| 11. |
- Billawa, Priyanka, et al.
(författare)
-
SoK: Security of Microservice Applications: A Practitioners' Perspective on Challenges and Best Practices
- 2022
-
Ingår i: ACM International Conference Proceeding Series. - New York, NY, USA : ACM.
-
Konferensbidrag (refereegranskat)abstract
- Cloud-based application deployment is becoming increasingly popular among businesses, thanks to the emergence of microservices. However, securing such architectures is a challenging task since traditional security concepts cannot be directly applied to microservice architectures due to their distributed nature. The situation is exacerbated by the scattered nature of guidelines and best practices advocated by practitioners and organizations in this field. In this research paper we aim to shay light over the current microservice security discussions hidden within Grey Literature (GL) sources. Particularly, we identify the challenges that arise when securing microservice architectures, as well as solutions recommended by practitioners to address these issues. For this, we conducted a systematic GL study on the challenges and best practices of microservice security present in the Internet with the goal of capturing relevant discussions in blogs, white papers, and standards. We collected 312 GL sources from which 57 were rigorously classified and analyzed. This analysis on the one hand validated past academic literature studies in the area of microservice security, but it also identified improvements to existing methodologies pointing towards future research directions.
|
|
| 12. |
- Burden, Håkan, 1976, et al.
(författare)
-
Facilitating entrepreneurial experiences through a software engineering project course
- 2019
-
Ingår i: Proceedings - 2019 IEEE/ACM 41st International Conference on Software Engineering: Software Engineering Education and Training, ICSE-SEET 2019. - : IEEE. ; May 2019, s. 28-37
-
Konferensbidrag (refereegranskat)abstract
- Skills and competencies in entrepreneurship, such as the ability to generate innovative ideas and the courage to engage with stakeholders and society, have gained importance in engineering curricula. In this case study paper, we report on how we have integrated entrepreneurial experiences into a software engineering project course and made the creation of value and reflection on the application of a structured process the heart and soul of the course. Based on current research on entrepreneurship education as well as the definition of entrepreneurial competencies used by the European Union, we show how the learning objectives, the teaching moments, the integration of external stakeholders, and the assessment work together to create an entrepreneurial environment in which students are encouraged and rewarded to work in an entrepreneurial way. Based on data from reflection reports, course evaluations, and interviews we discuss the pros and cons of our approach and how the student perception and expectations often run counter to the motivations of the course design. We thus contribute guidance for other teachers based on our own experiences in relation to the findings of our peers.
|
|
| 13. |
- Burden, Håkan, 1976, et al.
(författare)
-
Teaching and Fostering Reflection in Software Engineering Project Courses
- 2019
-
Ingår i: Agile and Lean Concepts for Teaching and Learning: Bringing Methodologies from Industry to the Classroom. - Singapore : Springer Singapore. - 9789811327513 ; , s. 231-262, s. 231-262
-
Bokkapitel (övrigt vetenskapligt/konstnärligt)abstract
- Reflection is an important part of agile software processes as witnessed, e.g., by the Sprint Retrospectives in Scrum or by the various learning feedback loops in XP. Engineering education also emphasises the importance of reflective practice, e.g., in Kolb's learning cycle and Schön's reflection-in/on-action. Our contribution in this chapter is a toolkit for reflective practice that shows how reflection can be used by software engineering students for two purposes: to reflect on the application of a software process and to reflect on their learning process. In order to help students understand the purpose of reflection and how to approach reflection, we follow a cognitive apprenticeship approach in which the teachers reflect about the events in the course, their own goals, and how they are aligned with the teaching. Students are asked to reflect during supervisions and as part of their written assignments from the very beginning of the course. We thus combine a meta-cognitive approach where reflection is taught as a learning strategy with a common software engineering practice of continuous improvement through reflection. We evaluate the reflective model and a course design based on it through the student, teacher, and theoretical lenses based on empirical data.
|
|
| 14. |
- David, I., et al.
