Software Development Process Research Articles

Study and Analysis of Cyberterrorist Attacks from Hybrid Computer Systems under the Quantum Spectrum of Software Development and Data Processing; Colombia National Police

Today's technologicalsociety understands cybercrime as a growing phenomenon, because it implies a context where people are dependent on information and communication technologies (ICTs). Computer security reveals that 78% of IT security indicates that organizations do not have sufficient protection against cyber-attacks, therefore, more than 90% of organizations have reported a cybersecurity breach and 62.7% are a product of the pandemic crisis, 43% of cyberattacks affect small businesses along with the decoction of malware and ransomware observed between 2020 and 2021.The research is to analyze cyberterrorist attacks from hybrid computer systems under the quantum spectrum of software development and data processing. Methodology: qualitative approach under the interpretative-positivist paradigm in order to demonstrate knowledge through hypothesis predictions for better future understandings of reality. Discussions: Computer actors modify and access computer systems based on the different variations, because they are not always terrorist in nature, they can be actors knowledgeable about information systems, subjects who are skilled with network actions that dominate the network, that is, they are the mechanism for the achievement of objectives in the network. Conclusions: The phenomenon of cyberterrorism arises as a consequence of the development of technology and information sedimented from the cognitive, behavioral-behavioral and motivational triad, as well as the base tool for the perpetration of terrorist acts and with it the achievement of some political and ideological objective as mentioned before to cause fear in society.

Discussing Phases and Models of Software Development Life Cycle

Software Development is one of the most powerful, vital, and the need for an hour in today's generation. Every organization, industries, small firms, institutes, etc. require the software for the functionality of their system and reducing the manual work or the traditional work, which used to be insecure and had more errors. SDLC is all about the minimization of the risk and failure and maximization of the quality of the product. To make the development works in a step by step procedure and precisely SDLC came into existence. The SDLC defines the framework that includes different activities and tasks to be carried out during the software development process. There are many types of SDLC models, which have their advantages and disadvantages and will work as per their needs. Keywords: Software Development Life Cycle, Models, Prototype, Modeling, Development, Risk Analysis and, Comparative Analysis.

An Open-Source Software Reliability Model Considering Learning Factors and Stochastically Introduced Faults

In recent years, software development models have undergone changes. In order to meet user needs and functional changes, open-source software continuously improves its software quality through successive releases. Due to the iterative development process of open-source software, open-source software testing also requires continuous learning to understand the changes in the software. Therefore, the fault detection process of open-source software involves a learning process. Additionally, the complexity and uncertainty of the open-source software development process also lead to stochastically introduced faults when troubleshooting in the open-source software debugging process. Considering the phenomenon of learning factors and the random introduction of faults during the testing process of open-source software, this paper proposes a reliability modeling method for open-source software that considers learning factors and the random introduction of faults. Least square estimation and maximal likelihood estimation are used to determine the model parameters. Four fault data sets from Apache open-source software projects are used to compare the model performances. Experimental results indicate that the proposed model is superior to other models. The proposed model can accurately predict the number of remaining faults in the open-source software and be used for actual open-source software reliability evaluation.

Adaptive Security Activities Selection Model Using Multi-Criteria Decision-Making Methods

Adaptive security activities are a list of recommended security activities to be integrated smoothly with the software development life cycle (SDLC) to produce a secure application software. Adaptive security activities are needed due to the emergence of factors and constraints which have been determined as one of the reasons for the underutilisation of security activities implementation, especially in the earlier phase of software development process. Security activities selection models were proposed to select and recommend security activities but the models were focused on certain factors or as a solution for specific constraints, and thus the recommended security activities were not adaptive. Consequently, an adaptive security activities selection (ASAS) model was proposed by combining the factors and constraints faced by the development team in selecting security activities. The model consisted of two integrated multi-criteria decisionmaking (MCDM) methods, namely Analytic Network Process (ANP) and Reference Ideal Method (RIM). ANP was used to prioritise and weight the criteria while RIM was used to measure and evaluate the security activities with the value of constraints in regard to each criterion. To validate the model a case study was performed on four inhouse web application development teams in the Malaysian public sector. The proposed model was able to recommend security activities in the requirement and design phase based on different constraints faced by each of the development teams. The model was adaptive due to its flexibility and ability to change and suit different evolved conditions when recommending the security activities.

