Software Development Life Cycle Research Articles

Understanding the GDPR from a requirements engineering perspective—a systematic mapping study on regulatory data protection requirements

AbstractData protection compliance is critical from a requirements engineering (RE) perspective, both from a software development lifecycle (SDLC) perspective and regulatory compliance. Not including these requirements from the early phases of the SDLC can prove costly and challenging afterward. The general data protection regulation (GDPR) from the European Union (EU) sets a list of requirements that organizations working within its scope should satisfy. However, these requirements are complex to work with, as legal prose tends to be vague and imprecise, and not all requirements have received the same attention from researchers. This study aims to identify the research published in RE for helping compliance with regulatory data protection requirements. We gathered and analyzed 90 articles from 2016 to 2022 through a systematic mapping study. We analyzed key trends in the sample, such as year of publication, publication venue, type of research, interdisciplinarity in the author’s background, GDPR focus of compliance element, and type of proposal. Our main findings show ongoing interest, mostly published in conferences, in achieving overall compliance with the GDPR and consent as the most popular topics. Other topics, such as cookies or children’s data, did not receive significant attention. Research over the whole RE process has been done. 20 (22%) of the papers have authors affiliated with non-computer science; however, most research seems not interdisciplinary. We finally discuss gaps in the literature, possible future areas of research, and the importance of interdisciplinary research for regulatory data protection requirements in RE.

Adopting security practices in software development process: Security testing framework for sustainable smart cities

The dependence on smart city applications has expanded in recent years. Consequently, the number of cyberattack attempts to exploit smart application vulnerabilities significantly increases. Therefore, improving smart application security during the software development process is mandatory to ensure sustainable smart cities. But the challenge is how to adopt security practices in the software development process. There are Several established and mature security testing frameworks exist that consider security requirements and testing during Several already established and mature security testing frameworks exist that consider security requirements and testing during Software Development Life Cycle (SDLC), but there is a unique challenges posed by smart city applications and the need for a comprehensive approach to address the evolving threat landscape in this context. This paper proposed a framework that adopts security testing practices in all phases of the software development process. The proposed framework identifies several security activities and steps that can be applied in each phase of the software development process.

Trustworthy and collaborative traceability management: Experts’ feedback on a blockchain‐enabled framework

AbstractBlockchain technology has attracted significant attention in both academia and industry. Recently, the application of blockchain has been advocated in software engineering. The global software engineering paradigm exacerbates trust issues, as distributed and cross‐organizational teams need to share software artifacts. In such a context, there is a need for a decentralized yet reliable traceability knowledge base to keep track of what/how/when/by whom software artifacts were created or changed. This study presents a blockchain‐enabled framework for trustworthy and collaborative traceability management and identifies benefits, challenges, and potential improvements based on the feedback of software engineering experts. A qualitative approach was followed in this study through semistructured interviews with software engineering (SE) experts. Transcripts were analyzed by applying the content analysis technique. The results indicated the emergence of five categories, further grouped into three main categories: experts' perceptions, blockchain‐based software process improvement, and experts' recommendations. In addition, the findings suggested four archetypes of organizations that may be interested in blockchain technology: distributed organizations, organizations with contract‐based projects, organizations in regulated domains, and regulators who may push the use of this technology. Further efforts should be devoted to the integration of the proposal with tools used throughout the software development lifecycle and leveraging the potential of smart contracts in validating the implementation of requirements automatically.

