Software Development Process Research Articles

Automation in Cloud-Based DevOps: A Guide to CI/CD Pipelines and Infrastructure as Code (IaC) with Terraform and Jenkins

This study offers a comprehensive analysis of automation in cloud-based DevOps, focusing on the role of Continuous Integration/Continuous Delivery (CI/CD) pipelines and Infrastructure as Code (IaC) in streamlining software development processes. Employing tools like Jenkins and Terraform, the research aims to demonstrate how automation can significantly enhance operational efficiency, scalability, and security in cloud deployments. Through a detailed examination of CI/CD components and their integration with IaC, this paper identifies key findings, including the reduction of manual errors, improved deployment consistency across environments, and enhanced security through DevSecOps practices. The study further explores challenges such as configuration complexity and compliance, proposing best practices like proactive monitoring, encrypted secrets management, and version control to mitigate these issues. Conclusively, the research recommends the adoption of AI-driven analytics and robust security frameworks to optimize cloud-based CI/CD automation. This work not only highlights current methodologies but also anticipates future trends, providing a strategic roadmap for organizations aiming to leverage DevOps automation effectively.

Software Development Process Considerations in GNSS-Denied Navigation Project for Drones

This article will discuss the software development process utilised in the GNSS-denied navigation project targeted for drones. The process was implemented in an environment where software developers were oriented to developing a source code only and who showed great reluctance to follow any formal process. The mentioned process was a lightweight AGILE-based process that, by assumption, minimised developers’ engagement in activities other than those related to the source code development. The process described in this paper was designed to support and reflect product quality characteristics like functional completeness and correctness, time behaviour, resource utilisation, analysability, modifiability and testability in an “implicit” way. It allowed the developers to achieve those characteristics in an “invisible” manner. This allowed us to achieve acceptable product quality without needing to engage experienced architects. The described process needs improvements and extensions to satisfy certification needs. However, for the prototyping or research phases, it may be a perfect solution for facilitating future product modifications and saving costs. The process improves product quality by underlying the value of transparency, performing specific actions and incorporating specific attributes related to team tasks. This research also focused on finding a metric related to process acceptance in a given environment, resulting in a three-degree scale showing whether the process needed improvements or was accepted by the environment. Such a metric is a new finding and the metric implies that there are some factors that stand behind any process, which determine whether it will be friendly to the environment (people with their habits, work style, personal traits, etc.) or not. However, investigating factors that determine the process acceptance and that are connected to the environment traits were beyond the scope of this research and will be considered in the future.

A Framework for Real-Time AI-Driven Secure Code Analysis Integrated with DevSecOps in Cloud-Native CI/CD Pipelines

Abstract—This paper presents a novel framework for inte- grating real-time AI-driven secure code analysis into DevSecOps practices within cloud-native CI/CD pipelines. As organizations increasingly adopt cloud- native architectures and agile develop- ment methodologies, the need for robust, automated security mea- sures becomes paramount. Our proposed framework leverages advanced machine learning algorithms to perform continuous, real-time code analysis, identifying potential vulnerabilities and security risks throughout the development lifecycle. By seamlessly integrating with existing CI/CD tools and cloud platforms, our solution enables organizations to enforce security policies, detect threats, and remediate issues without compromising development velocity. We evaluate the effectiveness of our framework through a series of case studies across diverse software projects, demon- strating significant improvements in threat detection accuracy, reduced false positives, and overall security posture. Our results indicate that the proposed AI-driven approach can enhance code security by up to 40% compared to traditional static analysis tools, while maintaining the agility of modern development prac- tices. This research contributes to the evolving field of DevSecOps by offering a scalable, intelligent solution for embedding security into the heart of cloud-native software development processes. Index Terms—DevSecOps, AI-driven security, cloud- native, CI/CD pipelines, secure code analysis

Penerapan Model Incremental Delivery pada Pengembangan Aplikasi Sistem Informasi Hotel Cipta Jakarta

Along with the development of the times, we see many hotels experiencing changes. A change that is rarely reviewed as a news topic is the software overhaul that occurs in hotels from offline to online systems. Lay people only see changes in hotels from a visible perspective, without having to know whether the hotel's system and system applications have changed. One of the factors in system development at Hotel Cipta is the need for hotel management to prioritize the development of system applications from offline to online systems, even web-based. It is not easy to overhaul an existing system application compared to creating a new system application. There are several software engineering methods and models that are commonly used to analyze system needs and design systems in the software development process. One of them is the incremental delivery model. This makes it interesting to try to apply the incremental delivery model to the development of the Hotel Cipta information system application by taking place at the Hotel Cipta on KH. Wachid Hasyim Street, Central Jakarta. In this study, the object of research is the Front Office department.

