Open Access. Powered by Scholars. Published by Universities.®

Software Engineering Commons™

Open Access. Powered by Scholars. Published by Universities.®

2012

Discipline
Institution
Keyword
Publication
Publication Type

Articles 61 - 90 of 136

Full-Text Articles in Software Engineering

Mining Input Sanitization Patterns For Predicting Sql Injection And Cross Site Scripting Vulnerabilities, Lwin Khin Shar, Hee Beng Kuan Tan Jun 2012

Mining Input Sanitization Patterns For Predicting Sql Injection And Cross Site Scripting Vulnerabilities, Lwin Khin Shar, Hee Beng Kuan Tan

Research Collection School Of Computing and Information Systems

Static code attributes such as lines of code and cyclomatic complexity have been shown to be useful indicators of defects in software modules. As web applications adopt input sanitization routines to prevent web security risks, static code attributes that represent the characteristics of these routines may be useful for predicting web application vulnerabilities. In this paper, we classify various input sanitization methods into different types and propose a set of static code attributes that represent these types. Then we use data mining methods to predict SQL injection and cross site scripting vulnerabilities in web applications. Preliminary experiments show that our …


Analyzing Multi-Agent Systems With Probabilistic Model Checking Approach, Songzheng Song, Jianye Hao, Yang Liu, Jun Sun, Ho-Fung Leung, Jin Song Dong Jun 2012

Analyzing Multi-Agent Systems With Probabilistic Model Checking Approach, Songzheng Song, Jianye Hao, Yang Liu, Jun Sun, Ho-Fung Leung, Jin Song Dong

Research Collection School Of Computing and Information Systems

Multi-agent systems, which are composed of autonomous agents, have been successfully employed as a modeling paradigm in many scenarios. However, it is challenging to guarantee the correctness of their behaviors due to the complex nature of the autonomous agents, especially when they have stochastic characteristics. In this work, we propose to apply probabilistic model checking to analyze multi-agent systems. A modeling language called PMA is defined to specify such kind of systems, and LTL property and logic of knowledge combined with probabilistic requirements are supported to analyze system behaviors. Initial evaluation indicates the effectiveness of our current progress; meanwhile some …


Software Engineering Education Needs More Engineering, A. Frank Ackerman, Ph.D., Sushil Acharua, D.Eng. Jun 2012

Software Engineering Education Needs More Engineering, A. Frank Ackerman, Ph.D., Sushil Acharua, D.Eng.

Computer Science & Software Engineering

To what extent is “software engineering” really “engineering” as this term is commonly understood? A hallmark of the products of the traditional engineering disciplines is trustworthiness based on dependability. But in his keynote presentation at ICSE 2006 Barry Boehm pointed out that individuals’, systems’, and peoples’ dependency on software is becoming increasingly critical, yet that dependability is generally not the top priority for software intensive system producers. Continuing in an uncharacteristic pessimistic vein, Professor Boehm said that this situation will likely continue until a major software-induced system catastrophe similar in impact to the 9/11 World Trade Center catastrophe stimulates action …


Usability Bugs In Open Source Software And Online Forums, Arif Raza, Luiz Fernando Capretz, Faheem Ahmed Jun 2012

Usability Bugs In Open Source Software And Online Forums, Arif Raza, Luiz Fernando Capretz, Faheem Ahmed

Electrical and Computer Engineering Publications

No abstract provided.


Resource-Aware Video Multicasting Via Access Gateways In Wireless Mesh Networks, Wanqing Tu, Cormac Sreenan, Chun Tung Chou, Archan Misra, Sanjay Jha Jun 2012

Resource-Aware Video Multicasting Via Access Gateways In Wireless Mesh Networks, Wanqing Tu, Cormac Sreenan, Chun Tung Chou, Archan Misra, Sanjay Jha

Research Collection School Of Computing and Information Systems

This paper studies video multicasting in large scale areas using wireless mesh networks. The focus is on the use of Internet access gateways that allow a choice of alternative routes to avoid potentially lengthy and low capacity multi-hop wireless paths. A set of heuristic-based algorithms are described that together aim to maximize network capacity: the two-tier integrated architecture algorithm, the weighted gateway uploading algorithm, the link controlled routing tree algorithm, and the dynamic group management algorithm. These algorithms use different approaches to arrange nodes involved in video multicasting into a clustered and two-tier integrated architecture in which network protocols can …