(författare)
-
Blended modeling in commercial and open-source model-driven software engineering tools: A systematic study
- 2023
-
Ingår i: Software and Systems Modeling. - : Springer Science and Business Media LLC. - 1619-1366 .- 1619-1374. ; 22, s. 415-447
-
Tidskriftsartikel (refereegranskat)abstract
- Blended modeling aims to improve the user experience of modeling activities by prioritizing the seamless interaction with models through multiple notations over the consistency of the models. Inconsistency tolerance, thus, becomes an important aspect in such settings. To understand the potential of current commercial and open-source modeling tools to support blended modeling, we have designed and carried out a systematic study. We identify challenges and opportunities in the tooling aspect of blended modeling. Specifically, we investigate the user-facing and implementation-related characteristics of existing modeling tools that already support multiple types of notations and map their support for other blended aspects, such as inconsistency tolerance, and elevated user experience. For the sake of completeness, we have conducted a multivocal study, encompassing an academic review, and grey literature review. We have reviewed nearly 5000 academic papers and nearly 1500 entries of grey literature. We have identified 133 candidate tools, and eventually selected 26 of them to represent the current spectrum of modeling tools.
|
|
| 15. |
- Edholm, Henrik, et al.
(författare)
-
Crunch time : The reasons and effects of unpaid overtime in the games industry
- 2017
-
Ingår i: Proceedings - 2017 IEEE/ACM 39th International Conference on Software Engineering. - : IEEE. - 9781538627174 ; , s. 43-52
-
Konferensbidrag (refereegranskat)abstract
- The games industry is notorious for its intense work ethics with uncompensated overtime and weekends at the office, also known as crunch or crunch time. Since crunch time is so common within the industry, is it possible that the benefits of crunch time outweigh the disadvantages? By studying postmortems and conducting interviews with employees in the industry, we aim to characterise crunch time and discover its effects on the industry. We provide a classification of crunch, i.e., four types of crunch which all have distinct characteristics and affect the product, employees and schedule in various ways. One of the crunch types stands out from the others by only having positive effects on product and schedule. A characteristic that all of the types have in common is an increase in stress levels amongst the employees. We identify a set of reasons for crunch and show that crunch is less pronounced in game studios where prioritisation of features is a regular practice.
|
|
| 16. |
- Entekhabi, Sina, 1989, et al.
(författare)
-
Visualization of feature locations with the tool FeatureDashboard
- 2019
-
Ingår i: ACM International Conference Proceeding Series. - New York, NY, USA : ACM. ; B
-
Konferensbidrag (refereegranskat)abstract
- Modern development processes and issue trackers often use the notion of features to manage a software system. Features allow communicating system characteristics across stakeholders and keeping an overview understanding - especially important for systems that exist in many different variants. However, maintaining, evolving or reusing features (e.g., propagating across variants, or integrating into a platform) requires knowing their locations to prevent extensive feature-location recovery. We advocate the use of embedded annotations, added directly into software assets by the developers during development. To support this process and provide immediate benefits to developers when using such annotations, we present the open-source tool FeatureDashboard. It extracts and visualizes features and their locations using different views and metrics. As such, it encourages developers recording features and their locations early, to prevent feature identification and location efforts, as well as it supports system comprehension.
|
|
| 17. |
- Heisig, P., et al.
(författare)
-
A Generic Traceability Metamodel for Enabling Unified End-to-End Traceability in Software Product Lines
- 2019
-
Ingår i: SAC '19 Proceedings of the 34th ACM/SIGAPP Symposium on Applied Computing. - New York, NY, USA : ACM Digital Library. - 9781450359337
-
Bokkapitel (refereegranskat)abstract
- Mature development methodologies like software product line engineering or model-driven engineering are more and more adopted in software development. Accordingly, the resulting development processes combine artifacts from different disciplines and on different abstraction levels. It is crucial that the relationship between these artifacts is explicitly maintained to be able to track the development process and the reasons for design decisions. This problem becomes exacerbated if variability is considered since it is a cross-cutting concern that impacts all disciplines and artifacts. Traceability links support the linking of artifacts across model boundaries in an end-to-end manner. However, existing traceability solutions are either limited to specific development processes, tools, and artifact types, lack in uniformity, or do not consider variability. Thus, this paper introduces a MOF-based generic traceability metamodel for establishing uniform traceability-enabled workflows in a variability-aware and model-based environment. Necessary steps for instantiating the metamodel to specific artifact types of certain development processes are described. We evaluate the proposed solution with an exemplar of a car headlight and demonstrate the benefits of a consistent traceability concept.
|
|
| 18. |
- Holtmann, J., et al.
