基于度量的软件过程改进研究

在软件开发的整个过程中,需要对各个阶段进行评估、分析、改进,它们是一个不断循环的过程.即软件过程改进贯穿于软件开发的始终.如何对软件过程进行度量、度量元是什么,已经成为当前国内外研究的热点.对当前国内许多机构开展的质量管理体系认证模型进行研究,提出了一种基于CMMI的6σ软件度量框架,在此基础上分析了软件过程改进和评估中的关键问题.通过对软件过程的改进,从而提高软件产品质量和提升软件开发效率.     

软件开发过程质量保证策略研究

随着软件系统在电子产品中的广泛应用,软件开发过程中的质量保证问题越来越重要,和成熟的硬件质量管理相比,软件质量保证需要更加严谨的流程性和灵活性保证策略。本文在研究软件质量保证要求基础上,结合项目管理实践,提出了软件评审、软件测试、软件配置管理、软件外包管理、软件质量审核等软件开发过程质量保证方法,提高了企业研制高水平的软件产品能力。     

面向重用的软件开发价值链

软件重用可有效地降低软件开发过程中的成本并提高开发资源的利用效率,本文在价值链的形式化概念与元模型的基础上,通过对面向重用的软件开发过程与传统开发过程的特征比较,对面向开发过程的软件开发价值链进行了定义,该价值链在重用已有软件资产的基础上将开发过程中的不同环节、角色和活动进行了系统的集成,通过建立软件开发过程价值增值矩阵和度量指标体系,对软件开发过程中的增值活动进行了定量化的分析,并证明了面向重用的软件开发过程具有更高的价值增值.     

浅谈软件评审

文章介绍了一般软件评审涉及的内容和软件评审中的各个角色与职责,重点说明软件评审的过程及评审的标准和评审中要注意的问题。同时也着重阐述了不同的软件开发可以根据此评审过程进行裁剪,评审过程是帮助作者提前发现评审对象的缺陷,而不是对评审对象的发布执行。     

可复用构件技术在工程造价软件开发的研究

软件复用技术为解决软件危机、提高软件生产效率和质量提供一个现实可行的解决方案.以工程造价软件开发过程为实例,研究软件复用技术在工程造价软件开发过程各个阶段的应用,分析并设计一个建设工程造价软件的分层模型架构,根据工程造价工作流程的特性,结合软件工程开发原理,提出了在工程造价领域软件开发适用纵向复用,实现了在建设工程造价软件开发中在不同层次应用构件复用技术,有效缩短软件开发的周期,提高了软件开发的效率和质量.     

核电厂DCS安全级应用软件开发的危险分析

为了减小或避免因控制系统软件而导致的核电厂安全性降低的不良后果,提出了对核电厂数字控制系统安全级应用软件开发过程进行危险分析的活动.采用验证和确认的方法,并结合安全保护层模型、预先危险分析方法(PHA)、故障树分析等方法对应用软件开发过程中的系统设计、软件设计、软件实现各个阶段的危险进行分析.通过CPR1000项目工程实践表明,采用验证和确认的方法能有效地减小软件开发过程中的危险以提高应用软件的安全性,从而最终提高核电厂的安全性.     

多媒体教学软件原型法开发模型研究

用软件工程方法,对一般软件与多媒体教学软件开发过程进行了研究,指出了多媒体教学软件开发过程的特殊性,建立了多媒体教学软件原型法开发模型.该模型解决了多媒体教学软件开发过程中多媒体元素制作的复杂性,实现了多媒体元素并行开发,提高了多媒体教学软件开发效率;使用原型化方法对多媒体教学软件进行开发,使开发出的多媒体教学软件真正符合教学规律,反映教学策略,提高了多媒体教学软件的开发质量.     

SW-CMM同级评审KPA软件管理流程的设计

同级评审是SW-CMM三级的一个关键过程域,其目的是尽早消除软件工作产品中的缺陷.本文针对同级评审关键过程域的需求,结合本软件开发组织的特点,设计了该关键过程域的软件管理流程.     