Where Should The Bugs Be Fixed? More Accurate Information Retrieval-Based Bug Localization Based On Bug Reports, Jian Zhou, Hongyu Zhang, David Lo Jun 2012

Where Should The Bugs Be Fixed? More Accurate Information Retrieval-Based Bug Localization Based On Bug Reports, Jian Zhou, Hongyu Zhang, David Lo

Research Collection School Of Computing and Information Systems

For a large and evolving software system, the project team could receive a large number of bug reports. Locating the source code files that need to be changed in order to fix the bugs is a challenging task. Once a bug report is received, it is desirable to automatically point out to the files that developers should change in order to fix the bug. In this paper, we propose BugLocator, an information retrieval based method for locating the relevant files for fixing a bug. BugLocator ranks all files based on the textual similarity between the initial bug report and the …


Short Message Service (Sms) Command And Control (C2) Awareness In Android-Based Smartphones Using Kernel-Level Auditing, Robert J. Olipane Jun 2012

Short Message Service (Sms) Command And Control (C2) Awareness In Android-Based Smartphones Using Kernel-Level Auditing, Robert J. Olipane

Theses and Dissertations

This thesis addresses the emerging threat of botnets in the smartphone domain and focuses on the Android platform and botnets using short message service (SMS) as the command and control (C2) channel. With any botnet, C2 is the most important component contributing to its overall resilience, stealthiness, and effectiveness. This thesis develops a passive host-based approach for identifying covert SMS traffic and providing awareness to the user. Modifying the kernel and implementing this awareness mechanism is achieved by developing and inserting a loadable kernel module that logs all inbound SMS messages as they are sent from the baseband radio to …


Solving The Search For Suitable Code: An Initial Implementation, Kathryn T. Stolee, Sebastian Elbaum Jun 2012

Solving The Search For Suitable Code: An Initial Implementation, Kathryn T. Stolee, Sebastian Elbaum

School of Computing: Technical Reports

Searching for code is a common task among programmers, with the ultimate goal of finding and reusing code or getting ideas for implementation. While the process of searching for code - issuing a query and selecting a relevant match - is straightforward, several costs must be balanced, including the costs of specifying the query, examining the results to find desired code, and not finding a relevant result. For the popular syntactic searches the query cost is quite low, but the results are often vague or irrelevant, so the examination cost is high and matches may not be found. Semantic searches …


Mining Quantified Temporal Rules: Formalism, Algorithms, And Evaluation, David Lo, Ganesan Ramalingam, Venkatesh Prasad Ranganath, Kapil Vaswani Jun 2012

Mining Quantified Temporal Rules: Formalism, Algorithms, And Evaluation, David Lo, Ganesan Ramalingam, Venkatesh Prasad Ranganath, Kapil Vaswani

Research Collection School Of Computing and Information Systems

Libraries usually impose constraints on how clients should use them. Often these constraints are not well-documented. In this paper, we address the problem of recovering such constraints automatically, a problem referred to as specification mining. Given some client programs that use a given library, we identify constraints on the library usage that are (almost) satisfied by the given set of clients.The class of rules we target for mining combines simple binary temporal operators with state predicates (composed of equality constraints) and quantification. This is a simple yet expressive subclass of temporal properties (LTL formulae) that allows us to capture many …


Identifying Linux Bug Fixing Patches, Yuan Tian, Julia Lawall, David Lo Jun 2012

Identifying Linux Bug Fixing Patches, Yuan Tian, Julia Lawall, David Lo

Research Collection School Of Computing and Information Systems

In the evolution of an operating system there is a continuing tension between the need to develop and test new features, and the need to provide a stable and secure execution environment to users. A compromise, adopted by the developers of the Linux kernel, is to release new versions, including bug fixes and new features, frequently, while maintaining some older “longterm” versions. This strategy raises the problem of how to identify bug fixing patches that are submitted to the current version but should be applied to the longterm versions as well. The current approach is to rely on the individual …


Are Faults Localizable?, Lucia Lucia, Ferdian Thung, David Lo, Lingxiao Jiang Jun 2012