DEVELOPMENT OF A WEB-BASED APPLICATION FOR MANAGING ASSESSMENT AND INTERVIEW ACTIVITIES AT PT. GAIA SOLUTIONS

Information systems have significantly evolved in tandem with advancements in information technology. This evolution has led PT Gaia Solution to transform from conventional business practices to digital systems, particularly for managing assessments and interviews. The transformation aims to create a web application dedicated to handling assessment and interview operations at PT Gaia Solution. This study adopts the Software Development Life Cycle (SDLC) methodology using the waterfall model, which consists of the stages of requirements analysis, system design, implementation, testing, and evaluation. Application evaluation shows satisfactory results, with blackbox testing achieving a 100% success rate and high UI/UX satisfaction among users. The application was completed on time according to the set deadline and provides speed and performance that meet expectations. The outcome is a fully functional website that effectively addresses PT Gaia Solution's requirements for managing assessments and interview activities. By overcoming the limitations of the conventional system, this transformation boosts the overall efficiency and effectiveness of the company's processes. This success demonstrates that the implementation of SDLC with a waterfall approach can produce an effective web-based application as a form of transformation from conventional to digital systems at PT Gaia Solution, particularly for assessment and interview activities. This transformation can be immediately implemented and provides significant benefits to the company, including improved operational performance, data accuracy, and flexibility.

Automated Testing in DevOps: Strategies and Tools

Automated testing is a cornerstone of the DevOps methodology, enabling rapid and reliable software delivery. This paper explores the strategies and tools integral to implementing effective automated testing within a DevOps framework. Key strategies include continuous testing, shift-left testing, and test-driven development, among others. The paper also provides an overview of various tools that facilitate automated testing at different stages of the software development lifecycle, from unit testing to performance and security testing. Through case studies and analysis, the paper highlights both the benefits and challenges of automated testing in DevOps, and discusses future trends and advancements in the field

Безопасный конвейер доставки программного обеспечения

The presence of vulnerabilities in software is a pressing problem. Vulnerabilities can serve as a basis for breach of confidentiality and information leakage. The purpose of this study is to increase the level of software security at all stages of the life cycle from development and implementation to operation. Achieving this goal is possible through automated analysis of program code and increasing the types of vulnerabilities detected. The work proposes a secure software delivery pipeline that allows for static and dynamic analysis of program code, analysis of the search for vulnerabilities in third-party components and Docker images. The article reviewed popular software tools, their distinctive features, and provided justification for the choice of software solutions that form the basis of the developed secure delivery pipeline. The novelty of the work is the ability of the pipeline to automatically detect vulnerabilities at all stages of the software life cycle, from planning and design to testing, deployment and monitoring in a production environment, which allows you to eliminate vulnerabilities at an early stage, thereby increasing the level of software security. Conducted testing and approbation of a secure software delivery pipeline. Based on the assessment results, the developed secure software delivery pipeline showed that on average 98% of vulnerabilities were identified using the Semgrep tool, 90% of vulnerabilities using the OWASP ZAP tool, 96% of vulnerabilities using the Dependency-Track tool, and 88% using the Trivy tool. The results of the study and experimental data showed that on average, as a result of testing, the accuracy of detecting vulnerabilities is 93%. The practical value of the work lies in the fact that the developed secure software delivery pipeline can be used as a tool for detecting program code vulnerabilities by software development specialists, as well as information security specialists of IT companies. The results obtained can be used in the field of secure software development, formalization and interpretation of vulnerabilities in program code, which will make it possible to create new rules for their identification and development of countermeasures to neutralize them.

Measuring and improving software testability at the design level

ContextThe quality of software systems is significantly influenced by design testability, an aspect often overlooked during the initial phases of software development. The implementation may deviate from its design, resulting in decreased testability at the integration and unit levels. ObjectiveThe objective of this study is to automatically identify low-testable parts in object-orientated design and enhance them by refactoring to design patterns. The impact of various design metrics mainly coupling (e.g., fan-in and fan-out) and inheritance (e.g., depth of inheritance tree and number of subclasses) metrics on design testability is measured to select the most appropriate refactoring candidates. MethodThe methodology involves creating a machine learning model for design testability prediction using a large dataset of Java classes, followed by developing an automated refactoring tool. The design classes are vectorized by ten design metrics and labeled with testability scores calculated from a mathematical model. The model computes testability based on code coverage and test suite size of classes that have already been tested via automatic tools. A voting regressor model is trained to predict the design testability of any class diagram based on these design metrics. The proposed refactoring tool for dependency injection and factory method is applied to various open-source Java projects, and its impact on design testability is assessed. ResultsThe proposed design testability model demonstrates its effectiveness by satisfactorily predicting design testability, as indicated by a mean squared error of 0.04 and an R2 score of 0.53. The automated refactoring tool has been successfully evaluated on six open-source Java projects, revealing an enhancement in design testability by up to 19.11 %. ConclusionThe proposed automated approach offers software developers the means to continuously evaluate and enhance design testability throughout the entire software development life cycle, mitigating the risk of testability issues stemming from design-to-implementation discrepancies.

