Software Development Life Cycle Research Articles

Securing software development: A comprehensive and comparative analysis of cybersecurity measures

In the rapidly evolving digital age, the integrity and security of software development have emerged as paramount concerns amidst the increasing prevalence of cyber threats. This study presents a comprehensive and comparative analysis of cybersecurity measures within the software development lifecycle, focusing on a multi-layered technological framework comprising AWS hosting, Java Spring Boot backend, MySQL databases, Flutter/Dart frontend, and Android/iOS mobile applications, alongside RestAPIs. Through an adaptable methodology, this research delves into the cybersecurity challenges and solutions from both developers’ and users’ perspectives, underpinned by an empirical analysis supported by literature from AWS, OWASP Foundation, and SecureApps, among others. Central to our investigation is the dichotomy between the developer’s implementation strategies and the users’ expectations for security, aiming to uncover the extent of congruence between these two pivotal viewpoints. It also employs a mixed-method approach, integrating qualitative analyses with quantitative data to evaluate the effectiveness of current cybersecurity practices across different technological layers. By identifying key challenges and exploring real-world examples, this research endeavors to empower developers and stakeholders with actionable insights and recommendations to enhance cybersecurity measures effectively. The findings reveal a significant alignment between developers’ efforts and users’ expectations, in key areas of the subject. By fostering a deeper understanding of the cybersecurity landscape, this research aspires to guide the development of more resilient, secure software systems capable of withstanding the evolving threats in the digital ecosystem.

Booking and Reservation System: A Unified Application Using Location-Based Services for Sustainable Tourism Networks

The LakByahe Application offers a ground-breaking solution to revolutionize tourism in Nasipit, Agusan del Norte, Philippines. It is a unified application aiming to address existing challenges by incorporating user-centric features. Through an advanced location-based services and streamlined booking processes, the application intends to enhance efficiency, accessibility, and sustainability in the tourism sector. By providing real-time tracking, efficient transit solutions, and a comprehensive directory of establishments, the LakByaheapp fills information gaps and fosters economic growth by connecting tourists with local businesses. The study adopts a mixed-method research approach, combining quantitative techniques with qualitative methods to comprehensively investigate and enhance the booking and reservation system. The software development life cycle for the application involves critical stages such as requirement analysis, design, implementation, testing, deployment, and maintenance. Suggestions and recommendations based on survey responses include incorporating augmented reality experiences, offering curated tour packages, creating community forums, and ensuring offline access to maps. The ongoing collaboration with local businesses and tourists, regular updates, user training sessions, and a well-crafted marketing strategy are recommended to amplify the app's impact. Overall, the LakByahe App presents a comprehensive solution to improve the province’s tourism industry, fostering economic growth and sustainable development in the region

Comprehensive Examination of Risk Management Practices Throughout the Software Development Life Cycle (SDLC): A Systematic Literature Review

Risk management in the software development lifecycle (SDLC) is a continuous process that addresses risks throughout a system's lifecycle, including acquisition, development, maintenance, or operation. Despite its importance, ineffective risk management practices can lead to project failures, impacting organizations financially and reputationally. Therefore, there is a need for a systematic understanding of risk management practices in SDLC. This study conducts a Systematic Literature Review (SLR) related to risk management activities performed by previous research during the SDLC. The SLR method combines Kitchenham with the toll-gate method to select literature for use. This SLR aims to investigate activities in traditional waterfall and agile development processes, which will be mapped into risk management activities in SDLC according to ISO 16085:202. Additionally, the review highlights the challenges encountered in implementing risk management in the SDLC process, including project complexity, adherence to policies and standards, lack of communication, lack of resources, and organizational culture.

Application of Multimedia Learning for Pancasila and Citizenship Education in SD Inpres Waingapu 3

PPKn is an essential subject in elementary schools to instill Pancasila values and national identity. However, the results of the End-of-Semester Assessment (PAS) at SD Inpres Waingapu 3 consistently show low PPKn scores. To address this issue, this study developed a multimedia learning application for PPKn. This application is designed to enhance student understanding of PPKn material, particularly related to Pancasila values. The SDLC (Software Development Life Cycle) Waterfall method was used in the application's development. The application's effectiveness was tested through pre-test and post-test, showing a significant increase in the average score of 79.5%. The application's usability was also tested using the System Usability Scale (SUS), with an average score of 85 and a category of "Excellent". These results indicate that the PPKn multimedia learning application is effective and ready for use in elementary schools. hopefully this application can help improve the quality of PPKn learning and instill Pancasila values more strongly in students.