(författare)
-
Cutting through the Jungle: Disambiguating Model-based Traceability Terminology
- 2020
-
Ingår i: 28th International Requirements Engineering Conference (RE), 31 Aug.-4 Sept. 2020, Zurich, Switzerland. - : IEEE. - 9781728174389
-
Konferensbidrag (refereegranskat)abstract
- Traceability, a classic requirements engineering topic, is increasingly used in the context of model-based engineering. However, researchers and practitioners lack a concise terminology to discuss aspects of requirements traceability in situations in which engineers heavily rely on models and model-based engineering. While others have previously surveyed the domain, no one has so far provided a clear, unambiguous set of terms that can be used to discuss traceability in such a context. We therefore set out to cut a path through the jungle of terminology for model-based traceability, ground it in established terminology from requirements engineering, and derive an unambiguous set of relevant terms. We also map the terminology used in existing primary and secondary studies to our taxonomy to show differences and commonalities. The contribution of this paper is thus a terminology for model-based traceability that allows requirements engineers and engineers working with models to unambiguously discuss their joint traceability efforts.
|
|
| 19. |
- Holtmann, Jörg, 1979, et al.
(författare)
-
Exploiting Meta-Model Structures in the Generation of Xtext Editors
- 2023
-
Ingår i: Proceedings of the 11th International Conference on Model-Based Software and Systems Engineering. - Lisbon, Portugal : SCITEPRESS - Science and Technology Publications. - 9789897586330 ; 1, s. 218-225
-
Konferensbidrag (refereegranskat)abstract
- When generating textual editors for large and highly structured meta-models, it is possible to extend Xtext’s generator capabilities and the default implementations it provides. These extensions provide additional features such as formatters and more precise scoping for cross-references. However, for large metamodels in particular, the realization of such extensions typically is a time-consuming, awkward, and repetitive task. For some of these tasks, we motivate, present, and discuss in this position paper automatic solutions that exploit the structure of the underlying metamodel. Furthermore, we demonstrate how we used them in the development of a textual editor for EATXT, a textual concrete syntax for the automotive architecture description language EAST-ADL. This work in progress contributes to our larger goal of building a language workbench for blended modelling.
|
|
| 20. |
- Holtmann, Jörg, 1979, et al.
(författare)
-
Migrating from proprietary tools to open-source software for EAST-ADL metamodel generation and evolution
- 2022
-
Ingår i: Proceedings - ACM/IEEE 25th International Conference on Model Driven Engineering Languages and Systems, MODELS 2022: Companion Proceedings. - New York, NY, USA : ACM. ; , s. 7-11
-
Konferensbidrag (refereegranskat)abstract
- Open-source software has numerous advantages over proprietary commercial-off-The-shelf (COTS) software. However, there are modeling languages, tool chains, and tool frameworks that are developed and maintained in an open-source manner but still incorporate COTS tools. Such an incorporation of COTS tools into an overall open-source approach completely annihilates the actual open-source advantages and goals. In this tool paper, we demonstrate how we eliminated a COTS tool from the otherwise open-source-based generation and evolution workflow of the domain-specific modeling language East-Adl, used in the automotive industry to describe a variety of interdisciplinary aspects of vehicle systems. By switching to a pure open-source solution, East-Adl becomes easier to inspect, evolve, and develop a community around. We compare both the mixed COTS/open-source and the open-source-only workflows, outline the advantages of the open-source-only solution, and show that we achieve equivalent tooling features compared to the original approach.
|
|