Post-COVID-19 Software Development Life Cycle Method Analysis: A Literature Review

The evolution of Software Development Life Cycle (SDLC) methods post-COVID-19 has been critical in navigating the changing landscape of software development practices. This study conducted a comprehensive literature review to explain the adaptation and innovation of SDLC methods after the pandemic. It explores the importance of SDLC in information systems development and its role in promoting transparency, quality, and risk management. Leveraging a systematic literature review methodology, this study analyzes a series of studies published from 2021 to 2024, with a focus on SDLC models commonly used post-COVID-19. Despite potential bias in the selection of literature and limitations in time coverage, this study provides valuable insights into the most widely used uses of agile and scrum methodologies in various sectors, including business, education, government, finance, health, employment, and the food industry. This study underscores the importance of understanding the post-pandemic SDLC method landscape and its implications for software development practices. These findings are important for practitioners and researchers looking to navigate the dynamic environment of software development following the COVID-19 pandemic.

Application of Multimedia Learning for Pancasila and Citizenship Education in SD Inpres Waingapu 3

PPKn is an essential subject in elementary schools to instill Pancasila values and national identity. However, the results of the End-of-Semester Assessment (PAS) at SD Inpres Waingapu 3 consistently show low PPKn scores. To address this issue, this study developed a multimedia learning application for PPKn. This application is designed to enhance student understanding of PPKn material, particularly related to Pancasila values. The SDLC (Software Development Life Cycle) Waterfall method was used in the application's development. The application's effectiveness was tested through pre-test and post-test, showing a significant increase in the average score of 79.5%. The application's usability was also tested using the System Usability Scale (SUS), with an average score of 85 and a category of "Excellent". These results indicate that the PPKn multimedia learning application is effective and ready for use in elementary schools. hopefully this application can help improve the quality of PPKn learning and instill Pancasila values more strongly in students.

Sustaining Digital Assets Through Mobile Estate Planning

Many people own online accounts, with some having financial values like Internet banking, e-wallet and cryptocurrency. In the case of sudden death, their heirs are unaware of the digital assets possessed by the deceased person, which causes the assets to be lost forever, and the heirs might not receive the assets. If an estate plan did not account for digital assets properly, the beneficiaries would not be able to access them. Therefore, this paper addresses this issue by implementing a software development approach in designing a suitable model for sustaining digital assets through smartphones to allow the inheritance of digital assets to the heirs. The software development life cycle was adopted as the methodology to identify the model’s components through four phases: requirements analysis, system design, implementation and test and evaluation. First, this work proposed a model named Mobile Estate Planning for Digital Assets (MEPDA). Second, the study demonstrated the component of the model in a smartphone application, and finally, it was tested and evaluated through a usability study with a group of users. Most users suggested that MEPDA is useful and easy to use. Further, they were also satisfied with its functionalities and features. Mobile application for digital asset estate planning is necessary today due to the exponential increase of digital asset ownership with financial values. It could be one way of helping users to allow an efficient inheritance process for their heirs in the case of death.

Enabling Health Information Recommendation Using Crowdsourced Refinement in Web-Based Health Information Applications: User-Centered Design Approach and EndoZone Informatics Case Study.

