机载软件适航认证标准新进展及展望

为了满足机载软件适航认证的迫切需求,对机载软件适航认证标准进行分析研究.阐述了DO-178B的发展动因及过程,总结了随着软件开发技术的快速更新DO-178B所表现的不足.说明了对DO-178B进行更新的必要性,并将即将发布的新版本DO-178C与DO-178B进行了对比.根据对比结果重点分析了DO-178C的4个新增特性.对DO-178C所带来的影响以及未来应用进行了展望.     

A methodology to assess the impact of design patterns on software quality

Context

Software quality is considered to be one of the most important concerns of software production teams. Additionally, design patterns are documented solutions to common design problems that are expected to enhance software quality. Until now, the results on the effect of design patterns on software quality are controversial.

Aims

This study aims to propose a methodology for comparing design patterns to alternative designs with an analytical method. Additionally, the study illustrates the methodology by comparing three design patterns with two alternative solutions, with respect to several quality attributes.

Method

The paper introduces a theoretical/analytical methodology to compare sets of “canonical” solutions to design problems. The study is theoretical in the sense that the solutions are disconnected from real systems, even though they stem from concrete problems. The study is analytical in the sense that the solutions are compared based on their possible numbers of classes and on equations representing the values of the various structural quality attributes in function of these numbers of classes. The exploratory designs have been produced by studying the literature, by investigating open-source projects and by using design patterns. In addition to that, we have created a tool that helps practitioners in choosing the optimal design solution, according to their special needs.

Results

The results of our research suggest that the decision of applying a design pattern is usually a trade-off, because patterns are not universally good or bad. Patterns typically improve certain aspects of software quality, while they might weaken some other.

Conclusions

Concluding the proposed methodology is applicable for comparing patterns and alternative designs, and highlights existing threshold that when surpassed the design pattern is getting more or less beneficial than the alternative design. More specifically, the identification of such thresholds can become very useful for decision making during system design and refactoring.     

基于硬件特征信息嵌入认证的软件保护

为了既方便软件开发、降低成本,又便于软件保护、维护权益人的利益,研究了软件保护的常用技术和方法,结合软件工程的具体实践,提出了基于硬件特征信息嵌入认证的软件保护方法.该方法的主要特点是利用用户计算机系统的硬件特征信息,采用特征信息嵌入法,通过对当前计算机特征信息与已认证特征信息表中的信息进行比对,实现基于认证的软件保护;同时使用有效的加密算法,进一步提高软件保护强度.实验结果表明,该方法设计简单、成本低、通用性强、保护强度高,是软件保护的有效方法.     

Derivation of local software quality metrics (software quality circles)

Software is a product in serious need of quality control technology. Major effort notwithstanding, software engineering has produced few metrics for aspects of software quality that have the potential of being universally applicable. The present paper suggests that, although universal metrics are elusive, metrics that are applicable and useful in a fully defined setting are readily available. A theory is presented that a well-defined software work group can articulate their operational concept of quality and derive useful metrics for that concept and their environment.     

Towards a software quality certification of master data-based applications

Software Quality Journal - Master data management (MDM) can provide an integrated and unified view of key business entities to offer better support in business processes. Due to the very nature of...     

The impact of software evolution and reuse on software quality

This paper presents a case study of a software project in the maintenance phase. The case study was based on a sample of modules, representing about 1.3 million lines of code, from a very large telecommunications system. Software quality models were developed to predict the number of faults expected from the coding through operations phases. Since modules from the prior release were often reused to develop a new release, one model incorporated reuse data as additional independent variables. We compare this model's performance to a similar model without reuse data.Software quality models often have product metrics as the only input data for predicting quality. There is an implicit assumption that all the modules have had a similar development history, so that product attributes are the primary drivers of different quality levels. Reuse of software as components and software evolution do not fit this assumption very well, and consequently, traditional models for such environments may not have adequate accuracy. Focusing on the software maintenance phase, this study demonstrated that reuse data can significantly improve the predictive accuracy of software quality models.     