Tra ined Wi thout My C onsent: Detecting Code Inclusion In Language Models Trained on Code

Code auditing ensures that the developed code adheres to standards, regulations, and copyright protection by verifying that it does not contain code from protected sources. The recent advent of Large Language Models (LLMs) as coding assistants in the software development process poses new challenges for code auditing. The dataset for training these models is mainly collected from publicly available sources. This raises the issue of intellectual property infringement as developers’ codes are already included in the dataset. Therefore, auditing code developed using LLMs is challenging, as it is difficult to reliably assert if an LLM used during development has been trained on specific copyrighted codes, given that we do not have access to the training datasets of these models. Given the non-disclosure of the training datasets, traditional approaches such as code clone detection are insufficient for asserting copyright infringement. To address this challenge, we propose a new approach, TraWiC; a model-agnostic and interpretable method based on membership inference for detecting code inclusion in an LLM’s training dataset. We extract syntactic and semantic identifiers unique to each program to train a classifier for detecting code inclusion. In our experiments, we observe that TraWiC is capable of detecting 83.87% of codes that were used to train an LLM. In comparison, the prevalent clone detection tool NiCad is only capable of detecting 47.64%. In addition to its remarkable performance, TraWiC has low resource overhead in contrast to pair-wise clone detection that is conducted during the auditing process of tools like CodeWhisperer reference tracker, across thousands of code snippets.

Role of AI in Application Life Cycle Management (ALM)

This white paper explores the transformative role of Artificial Intelligence (AI) in Application Life Cycle Management (ALM). As software development processes become increasingly complex, AI offers innovative solutions to enhance efficiency, quality, and productivity across the entire application lifecycle. This paper examines the current state of AI in ALM, its benefits and challenges, implementation strategies, and future trends. Drawing from industry research, case studies, and expert insights, we provide a comprehensive overview of how AI is reshaping ALM practices and offer best practices for organizations looking to leverage AI in their software development processes.

Examining the Effectiveness of Continuous Integration and Continuous Deployment (CI/CD) Within SDLC Frameworks

Continuous Integration and Continuous Deployment frameworks have been a subject of significant discussion among numerous software development cycles however their impact on Software Development Life Cycles has not been investigated in detail in this research. With survey data collected from the subjects and interviews conducted on the pre-researched parameters of software quality, time-to-market of the product, and interteam collaboration, the study compares the firms that use CI/CD with those that use more conventional software development approaches. The study shows that CI/CD integration enhances software quality since defects are reduced from 1.5 to 0.5 per thousand lines of code. Furthermore, CI/CD teams have 10 releases per month against 3 of traditional and time-to-market that reduces from 6 weeks to 2 weeks. The improvement of collaboration is very visible, the CI/CD teams said that they had more meetings and their job satisfaction scores increased. As with any change, transitioning to CI/CD has potential drawbacks such as resistance to change, but these can be managed especially through training and what has been said in the article specific practices. Therefore, this research offers important insights to organisations aiming at improving their software development processes and preparedness in a relatively dynamic market environment

Integrating AI into DevOps pipelines: Continuous integration, continuous delivery, and automation in infrastructural management: Projections for future

This paper explores the transformative role of Artificial Intelligence (AI) in enhancing DevOps pipelines, focusing on Continuous Integration (CI), Continuous Delivery (CD), and automation in infrastructural management. As organizations increasingly adopt DevOps methodologies to streamline software development and delivery processes, the integration of AI technologies offers significant potential for improving efficiency, quality, and responsiveness. This study reviews current practices in CI/CD and examines how AI-driven tools can automate repetitive tasks, optimize resource allocation, and facilitate predictive analytics for proactive decision-making. Additionally, the paper discusses the challenges and considerations associated with AI integration in DevOps, including cultural shifts, data governance, and the need for skilled personnel. Projections for future developments highlight the potential for AI to create smarter, more adaptive DevOps environments that align with evolving industry demands. By identifying key trends and innovations, this research provides a comprehensive overview of the future landscape of DevOps, positioning AI as a critical enabler of agility and performance.