Rancang Bangun Aplikasi Pembelajaran Tajwid Menggunakan Metode Agile Berbasis Android

Background: The lack of time for lessons on Tajweed in official or formal schools is due to the fact that the subject matter of the study of Tajweed is quite a lot of material and will not be enough to be completed with only Islamic-Religious Education subjects. For example, the initial introduction to the science of tajwid, the place where letters are issued (makhroj), the nature of the letters, the law of nun sukun/tanwin, and many other materials. Methods: In this study, researchers used the SDLC (Software Development Life Cycle) system development method. The type of SDLC used is the Agile Method. Research Results: In this study using black box testing, which shows that the application of recitation learning media is able to make students interested in learning tajwid. Conclusion: Based on the results of the implementation and the results of the tests that have been carried out, the authors conclude that the system or application of this recitation learning can run as expected. Keywords: Tajweed, Al-Qur'an, Applications, Learning, Android.

الحفاظ على الأصول الرقمية من خلال التخطيط العقاري عبر الهاتف المحمول

Many people own online accounts, with some having financial values like Internet banking, e-wallet and cryptocurrency. In the case of sudden death, their heirs are unaware of the digital assets possessed by the de-ceased person, which causes the assets to be lost forever, and the heirs might not receive the assets. If an estate plan did not account for digital as-sets properly, the beneficiaries would not be able to access them. Therefore, this paper addresses this issue by implementing a software development approach in designing a suitable model for sustaining digital assets through smartphones to allow the inheritance of digital assets to the heirs. The soft-ware development life cycle was adopted as the methodology to identify the model’s components through four phases: requirements analysis, sys-tem design, implementation and test and evaluation. First, this work pro-posed a model named Mobile Estate Planning for Digital Assets (MEPDA). Second, the study demonstrated the component of the model in a smartphone application, and finally, it was tested and evaluated through a usability study with a group of users. Most users suggested that MEPDA is useful and easy to use. Further, they were also satisfied with its functionalities and features. Mobile application for digital asset estate planning is necessary today due to the exponential increase of digital asset ownership with financial values. It could be one way of helping users to allow an efficient inheritance process for their heirs in the case of death. يمتلك العديد من الأشخاص حسابات عبر الإنترنت، حيث يمتلك البعض منها قيمًا مالية مثل البنوك الإلكترونية، والمحافظ الإلكترونية، والعملات المشفرة، في حالة الوفاة المفاجئة، يكون الورثة غير مدركين للأصول الرقمية التي يمتلكها الشخص المتوفى، مما يتسبب في فقدان الأصول إلى الأبد، وقد لا يتلقى الورثة الأصول. إذا لم يأخذ تخطيط العقار الأصول الرقمية في الاعتبار بشكل صحيح، فلن يتمكن المستفيدون من الوصول إليها. لذلك، تعالج هذه الورقة هذه المشكلة من خلال تنفيذ نهج تطوير البرمجيات في تصميم نموذج مناسب للحفاظ على الأصول الرقمية عبر الهواتف الذكية للسماح بوراثة الأصول الرقمية للورثة. تم تبني دورة حياة تطوير البرمجيات كمنهجية لتحديد مكونات النموذج من خلال أربع مراحل: تحليل المتطلبات، تصميم النظام، التنفيذ والاختبار والتقييم. أولاً: اقترحت هذه الدراسة نموذجًا باسم التخطيط العقاري للأصول الرقمية عبر الهاتف المحمول (MEPDA). ثانيًا: أظهرت الدراسة مكونات النموذج في تطبيق الهاتف الذكي، وأخيراً تم اختباره وتقييمه من خلال دراسة استخدام مع مجموعة من المستخدمين. (MEPDA) اقترح معظم المستخدمين أن مفيد وسهل الاستخدام. بالإضافة إلى ذلك كانوا راضين يضًا عن وظائفه وميزاته. يعد تطبيق الهاتف المحمول لتخطيط العقارات للأصول الرقمية ضروريًا اليوم نظرًا للزيادة الكبيرة في ملكية الأصول الرقمية ذات القيم المالية. يمكن أن يكون هذا أحد الطرق لمساعدة المستخدمين على السماح بعملية توريث فعالة لورثتهم في حالة الوفاة

Enabling Health Information Recommendation Using Crowdsourced Refinement in Web-Based Health Information Applications: User-Centered Design Approach and EndoZone Informatics Case Study.