Are Faults Localizable?, Lucia Lucia, Ferdian Thung, David Lo, Lingxiao Jiang

Research Collection School Of Computing and Information Systems

Many fault localization techniques have been proposed to facilitate debugging activities. Most of them attempt to pinpoint the location of faults (i.e., localize faults) based on a set of failing and correct executions and expect debuggers to investigate a certain number of located program elements to find faults. These techniques thus assume that faults are localizable, i.e., only one or a few lines of code that are close to one another are responsible for each fault. However, in reality, are faults localizable? In this work, we investigate hundreds of real faults in several software systems, and find that many faults …


Overcoming The Challenges In Cost Estimation For Distributed Software Projects, Narayanasamy Ramasubbu, Rajesh Krishna Balan Jun 2012

Overcoming The Challenges In Cost Estimation For Distributed Software Projects, Narayanasamy Ramasubbu, Rajesh Krishna Balan

Research Collection School Of Computing and Information Systems

We describe how we studied, in-situ, the operational processes of three large high process maturity distributed software development companies and discovered three common problems they faced with respect to early stage project cost estimation. We found that project managers faced significant challenges to accurately estimate project costs because the standard metrics-based estimation tools they used (a) did not effectively incorporate diverse distributed project configurations and characteristics, (b) required comprehensive data that was not fully available for all starting projects, and (c) required significant domain experience to derive accurate estimates. To address these challenges, we collaborated with practitioners at the three …


Cuda Web Api Remote Execution Of Cuda Kernels Using Web Services, Massimo J. Becker Jun 2012

Cuda Web Api Remote Execution Of Cuda Kernels Using Web Services, Massimo J. Becker

Master's Theses

Massively parallel programming is an increasingly growing field with the recent introduction of general purpose GPU computing. Modern graphics processors from NVIDIA and AMD have massively parallel architectures that can be used for such applications as 3D rendering, financial analysis, physics simulations, and biomedical analysis. These massively parallel systems are exposed to programmers through in- terfaces such as NVIDIAs CUDA, OpenCL, and Microsofts C++ AMP. These frame- works expose functionality using primarily either C or C++. In order to use these massively parallel frameworks, programs being implemented must be run on machines equipped with massively parallel hardware. These requirements limit …


Workitemexplorer: Visualizing Software Development Tasks Using An Interactive Exploration Environment, Christoph Treude, Patrick Gorman, Lars Grammel, Margaret-Anne Storey Jun 2012

Workitemexplorer: Visualizing Software Development Tasks Using An Interactive Exploration Environment, Christoph Treude, Patrick Gorman, Lars Grammel, Margaret-Anne Storey

Research Collection School Of Computing and Information Systems

This demo introduces WorkItemExplorer, an interactive environment to visually explore data from software development tasks. WorkItemExplorer enables developers and managers to investigate activity and correlations in their task management system by making data exploration flexible and interactive, and by utilizing multiple coordinated views. Our preliminary evaluation shows that WorkItemExplorer is able to answer questions that developers ask, while also enabling them to gain new insights through the free exploration of data.


A Novel Unbalanced Tree Structure For Low-Cost Authentication Of Streaming Content On Mobile And Sensor Devices, Thivya Kandappu, Vijay Sivaraman, Roksana Boreli Jun 2012

A Novel Unbalanced Tree Structure For Low-Cost Authentication Of Streaming Content On Mobile And Sensor Devices, Thivya Kandappu, Vijay Sivaraman, Roksana Boreli

Research Collection School Of Computing and Information Systems

We consider stored content being streamed to a resource-poor device (such as a sensor node or a mobile phone), and address the issue of authenticating such content in realtime at the receiver. Per-packet digital signatures incur high computational cost, while per-block signatures impose high delays. A Merkle hash tree combines the benefits of the two by having a single signature per-block (at the root of the tree), while allowing immediate per-packet verification by following a hash-path logarithmic in the number of packets. In this paper we explore how the structure of the Merkle tree can be adapted to improve playback …


Adaptive Data Acquisition Strategies For Energy-Efficient, Smartphone-Based, Continuous Processing Of Sensor Streams, Lipyeow Lim, Archan Misra, Tianli Mo Jun 2012