A research paper on software design patterns

This article affords another exhaustive examination of software design patterns, discussing their importance, the classification system, and the influence on software architecture and design. It looks at how existing practices handle predictable problems, make things more easily serviceable, and increase developer collaboration. The article goes further and explains the use of design patterns and elaborates on real-life examples of design patterns and the difficulties and drawbacks of using them. Further, it expands on future possibilities, such as applying design patterns for cloud-new architectures, AI incorporation, serverless, and Agile/DevOps. From these trends, the article lays down the argument that design patterns are not insulated from change but are continually being adapted to fit into the software development processes of today's complex and sophisticated world and that to be relevant in the designing of today's complex, large and intelligent software-based systems, developers should be familiar with both the recognized and emergent design patterns.

Assessing the Effectiveness of MoSCoW Prioritization in Software Development: A Holistic Analysis across Methodologies

Effective software Requirement Prioritization plays a pivotal role in the success of the Software Development process, ultimately contributing to the successful delivery of high-quality products. Among the various methods for Requirement Prioritization, the MoSCoW method has gained widespread adoption due to its ease of use. However, its overall effectiveness remains a subject of inquiry. This paper presents a rigorous assessment of the MoSCoW Requirement Prioritization technique, drawing insights from software developers who engage in the Prioritization process. Our evaluation encompasses a distinct perspective: that of the developers tasked with Prioritization. The feedback solicited from developers encapsulates a diverse set of criteria, shedding light on the method's efficacy. Additionally, we perform sentiment analysis on the user experience of the Prioritization task to corroborate the method's accuracy and efficiency. Our study unfolds through a practical exercise involving the Prioritization of a predefined set of requirements using MoSCoW principles. A mixed method approach is employed for the purpose of assessing the effectiveness of MoSCoW. The findings of our quantitative research underscore the method's limitations, indicating that it may not be as effective and precise as previously believed. Furthermore, through qualitative analysis, we are able to highlight the complexities and challenges associated with MoSCoW-based Prioritization. The insights gained from this analysis prompt contemplation regarding the potential introduction of an evolved Requirement Prioritization method, while leveraging MoSCoW as a foundational framework. This research aims to inform the ongoing evolution of Requirement Prioritization methodologies, ultimately enhancing the efficiency and accuracy of Software Development processes.

A Systematic Literature Review for Investigating DevOps Metrics to Implement in Software Development Organizations

ABSTRACTDevOps is a collaborative software development process where practitioners work as a team to continuously develop, deploy, and deliver software. DevOps practices still need to be mature, and practitioners face numerous challenges while considering DevOps as a software development process. The mainstream research community has helped simplify the DevOps adoption process and eliminate complexities by developing DevOps maturity models. However, the current maturity frameworks cannot measure every component of DevOps and do not mention metrics as parameters for measuring different DevOps practices or features. Therefore, this study aims to identify metrics for measuring practices and activities responsible for DevOps implementation. The systematic literature review (SLR) method was used to determine the metrics needed to measure DevOps practices. Using SLR, we have identified 32 metrics from 57 articles. The metrics identified in this study can be used to measure the impact of the practices adopted for DevOps implementation within software development organizations. Furthermore, we divided the identified metrics into Dev and Ops categories and five significant categories based on the DevOps lifecycle. The classification of metrics in our study into diverse regions provides a conceptual framework and understanding of DevOps measures.

FOBICS: Assessing project security level through a metrics framework that evaluates DevSecOps performance

Context:In today’s software development landscape, the DevSecOps approach has gained traction due to its focus on the software development process and bolstering security measures in projects, a task in light of the ever-evolving cybersecurity threats. Objective:This study aims to address the lack of metrics for quantitatively assessing its efficacy from both security and business logic perspectives. Methods:To tackle this issue, the research introduces the Framework of Business Index Concerning Security (FOBICS), a set of metrics designed to enable transparent evaluations of project security. FOBICS considers various perspectives relevant to DevSecOps practices. It includes factors such as project duration and financial outcomes, making it appealing for implementation in business settings. Results:The effectiveness of FOBICS is validated theoretically and empirically via its application in two real-world projects: the results from these implementations show a correlation between FOBICS metrics and the security strategies employed as the development methodologies adopted by diverse teams throughout the projects. Conclusion:Hence, FOBICS emerges as a tool for assessing and continuously monitoring project security, offering insights into areas of strength and areas that may require enhancement. FOBICS is shown to be effective in assessing the level of DevSecOps implementation. The ease of calculating FOBICS metrics makes them easily interpretable and continuously verifiable. Moreover, FOBICS summarizes most of the other quantitative and qualitative metrics in the literature.