In the digital age, search engines and social media platforms are primary sources for health information, yet their commercial interests-focused algorithms often prioritize irrelevant content. Web-based health applications by reputable sources offer a solution to circumvent these biased algorithms. Despite this advantage, there remains a significant gap in research on the effective integration of content-ranking algorithms within these specialized health applications to ensure the delivery of personalized and relevant health information. This study introduces a generic methodology designed to facilitate the development and implementation of health information recommendation features within web-based health applications. We detail our proposed methodology, covering conceptual foundation and practical considerations through the stages of design, development, operation, review, and optimization in the software development life cycle. Using a case study, we demonstrate the practical application of the proposed methodology through the implementation of recommendation functionalities in the EndoZone platform, a platform dedicated to providing targeted health information on endometriosis. Application of the proposed methodology in the EndoZone platform led to the creation of a tailored health information recommendation system known as EndoZone Informatics. Feedback from EndoZone stakeholders as well as insights from the implementation process validate the methodology's utility in enabling advanced recommendation features in health information applications. Preliminary assessments indicate that the system successfully delivers personalized content, adeptly incorporates user feedback, and exhibits considerable flexibility in adjusting its recommendation logic. While certain project-specific design flaws were not caught in the initial stages, these issues were subsequently identified and rectified in the review and optimization stages. We propose a generic methodology to guide the design and implementation of health information recommendation functionality within web-based health information applications. By harnessing user characteristics and feedback for content ranking, this methodology enables the creation of personalized recommendations that align with individual user needs within trusted health applications. The successful application of our methodology in the development of EndoZone Informatics marks a significant progress toward personalized health information delivery at scale, tailored to the specific needs of users.

Automated Test Case Generation for Path Coverage by Using Multi-Objective Particle Swarm Optimization Algorithm with Reinforcement Learning and Relationship Matrix Strategies

Software testing is an important phase in software life cycle, and test case generation occupies the main part of the testing workload. Path coverage is the most stringent and difficult coverage criteria, so automatic test case generation for path coverage (ATCG-PC) is an important task in software testing. ATCG-PC is usually abstracted as an optimization search problem, and the commonly used solution algorithm is swarm intelligence algorithm. This paper proposes a path coverage test case generation algorithm based on improved multi-objective particle swarm optimization (IMOPSO) algorithm. The algorithm uses the multi-objective strategy to generate test cases for a group of similar paths at a time, and is supplemented by the particle action selection strategy based on reinforcement learning and the secondary search algorithm based on relationship matrix, which makes use of the similarity information between paths to speed up the early convergence and help to quickly reach the optimal solution around the local optimal position. By grouping the paths according to the similarity, the algorithm reduces the test case consumption, and improves the efficiency of test case generation. Experimental results show that, compared with the existing methods, the proposed algorithm can achieve higher path coverage with less test case consumption and is also suitable for large-scale programs.

The utility of complexity metrics during code reviews for CSE software projects

Software sustainability is critical for Computational Science and Engineering (CSE) software. Highly complex code makes software more difficult to maintain and less sustainable. Code reviews are a valuable part of the software development lifecycle and can be executed to manage complexity and promote sustainability. We have developed a technique to guide the code review process that considers cyclomatic complexity levels and changes during code reviews. Using real-world examples, this paper analyzes metrics gathered via GitHub Actions for several pull requests, and demonstrates the application of this approach in support of software maintainability and sustainability. We have also conducted a survey as to the usefulness of complexity metrics during code reviews. The results indicate that practitioners find the metrics useful, and that utilizing the metrics during pull request code reviews has the potential to improve the maintainability and sustainability of computational science and engineering software.