Adaptive Data Acquisition Strategies For Energy-Efficient, Smartphone-Based, Continuous Processing Of Sensor Streams, Lipyeow Lim, Archan Misra, Tianli Mo

Research Collection School Of Computing and Information Systems

There is a growing interest in applications that utilize continuous sensing of individual activity or context, via sensors embedded or associated with personal mobile devices (e.g., smartphones). Reducing the energy overheads of sensor data acquisition and processing is essential to ensure the successful continuous operation of such applications, especially on battery-limited mobile devices. To achieve this goal, this paper presents a framework, called ACQUA, for ‘acquisition-cost’ aware continuous query processing. ACQUA replaces the current paradigm, where the data is typically streamed (pushed) from the sensors to the one or more smartphones, with a pull-based asynchronous model, where a smartphone retrieves …


Sammple: Detecting Semantic Indoor Activities In Practical Settings Using Locomotive Signatures, Zhixian Yan, Dipanjan Chakraborty, Archan Misra, Hoyoung Jeung, Karl Aberer Jun 2012

Sammple: Detecting Semantic Indoor Activities In Practical Settings Using Locomotive Signatures, Zhixian Yan, Dipanjan Chakraborty, Archan Misra, Hoyoung Jeung, Karl Aberer

Research Collection School Of Computing and Information Systems

We analyze the ability of mobile phone-generated accelerometer data to detect high-level (i.e., at the semantic level) indoor lifestyle activities, such as cooking at home and working at the workplace, in practical settings. We design a 2-T ier activity extraction framework (called SAMMPLE) for our purpose. Using this, we evaluate discriminatory power of activity structures along the dimension of statistical features and after a transformation to a sequence of individual locomotive micro-activities (e.g. sitting or standing). Our findings from 152 days of real-life behavioral traces reveal that locomotive signatures achieve an average accuracy of 77.14%, an improvement of 16.37% over …


Active Refinement Of Clone Anomaly Reports, Lucia, David Lo, Lingxiao Jiang, Aditya Budi Jun 2012

Active Refinement Of Clone Anomaly Reports, Lucia, David Lo, Lingxiao Jiang, Aditya Budi

Research Collection School Of Computing and Information Systems

Software clones have been widely studied in the recent literature and shown useful for finding bugs because inconsistent changes among clones in a clone group may indicate potential bugs. However, many inconsistent clone groups are not real bugs (true positives). The excessive number of false positives could easily impede broad adoption of clone-based bug detection approaches. In this work, we aim to improve the usability of clone-based bug detection tools by increasing the rate of true positives found when a developer analyzes anomaly reports. Our idea is to control the number of anomaly reports a user can see at a …


What Does Software Engineering Community Microblog About?, Yuan Tian, Palakorn Achananuparp, Ibrahim Nelman Lubis, David Lo, Ee Peng Lim Jun 2012

What Does Software Engineering Community Microblog About?, Yuan Tian, Palakorn Achananuparp, Ibrahim Nelman Lubis, David Lo, Ee Peng Lim

Research Collection School Of Computing and Information Systems

Microblogging is a new trend to communicate and to disseminate information. One microblog post could potentially reach millions of users. Millions of microblogs are generated on a daily basis on popular sites such as Twitter. The popularity of microblogging among programmers, software engineers, and software users has also led to their use of microblogs to communicate software engineering issues apart from using emails and other traditional communication channels.Understanding how millions of users use microblogs in software engineering related activities would shed light on ways we could leverage the fast evolving microblogging content to aid software development efforts. In this work, …


Exerlink: Enabling Pervasive Social Exergames With Heterogeneous Exercise Devices, Taiwoo Park, Inseok Hwang, Uichin Lee, Sunghoon Ivan Lee, Chungkuk Yoo, Youngki Lee, Hyukjae Jang, Sungwon Peter Choe, Souneil Park, Junehwa Song Jun 2012

Exerlink: Enabling Pervasive Social Exergames With Heterogeneous Exercise Devices, Taiwoo Park, Inseok Hwang, Uichin Lee, Sunghoon Ivan Lee, Chungkuk Yoo, Youngki Lee, Hyukjae Jang, Sungwon Peter Choe, Souneil Park, Junehwa Song