A survey on Cryptoagility and Agile Practices in the light of quantum resistance

Context:Crypto-agility, a name that stems from agile methodologies for software development, means the ability to modify quickly and securely cryptographic algorithms in the event of a compromise. The advent of quantum computing poses existential threats to current cryptography, having the power to breach current cryptography systems. Objective:We investigated whether and to what extent agile practices for software development are suited to support crypto-agility, or not. In particular, we discuss their usefulness in the context of substituting current algorithms with quantum-resistant ones. Method:First, we analyzed the literature to define a subset of 15 agile practices potentially relevant to cryptographic software development. Then, we developed a questionnaire to assess the suitability of agile practices for obtaining crypto-agility. We performed a Web search of relevant documents about crypto-agility and quantum resistance and sent their authors the questionnaire. We also sent the questionnaire to cybersecurity officers of four Italian firms. We analyzed and discussed the responses to 32 valid questionnaires. Results:The respondents’ affiliations are evenly distributed between researchers and developers. Most of them are active, or somehow active, in quantum-resistant cryptography and use agile methods. Most of the agile practices are deemed to be quite useful, or very useful to get crypto-agility, the most effective being Continuous Integration and Coding Standards; the least appreciated is Self-organizing Team. Conclusion:According to researchers and developers working in the field, the safe transition of cryptographic algorithms to quantum-resistant ones can benefit from the adoption of many agile practices. Further software engineering research is needed to integrate agile practices in more formal cryptographic software development processes.

The rCOS framework for multi-dimensional separation of concerns in model-driven engineering

The software industry increasingly turns to Model-Driven Engineering (MDE) to mitigate complexity by automating model creation and transformation. Many organisations are pursuing Integrated Development Platforms (IDPs) to enhance automation in their software development processes within MDE. However, the adoption of MDE and engagement with IDPs remain limited due to concerns over their efficacy. We address these challenges in this review paper by introducing a framework for the formal refinement of component and object systems (rCOS). It provides: (1) a formal theory that consists of a modelling language (named OPL) with a calculus of refinement for object-oriented models and component models; (2) a suite of analysis and design techniques that facilitate abstractions and decompositions, leading to a multidimensional separation of concerns; and (3) an IDP (named rCOS Modeller) that supports modelling, design and verification from requirements elicitation through to coding. By advocating for an rCOS-enabled multidimensional approach to separating concerns, this paper offers a comprehensive solution to the challenges facing MDE and IDPs, paving the way for their successful implementation in practice. By delineating the emerging challenges and prospects associated with integrating formal methods for modelling and designing human-cyber–physical systems (HCPS), we show the potential of extending rCOS for MDE in HCPS.

Enhancing Human Capital Management through DevOps Practices

In the current era of digital revolution, one of the main factors influencing an organization's performance is human resources. This is because HR is an important asset that determines the productivity and efficiency of organizational performance. This study's goal is to create and construct an integrated human resources application using the DevOps (Development and Operations) approach. The DevOps method is a collabo rative approach that combines the process of software development and operations in a sustainable, fast, and integrated manner. The human resources application developed in this research includes various important functions, including HR management, job grade promotion planning, employment contract termination notification, and promotion notification. This research also provides solutions to the problems experienced by the Palembang Region Office of PT Bank Rakyat Indonesia in human resource management. By using the DevOps method as a method of designing human capital applications, it is expected to increase employee efficiency and productivity through integrated and effective human resource management. The DevOps approach also allows organizations to respond quickly to changing needs and provide sustainable added value to the organization.

Analysis of ERP Based Framework Expert Opinion in Early Software Defect Prediction

Abstract: The software industry necessitates early prediction of software defects for effective quality assessment and resource allocation. During the initial stages of the software development life cycle (SDLC), failure data is often unavailable. Consequently, the insights of domain experts can be crucial in estimating potential software defects during these early phases. This paper introduces a model designed to forecast software defects prior to the testing phase, emphasizing the structure of the software development process. The model is developed using metrics derived from early artifacts of the SDLC. The development and experimental aspects of the model are presented through the application of a Bayesian belief network (BBN). The qualitative aspects of software metrics, along with expert opinions, form the core of this methodology. To demonstrate the practicality and effectiveness of the proposed approach, ten datasets from real software projects have been utilized. The analysis and validation of predicted software defects, based on varying levels of uncertainty from domain experts, are compared against actual defect occurrences.