如何更好地保证软件项目的质量

软件企业更多的时候是在为客户提供服务而不是像买卖一件商品那么简单,改善客户满意度应该是一个着眼于未来的软件企业不断追求的目标。那么软件企业如何才能为用户提供高质量的产品呢?本文将从质量策略、质量管理过程、质量管理常用技术和工具、QA的工作等几个方面探讨如何更好地保证软件的质量。     

Current accreditation, certification, and licensure activities related to software engineering

The issues associated with the accreditation, certification, and licensure of software engineers are, or at least should be, of great concern to the software engineering community. Perhaps as a result of publicity about safety-critical software disasters in the news media, some state legislatures have considered regulating the practice of software engineering, and some professionals believe that accreditation, certification, and licensure are inevitable. Yet there is no agreed-upon body of knowledge for software engineering on which to base accreditation, certification, or licensure, which makes implementing them difficult at best. In addition, it is not clear that these processes and possible mechanisms to support them are well understood within the software engineering community. This paper surveys how these three processes are conducted in other professions, summarizes the processes as they currently exist for computing in general, identifies some issues that are involved in implementing the processes for software engineering, and suggests possible actions that can be taken by the software engineering profession. The implications of accreditation, certification, and licensure for education are also discussed.     

Using an objective method for managing the implementation of quality certification in the industry

With their generalized use as a competitive strategy, Quality Management Systems (QMSs) have become an important management and development tool in industrial companies. There have been numerous studies of the different factors involved in their implementation, but none have considered which of these factors generate a greater propensity to seek certification in these companies. It is important to quantify these factors with the aim of determining their influence on the implementation of an ISO 9000 norm certified QMS.     

Studying the impact of social interactions on software quality

Correcting software defects accounts for a significant amount of resources in a software project. To make best use of testing efforts, researchers have studied statistical models to predict in which parts of a software system future defects are likely to occur. By studying the mathematical relations between predictor variables used in these models, researchers can form an increased understanding of the important connections between development activities and software quality. Predictor variables used in past top-performing models are largely based on source code-oriented metrics, such as lines of code or number of changes. However, source code is the end product of numerous interlaced and collaborative activities carried out by developers. Traces of such activities can be found in the various repositories used to manage development efforts. In this paper, we develop statistical models to study the impact of social interactions in a software project on software quality. These models use predictor variables based on social information mined from the issue tracking and version control repositories of two large open-source software projects. The results of our case studies demonstrate the impact of metrics from four different dimensions of social interaction on post-release defects. Our findings show that statistical models based on social information have a similar degree of explanatory power as traditional models. Furthermore, our results demonstrate that social information does not substitute, but rather augments traditional source code-based metrics used in defect prediction models.     

Investigating the impact of a measurement program on software quality

ContextMeasurement programs have been around for several decades but have been often misused or misunderstood by managers and developers. This misunderstanding prevented their adoption despite their many advantages.ObjectiveIn this paper, we present the results of an empirical study on the impact of a measurement program, MQL (“Mise en Qualité du Logiciel”, French for “Quality Software Development”), in an industrial context.MethodWe analyzed data collected on 44 industrial systems of different sizes: 22 systems were developed using MQL while the other 22 used ad-hoc approaches to assess and control quality (control group, referred to as “ad-hoc systems”). We studied the impact of MQL on a set of nine variables: six quality factors (maintainability, evolvability, reusability, robustness, testability, and architecture quality), corrective-maintenance effort, code complexity, and the presence of comments.ResultsOur results show that MQL had a clear positive impact on all the studied indicators. This impact is statistically significant for all the indicators but corrective-maintenance effort.ConclusionWe bring concrete evidence that a measurement program can have a significant, positive impact on the quality of software systems if combined with appropriate decision making procedures and corrective actions.     

IT认证与专业课程相适应的教学研究

随着信息技术的高速发展,IT行业人才的需求与培养成为高校教学改革面临热点问题.本文分析了传统的人才培养模式改革的必要性.通过调整专业课程体系,使IT职业认证与专业课程相适应,开创新的人才培养模式把学生培养成为高素质的技术应用型人才,从而满足市场需求.     

Understanding the characteristics of quality for software engineering processes: A Grounded Theory investigation

ContextSoftware engineering organizations routinely define and implement processes to support, guide and control project execution. An assumption underlying this process-centric approach to business improvement is that the quality of the process will influence the quality, cost and time-to-release of the software produced. A critical question thus arises of what constitutes quality for software engineering processes.ObjectiveTo identify criteria used by experienced practitioners to judge the quality of software engineering processes and to understand how knowledge of these criteria and their relationships may be useful for those undertaking software process improvement activities.MethodInterviews were conducted with 17 experienced software engineering practitioners from a range of geographies, roles and industry sectors. Published reports from 30 software process improvement case-studies were selected from multiple peer-reviewed software journals. A qualitative Grounded Theory-based methodology was employed to systematically analyze the collected data to synthesize a model of quality for software engineering processes.ResultsThe synthesized model suggests that practitioners perceive the overall quality of a software engineering process based on four quality attributes: suitability, usability, manageability and evolvability. Furthermore, these judgments are influenced by key properties related to the semantic content, structure, representation and enactment of that process. The model indicates that these attributes correspond to particular organizational perspectives and that these differing views may explain role-based conflicts in the judgement of process quality.ConclusionConsensus exists amongst practitioners about which characteristics of software engineering process quality most influence project outcomes. The model presented provides a terminological framework that can facilitate precise discussion of software engineering process issues and a set of criteria that can support activities for software process definition, evaluation and improvement. The potential exists for further development of this model to facilitate optimization of process properties to match organizational needs.     