Research Collection School Of Computing and Information Systems

We envision that diverse social exercising games, or exergames, will emerge, featuring much richer interactivity with immersive game play experiences. Further, the recent advances of mobile devices and wireless networking will make such social engagement more pervasive - people carry portable exergame devices (e.g., jump ropes) and interact with remote users anytime, anywhere. Towards this goal, we explore the potential of using heterogeneous exercise devices as game controllers for a multi-player social exergame; e.g., playing a boat paddling game with two remote exercisers (one with a jump rope, and the other with a treadmill). In this paper, we propose a …


Complexity Of The Soundness Problem Of Bounded Workflow Nets, Guan Jun Liu, Jun Sun, Yang Liu, Jin Song Dong Jun 2012

Complexity Of The Soundness Problem Of Bounded Workflow Nets, Guan Jun Liu, Jun Sun, Yang Liu, Jin Song Dong

Research Collection School Of Computing and Information Systems

Classical workflow nets (WF-nets) are an important class of Petri nets that are widely used to model and analyze workflow systems. Soundness is a crucial property that guarantees these systems are deadlock-free and bounded. Aalst et al. proved that the soundness problem is decidable, and proposed (but not proved) that the soundness problem is EXPSPACE-hard. In this paper, we show that the satisfiability problem of Boolean expression is polynomial time reducible to the liveness problem of bounded WF-nets, and soundness and liveness are equivalent for bounded WF-nets. As a result, the soundness problem of bounded WF-nets is co-NP-hard.Workflow nets with …


Energy-Efficient Continuous Activity Recognition On Mobile Phones: An Activity-Adaptive Approach, Zhixian Yan, Vigneshwaran Subbaraju, Dipanjan Chakraborty, Archan Misra, Karl Aberer Jun 2012

Energy-Efficient Continuous Activity Recognition On Mobile Phones: An Activity-Adaptive Approach, Zhixian Yan, Vigneshwaran Subbaraju, Dipanjan Chakraborty, Archan Misra, Karl Aberer

Research Collection School Of Computing and Information Systems

Power consumption on mobile phones is a painful obstacle towards adoption of continuous sensing driven applications, e.g., continuously inferring individual’s locomotive activities (such as ‘sit’, ‘stand’ or ‘walk’) using the embedded accelerometer sensor. To reduce the energy overhead of such continuous activity sensing, we first investigate how the choice of accelerometer sampling frequency & classification features affects, separately for each activity, the “energy overhead” vs. “classification accuracy” tradeoff. We find that such tradeoff is activity specific. Based on this finding, we introduce an activity-sensitive strategy (dubbed “A3R” – Adaptive Accelerometer-based Activity Recognition) for continuous activity recognition, where the choice of …


Comon: Cooperative Ambience Monitoring Platform With Continuity And Benefit Awareness, Youngki Lee, Younghyun Ju, Chulhong Min, Seungwoo Kang, Inseok Hwang, Junehwa Song Jun 2012

Comon: Cooperative Ambience Monitoring Platform With Continuity And Benefit Awareness, Youngki Lee, Younghyun Ju, Chulhong Min, Seungwoo Kang, Inseok Hwang, Junehwa Song

Research Collection School Of Computing and Information Systems

Mobile applications that sense continuously, such as location monitoring, are emerging. Despite their usefulness, their adoption in real-world deployment situations has been extremely slow. Many smartphone users are turned away by the drastic battery drain caused by continuous sensing and processing. Also, the extractable contexts from the phone are quite limited due to its position and sensing modalities. In this paper, we propose CoMon, a novel cooperative ambience monitoring platform, which newly addresses the energy problem through opportunistic cooperation among nearby mobile users. To maximize the benefit of cooperation, we develop two key techniques, (1) continuity-aware cooperator detection and (2) …


Mobicon: Mobile Context Monitoring Platform: Incorporating Context-Awareness To Smartphone-Centric Personal Sensor Networks, Youngki Lee, Younghyun Ju, Chuihong Min, Jihun Yu, Junehwa Song Jun 2012

Mobicon: Mobile Context Monitoring Platform: Incorporating Context-Awareness To Smartphone-Centric Personal Sensor Networks, Youngki Lee, Younghyun Ju, Chuihong Min, Jihun Yu, Junehwa Song

