Assessing the User-Perceived Quality of Source Code Components Using Static Analysis Metrics

Author(s):  
Valasia Dimaridou ◽  
Alexandros-Charalampos Kyprianidis ◽  
Michail Papamichail ◽  
Themistoklis Diamantopoulos ◽  
Andreas Symeonidis
Author(s):  
Valasia Dimaridou ◽  
Alexandros-Charalampos Kyprianidis ◽  
Michail Papamichail ◽  
Themistoklis Diamantopoulos ◽  
Andreas Symeonidis

Author(s):  
Александр Викторович Кныш ◽  
Дмитрий Александрович Кобзев ◽  
Оксана Николаевна Давиденко ◽  
Сергей Анатольевич Детистов ◽  
Иван Александрович Шечев ◽  
...  

В условиях существующего многообразия автоматизированных систем управления технологическими процессами (АСУТП), возрастающих рисков компьютерных инцидентов, обусловленных развитием информационных технологий, неизменно актуальными являются вопросы повышения качества программного обеспечения (ПО) АСУТП. В настоящей статье на примере АСУТП организаций системы «Транснефть» представлена возможность использования методов статического анализа исходного кода ПО с целью обеспечения информационной безопасности АСУТП. Рассмотрены причины низкого качества ПО и подходы к его повышению. Проанализированы методы анализа исходного кода ПО (статический, динамический, интерактивный), сделан вывод о том, что наиболее перспективной является комбинация трех видов статического анализа: сигнатурного анализа, анализа потока управления, анализа потока данных. Указанная комбинация легла в основу методики выявления ошибок, потенциально опасных конструкций, логических бомб и неиспользуемых переменных в ПО АСУТП, разработанной в рамках научно-исследовательской работы «Создание системы анализа исходного кода программного обеспечения автоматизированных систем управления технологическими процессами». Основным достоинством созданной методики является ее инвариантность по отношению к языкам программирования и разновидностям дефектов. При этом общий алгоритм поиска дефектов остается неизменным: меняются только сигнатуры, правила выявления. With the existing variety of automated process control systems (APCS) and the increasing risks of computer incidents caused by the development of information technology, the issues of improving the quality of the APCS software are invariably topical. This article presents the possibility of using the software source code static analysis methods for ensuring the information security of the APCS using the example of Transneft system entities’ APCS. The reasons for the low quality of software and approaches to its improvement are considered. Methods of software source code analysis (static, dynamic, interactive) are analyzed, and it is concluded that the most promising is a combination of three types of static analysis: signature analysis, control flow analysis, data flow analysis. This combination serves as the basis for the methodology of detecting errors, potentially dangerous structures, logic bombs, and unused variables in the APCS software developed as part of the research work entitled “Creation of a System for Analyzing the Source Code of Automated Process Control System Software”. The main advantage of the created methodology is its invariance with respect to programming languages and types of defects. At the same time, the general defect searching algorithm remains unchanged: only signatures and detection rules are subject to change.


Author(s):  
Tran Thanh Luong ◽  
Le My Canh

JavaScript has become more and more popular in recent years because its wealthy features as being dynamic, interpreted and object-oriented with first-class functions. Furthermore, JavaScript is designed with event-driven and I/O non-blocking model that boosts the performance of overall application especially in the case of Node.js. To take advantage of these characteristics, many design patterns that implement asynchronous programming for JavaScript were proposed. However, choosing a right pattern and implementing a good asynchronous source code is a challenge and thus easily lead into less robust application and low quality source code. Extended from our previous works on exception handling code smells in JavaScript and exception handling code smells in JavaScript asynchronous programming with promise, this research aims at studying the impact of three JavaScript asynchronous programming patterns on quality of source code and application.


2019 ◽  
Author(s):  
Roy Groncki ◽  
Jennifer L Beaudry ◽  
James D. Sauer

The way in which individuals think about their own cognitive processes plays an important role in various domains. When eyewitnesses assess their confidence in identification decisions, they could be influenced by how easily relevant information comes to mind. This ease-of-retrieval effect has a robust influence on people’s cognitions in a variety of contexts (e.g., attitudes), but it has not yet been applied to eyewitness decisions. In three studies, we explored whether the ease with which eyewitnesses recall certain memorial information influenced their identification confidence assessments and related testimony-relevant judgements (e.g., perceived quality of view). We manipulated the number of reasons participants gave to justify their identification (Study 1; N = 343), and also the number of instances they provided of a weak or strong memory (Studies 2a & 2b; Ns = 350 & 312, respectively). Across the three studies, ease-of-retrieval did not affect eyewitnesses’ confidence or other testimony-relevant judgements. We then tried—and failed—to replicate Schwarz et al.’s (1991) original ease-of-retrieval finding (Study 3; N = 661). In three of the four studies, ease-of-retrieval had the expected effect on participants’ perceived task difficulty; however, frequentist and Bayesian testing showed no evidence for an effect on confidence or assertiveness ratings.


Sign in / Sign up

Export Citation Format

Share Document