软件过程中同行评审的应用与度量

在软件过程中采用同行评审可以及早、高效地发现软件缺陷,从而广泛、深入且有效地吸收和应用软件过程信息,同时评价和提升软件过程能力水平.为了在软件过程中更加有效地应用同行评审,以CMM/CMMI为基础,详细分析了软件过程中同行评审的方法,并介绍了同行评审的流程.在此基础上,对如何建立和实施同行评审的度量进行了研究和分析,并提出了利用同行评审的度量数据建立组织同行评审过程能力基线的方法.     

基于软件开发过程的软件缺陷管理研究

分析了软件缺陷管理的理论、方法及业务流程,指出了传统软件缺陷管理模式的不足。在此基础上提出了基于软件开发过程的软件缺陷管理模式,此模型在考虑测试者、开发者和评审者的基础上依据软件生命周期各阶段对缺陷进行了管理。最后对此管理模型的业务流程进行了详细的分析及应用,指出此管理模式很好的达到了尽早发现、预防与排除缺陷,改进软件过程的目的。     

CMM中各类评审的综合研究

对CMM中各种评审进行综述、分类和比较，重点对软件评审进行研究，比较了同行评审与里程碑评审之间以及软件评审与软件测试之间的差异，描述了标准的软件评审过程。     

Integrating security activities into the software development life cycle and the software quality assurance process

Security concerns should be an integral part of the entire planning, development, and operation of a computer application. Inadequacies in the design and operation of computer applications are very frequent source of security vulnerabilities associated with computers. In most cases, the effort to improve security should concentrate on the application software. The system development life cycle (SDLC) technique provides the structure to assure that security safeguards are planned, designed, developed and tested in a manner that is consistent with the sensitivity of the data and/or the application. The software quality assurance process provides the reviews and audits to assure that the activities accomplished during the SDLC produce operationally effective safeguards.This paper addresses two issues of concern to those responsible for ensuring that the safeguards incorporated into application software are adequate and appropriate. The first issue addresses the integration of specific security activities into the SDLC. The discussion of this issue addresses the following security activities in the SDLC; determination of the sensitivity of the application and data; determination of security objectives; assessment of the security risks; conduct of the security feasibility study; definition of security requirements; development of the security test plan; design of the security specifications; development of the security test procedures; writing of the security-relevant code; writing of the security-relevant documentation; conduct of the security test and evaluation; writing on the security test analysis report; and, preparation of the security certification report.The second security issue addresses the security reviews and audits that should be integrated into the software quality assurance process to ensure that the security activities in the SDLC are accomplished. The security reviews and audits discussed include: the security requirements review; the security design review; the security specifications review; the security test readiness review; and the security test and evaluation review. Also addressed is how quality software is defined and achieved and why and how the concept of quality should be applied to application software security safeguards.     

A Knowledge-Based Software Process Simulation Model

In this paper we propose a new software development process simulation model. The model can predict variations of productivity based on dynamic changes in the developer's knowledge structure. An important concept of the model is that a developer's productivity is influenced by the developer's knowledge. Moreover, a developer can acquire new knowledge by executing activities of a project. In other words, the developer's knowledge structure changes during the project. The knowledge structure is defined using a cognitive map that consists of knowledge elements and prerequisite relationships among the knowledge elements. By adding the specific developer's knowledge and the specific project workload to the knowledge structure, an increment of the developer's knowledge and the project progress are calculated into the model. The simulation results are useful for making project plans including technical reviews, which are an efficient technique for acquiring new knowledge. The simulation model can predict what knowledge should be discussed in the technical review, when the review should be held, and who the members of the review should be. The simulation results help managers make the most appropriate and executable project plan.     