In the digital age, search engines and social media platforms are primary sources for health information, yet their commercial interests-focused algorithms often prioritize irrelevant content. Web-based health applications by reputable sources offer a solution to circumvent these biased algorithms. Despite this advantage, there remains a significant gap in research on the effective integration of content-ranking algorithms within these specialized health applications to ensure the delivery of personalized and relevant health information. This study introduces a generic methodology designed to facilitate the development and implementation of health information recommendation features within web-based health applications. We detail our proposed methodology, covering conceptual foundation and practical considerations through the stages of design, development, operation, review, and optimization in the software development life cycle. Using a case study, we demonstrate the practical application of the proposed methodology through the implementation of recommendation functionalities in the EndoZone platform, a platform dedicated to providing targeted health information on endometriosis. Application of the proposed methodology in the EndoZone platform led to the creation of a tailored health information recommendation system known as EndoZone Informatics. Feedback from EndoZone stakeholders as well as insights from the implementation process validate the methodology's utility in enabling advanced recommendation features in health information applications. Preliminary assessments indicate that the system successfully delivers personalized content, adeptly incorporates user feedback, and exhibits considerable flexibility in adjusting its recommendation logic. While certain project-specific design flaws were not caught in the initial stages, these issues were subsequently identified and rectified in the review and optimization stages. We propose a generic methodology to guide the design and implementation of health information recommendation functionality within web-based health information applications. By harnessing user characteristics and feedback for content ranking, this methodology enables the creation of personalized recommendations that align with individual user needs within trusted health applications. The successful application of our methodology in the development of EndoZone Informatics marks a significant progress toward personalized health information delivery at scale, tailored to the specific needs of users.

Automated Test Case Generation for Path Coverage by Using Multi-Objective Particle Swarm Optimization Algorithm with Reinforcement Learning and Relationship Matrix Strategies

Software testing is an important phase in software life cycle, and test case generation occupies the main part of the testing workload. Path coverage is the most stringent and difficult coverage criteria, so automatic test case generation for path coverage (ATCG-PC) is an important task in software testing. ATCG-PC is usually abstracted as an optimization search problem, and the commonly used solution algorithm is swarm intelligence algorithm. This paper proposes a path coverage test case generation algorithm based on improved multi-objective particle swarm optimization (IMOPSO) algorithm. The algorithm uses the multi-objective strategy to generate test cases for a group of similar paths at a time, and is supplemented by the particle action selection strategy based on reinforcement learning and the secondary search algorithm based on relationship matrix, which makes use of the similarity information between paths to speed up the early convergence and help to quickly reach the optimal solution around the local optimal position. By grouping the paths according to the similarity, the algorithm reduces the test case consumption, and improves the efficiency of test case generation. Experimental results show that, compared with the existing methods, the proposed algorithm can achieve higher path coverage with less test case consumption and is also suitable for large-scale programs.

The utility of complexity metrics during code reviews for CSE software projects

Software sustainability is critical for Computational Science and Engineering (CSE) software. Highly complex code makes software more difficult to maintain and less sustainable. Code reviews are a valuable part of the software development lifecycle and can be executed to manage complexity and promote sustainability. We have developed a technique to guide the code review process that considers cyclomatic complexity levels and changes during code reviews. Using real-world examples, this paper analyzes metrics gathered via GitHub Actions for several pull requests, and demonstrates the application of this approach in support of software maintainability and sustainability. We have also conducted a survey as to the usefulness of complexity metrics during code reviews. The results indicate that practitioners find the metrics useful, and that utilizing the metrics during pull request code reviews has the potential to improve the maintainability and sustainability of computational science and engineering software.