Problems in The Adoption of Agile-Scrum Software Development Process in Small Organization: A Systematic Literature Review

Agile methods are becoming increasingly popular in modern corporate strategies, which represents a paradigm change in project management techniques. The concept of pragmatic agility has become essential for enterprises to manage the complexities of ever-changing contexts. However, some organizations—especially small ones with limited resources—face unforeseen difficulties while implementing Agile-Scrum software development. In order to clarify the challenges small businesses, encounter throughout this adoption process, this study combines ideas from fifteen studies into a thorough and systematic analysis of the literature. The issues that have been discovered may be categorized into four primary areas: technology, people, process, and organization, and agile techniques. Organizations are able to anticipate obstacles by using a comprehensive understanding provided by the methodical examination and classification of situations. This proactive approach is essential to preventing unfavorable outcomes, as those seen in the past when implementation errors were made worse by culture problems, insufficient support from upper management, and waning consumer cooperation. This research provides small firms with a navigational aid by synthesizing lessons from the literature, enabling them to plan an Agile-Scrum adoption process that is more smoothly executed. Organizations may enhance their preparation, protect themselves from frequent traps, and ultimately maximize the transformative potential of Agile techniques in their developmental undertakings by adopting these insights.

A Bioinspired Test Generation Method Using Discretized and Modified Bat Optimization Algorithm

The process of software development is incomplete without software testing. Software testing expenses account for almost half of all development expenses. The automation of the testing process is seen to be a technique for reducing the cost of software testing. An NP-complete optimization challenge is to generate the test data with the highest branch coverage in the shortest time. The primary goal of this research is to provide test data that covers all branches of a software unit. Increasing the convergence speed, the success rate, and the stability of the outcomes are other goals of this study. An efficient bioinspired technique is suggested in this study to automatically generate test data utilizing the discretized Bat Optimization Algorithm (BOA). Modifying and discretizing the BOA and adapting it to the test generation problem are the main contributions of this study. In the first stage of the proposed method, the source code of the input program is statistically analyzed to identify the branches and their predicates. Then, the developed discretized BOA iteratively generates effective test data. The fitness function was developed based on the program’s branch coverage. The proposed method was implemented along with the previous one. The experiments’ results indicated that the suggested method could generate test data with about 99.95% branch coverage with a limited amount of time (16 times lower than the time of similar algorithms); its success rate was 99.85% and the average number of required iterations to cover all branches is 4.70. Higher coverage, higher speed, and higher stability make the proposed method suitable as an efficient test generation method for real-world large software.

Automated checker for detecting method-hiding in Java programs

Method overriding is a valuable mechanism that happens when an instance method is defined in a subclass and has the same signature and return type as an instance method in the superclass. However, in Java, if those methods are static, then instead method hiding happens, which is a programming weakness and may produce unexpected results. Static analysis is an approach in software testing that examines code to identify various programming weaknesses throughout the software de velopment process without running it. This paper addresses the detection of method-hiding problem in Java programs. We implemented a new automated checker under the SpotBugs static analysis tool that can detect the mentioned problem. According to our results, the checker precisely detected zhe related issues in both custom test cases and realword programs.

Requirements for User Experience Management - A Tertiary Study

Today’s users expect to be able to interact with the products they own without much effort and also want to be excited about them. The development of a positive user experience must therefore be managed. We understand management in general as a combination of a goal, a strategy, and resources. When applied to UX, user experience management consists of a UX goal, a UX strategy, and UX resources. We conducted a tertiary study and examined the current state of existing literature regarding possible requirements. We want to figure out, what requirements can be derived from the literature reviews with the focus on UX and agile development. In total, we were able to identify and analyse 16 studies. After analysing the studies in detail, we identified different requirements for UX management. In summary, we identified 13 requirements. The most frequently mentioned requirements were prototypes and UX/usability evaluation. Communication between UX professionals and developers was identified as a major improvement in the software development process. In summary, we were able to identify requirements for UX management of People/Social, Technology/Artifacts, and Process/Practice. However, we could not identify requirements for UX management that enabled the development and achievement of a UX goal.

