This thesis endeavors to determine the feasibility of design metrics as a predictor of attack surface size by finding a positive correlation between one or more design metrics and an application’s attack surface measurement. An attack surface is the set of ways in which an adversary can enter a system and potentially cause damage. For an experimental setting, six open-source java-based projects were analyzed. For each project, the attack surface is assessed using Microsoft’s Attack Surface Analyzer, which takes a snapshot of a system state before and after the installation of product(s) and displays the changes to a number of key elements of the Windows attack surface. A collection of design metrics was collected from each open-source project as well. The goal is to find a metric or set of metrics that predicted the attack surface changes identified by the Attack Surface Analyzer. / Department of Computer Science

This thesis study presents a software measurement program. The literature on software measurement is reviewed. Conditions for an effective implementation are investigated. A specific measurement system is designed and implemented in ASELSAN, Inc. This has involved organizational as well as technical work. A software tool has been developed to assist in aggregating measurements obtained from various CASE tools in use. Results of the implementation have started to be achieved. Lots of useful feedbacks have been returned to the organization as a result of analyzing of the measurement data.

This thesis focuses on measurement based software process improvement, especially improvement of requirements change management process. The literature on software measurement is investigated, software process improvement methodologies are studied and requirements change management metrics are examined. Requirements change management process at a private company working in the defense industry is observed and metrics obtained from various tools have been aggregated. Moreover, an improvement proposal, which also simplifies collecting metrics, is presented for the requirements change management process. A tool is developed for evaluating the performance of the improvement proposal using event driven simulation method.

Thesis (M.S.)--Brigham Young University. Dept. of Mechanical Engineering, 2006. / Includes bibliographical references (p. 91-93).

Thesis (M.S.)--California Polytechnic State University, 2008. / Major professor: David Janzen, Ph.D. "Presented to the faculty of California Polytechnic State University, San Luis Obispo." "In partial fulfillment of the requirements for the degree [of] Master of Science in Computer Science." "June 2008." Includes bibliographical references (leaves 57-62). Also available online. Also available on microfiche (1 sheet).

Thesis (Ph.D.)--Mississippi State University. Department of Computer Science and Engineering. / Title from title screen. Includes bibliographical references.

Thesis (M.S.)--Florida State University, 2006. / Advisor: Robert van Engelen, Florida State University, College of Arts and Sciences, Dept. of Computer Science. Title and description from dissertation home page (viewed Sept. 22, 2006). Document formatted into pages; contains ix, 47 pages. Includes bibliographical references.

Software measurement process is a significant part of process improvement in software organizations. The organizations usually follow a measurement process that includes measures selection, data collection, and analysis to improve their processes. Most of the software organizations face difficulties in deciding the measures to collect since there is no universal set of measures for all types of organizations and projects. Experience shows that measurement can be more successful if the measures are collected based on the goals of the organization or the project which it will serve. A few methodologies exist to aid the software organizations. Goal Question Metric (GQM) is one of the most widely known and used one. However, one of the major constraints for the organizations is the associated cost when collecting the measures. Therefore, software organizations also require selecting the optimum set of measures which are good enough for the organization. This thesis study aims to provide solution for this problem. We propose a model, named ‗Optimum Measure Set Decision Model (OMSD)‘, which is an extension of GQM paradigm. The model is based on a heuristics approach, which aims to provide the optimum set of measures from a large number of possible measures. To develop the model, we identified the factors which are significant in selecting the optimum set of measures based on the literature survey results. Then, we evaluated those factors by conducting an empirical study. As the empirical research strategy, we used traditional fixed non-experimental design strategy. We performed a survey by distributing a structured questionnaire in order to evaluate the important factors we identified when selecting the optimum number of measures to be collected in an organization. We evaluated the heuristics rules by means of some sample cases we created. Moreover, we provided an idea for an alternative solution to optimize the number of measures to be collected for the future research. / Software measurement process is a significant part of process improvement in software organizations. The organizations usually follow a measurement process that includes measures selection, data collection, and analysis to improve their processes. Most of the software organizations face difficulties in deciding the measures to collect since there is no universal set of measures for all types of organizations and projects. Experience shows that measurement can be more successful if the measures are collected based on the goals of the organization or the project which it will serve. A few methodologies exist to aid the software organizations. Goal Question Metric (GQM) is one of the most widely known and used one. However, one of the major constraints for the organizations is the associated cost when collecting the measures. Therefore, software organizations also require selecting the optimum set of measures which are good enough for the organization. This thesis study aims to provide solution for this problem. We propose a model, named ‗Optimum Measure Set Decision Model (OMSD)‘, which is an extension of GQM paradigm. The model is based on a heuristics approach, which aims to provide the optimum set of measures from a large number of possible measures. To develop the model, we identified the factors which are significant in selecting the optimum set of measures based on the literature survey results. Then, we evaluated those factors by conducting an empirical study. As the empirical research strategy, we used traditional fixed non-experimental design strategy. We performed a survey by distributing a structured questionnaire in order to evaluate the important factors we identified when selecting the optimum number of measures to be collected in an organization. We evaluated the heuristics rules by means of some sample cases we created. Moreover, we provided an idea for an alternative solution to optimize the number of measures to be collected for the future research. / Cell# 0046-762640583, 0046-762509253