Analysis and Design of Customer Service Information Systems at Bersaudara Car Repair Shop Of Pangkalpinang

Bersaudara Car Repair Shop of Pangkalpinang is a business that operates in the field of automotive services, specializing in car maintenance and repair. Currently, customer service data processing still uses a manual system with Microsoft Office tools. In its application, this application cannot support fast and easy work. This can have implications for service providers towards customers, because they often encounter obstacles in the process of handling repairs and making reports. The aim of this research is to provide a solution in forming a needs analysis and documented information system design which will be developed into an information system application at the brothers' car repair shop. Based on the SDLC (Software Development Life Cycle) concept, the initial thing needed to produce an information system is to create a needs analysis and documented system design. The system analysis and design carried out here goes through the stages of data collection, carrying out analysis using the PIECES (Performance, Information, Economic, Control, Efficiency, Service) framework and carrying out system design using an object-oriented approach using UML (Unified Modeling Language) notation. The results of the analysis and design were tested in the form of a design evaluation using the consistency analysis method which was proven to have a consistent percentage value of 100%. The results of this design are included in the correctness category which proves that the system requirements and system design are consistent and correct.

Enabling affordances for AI Governance

Organizations dealing with mission-critical AI based autonomous systems may need to provide continuous risk management controls and establish means for their governance. To achieve this, organizations are required to embed trustworthiness and transparency in these systems, with human overseeing and accountability. Autonomous systems gain trustworthiness, transparency, quality, and maintainability through the assurance of outcomes, explanations of behavior, and interpretations of intent. However, technical, commercial, and market challenges during the software development lifecycle (SDLC) of autonomous systems can lead to compromises in their quality, maintainability, interpretability and explainability. This paper conceptually models transformation of SDLC to enable affordances for assurance, explanations, interpretations, and overall governance in autonomous systems. We argue that opportunities for transformation of SDLC are available through concerted interventions such as technical debt management, shift-left approach and non-ephemeral artifacts. This paper contributes to the theory and practice of governance of autonomous systems, and in building trustworthiness incrementally and hierarchically.

Custom Application Booking Information System at PT Mitra Tekno Nusantara

Information systems can provide strategic opportunities in facing business competition when implemented to support a business process. PT. Mitra Tekno Nusantara (PT. MTN) is a company engaged in the Information Technology sector that produces various kinds of software and hardware. The process of recording custom application order transactions that are still manual has weaknesses in terms of speed of recording transaction processes. In addition, the deadline on a project is rarely monitored so that there are projects whose progress exceeds the specified time target. This of course of course from customers. To fix this problem, the researcher proposes to design a website-based computerized system to manage custom application order transaction data at PT. MTN. The design of the custom application ordering information system that the author proposes is made using the PHP Native programming language and MySQL database. The proposed information system design uses the Software Development Life Cycle (SDLC) method with the Waterfall model. With the design of this custom application ordering system, it is hoped that it will make it easier for admins to record transaction data for custom application orders. In addition, it makes it easier for the project head to monitor the deadline date of each project being worked on.

Graphics based business process harnessing tools, advancing digital maturity of business

PurposeThe advancement of digital maturity at a business level has proven to be challenging, with limited time, resources and skills in extracting and mapping business processes. In order to advance digitalization, the mapping of all business activities is essential. To close this gap, this research is aimed at enabling the operational level extraction and classification of business activities using a graphical methodology. This objective is accomplished through the development of a digital tool that leverages Software Development Life Cycle (SDLC) principles.Design/methodology/approachThis research is focused on facilitating rapid extraction of business activities with the adoption of a graphical methodology. Business activities are captured through a digital tool in a structured, interlinked and hierarchical manner.FindingsNotably, this work is novel as it introduces a new graphical tool to replace traditional tools in the domain of Business Process Mapping (BPM). This graphical tool is distinguished by a unique feature; that is a self-configuring database with the flexibility to capture all process options, providing innovative solutions to the challenges faced in digitalizing business processes.Originality/valueThis work is original in that a new graphical interface is developed to replace traditional tools in the space of BP data gathering. The unique challenge of an auto configuring database with flexibility to capture all process options is presented.