Software requirement engineering over the federated environment in distributed software development process

In the recent past, the distributed software development (DSD) process has become increasingly prevalent with the rapid evolution of the software development process. This transformation would necessitate a robust framework for software requirement engineering (SRE) to work in federated environments. Using the federated environment, multiple independent softwareentities wouldwork together to develop software, often across organizationsand geographical borders. The decentralized structure of the federated architecture makes requirement elicitation, analysis, specification, validation, and administration more effective.The proposed model emphasizes flexibility and agility, leveraging the collaboration of multiple localized models within a diversified development framework. This collaborative approach is designed to integrate the strengths of each local process, ultimately resulting in the creation of a robust software prototype. The performance of the proposed DSD model is evaluated using two case studies on the E-Commerce website and the Learning Management system. The proposed model is analyzed by considering divergent functional and non-functional requirements for each of the case studies and analyzing the performance using standardized metrics like mean square error (MSE), mean absolute error (MAE), and Pearson Correlation Coefficient (PCC). It is observed that the proposed model exhibited a reasonable performance with an MSE value of 0.12 and 0.153 for both functional and non-functional requirements, respectively, and an MAE value of 0.222 and 0.232 for both functional and non-functional requirements, respectively.

Puerperium Software for Adolescent Care

This study describes the creation and development of the PUERPERIUM software, which utilizes the General Comfort Questionnaire translated into Brazilian Portuguese and adapted for postpartum adolescents. The software development process followed five steps: (1) requirements elicitation, involving the extraction of functionalities and identification of quality attributes such as usability, reliability, security, and availability; (2) definition of the software project and architecture, including the selection of technologies such as programming languages and services; (3) software implementation; (4) validation, verification, and testing; and (5) deployment. The software development began with identifying the necessary requirements, followed by designing the architecture consisting of the server layer and visualization layer. During implementation, the integration of the General Comfort Questionnaire and the selected technology was achieved. Key features such as authentication screens, a patient grid, instrument completion forms, and reporting tools were developed. The software's logo and overall layout were also designed. Subsequent phases involved validating the software’s appearance, usability, and functionality. The complete implementation will include making server layer elements available online and providing a beta version of the visualization layer on a public platform. The software aids nurses in efficiently and systematically assessing the comfort levels of postpartum adolescents, thereby facilitating care aimed at promoting comfort.

Advancing the software development process through the development of technology-enabled dynamic capabilities in a project-based firm: insights from action design research

PurposeThis study aims to extend the dynamic capabilities (DCs) perspective to the project management context. The authors present supporting evidence for analyzing the creation process of DCs during the redesign of the software development process, and they examine the impact of those capabilities on organizational performance and transformation.Design/methodology/approachAn action design research approach, combined with simulation and qualitative analysis, is adopted to examine the emergence of technology-enabled DCs supported by their microfoundations and the modernization of the software development process in the target firm.FindingsAnalyzing the successful internal transformation of a software development company that was facing a slow and inconsistent product development process reveals the effectiveness of extending the DC perspective to a project-based setting. The implementation of a new project methodology and the introduction of an innovative document-handling system facilitated the renewal of the company's software development process. This led to improvements in lead time and total costs, resulting in enhanced project performance as well as customer and employee satisfaction.Practical implicationsThis study draws managerial attention to the microlevel activities of technology-enabled DC formation, such as precise calculations, external expert consultations and tool deployment.Originality/valueBy applying the sensing–seizing–transforming framework with concomitant microfoundations in a longitudinal way, this article explains the role that technology plays as the basis for DCs and analyzes the cost–benefit balance of DC development in project-based organizations.

Integrating toyota production system for sustainability and competitive advantage in medical device software design

This research explores the integration of the Toyota Production System (TPS) and sustainability into the software design and development processes of a medium-sized medical device company dealing with resource constraints and evolving customer requirements. Through an analysis of TPS principles and how they relate to manufacturing and software development challenges, the research seeks to strengthen efficiency and competitiveness. It provides an adaptable implementation plan that fosters a competitive strategy and promotes sustainability through efficient software practices. The paper presents a roadmap for systematically integrating TPS and sustainability in alignment with international best practices, positioning the company to thrive in the expanding medical software market. This framework addresses immediate operational issues while laying the groundwork for long-term success and compliance with industry standards.