“Those things are written by lawyers, and programmers are reading that.” Mapping the Communication Gap Between Software Developers and Privacy Experts

To ensure data-privacy compliance, it is common for companies to consult privacy experts for the identification and communication of privacy requirements to software developers. However, developers often fail to fulfill those requirements resulting in companies regularly being fined for violations due to non-compliance with privacy data regulations. To investigate why software developers struggle with the implementation of privacy requirements and explore their communication modality, we conducted a qualitative semi-structured interview study with 30 participants involving 10 software developers, 10 privacy experts, and 10 team coordinators with an average experience of nine years in the privacy communication and implementation process within a company context. We found a communication gap between software developers and privacy experts, suggesting a lack of proper procedural steps during the software development process to guarantee that the privacy requirements have been adequately addressed. We also uncovered that since privacy requirements were mostly communicated in a uni-directional manner, they were often perceived as a hindrance during software development, thus fostering an adversarial relationship between privacy experts and developers. Therefore, in order to fulfill the experts' requirements, software developers requested concrete steps to take during the software development process, as observed in the security field. However, privacy experts often lacked the technical knowledge to provide such instructions. This work contributes an explanatory theory on the communication gap between software developers and privacy experts. We discuss common obstacles in the communication of privacy experts and software developers and provide guidance on how to address them.

Ferramenta digital para primeiros socorros na infância: aplicativo para profissionais e cuidadores

Abstract Objective To describe the process of developing an app for children first aid support for professionals and caregivers. Methods Technological production study, developed in southern Brazil, between March/2022 and May/2023, based on the functionalities of the scrum method. Designed in cooperation with an interprofessional team, the software was developed based on a set of light and agile practices, the framework called Flutter and the Dart programming language. Results The app, developed in a systematic and participatory way with the participation of health and education professionals and caregivers, demonstrated plausible functionality, accessibility, feasibility and reliability in providing agile and safe information in events such as children’s first aid. Called SOS Kids, the app has an attractive interface, quick access to visual information and various commands on a single screen. The graphic elements are interactive, in order to favor visualization and prospective decision-making. Conclusion The development process of the child first aid support software for professionals and caregivers, based on a method that relies on light and agile practices, proved to be functional and has the potential to support, in an effective and safe way, health professionals, education professionals and caregivers in general.

Methods of evaluating code generators

In the ever-evolving landscape of software development, code generators have emerged as vital instruments, fostering innovation and efficiency. These automated maestros translate abstract requirements into functional code, significantly reducing development time and bridging gaps across varied programming environments. This article categorizes code generators based on their operational domain, input specificity, and the nature of the output they produce, unraveling a diverse spectrum from foundational scaffolding creators to sophisticated, language-specific assistants. Selecting an apt code generator is pivotal to the success of a project. To assist developers in this critical choice, the article presents an evaluation method that weighs essential factors such as adaptability, efficiency, and ease of integration with existing systems. This systematic approach ensures the selection of a tool that not only meets immediate project needs but also supports future scalability and complexity. The discussion extends beyond functionality to explore the transformative role of code generators. By automating routine coding tasks, they allow developers to focus on more creative aspects of software design, enhancing code quality and fostering a culture of innovation. The generators thus become indispensable allies in the creative process of software development. In essence, the article advocates for an informed selection of code generators, viewing them as cornerstones for modern coding practices. The proposed evaluation method serves as a strategic framework, empowering developers to navigate the myriad of options and align their choice with both current requirements and future aspirations. It is an invitation to embrace the synergy between human creativity and machine precision, crafting code that is both efficient and elegant.