Mindfulness and Emotional Intelligence: A Study on Millennials on Hospitality

In software development, dependability and quality are critical. A Bug Tracking System (BTS) designed specifically for large-scale software projects is introduced in this significant project with the goal of streamlining bug tracking, reporting, detection, and resolution. The system provides secure authentication, a backend database that is reliable, and an easy-to-use web interface. Using cutting-edge web technologies, it offers critical features including automated notifications, progress tracking, severity assignment, and thorough bug reporting together with user-friendly interfaces for a range of user roles. Tools for data visualization help identify defect patterns and monitor projects. The project follows best practices recommended by the industry for requirements analysis, design, implementation, testing, and deployment, and it solicits ongoing input. The result is a thorough BTS that addresses defect management difficulties. Thorough testing and assessment in comparison to standards confirms its efficacy. This approach could have a big impact on software development, improving user satisfaction and quality. Furthermore, issues with bug tracking are covered, including distributed team communication, scalability, and automation balancing. Proposals for strategies to address these issues are grounded in scholarly research and professional opinions. This summary highlights the critical role that bug tracking systems play in contemporary software development, making it an invaluable tool for researchers, practitioners, and teams looking to improve bug tracking procedures and raise the caliber and effectiveness of the software development lifecycle. Keywords— Bug Tracking System, Software Development, Defect Management, Quality Assurance, Automation, Collaboration, Large-scale Projects.

DyGAISP: Generative AI-Powered Approach for Intelligent Software Lifecycle Planning

DyGAISP: Generative AI-Powered Approach for Intelligent Software Lifecycle Planning

Depth linear discrimination-oriented feature selection method based on adaptive sine cosine algorithm for software defect prediction

Software Defect Prediction (SDP) plays a vital role in the software development life cycle as it helps identify and fix software defects. However, predicting software defects with irrelevant features and overlapping classes is challenging and can lead to lengthy training and low model accuracy. To address these challenges, this research introduces a novel Depth Linear Discrimination-Oriented Feature Selection Method based on Adaptive Sine Cosine Algorithm, named Depth Adaptive Sine Cosine Feature Selection (DASC-FS). DASC-FS integrates the Adaptive Sine Cosine Algorithm (ASCA) as a search algorithm to determine the relevant features and adopts Depth Linear Discriminant Analysis (D-LDA) to identify the discriminative features that maximize class separation. The paper proposes ASCA which is a metaheuristic algorithm meticulously designed to enhance the search capabilities of the standard Sine Cosine Algorithm (SCA). Combining the simplicity of the SCA with the efficiency of multiple mutation operators inspired by Genetic Algorithms (GA), ASCA enhances the diversity of the solutions and imparts remarkable adaptability to various situations. Furthermore, this study introduces a novel linear discriminant method, called Depth Linear Discriminant Analysis (D-LDA) to enhance the robustness of the original LDA. D-LDA systematically integrates the matrix depth concept into LDA, offering a systematic approach to address the challenges associated with scatter matrix estimation. As matrix depth measures how central or deep a particular matrix is within a distribution with respect to different directions, it is an efficient tool for computing a robust scatter matrix estimator that can handle outliers and complex data structures. The experimental results showed that DASC-FS consistently obtains the highest accuracy compared to most existing methods by integrating ASCA and D-LDA, thereby considering both accuracy optimization and class separation. The results also show that the use of multiple mutation operators in ASCA improves the search process capabilities. The results also show that the capacity of D-LDA to reduce data dimensionality and increase class separation yields highly competitive results compared to other LDAs. Finally, features related to code size and complexity have emerged as key factors for SDP because they consistently rank as important features across different classifiers and datasets. DASC-FS offers a valuable solution in domain knowledge for enhancing predictive accuracy and understanding factors contributing to software defects through enhanced search capabilities, robust scatter matrix estimation, and the ability to reduce data dimensionality.

