2015年第4期61卷 321-326页

作者： Cicciarella, Stefano Napoli, Christian Tramontana, Emiliano Univ Catania Dept Math & Informat Viale A Doria 6 I-95125 Catania Italy

Large software systems need to be modified to remain useful. Changes can be more easily performed when their design has been carefully documented. This paper presents an approach to quickly find design patterns that have been implemented into a software system. The devised solution greatly reduces the performed checks by organising the search for a design pattern as tree traversals, where candidate classes are carefully positioned into trees. By automatically tagging classes with design pattern roles we make it easier for developers to reason with large software systems. Our approach can provide documentation that lets developers understand the role each class is playing, assess the quality of the code, have assistance for refactoring and enhancing the functionalities of the software system.

关键词： design patterns source code analysis software architecture tree traversals

来源：评论

学校读者我要写书评

暂无评论

Semi-Formal Approach for Validating Compiler for Safety Critical Software in Airborne Systems 2

Semi-Formal Approach for Validating Compiler for Safety Crit...

引用

2nd International Conference on Computing for Sustainable Global Development (INDIACom)

作者： Avinash, A. K. Nanda, Manju Jayanthi, J. NAL Dept Aerosp Elect & Syst Div Bangalore Karnataka India

ISBN: (纸本)9789380544168

For safety critical systems, porting the correct object code to perform the safety function is very critical. So apart from verifying the embedded software at hardware, software and system levels, safety critical systems need to be tested and validated even at the object code level [1,2,3] (ref: DO 178, Section 6.4.4.2). This paper proposes a novel semi-formal approach for validating compiler used for safety critical software for airborne systems. The novel approach is demonstrated as a case study for Microtec cross-compiler used for generating the object code for Motorola 68060 for indigenously developed Stall warning and aircraft interface computer system software. Program analysis technique is used to validate the cross-compiler. The technique is incorporated in an in-house tool which integrates the manual knowledge database to carry out the compiler validation. This tool provides partial automation of the verification process which will be used to provide proof as per the RTCA DO-178B guidelines [3].

关键词： Compiler validation Knowledge database Program analysis Object code analysis Semi-formal Representation source code analysis

来源：评论

学校读者我要写书评

暂无评论

Experiences from Performing Software Quality Evaluations via Combining Benchmark-Based Metrics analysis, Software Visualization, and Expert Assessment 31

Experiences from Performing Software Quality Evaluations via...

引用

IEEE 31st International Conference on Software Maintenance and Evolution (ICSME)

作者： Yamashita, Aiko Oslo & Akershus Univ Coll Appl Sci Oslo Norway

ISBN: (纸本)9781467375320

Software quality assessments are critical in organizations where the software has been produced by external vendors, or when the development and maintenance of a software product has been outsourced to external parties. These assessments are typically challenging because is not always possible to access the original developers (or sometimes is not even allowed), and in rare cases suppliers keep an account of the costs associated to code changes or defect fixes. In those situations, one is left with the artifacts (e.g., database, source code, and documentation) as the only sources of evidence for performing such evaluations. A major challenge is also to provide fact-based conclusions for supporting decision-making, instead of subjective interpretations based on expert assessments (an approach still very predominant in mainstream industrial practice). This paper describes an instance of a software quality evaluation process performed for an international logistics company, which combined: benchmark-based metrics threshold analysis, software visualization, and expert assessment. An interview was carried out afterwards with a member from the business division of the company, to assess the usefulness of the methodology and corresponding findings, and to explore avenues for future improvement.

关键词： Software quality evaluations source code analysis COTS analysis Benchmark based assessments Metrics threshold analysis Expert assessment Software visualization

来源：评论

学校读者我要写书评

暂无评论

Usage contracts: Offering immediate feedback on violations of structural source-code regularities

引用

SCIENCE OF COMPUTER PROGRAMMING 2015年 105卷 73-91页

作者： Lozano, Angela Mens, Kim Kellens, Andy Catholic Univ Louvain ICTEAM Louvain Belgium Vrije Univ Brussel Software Languages Lab Brussels Belgium

Developers often encode design knowledge through structural regularities such as API usage protocols, coding idioms and naming conventions. As these regularities express how the source code should be structured, they provide vital information for developers using or extending that code. Adherence to such regularities tends to deteriorate over time because they are not documented and checked explicitly. This paper introduces uContracts, an internal DSL to codify and verify such regularities as 'usage contracts'. Our DSL aims at covering most common usage regularities, while still providing a means to express less common ones. Common regularities are identified based on regularities supported by existing approaches to detect bugs or suggest missing code fragments, techniques that mine for structural regularities, as well as on the analysis of an open-source project. We validate our DSL by documenting the structural regularities of an industrial case study, and analyse how useful the information provided by checking these regularities is for the developers of that case study. (C) 2015 Elsevier B.V. All rights reserved.