Analysis and Design of Customer Service Information Systems at Bersaudara Car Repair Shop Of Pangkalpinang

Bersaudara Car Repair Shop of Pangkalpinang is a business that operates in the field of automotive services, specializing in car maintenance and repair. Currently, customer service data processing still uses a manual system with Microsoft Office tools. In its application, this application cannot support fast and easy work. This can have implications for service providers towards customers, because they often encounter obstacles in the process of handling repairs and making reports. The aim of this research is to provide a solution in forming a needs analysis and documented information system design which will be developed into an information system application at the brothers' car repair shop. Based on the SDLC (Software Development Life Cycle) concept, the initial thing needed to produce an information system is to create a needs analysis and documented system design. The system analysis and design carried out here goes through the stages of data collection, carrying out analysis using the PIECES (Performance, Information, Economic, Control, Efficiency, Service) framework and carrying out system design using an object-oriented approach using UML (Unified Modeling Language) notation. The results of the analysis and design were tested in the form of a design evaluation using the consistency analysis method which was proven to have a consistent percentage value of 100%. The results of this design are included in the correctness category which proves that the system requirements and system design are consistent and correct.

Enabling affordances for AI Governance

Organizations dealing with mission-critical AI based autonomous systems may need to provide continuous risk management controls and establish means for their governance. To achieve this, organizations are required to embed trustworthiness and transparency in these systems, with human overseeing and accountability. Autonomous systems gain trustworthiness, transparency, quality, and maintainability through the assurance of outcomes, explanations of behavior, and interpretations of intent. However, technical, commercial, and market challenges during the software development lifecycle (SDLC) of autonomous systems can lead to compromises in their quality, maintainability, interpretability and explainability. This paper conceptually models transformation of SDLC to enable affordances for assurance, explanations, interpretations, and overall governance in autonomous systems. We argue that opportunities for transformation of SDLC are available through concerted interventions such as technical debt management, shift-left approach and non-ephemeral artifacts. This paper contributes to the theory and practice of governance of autonomous systems, and in building trustworthiness incrementally and hierarchically.

Custom Application Booking Information System at PT Mitra Tekno Nusantara

Information systems can provide strategic opportunities in facing business competition when implemented to support a business process. PT. Mitra Tekno Nusantara (PT. MTN) is a company engaged in the Information Technology sector that produces various kinds of software and hardware. The process of recording custom application order transactions that are still manual has weaknesses in terms of speed of recording transaction processes. In addition, the deadline on a project is rarely monitored so that there are projects whose progress exceeds the specified time target. This of course of course from customers. To fix this problem, the researcher proposes to design a website-based computerized system to manage custom application order transaction data at PT. MTN. The design of the custom application ordering information system that the author proposes is made using the PHP Native programming language and MySQL database. The proposed information system design uses the Software Development Life Cycle (SDLC) method with the Waterfall model. With the design of this custom application ordering system, it is hoped that it will make it easier for admins to record transaction data for custom application orders. In addition, it makes it easier for the project head to monitor the deadline date of each project being worked on.

Graphics based business process harnessing tools, advancing digital maturity of business

PurposeThe advancement of digital maturity at a business level has proven to be challenging, with limited time, resources and skills in extracting and mapping business processes. In order to advance digitalization, the mapping of all business activities is essential. To close this gap, this research is aimed at enabling the operational level extraction and classification of business activities using a graphical methodology. This objective is accomplished through the development of a digital tool that leverages Software Development Life Cycle (SDLC) principles.Design/methodology/approachThis research is focused on facilitating rapid extraction of business activities with the adoption of a graphical methodology. Business activities are captured through a digital tool in a structured, interlinked and hierarchical manner.FindingsNotably, this work is novel as it introduces a new graphical tool to replace traditional tools in the domain of Business Process Mapping (BPM). This graphical tool is distinguished by a unique feature; that is a self-configuring database with the flexibility to capture all process options, providing innovative solutions to the challenges faced in digitalizing business processes.Originality/valueThis work is original in that a new graphical interface is developed to replace traditional tools in the space of BP data gathering. The unique challenge of an auto configuring database with flexibility to capture all process options is presented.