Balkhash-Alakol Basin animal world database creation process for the purpose of cadastre maintenance

This paper describes the database (DB) development process of the cadastre of the fauna of the Balkhash-Alakol Basin that will be used for analyzing the spatial and temporal dynamics of population status and the graphical display of spatial data. The data was organized using the methods of relational database organization (SQL) with sets of individual criteria adapted for different groups of animals (parasitofauna, malacofauna, arachnofauna, entomofauna, ichthyofauna, herpetofauna, ornithofauna, and theriofauna). This database considers several additional technical aspects of its further integration with other databases, for example, geographical, climatic, etc., which allows for a deep analysis of the relationship between various environmental factors and population dynamics. For the functioning of the user interface, server architecture, and program interface, an application on the Django framework was developed, which simplified the processes of software development and allowed specialists to flexibly adapt the database to the own needs and project goals while simultaneously increasing the autonomy, security, and stability of the database.

A typical digital model of the construction process

Based on the practical experience of developing digital models of technological processes for the production of construction and installation works, a hypothesis about the similarity of digital models of construction processes is formulated. To prove the existence of this hypothesis, studies have been carried out, the purpose of which is to typify digital models of construction processes. When constructing a typical digital model of the construction process, the conceptual apparatus is clarified, mathematical models are proposed, which are most often found in the practice of modeling. The practical application of a typical digital model of the construction process greatly simplifies the processes of software development (computer codes), can be used to automate procedures that are used in the preparation of working organizational and technological documentation. In addition, standard digital models can be used to find such solutions for construction production that reduce the duration of construction and installation work with a significant reduction in cost.

PRINCIPLE OF APPLYING THE HIERARCHICAL APPROACH WITHIN THE FRAMEWORK OF CREATING MULTI-OBJECTIVE QUALITY MODELS OF SOFTWARE SYSTEMS

The article discusses the principle of applying a hierarchical approach (HA) in the context of developing multi-objective quality models for software systems (SS). The authors analyze the main concepts and methods associated with hierarchical modeling, as well as identify its advantages and limitations. The possibilities of using a hierarchical structure to enhance the efficiency of the software system quality evaluation process are explored. Emphasis is placed on the importance of constructing hierarchical quality models considering the specificities of individual systems. Various approaches to integrating hierarchical models into the software development process to ensure high product quality are highlighted. The aim of the article is to research, analyze, and develop methods for integrating the hierarchical approach in creating multi-objective quality models for software systems to improve their evaluation and management processes. The realization of this aim involves addressing the following objectives: conducting an analysis of the peculiarities of detailed hierarchical breakdown mechanisms for assessing SS quality; conducting an analysis of the application of specific mathematical theories in forming the hierarchical structure of multi-objective quality models for SS; examining the main stages of the HA principle for SS quality evaluation; and developing a mathematical apparatus for the model based on the implementation of hierarchical breakdown mechanisms for assessing SS quality. The conclusions of the article may be useful for professionals in the software development field and educators teaching software quality disciplines. In the development of the mathematical apparatus for models based on hierarchical breakdown mechanisms for assessing SS quality, a mathematical toolkit has been developed, including a formulaic mathematical apparatus for SS quality assessment. It is essential to emphasize the need for further research to improve this mathematical apparatus and its suitability for specific usage requirements and conditions.

Bridging the gap between control theory and practice: From simple controller design to a practical microcontroller implementation

The practical implementation of control theory principles often presents challenges in bridging theoretical designs with real-world applications. This paper aims to fill this void by examining four distinct theoretical control techniques, namely the Kalman method, Dahlin method, PID, and Fractional order PID, and systematically implementing them using Arduino microcontroller boards. Theoretical foundations and design considerations are initially presented for each control method. Following that, comprehensive and sequential guidelines are given for converting these abstract ideas into tangible applications using microcontrollers. The text provides a detailed description of the hardware setup and software development process for each method. It focuses on practical aspects such as sensor interfacing, control algorithm implementation, and real-time constraints. An examination of these methods using practical implementation metrics such as response time, overshoot and stability allows us to gain a better understanding of how well each approach is suited for real-world applications. In summary, this study enhances our knowledge of the process of moving from theoretical control design to practical microcontroller implementation. It provides valuable guidance for engineers and researchers who want to apply control strategies in real-time embedded systems.