Research Collection School Of Computing and Information Systems

In this demonstration, we will show MobiCon, a context monitoring platform; it runs over smartphones and sensor OSs, and facilitates development and deployment of everyday context-aware applications. For many years, lots of research efforts have been made in building low-cost, yet effective sensor networks for various application domains such as structural health monitoring of bridges, disaster recovery, automated ventilation of buildings. Integration of sensors into smartphones and the advent of wearable devices open a new opportunity for mobile applications to leverage in-situ user contexts such as his/her location, activity, social relationship, health status. In recent studies of mobile and pervasive …


Reducing The Risk Of Software Cost Estimation, Shixian Yang May 2012

Reducing The Risk Of Software Cost Estimation, Shixian Yang

Theses

Inaccurate cost estimation is a well-known problem in software development. The common cost estimation models are point estimates that are unable to quantify uncertainties. Furthermore, it is difficult to calibrate the uncertainties in cost estimation due to the lack of information. The purpose of this thesis is to prove that probability techniques could be synthesized into COCOMO (Constructive Cost Model) to quantify uncertainties. Another aim is to find out how to get more insight on reducing the risk of cost estimation. In this thesis, some historical data is presented to show the variance in factors of COCOMO. Monte Carlo simulation …


Underpinning Statistical Computing Knowledge And Skills For Students, Wing Kin, Ken Li May 2012

Underpinning Statistical Computing Knowledge And Skills For Students, Wing Kin, Ken Li

Practical Social and Industrial Research Symposium

No abstract provided.


A Software Framework For Augmentative And Alternative Communication, Adam Loup May 2012

A Software Framework For Augmentative And Alternative Communication, Adam Loup

LSU New Orleans Theses and Dissertations

By combining context awareness and analytical based relevance computing software, the proposed Augmentative and Alternative Communication (AAC) framework aims provide a foundation to create communication systems to dramatically increase the words available to AAC users. The framework will allow the lexicon available to the user to be dynamically updated by varying sources and to promote words based on contextual relevance. This level of customization enables the development of highly customizable AAC devices that evolve with use to become more personal while also broadening the expressiveness of the user. In order to maximize the efficient creation of conversation for AAC users, …


Simple Touch-Based Gaming: Project Pond, Taylor Yust May 2012

Simple Touch-Based Gaming: Project Pond, Taylor Yust

Computer Science and Computer Engineering Undergraduate Honors Theses

The mainstream success of smartphone technology has prompted the video game industry to invest resources into new types of mobile games. While seemingly successful on the surface, there are unseen issues and risks that may potentially harm the long-term sustainability of the market. In response, I’ve developed my own smartphone gaming app that addresses what I find to be some of the largest problems in the market. My intent is to test my design theories while also challenging the status quo in mobile game design. The fruit of my labor is Pond, a smartphone gaming app for Windows Phone 7. …


Virtual "University Of Arkansas" Campus, Seth Williams May 2012

Virtual "University Of Arkansas" Campus, Seth Williams

Computer Science and Computer Engineering Undergraduate Honors Theses

The aim of the Virtual Campus project is to develop a way to automate building 3D virtual worlds using map and other data from the real world. A demonstration presented in this BS honors thesis uses automated tools to build the University of Arkansas campus from data supplied by the UA Center for Advanced Spatial Technology (CAST). At present, in virtual worlds like Second Life and Unity, terraforming of terrain is a manual process, and it can take days to weeks to build a landscape. But by using existing map data, we are now able to automate that process. Working …


Cogtool-Helper: Leveraging Gui Functional Testing Tools To Generate Predictive Human Performance Models, Amanda Swearngin May 2012

Cogtool-Helper: Leveraging Gui Functional Testing Tools To Generate Predictive Human Performance Models, Amanda Swearngin

School of Computing: Dissertations, Theses, and Student Research

Numerous tools and techniques for human performance modeling have been introduced in the field of human-computer interaction. With such tools comes the ability to model legacy applications. Models can be used to compare design ideas to existing applications, or to evaluate products against those of competitors. One such mod- eling tool, CogTool, allows user interface designers and analysts to mock up design ideas, demonstrate tasks, and obtain human performance predictions for those tasks. This is one step towards a simple and complete analysis process, but it still requires a large amount of manual work. Graphical user interface (GUI) testing tools …