Mindfulness and Emotional Intelligence: A Study on Millennials on Hospitality

In software development, dependability and quality are critical. A Bug Tracking System (BTS) designed specifically for large-scale software projects is introduced in this significant project with the goal of streamlining bug tracking, reporting, detection, and resolution. The system provides secure authentication, a backend database that is reliable, and an easy-to-use web interface. Using cutting-edge web technologies, it offers critical features including automated notifications, progress tracking, severity assignment, and thorough bug reporting together with user-friendly interfaces for a range of user roles. Tools for data visualization help identify defect patterns and monitor projects. The project follows best practices recommended by the industry for requirements analysis, design, implementation, testing, and deployment, and it solicits ongoing input. The result is a thorough BTS that addresses defect management difficulties. Thorough testing and assessment in comparison to standards confirms its efficacy. This approach could have a big impact on software development, improving user satisfaction and quality. Furthermore, issues with bug tracking are covered, including distributed team communication, scalability, and automation balancing. Proposals for strategies to address these issues are grounded in scholarly research and professional opinions. This summary highlights the critical role that bug tracking systems play in contemporary software development, making it an invaluable tool for researchers, practitioners, and teams looking to improve bug tracking procedures and raise the caliber and effectiveness of the software development lifecycle. Keywords— Bug Tracking System, Software Development, Defect Management, Quality Assurance, Automation, Collaboration, Large-scale Projects.

DyGAISP: Generative AI-Powered Approach for Intelligent Software Lifecycle Planning

DyGAISP: Generative AI-Powered Approach for Intelligent Software Lifecycle Planning

Depth linear discrimination-oriented feature selection method based on adaptive sine cosine algorithm for software defect prediction

Software Defect Prediction (SDP) plays a vital role in the software development life cycle as it helps identify and fix software defects. However, predicting software defects with irrelevant features and overlapping classes is challenging and can lead to lengthy training and low model accuracy. To address these challenges, this research introduces a novel Depth Linear Discrimination-Oriented Feature Selection Method based on Adaptive Sine Cosine Algorithm, named Depth Adaptive Sine Cosine Feature Selection (DASC-FS). DASC-FS integrates the Adaptive Sine Cosine Algorithm (ASCA) as a search algorithm to determine the relevant features and adopts Depth Linear Discriminant Analysis (D-LDA) to identify the discriminative features that maximize class separation. The paper proposes ASCA which is a metaheuristic algorithm meticulously designed to enhance the search capabilities of the standard Sine Cosine Algorithm (SCA). Combining the simplicity of the SCA with the efficiency of multiple mutation operators inspired by Genetic Algorithms (GA), ASCA enhances the diversity of the solutions and imparts remarkable adaptability to various situations. Furthermore, this study introduces a novel linear discriminant method, called Depth Linear Discriminant Analysis (D-LDA) to enhance the robustness of the original LDA. D-LDA systematically integrates the matrix depth concept into LDA, offering a systematic approach to address the challenges associated with scatter matrix estimation. As matrix depth measures how central or deep a particular matrix is within a distribution with respect to different directions, it is an efficient tool for computing a robust scatter matrix estimator that can handle outliers and complex data structures. The experimental results showed that DASC-FS consistently obtains the highest accuracy compared to most existing methods by integrating ASCA and D-LDA, thereby considering both accuracy optimization and class separation. The results also show that the use of multiple mutation operators in ASCA improves the search process capabilities. The results also show that the capacity of D-LDA to reduce data dimensionality and increase class separation yields highly competitive results compared to other LDAs. Finally, features related to code size and complexity have emerged as key factors for SDP because they consistently rank as important features across different classifiers and datasets. DASC-FS offers a valuable solution in domain knowledge for enhancing predictive accuracy and understanding factors contributing to software defects through enhanced search capabilities, robust scatter matrix estimation, and the ability to reduce data dimensionality.