Context： Software evolution comes with the increasing growth of software applications both in size and complexity. Unlike the software maintenance, software evolution addresses more on the adaption of the new fast-changing requirements. Then the term of “software evolvability” comes with its importance for evaluating the evolution status of the software. However, it is not clearly identified especially in the context of open source software (OSS). Besides the most studies are about the description of software evolvability as a quality attribute, and very few research have done on the measurement of software evolvability during the software evolution process. Objectives： In this study we perform an in-depth investigation on identification of the OSS evolvability, and figure out the appropriate metrics used for measuring the OSS evolvability. Based on that we finally proposed the open source software evolvability measurement framework (OSEM) which could be used for measuring the software evolvability generally in an OSS context. Methods： At first, we conducted a literature review by combining backward snowballing search with systematic database search. Two research questions which are RQ1 and RQ2 are proposed for helping us to retrieve the key information for building the needed framework. Then we performed a case study on VLC media player (an OSS project) to validate the processes of the proposed framework. Results： Based on literature we could explicitly identify the OSS evolvability, and figure out the differences of software evolvability addressed in OSS context and non OSS context (e.g, the traceability refers to documentation in non OSS context, however in OSS context it refers to the release version of OSS project). Besides we also fulfill the evolvability measuring method by addressing the process of prioritization of evolvability sub-characteristics. In the end we implement the OSEM framework on VLC media player and get the well documented results which are clearly presented and easy to understand. Such results could be taken by the VLC developers as an input for the design and development of the VLC. Conclusions: We conclude that the open source software measurement framework (OSEM) is applicable, based on the time we spent on the case of VLC media player it is quite fast and efficient to use such framework. The results from the conduction of this framework are documented well and very clear for OSS users/developers to follow.

M.Ing. / Software engineering organizations face a struggle for daily survival in an extremely volatile climate. Numerous times it has been shown that the quality of a service or product could make the difference between an organization existing or closing down. The way in which quality is approached in any organization is part of a strategy; unbeknown to the managers and employees in many instances. Even though there are numerous books, articles, internet sites and other sources devoted to the subject of quality, total quality management, and strategic planning, not many of these information sources link quality and the strategy of the organization in such a way as to consider the quality of the organization’s products and services to be a major factor of strategic survival – or even the very existence of the organization. Quality is known under various names and terms in organizations, these terms and definitions will be investigated to grasp the true meaning of software quality and strategy as it concerns modern software engineering organizations. The tools and techniques required to improve and measure strategy and quality will also be scrutinized. One dominant factor about quality and strategy should be borne in mind, and that is that these programs depend on teamwork and management support as the major underlying framework. There are many tools and techniques that leaders and members of software teams can employ, but one of the most important factors is to gain a picture of the total process of continuous improvement and measurement. For this reason the author has included a large section on Jack Welch, who managed to use continuous improvement techniques to create one of the best, and biggest international organizations in recent years. It is vital that all people realize that they need an improvement and measurement model, and they need guidance in using such a model. This dissertation investigates the reasoning behind implementing strategic quality processes in software engineering organizations. Following the investigation into the necessity for a quality strategy, the methods, processes, tools and techniques that are required for a strategic quality framework (improvement and measurement model) for software engineering organizations will be researched to provide a basic framework and guidance in implementing such a model.