<p>Currently, security is frequently considered late in software life cycle. It is often bolted on late in development, or even during deployment or maintenance, through activities such as add-on security software and penetration-and-patch maintenance. Even if software developers aim to incorporate security into their products from the beginning of the software life cycle, they face an exhaustive amount of ad hoc unstructured information without any practical guidance on how and why this information should be used and what the costs and benefits of using it are. This is due to a lack of structured methods.</p><p>In this thesis we present a model for secure software development and implementation of a security plug-in that deploys this model in software life cycle. The model is a structured unified process, named S3P (Sustainable Software Security Process) and is designed to be easily adaptable to any software development process. S3P provides the formalism required to identify the causes of vulnerabilities and the mitigation techniques that address these causes to prevent vulnerabilities. We present a prototype of the security plug-in implemented for the OpenUP/Basic development process in Eclipse Process Framework. We also present the results of the evaluation of this plug-in. The work in this thesis is a first step towards a general framework for introducing security into the software life cycle and to support software process improvements to prevent recurrence of software vulnerabilities.</p> / Report code: LiU-Tek-Lic-2008:11.

<p>When restoring a test environment, the key to success is that the process is fast and automatic. The goal is to have as little user interaction as possible.</p><p>This master thesis evaluates solutions for handling the restoration of the test environments and investigates a couple of possible approaches. It turns out that the most effective way of solving the problem is to elaborate a customized software. The interface and workflow of this software is described in the thesis.</p><p>Testing of the new software is performed and the thesis ends with some conclusions regarding the new solution and proposals for future development.</p>

Developing a large software system involves many complicated, varied, and inter-dependent tasks, and these tasks are typically implemented using a combination of defined processes, semi-automated tools, and ad hoc practices. Stakeholders in the development process --- including software developers, managers, and customers --- often want to be able to track the actual practices being employed within a project. For example, a customer may wish to be sure that the process is ISO 9000 compliant, a manager may wish to track the amount of testing that has been done in the current iteration, and a developer may wish to determine who has recently been working on a subsystem that has had several major bugs appear in it. However, extracting the software development processes from an existing project is expensive if one must rely upon manual inspection of artifacts and interviews of developers and their managers. Previously, researchers have suggested the live observation and instrumentation of a project to allow for more measurement, but this is costly, invasive, and also requires a live running project. In this work, we propose an approach that we call software process recovery that is based on after-the-fact analysis of various kinds of software development artifacts. We use a variety of supervised and unsupervised techniques from machine learning, topic analysis, natural language processing, and statistics on software repositories such as version control systems, bug trackers, and mailing list archives. We show how we can combine all of these methods to recover process signals that we map back to software development processes such as the Unified Process. The Unified Process has been visualized using a time-line view that shows effort per parallel discipline occurring across time. This visualization is called the Unified Process diagram. We use this diagram as inspiration to produce Recovered Unified Process Views (RUPV) that are a concrete version of this theoretical Unified Process diagram. We then validate these methods using case studies of multiple open source software systems.

É possível notar no trabalho diário das empresas que a pressão por diminuir o prazo de entrega dos softwares ainda é uma realidade. Neste contexto, empresas adotam técnicas de desenvolvimento ágil de software, implementando entregas constantes e estabelecendo ciclos iterativos e curtos no processo de desenvolvimento de software. Mas, se por um lado estas técnicas visam inovar e reduzir tempo de desenvolvimento, por outro, as empresas sentem-se pressionadas a adotar a forma tradicional de manter a qualidade de software. Neste ponto, o CMMI se apresenta como um modelo de maturidade de reconhecimento mundial e é classificado na abordagem tradicional por pregar grande formalismo e foco no processo. A abordagem ágil coloca que os indivíduos e suas interações têm maior importância que os processos e as ferramentas e que ser adaptável às mudanças é mais importante do que seguir a rigor o planejado. Ao integrar estes dois modelos de abordagens distintas espera-se que as práticas ágeis possam ajudar organizações maduras a se tornarem mais flexíveis. Com o intuito de averiguar esta integração, utilizou-se o método de pesquisa de estudo de caso, de modo a se aprofundar nas empresas que possuem certificação CMMI e decidiram adotar o modelo de desenvolvimento ágil. O objetivo é levantar como estas empresas resolveram os pontos de conflito da abordagem tradicional e ágil, de modo a se tornarem mais eficazes. O estudo ainda contém um quadro de integração CMMI versus desenvolvimento ágil de modo a elencar os pontos que merecem maior atenção e esforço de adaptação, visando a concretização da integração. / It\'s possible to notice in the daily work of companies that pressure by decreasing the delivery of software is still a reality. It is in this context that companies adopt the techniques of agile software development, implementing and establishing constant deliveries and short iterative cycles in the process of software development. But if on the one hand these techniques aim to innovate and reduce development time, on the other, companies feel pressured to adopt the traditional way of maintaining the quality of software. At this point, the CMMI is presented as maturity model worldwide recognition, classified in the traditional approach for preaching extensive formalism and focus on the process, as the agile approach puts individuals and their interactions is more important than processes and tools, where being adaptable changes is more important than following the strict what was planned. By integrating these two models of different approaches, it is expected that agile practices can help organizations mature to become more flexible. In order to investigate this integration is that this study uses the research method of case study so as to deepen the companies that have decided to adopt CMMI and agile development model. The goal is to raise as these companies solved the trouble spots of the traditional approach and agile in order to become more effective. The study also contain a framework for integrating CMMI vs. Agile development in order to list the points that deserve more attention and effort to adapt in order to achieve integration.