关键词： Software development tool support Structural regularities source code analysis Internal domain-specific language IDE integration

来源：评论

学校读者我要写书评

暂无评论

Discovering Likely Mappings between APIs using Text Mining 15

Discovering Likely Mappings between APIs using Text Mining

引用

15th IEEE International Working Conference on source code analysis and Manipulation (SCAM)

作者： Pandita, Rahul Jetley, Raoul Praful Sudarsan, Sithu D. Williams, Laurie N Carolina State Univ Raleigh NC 27695 USA ABB Corp Res New Delhi India

ISBN: (纸本)9781467375290

Developers often release different versions of their applications to support various platform/programming-language application programming interfaces (APIs). To migrate an application written using one API (source) to another API (target), a developer must know how the methods in the source API map to the methods in the target API. Given a typical platform or language exposes a large number of API methods, manually writing API mappings is prohibitively resource-intensive and may be error prone. Recently, researchers proposed to automate the mapping process by mining API mappings from existing code-bases. However, these approaches require as input a manually ported (or at least functionally similar) code across source and target APIs. To address the shortcoming, this paper proposes TMAP: Text Mining based approach to discover likely API mappings using the similarity in the textual description of the source and target API documents. To evaluate our approach, we used TMAP to discover API mappings for 15 classes across: 1) Java and C# API, and 2) Java ME and Android API. We compared the discovered mappings with state-of-the-art source code analysis based approaches: Rosetta and StaMiner. Our results indicate that TMAP on average found relevant mappings for 57% more methods compared to previous approaches. Furthermore, our results also indicate that TMAP on average found exact mappings for 6.5 more methods per class with a maximum of 21 additional exact mappings for a single class as compared to previous approaches.

关键词： Java application program interfaces data mining text analysis API document API method TMAP application programming interface source code source code analysis text mining Androids Humanoid robots Indexing Software Text mining Application programming interfaces CKAP2 gene text mining Java Java programming language source code Androids API AXIAL POWER INDICATOR American Petroleum Institute Androids MAPPING(MATHEMATICAL) Humanoid robots text processing data mining

来源：评论

学校读者我要写书评

暂无评论

Industry Practices and Event Logging: Assessment of a Critical Software Development Process 37

Industry Practices and Event Logging: Assessment of a Critic...

引用

IEEE/ACM 2nd International Workshop on Software Architecture and Metrics (SAM)

作者： Pecchia, Antonio Cinque, Marcello Carrozza, Gabriella Cotroneo, Domenico Univ Naples Federico II Dipartimento Ingn Elettr & Tecnol Informaz Via Claudio 21 I-80125 Naples Italy Critiware Srl I-80121 Naples Italy Selex ES SpA I-00195 Rome Italy

ISBN: (纸本)9781479919345

Practitioners widely recognize the importance of event logging for a variety of tasks, such as accounting, system measurements and troubleshooting. Nevertheless, in spite of the importance of the tasks based on the logs collected under real workload conditions, event logging lacks systematic design and implementation practices. The implementation of the logging mechanism strongly relies on the human expertise. This paper proposes a measurement study of event logging practices in a critical industrial domain. We assess a software development process at Selex ES, a leading Finmeccanica company in electronic and information solutions for critical systems. Our study combines source code analysis, inspection of around 2.3 millions log entries, and direct feedback from the development team to gain process-wide insights ranging from programming practices, logging objectives and issues impacting log analysis. The findings of our study were extremely valuable to prioritize event logging reengineering tasks at Selex ES.

关键词： source code analysis event logging development process coding practices industry domain

来源：评论

学校读者我要写书评

暂无评论

Static analysis for Web Service Security - Tools & Techniques for a Secure Development Life Cycle

Static Analysis for Web Service Security - Tools & Technique...

引用

IEEE International Symposium on Technologies for Homeland Security (HST)

作者： Masood, Adnan Java, Jim Nova Southeastern Univ Grad Sch Comp & Informat Sci Ft Lauderdale FL 33314 USA

ISBN: (纸本)9781479917372

In this ubiquitous IoT (Internet of Things) era, web services have become a vital part of today's critical national and public sector infrastructure. With the industry wide adaptation of service-oriented architecture (SOA), web services have become an integral component of enterprise software eco-system, resulting in new security challenges. Web services are strategic components used by wide variety of organizations for information exchange on the internet scale. The public deployments of mission critical APIs opens up possibility of software bugs to be maliciously exploited. Therefore, vulnerability identification in web services through static as well as dynamic analysis is a thriving and interesting area of research in academia, national security and industry. Using OWASP (Open Web Application Security Project) web services guidelines, this paper discusses the challenges of existing standards, and reviews new techniques and tools to improve services security by detecting vulnerabilities. Recent vulnerabilities like Shellshock and Heartbleed has shifted the focus of risk assessment to the application layer, which for majority of organization means public facing web services and web/mobile applications. RESTFul services have now become the new service development paradigm normal;therefore SOAP centric standards such as XML Encryption, XML Signature, WS-Security, and WS-SecureConversation are nearly not as relevant. In this paper we provide an overview of the OWASP top 10 vulnerabilities for web services, and discuss the potential static code analysis techniques to discover these vulnerabilities. The paper reviews the security issues targeting web services, software/program verification and security development life-cycle.

关键词： Static code analysis RESTFul API SOA Web Services Cyber Security Secure Design Secure Software Development Secure Software Development SOAP source code analysis Security code Review Static analysis Tool Service Oriented Architecture Web Services Security Web Application security Penetration Testing

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：