Swamedig Prototype: The Integrating Application for Interprofessional Practice of Pharmacists, Nurses, and Midwives

Related to the participating of midwives and nurses in the self-medicate by community outside of pharmacist supervision, since the public is more able to expect improper medication. Instead of efforts to eliminate the involvement of both stakeholders, employing the information system that integrates interprofessional practice with pharmacists will be a suitable deal. After that we carried out a literature review by searching several national publications related to the development of online self-medication applications, flowcharts were compiled using web-based online diagramming software; draw.io. Microsoft Office Power Point version 2019 was used to create the user interface. The prototype outcomes were displayed in a scientific discussion board for pharmacy students, and members granted reviews and feedback. Here in, we show our “Swamedig” prototype, the integrating application for interprofessional practice of pharmacists, nurses, and midwives. Our prototype is an application integrating interprofessional practice of pharmacists, nurses, and midwives. The program connects them in collaboration of expertise to support the community taking self-medication. The core of our menu, pharmacists supervising drug selection and administration based on assessments performed by nurses and midwives. Thus, our project is developed to realize the rational drug use. In addition, our prototype was ready for the next stage on the engineering to complete the software development process.

Simple Calculator Application with Client-Server Connection Using Java Socket

This research aims to develop a simple calculator application using a client-server connection based on Java Socket. The research method involves the software development process that integrates a client-server architecture to enable users to perform basic mathematical calculations over a network. The main findings of this research are the successful implementation that enables effective communication between the client and server, facilitating the exchange of data for simple mathematical operations. The conclusion of this research indicates that the use of Java Socket in a calculator application can provide reliable and efficient data transmission performance. The contribution of this research lies in the development of a practical application that demonstrates the benefits of implementing a client-server connection using Java Socket in the context of mathematical calculations.

Using Process Mining and Business Process Redesign to Improve Software Development Process

Using Process Mining and Business Process Redesign to Improve Software Development Process

Evidence-Based Quality-Aware Agile Software Development Process: Design and Evaluation

Evidence-Based Quality-Aware Agile Software Development Process: Design and Evaluation

STUDY OF REQUIREMENTS AND CYBER SECURITY ANALYSIS OF THE SOFTWARE OF INFORMATION AND CONTROL SYSTEMS OF NPP, IMPORTANT FOR SECURITY

In order to counter cryptoattacks on elements of critical infrastructure, in particular on computer control systems of nuclear power plants, the goal achieved in this work is to analyze the requirements for computer security (cyber security) of the software of this system, which are relevant to the stage of its design, development and operation, as well as proposed criteria and methodology for calculating the quality of compliance with these requirements. To achieve the goal, the first section of the article provides information on standards and identified requirements for software cyber security. In the second section, an analysis of the requirements is carried out and an approach to software development is described, taking into account these requirements and analyzing their consideration. In the third section, an approach to calculating the performance indicator of software cyber security requirements is proposed. The fourth chapter provides an example of the application of this approach to the existing computerized NPP management system to assess compliance with cyber security requirements. The article discusses the requirements of the international standard IEC62645 and the industry standard of Ukraine “NP 306.2.237-2022”, which are related to the development of software for the computer control system of nuclear power plants. Ensuring cyber protection of the software of the NPP computer management system is a complex task that includes administrative, legal, technical, cultural, and organizational components. From the point of view of software development and operation, the main cyber security measures include software code verification, ensuring the absence of hidden functions, implementing physical equipment protection, security of software components, authentication, security during data exchange. To determine the compliance of the software with the requirements of cyber protection, it is necessary to determine the requirements applicable to each component of the software and conduct an analysis of their implementation. This action should occur continuously during the development of new software and software evaluation of existing computer control systems. After the analysis of the applicability and fulfillment of the requirements, the calculation of the coefficient of the fulfillment of the requirements can be carried out. It was noted that cyber protection is only a component of the quality of the software of the NPP computer control system, which is important for the performance of security functions. The analysis of requirements and the calculation of the coefficient of their fulfillment can be an integral part of the complex model of the software development process of the computer system of NPP management.