arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2005.09046cs.SEcs.AI
收藏

利用分层贝叶斯网络提高可追溯性链路恢复的有效性

Improving the Effectiveness of Traceability Link Recovery using Hierarchical Bayesian Networks

William & Mary(威廉与玛丽学院);Cisco Advanced Security Research Group(思科高级安全研究组);Cisco Security and Trust Engineering(思科安全与信任工程部)

Kevin Moran, David N. Palacio, Carlos Bernal-Cárdenas, Daniel McCrystal, Denys Poshyvanyk, Chris Shenefiel, Jeff Johnson

摘要:

可追溯性是现代软件开发过程的基本组成部分,有助于确保程序正常运行和安全。由于手动建立跟踪链接的成本很高,研究人员已经开发出自动化的方法,使用相似性度量来绘制文本软件工件之间的关系。然而,这种技术的有效性往往是有限的,因为它们只利用单一的测量工件相似性,不能同时建模(隐式和显式)的各种开发工件的组之间的关系。在本文中,我们说明了如何通过使用量身定制的概率模型来克服这些限制。为此,我们设计并实现了一个层次化的ProObjectiveModel for SoftwarE Traceability(彗星),它能够推断出候选跟踪链接。Comet能够通过结合文本相似性的多种测量的互补观察能力来建模工件之间的关系。此外,我们的模型可以从整体上整合来自不同来源的信息,包括开发人员的反馈和软件工件组之间的传递(通常是隐式的)关系,以提高推理的准确性。我们对Comet进行了全面的实证评估,说明了在最佳情况下$\approx$ 14%的一组最佳配置基线上的改进,以及在所有受试者中$\approx$ 5%的平均精度。Comet在实践中的相对有效性可能更高,因为通常不可能进行最佳配置。最后,我们在对使用原型Comet Jenkins插件的Cisco Systems开发人员的调查中说明了Comet的实用性潜力。

英文摘要:

Traceability is a fundamental component of the modern software development process that helps to ensure properly functioning, secure programs. Due to the high cost of manually establishing trace links, researchers have developed automated approaches that draw relationships between pairs of textual software artifacts using similarity measures. However, the effectiveness of such techniques are often limited as they only utilize a single measure of artifact similarity and cannot simultaneously model (implicit and explicit) relationships across groups of diverse development artifacts. In this paper, we illustrate how these limitations can be overcome through the use of a tailored probabilistic model. To this end, we design and implement a HierarchiCal PrObabilistic Model for SoftwarE Traceability (Comet) that is able to infer candidate trace links. Comet is capable of modeling relationships between artifacts by combining the complementary observational prowess of multiple measures of textual similarity. Additionally, our model can holistically incorporate information from a diverse set of sources, including developer feedback and transitive (often implicit) relationships among groups of software artifacts, to improve inference accuracy. We conduct a comprehensive empirical evaluation of Comet that illustrates an improvement over a set of optimally configured baselines of $\approx$14% in the best case and $\approx$5% across all subjects in terms of average precision. The comparative effectiveness of Comet in practice, where optimal configuration is typically not possible, is likely to be higher. Finally, we illustrate Comets potential for practical applicability in a survey with developers from Cisco Systems who used a prototype Comet Jenkins plugin.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