软件企业知识管理的思考

首先介绍了知识管理和组织学习的概念，从它们在软件过程改进中的应用－能力成熟度模型开始，对知识与知识技术和软件知识技术进行了述评，包括知识转换模型，知识与知识技术，软件工程知识体系，对象技术等，指出了中国软件企业面临的挑战，最后，举例说明软件企业如何进行知识管理。     

The effectiveness of software development technical reviews: abehaviorally motivated program of research

Software engineers use a number of different types of software development technical review (SDTR) for the purpose of detecting defects in software products. This paper applies the behavioral theory of group performance to explain the outcomes of software reviews. A program of empirical research is developed, including propositions to both explain review performance and identify ways of improving review performance based on the specific strengths of individuals and groups. Its contributions are to clarify our understanding of what drives defect detection performance in SDTRs and to set an agenda for future research. In identifying individuals' task expertise as the primary driver of review performance, the research program suggests specific points of leverage for substantially improving review performance. It points to the importance of understanding software reading expertise and implies the need for a reconsideration of existing approaches to managing reviews     

A formal methods approach to medical device review

With software playing an increasingly important role in medical devices, regulatory agencies such as the US Food and Drug Administration need effective means for assuring that this software is safe and reliable. The FDA has been striving for a more rigorous engineering-based review strategy to provide this assurance. The use of mathematics-based techniques in the development of software might help accomplish this. However, the lack of standard architectures for medical device software and integrated engineering-tool support for software analysis make a science-based software review process more difficult. The research presented here applies formal modeling methods and static analysis techniques to improve the review process. Regulation of medical device software encompasses reviews of device designs (premarket review) and device performance (postmarket surveillance). The FDA's Center for Devices and Radiological Health performs the premarket review on a device to evaluate its safety and effectiveness. As part of this process, the agency reviews software development life-cycle artifacts for appropriate quality-assurance attributes, which tend to reveal little about the device software integrity.     

Opinion evolution of online consumer reviews in the e-commerce environment

Online consumer reviews play an important role in shaping potential customers’ purchase decisions in e-commerce. Previous studies have analyzed the influence of online consumer reviews on sales, mainly considering factors such as reviewers’ and viewers’ profiles, information provided, and product features. However, there are relatively few studies that discuss how online consumer reviews interact with each other and how consumers’ opinions evolve over time. This paper proposes an opinion evolution dynamics model that is applicable to online consumer reviews in the e-commerce environment by taking into account influencing factors such as viewer reading limits, review sorting and releasing strategies, convergence parameters, review posting possibilities, and confidence thresholds. Using multi-agent simulation based on the proposed opinion evolution dynamics model, the paper discusses how these factors affect viewers’ opinions, and the opinion evolution process itself. Finally, conclusions and managerial implications of the simulation results are discussed.     

A measurement maturity model

Existing process assessment methods are inherently limited as a tool for evaluation of any specific technical area of software development. A review of the coverage of software measurement within two examples of existing process assessment methods is presented. A model of the software measurement process is presented and discussed. The model has been used as the basis for development of a targeted assessment method for the evaluation of the maturity of the software measurement process.     

一种电路板智能审查方法

为避免因电路板设计出错而发生的加工制造性错误,提出一种电路板加工前的智能审查方法。该方法使用一阶谓词逻辑和隶属函数所表示的设计审查规则,以知识库为基础,利用设计的审查模型对多种EDA设计软件的多层加工制造数据进行提取和审查,以直观、可视化的方式显示审查结果。实验结果证明该方法具有可行性且查错率高。     

基于贝叶斯网络的在线商品评价质量评估

随着电子商务领域的迅速发展,在线商品评价规模日益庞大,评价质量参差不齐,用户难以筛选有用评价信息做出购买决策,因此如何有效识别高质量评价信息成为重要议题。以在线商品评价的有用性投票为基础定义评价质量,使用贝叶斯网络表示在线商品评价的相似性及不确定性,通过对在线商品评价信息进行多维度特征统计,构建在线商品评价质量评估模型,使用概率推理机制对在线商品评价质量进行分类预测,并给出评价质量分类置信度。在真实数据集上验证模型有效性及高效性。