Model for measuring quality of software in DVRS using the gap concept and fuzzy schemes with GA

A model of software quality is proposed to measure the quality of the software in a digital video recorder system (DVRS) during its development stage. The characteristics and metrics of this model are adopted from ISO/IEC 9126 and 14598. The model incorporates a λ-fuzzy measure, a genetic algorithm and a hierarchical Choquet integral. It is based on the gap concept between perceive performance by the developers and satisfaction by the end-users, acquirers and evaluators of third parties in software development stage. A checklist about of the software quality is used to reduce the gap between the quality of the DVRS software quality as assessed by the developers and that as assessed by the end-users, acquirers and the evaluators of third parties.     

A quantitative approach for setting technical targets based on impact analysis in software quality function deployment (SQFD)

Target setting in software quality function deployment (SQFD) is very important since it is directly related to development of high quality products with high customer satisfaction. However target setting is usually done subjectively in practice, which is not scientific. Two quantitative approaches for setting target values: benchmarking and primitive linear regression have been developed and applied in the past to overcome this problem (Akao and Yoji, 1990). But these approaches cannot be used to assess the impact of unachieved targets on satisfaction of customers for customer requirements. In addition, both of them are based on linear regression and not very practical in many applications. In this paper, we present an innovative quantitative method of setting technical targets in SQFD to enable analysis of impact of unachieved target values on customer satisfaction. It is based on assessment of impact of technical attributes on satisfaction of customer requirements. In addition both linear and non linear regression techniques are utilized in our method, which certainly improves the existing quantitative methods which are based on only linear regression. Frank Liu is currently an associate professor and a director of the McDonnel Douglass Foundation software engineering laboratory in the University of Missouri-Rolla. He has been working on requirements engineering, software quality management, and knowledge based software engineering since 1992. He has published about 50 papers in peer-reviewed journals and conferences in the above areas and several other software engineering application areas. He participates in research projects with a total amount of funds of more than four millions dollars as a PI or Co-PI sponsored by the National Science Foundation, Sandia National Laboratory, U.S. Air Force, University of Missouri Research Board, and Toshiba Corporation. He has served as a program committee member for many conferences. He was a program committee vice chair for the 2000 International Conference on Software Engineering and Knowledge Engineering. Kunio Noguchi is a senior quality expert in the software engineering center in the Toshiba Corporation. He has published several papers in the area of quality management systems. Anuj Dhungana was a M.S. graduate student in the computer science department at the Texas Tech University when he performed this research. V.V.N.S.N. Srirangam A. was a M.S. graduate student in the computer science department at the Texas Tech University when he performed this research. Praveen Inuganti was a M.S. graduate student in the computer science department at the University of Missouri-Rolla when he performed this research.     

基于指纹身份认证的密钥系统设计

介绍了当前网络安全中的密码体系,并详细阐述了指纹特征匹配的全过程,提出了将指纹识别应用于网络通信身份认证的解决方案,对系统的性能指标进行了分析,利用400枚指纹进行匹配试验,结果表明本文提出的基于指纹识别的密钥系统,与传统的身份认证方法相比,具有更高的安全性和可靠性。     

Design of vehicle certification schemes in IoV based on blockchain

World Wide Web - Because of a large number of vehicles in Internet of Vehicle(IoV), distributed nodes and complex driving environment, data security and certification speed are easily affected....     

基于串空间认证测试理论的认证协议分析

对增强型认证测试理论进行简化,使其能更好、更高效地分析协议的认证性。将其应用到对OR协议的分析中,发现协议存在的缺陷,对协议进行改进,并对改进后的协议进行了分析验证。     

Professional certification of software engineers: the CSDP program

There's a generally accepted maxim in the software industry: a well-managed software organization, staffed by qualified software engineering professionals in a mature software engineering environment, can repeatedly deliver software systems that meet their requirements, on time and within budget. But what does it mean to be professionally qualified? The IEEE Computer Society's Certified Software Development Professional program offers a solid path to certification that helps to establish software engineering professionals' credentials.