arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2006.00586cs.SE
收藏

COVID-19软件项目中缺陷的探索性描述

An Exploratory Characterization of Bugs in COVID-19 Software Projects

Akond Rahman, Effat Farhana

摘要:

背景:COVID-19大流行的可怕后果影响了COVID-19软件的开发,即,用于分析和缓解COVID-19的软件。COVID-19软件中的漏洞可能是后果性的,因为COVID-19软件项目可能影响公共卫生政策和用户数据隐私。目的:本文的目标是通过对与COVID-19相关的开源软件项目的实证研究,帮助从业者和研究人员提高COVID-19软件的质量。方法:我们使用GitHub上托管的129个开源COVID-19软件项目进行实证研究。接下来,我们对收集到的项目中的550个错误报告进行定性分析,以确定错误类别。结果:我们确定了8个错误类别,其中包括数据错误,即,在COVID-19数据的挖掘和存储过程中发生的错误。已识别的漏洞类别出现在7类软件项目中,包括(i)使用统计建模执行与COVID-19相关的预测的项目,以及(ii)用于设计和实施医疗设备(如呼吸机)的医疗设备软件。结论:根据我们的研究结果,我们倡导通过数据科学从业者和公共卫生专家之间更好的协同作用来构建强大的统计模型。用户跟踪软件中存在安全漏洞,需要开发工具来检测数据隐私侵犯和安全漏洞。

英文摘要:

Context: The dire consequences of the COVID-19 pandemic has influenced development of COVID-19 software i.e., software used for analysis and mitigation of COVID-19. Bugs in COVID-19 software can be consequential, as COVID-19 software projects can impact public health policy and user data privacy. Objective: The goal of this paper is to help practitioners and researchers improve the quality of COVID-19 software through an empirical study of open source software projects related to COVID-19. Methodology: We use 129 open source COVID-19 software projects hosted on GitHub to conduct our empirical study. Next, we apply qualitative analysis on 550 bug reports from the collected projects to identify bug categories. Findings: We identify 8 bug categories, which include data bugs i.e., bugs that occur during mining and storage of COVID-19 data. The identified bug categories appear for 7 categories of software projects including (i) projects that use statistical modeling to perform predictions related to COVID-19, and (ii) medical equipment software that are used to design and implement medical equipment, such as ventilators. Conclusion: Based on our findings, we advocate for robust statistical model construction through better synergies between data science practitioners and public health experts. Existence of security bugs in user tracking software necessitates development of tools that will detect data privacy violations and security weaknesses.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