Multi-objective model transformation chain exploration with MOMoT

Context:The increasing complexity of modern systems leads to an increasing amount of artifacts that are used along the model-based software and systems development lifecycle. This also includes model transformations, which serve for mapping models between representations, e.g., for verification and validation purposes. Objectives:Model repositories manage this variety of artifacts and promote reusability, but should also enable the bundling of compatible artifacts. Therefore, model transformations should be reused and arranged into transformation chains to support more complex transformation scenarios. The resulting transformation should correspond to the user’s interest in terms of quality criteria such as model coverage, transformation coverage, and number of transformation steps, thus assembling such chains becomes a multi-objective problem. Methods:A novel multi-objective approach for exploring possible transformation chains residing in model repositories is presented. MOMoT, a model-driven optimization framework, is leveraged to explore the transformation space spanned by the repository. For demonstration, three differently populated repositories are considered. Results:We have extended MOMoT with an exhaustive, multi-objective search that explores the entire model transformation space defined by graph transformation rules, allowing all possible transformation chains to be considered as solution. Accordingly, the optimal solutions were identified in the demonstration cases with negligible computation time. Conclusion:The approach assists modelers when there are multiple chains for transforming an input model to a specified output model to consider. Our evaluation shows that the approach elicits all legitimate transformation chains, thus enabling the modelers to consider trade-offs in view of multiple criteria selection.

Overview of software testing

Software testing is a task conducted to assess the quality of software and enhance its performance. This process ensures that the software behaves as expected according to user requirements. The software development life cycle (SDLC) outlines various stages such as Analysis, Requirements, Design, Development, Testing, Deployment, and Maintenance to guide the software development process. The primary objective of SDLC is to deliver error-free software that meets user expectations within specified timeframes. Software testing is an integral part of SDLC, serving to identify issues and ensure the completeness, correctness, and quality of the developed software. The ultimate goal is to create efficient software and maintain high-quality assurance throughout the product's lifecycle. This review paper aims to provide a brief discussion on how the software development life cycle contributes to efficient software development and how the software testing life cycle process ensures better quality assurance for the product.

DESIGN OF INFORMATION SYSTEM FOR PAYMENT OF WORKERS' WAGES AND PREPARATION OF FINANCIAL REPORTS ON GARMENT UD KELAMBI ANYAR

Information technology developments are beneficial to businesses worldwide, particularly in Indonesia. Businesses that use information technology effectively can store and manage data, expedite business operations, and manage data. Information systems used in accounting are one area where technology is crucial. The purpose of this project is to develop and construct an information system application for the UD Kelambi Anyar clothing firm that will be used for financial report preparation and worker salary payment. For worker salaries, this company historically used manual records, which presented a number of challenges including the possibility of errors, information delays, and difficulty in finding data. This application was developed using the Software Development Life Cycle (SDLC) approach using the Waterfall paradigm. Planning, analyzing, designing, implementing, testing, and implementing are the stages of system development. Microsoft Access 2019 was used to create the database for this application, while Visual Basic Applications (VBA) was used to write the code. An information system application that facilitates the recording of worker service payments and the preparation of financial reports, such as profit and loss statements and balance sheets, is the outcome of this research project for UD Kelambi Anyar. In addition to a filter menu to make data searching for employee salary reports easier, this program has a username and password feature to ensure user security. It is envisaged that using this application will improve the financial transaction process' accuracy and efficiency and speed up the process of making management choices.

E-Citrus: A Cloud-Based Citrus Pest and Disease Detection, Diagnostic and Prevention using Convolutional Neural Network

Citrus fruit yields in the Philippines have been fluctuating dramatically in recent years. Diseases, pests, and soil inadequacy have all contributed to the citrus industry's severe decline. More than 15 viruses and virus-like diseases have infected Citrus. Agricultural productivity must improve for a country to be progressive. Resources should be utilized to their full potential, diseases and pests should be controlled efficiently, and technological advancements must be adopted. This application will identify and map common pests and diseases of citrus fruits in Oriental Mindoro, apply image processing techniques to analyze diseases of citrus fruits with corresponding solutions caused by bacteria, and give information about diseases related to citrus fruits and how to cure them. The researchers used the Spiral Model as a Software Development Life Cycle (SDLC) model to develop this application. In this model, researchers can plan the flow of the application. If the application did not meet the desired result, the researchers could revise it again until it met the desired one. The researchers used the convolutional neural network to classify and process the captured images of the citrus fruits’ diseases and pests. The researchers asked the selected Citrus farmers in Oriental Mindoro to evaluate the project using the different ISO 25010 criteria and rated the application as very acceptable overall.