A sistematização do PDS (processo de desenvolvimento de software) é reconhecida como um fator chave para o desempenho competitivo das empresas, pois assim garante-se a repetibilidade e a qualidade dos projetos de desenvolvimento. A sistematização do PDS é um dos projetos de mudança que possui um grande impacto na melhoria do processo, uma vez que a definição do processo estabelece o padrão de trabalho, como também as ferramentas de apoio ao processo. Esse projeto de melhoria deve ainda estar inserido no contexto mais amplo da gestão de mudanças das empresas, pois seu impacto pode afetar todas as áreas da empresa. O presente trabalho tem por objetivo apresentar uma metodologia de gestão de mudanças desenvolvida, com ênfase no relato de experiências práticas de sua aplicação, na institucionalização do processo de venda e desenvolvimento de software sob encomenda (PV&DS) de uma empresa desenvolvedora de software, que está inserida em uma rede de colaboração. A metodologia proposta sintetiza as melhores práticas dos seguintes métodos de gestão de mudança: SSM (Soft Systems Methodology); Modelo Ideal (Initiating, Diagnosing, Acting, Establishing e Learning ); DMAIC (Define, Measure, Analyze e Control) do Six Sigma; metodologia de transformação TransMeth; e metodologia de transformação do PDP. Três projetos de mudanças foram implantados: instanciação do PV&DS; implantação da fase de vendas; e implantação da fase planejar projeto. A utilização da metodologia de gestão de mudança proposta mostrou ser uma adequada ferramenta para a implantação de mudanças. Ela serviu como um guia para a customização e institucionalização do novo processo da empresa, proporcionando aos colaboradores um espírito de confiança e otimismo quanto aos resultados da mudança. / Software development process (SDP) systematization is acknowledged as a key factor for the competitive development of companies. It ensures repeatability and quality of development projects. The process of the SDP systematization is a change projects that leads to great improvements in SPD. The definition of the project establishes a work model, as well as the support tools for the SDP. This improvement project must also be incorporated into a wider context of the company’s change management. Because its impact may influence all areas of the company. This work presents a change management method, including a report that describes the practical experiences that were applied to the institutionalization of sales process and software development process (SP&SDP) of a software development company, which is part of a collaboration network. The proposed method synthesizes the best practices of the following change management methods: SSM (Soft Systems Methodology); Ideal (Initiating, Diagnosing, Acting, Establishing and Learning) Model; DMAIC (Define, Measure, Analyze, and Control) of Six Sigma; metodologia de transformação TransMeth; and metodologia de transformação do PDP. Three changes projects, SP&SDP institutionalization; implementation of sales phase; and implementation of project planning phase, were developed. The proposed change method provides an appropriated framework to manage changes by a holistic view. It is reported that the companies' collaborators are motivated and feel confident with the changes.

