Accelerating software development through collaboration

Augustin, Larry M.; Bressler, Dan; Smith, Guy A.

doi:10.1145/581407.581409

Cited by 16 publications

(6 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…SourceForge.net [4], the world's largest open source development website, hosts over 70,000 open-source projects for more than 700,000 registered developers. PHP, currently with 7,792 registered projects, clearly outnumbers all other programming languages (e.g., Perl, Python, and ASP) for Web application development.…”

Section: Resultsmentioning

confidence: 99%

Securing web application code by static analysis and runtime protection

Huang

Hang

et al. 2004

Proceedings of the 13th International Conference on World Wide Web

385

236

View full text Add to dashboard Cite

Security remains a major roadblock to universal acceptance of the Web for many kinds of transactions, especially since the recent sharp increase in remotely exploitable vulnerabilities has been attributed to Web application bugs. Many verification tools are discovering previously unknown vulnerabilities in legacy C programs, raising hopes that the same success can be achieved with Web applications. In this paper, we describe a sound and holistic approach to ensuring Web application security. Viewing Web application vulnerabilities as a secure information flow problem, we created a lattice-based static analysis algorithm derived from type systems and typestate, and addressed its soundness. During the analysis, sections of code considered vulnerable are instrumented with runtime guards, thus securing Web applications in the absence of user intervention. With sufficient annotations, runtime overhead can be reduced to zero. We also created a tool named WebSSARI (Web application Security by Static Analysis and Runtime Inspection) to test our algorithm, and used it to verify 230 open-source Web application projects on SourceForge.net, which were selected to represent projects of different maturity, popularity, and scale. 69 contained vulnerabilities and their developers were notified. 38 projects acknowledged our findings and stated their plans to provide patches. Our statistics also show that static analysis reduced potential runtime overhead by 98.4%.

show abstract

Section: Resultsmentioning

confidence: 99%

Securing web application code by static analysis and runtime protection

Huang

Hang

et al. 2004

Proceedings of the 13th International Conference on World Wide Web

385

236

View full text Add to dashboard Cite

show abstract

“…These tools include build management systems, issue trackers, Wikis, and discussion forums. These tools have often been successfully used in distributed open source software development projects as well as offshore software development scenarios [26,34,27]. The CSDP serves as platform for capturing and maintaining traceability and rationale information.…”

Section: Feature and Change Requests For Offshore Collaboration Platfmentioning

confidence: 99%

Toward Visualization and Analysis of Traceability Relationships in Distributed and Offshore Software Development Projects

Souza

Hildenbrand

Redmiles

2007

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Abstract. Offshore software development projects provoke new issues to the collaborative endeavor of software development due to their global distribution and involvement of various people, processes, and tools. These problems relate to the geographical distance and the associated time-zone differences; cultural, organizational, and process issues; as well as language problems. However, existing tool support is neither adequate nor grounded in empirical observations. This paper presents two empirical studies of global software development teams and their usage of tools. The results are then used to motivate and inform the construction of more useful software development tools. The focus is on issues that are tool-related but have not yet been solved by existing tools. The two software tools presented as solutions, Ariadne and TraVis, explicitly address yet unresolved issues in global software development and also integrate with prevalent other solutions.

show abstract

“…OSSD can be seen as a new way of organizing-different from software development conducted according to the traditional paradigm [24,28]. While there is a lot of interest in adoption and adaption of OSSD within a corporate context, and development platforms for OSSD are now offered in corporate versions [3], little research has so far been devoted to the emergence and anatomy of "hybrid" organizational forms that combine OSSD practices with corporate requirements and needs [29].…”

Section: Introductionmentioning

confidence: 99%

Lost and Gained in Translation: Adoption of Open Source Software Development at Hewlett-Packard

Melian

Mähring

2008

IFIP – The International Federation for Information Processing

View full text Add to dashboard Cite

Abstract.What happens when an organization form that has emerged in one context is brought into a different context? In this paper, a longitudinal field study approach is used to explore how Hewlett-Packard (HP) molded open source software development (OSSD) into a proprietary software development approach called "Progressive Open Source" (POS). With the help of actornetwork theory, we understand this as a process of translation and find that some central characteristics of OSSD where lost in the translation into POS while other characteristics were gained.

show abstract

Accelerating software development through collaboration

Cited by 16 publications

References 0 publications

Securing web application code by static analysis and runtime protection

Securing web application code by static analysis and runtime protection

Toward Visualization and Analysis of Traceability Relationships in Distributed and Offshore Software Development Projects

Lost and Gained in Translation: Adoption of Open Source Software Development at Hewlett-Packard

Contact Info

Product

Resources

About