Made available in DSpace on 2014-06-12T15:58:03Z (GMT). No. of bitstreams: 2 arquivo3244_1.pdf: 2061206 bytes, checksum: d9bbab1debda0a2122b877cceb8484ed (MD5) license.txt: 1748 bytes, checksum: 8a4605be74aa9ea9d79846c1fba20a33 (MD5) Previous issue date: 2010 / Conselho Nacional de Desenvolvimento Científico e Tecnológico / O reuso de software é um fator extremamente importante para empresas interessadas em aumentar sua produtividade, diminuir os custos e o tempo durante o desenvolvimento de sistemas e melhorar a qualidade de seus produtos e serviços. Nesse contexto, Linhas de Produto de Software (LPS) e Arquitetura Orientada a Serviços (SOA) são duas estratégias que estão atualmente recebendo uma grande atenção, tanto na área acadêmica quanto na indústria de software. Os conceitos de linhas de produto e arquitetura orientada a serviços compartilham alguns objetivos e características que podem ser usados em conjunto para aumentar as taxas de reuso de software. No entanto, para o resultado dessa junção ser otimizado, é necessário utilizar um processo de desenvolvimento bem definido. Caso contrário, a equipe de desenvolvimento poderá produzir software de maneira não sistemática, aumentando as chances de falha, o tempo e o custo de desenvolvimento. Com essa visão, esse trabalho apresenta uma abordagem para o projeto de arquiteturas para linhas de produto orientada a serviços, constituída de um conjunto de atividades e sub atividades com entradas e saídas especificadas, sendo cada uma delas realizada por um conjunto predefinido de papéis com responsabilidades definidas. Essa abordagem visa ajudar arquitetos de software a projetar arquitetura orientada a serviços para domínios específicos. Para garantir a qualidade da abordagem desenvolvida, uma pesquisa extensiva foi realizada para analisar o atual estado da arte de processos para o desenvolvimento orientado a serviços. Foram então considerados os pontos fracos e fortes dos processos estudados com o intuito de identificar e preencher as lacunas neles existentes. Por fim, essa abordagem foi validada e refinada por meio de um estudo acadêmico experimental preliminar

It is reported that the market-driven product development is becoming common in the software industry. There are two challenges in the market-driven product development: time-to-market and meeting customers’ requirements. A rapid software development process is regarded as a good way to solve those two challenges. Streamline development process (SLDP) is aligned with a rapid software development process, which is an in-house development process of Ericsson AB. In this study, seven completed projects from the streamline development process were investigated. The correlations between requirement attributes and process attributes were identified and quantified in the SLDP. Nine hypotheses were assumed. Four hypotheses were derived from the correlations from the other software development processes, and the other five hypotheses were derived from new requirement attributes and process attributes in SLDP. Two statistical software applications were used in the hypotheses testing. The results of those hypotheses showed that too much time spent in the early phase of streamline development would not reduce the time to market. A SLDP measurement program contains the measurements of requirement attributes and process attributes. This measurement program was mainly composed of four core attributes (size, effort, schedule, and fault), the requirement volatility, the completeness, the resource overrun, and the estimation accuracy. The results of the SLDP measurement program reflected four challenges in the SLDP: the requirement engineering process, the release planning, the estimation accuracy at each development phase, and the quality of the documentation. At last, based on those four challenges (the requirement engineering process, the release planning, the estimation accuracy at each development phase, and the quality of the documentation) and the defined correlations between requirement attributes and process attributes in the SLDP, the improvement opportunities were proposed for the SLDP.

When restoring a test environment, the key to success is that the process is fast and automatic. The goal is to have as little user interaction as possible. This master thesis evaluates solutions for handling the restoration of the test environments and investigates a couple of possible approaches. It turns out that the most effective way of solving the problem is to elaborate a customized software. The interface and workflow of this software is described in the thesis. Testing of the new software is performed and the thesis ends with some conclusions regarding the new solution and proposals for future development.

The master thesis focuses on more efficient application of Scrum methodology in a development team within specific company. The thesis takes an advantage from the SW-CMM philosophy applied in agile environment in order to achieve better effectivity. Theorethical base is utilized for a comparison with current state in the company described in analytical part. Proposals for a solution of current situation are based on drawback detection. Proposals are subject for risk analysis followed by precaution. Costs of proposals implementation with included precautions are evaluated in economic evaluation part. This part also contains benefits of proposals.

User experience design is the process of improving the accessibility and use of a product during user’s interaction with it. This study investigates the issues that occur in the coordination of UX design and software development. Furthermore, it examines diverse types of conflicts between UX designers, front-end and back-end developers, factors contributing to these conflicts and their influence on the software development process. The method used in this study is a survey conducted in an online form with a target group of practitioners. The data show that task conflicts are the most common type of conflicts in teams, that gender of a person can influence its awareness of the project status and that age and geographical location do not affect the occurrence of the identified conflicts.