An Investigation of Java Faults Operators Derived from a Field Data Study on Java Software Faults
Resumo
The knowledge of real software faults representativeness is important to allow the emulation of software faults in a more accurate way through software fault injection techniques. This paper presents a field data study to analyze the representativeness of Java software faults, including security faults. The faults are classified according to a previous field study of C faults representativeness and new types of faults are identified due to the specific characteristics of the Java language structure. Results are compared and show that the mistakes most commonly made by programmers follow a pattern, independently of the programming language.
Referências
Avizienis, A., Laprie, J.C., Randell, B. and Landwehr, C. (2004) “Basic concepts and taxonomy of dependable and secure computing”. IEEE Transactions on Dependable and Secure Computing, Volume 1, Issue 1, p. 11 – 33.
Azureus (Vuze). (2009). Available in http://www.azureus.sourceforge.net. Last access on February.
Barcelos, P. P., Leite, F., Silva, T. W. (1999) “Implementação de um Injetor de Falhas de Comunicação”. SCTF ’99 – VIII Simpósio de Computação Tolerante a Falhas. Campinas, Brazil, p. 225-239.
Carreira, J., Madeira, H. and Silva, J. G. (1995) “Xception: Software Fault Injection and Monitoring in Processor Functional Units”. 5º IFIP International Working Conference on Dependable Computing for Critical Applications. Urbana-Champaign, EUA, p. 135-149.
Chillarege, R. (1995) “Orthogonal Defect Classification”, Chapter 9 of “Handbook of Software Reliability Engineering”, Michael R. Lyu Ed., IEEE Computer Society Press, McGraw-Hill.
Chillarege, R., Bhandari, I. S., Chaar, J. K., Halliday, M. J., Moebus, D., Ray, B. and Wong, M. (1992) “Orthogonal Defect Classification – A Concept for In-Process Measurement”. IEEE Transactions on Software Engineering, vol. 18, n. 11, p. 943-956.
Durães, J. and Madeira, H. (2006) "Emulation of Software Faults: A Field Data Study and Practical Approach". IEEE Trans. on Software Engineering, vol. 32, n. 11, p. 849-867.
Fonseca, J. and Vieira, M. (2008) “Mapping software faults with web security vulnerability”. IEEE/IFIP Int. Conf. on Dependable Systems and Networks (DSN), Anchorage, USA, p. 257-266
FreeMind. (2009). Available in http://www.freemind.sourceforge.net. Last access on February.
Gage, D. and McCormick, J. (2004) "Why Software Quality Matters", Baseline Magazine, p. 32-59.
JEdit. (2009). Available in http://www.jedit.org. Last access on February.
Kalyanakrishnam, M., Kalbarczyk, Z. and Iyer, R. (1999) “Failure Data Analysis of a LAN of Windows NT Based Computers”, Symposium on Reliable Distributed Database Systems, SRDS-18, Switzerland, p. 178-187.
Lee, I. and Iyer, R. K. (1995) “Software Dependability in the Tandem GUARDIAN System”, IEEE Trans. on Software Engineering, vol. 21, no. 5, p. 455-467
Lyu, M. (1996) “Handbook of Software Reliability Engineering”, IEEE Computer Society Press, MCGraw-Hill.
Martins, E., Rubira, C. and Leme, N. (2002) “Jaca: A reflective fault injection tool based on patterns”. Proc of the 2002 International Conference on Dependable Systems & Networks, Washington D.C. USA, p. 483-487.
Musa, J. (1996) “Software Reliability Engineering”, McGraw-Hill.
Neves, N., Antunes, J., Correia, M., Veríssimo, P., Neves, R. “Using Attack Injection to Discover New Vulnerabilities”. Proc. of the International Conference on Dependable Systems and Networks (DSN), 2006, p. 457-466.
Pfleeger, S. (2000) "Risky Business: what we have yet to learn about risk management", The Journal of Systems and Software, 53, p. 265-273.
Phex. (2009). Available in http://www.phex.org. Last access on February.
Reilly, D. (2009). Top Ten Errors Java Programmers Make. Available in http://www.javacoffeebreak.com/articles/toptenerrors.html. Last access on May.
Struts.(2009). Available in http://www.struts.apache.org. Last access on February.
Sullivan, M. and Chillarege, R. (1992) “Comparison of Software Defects in DataDatabase Management Systems and Operating Systems”, Proc. of the 22nd IEEE Fault Tolerant Computing Symposium, FTCS-22, p. 475-484.
Tomcat. (2009). Available in http://www.tomcat.apache.org. Last access on February.
WinMerge. (2009). Avaliable in http://www.winmerge.org. Last access on February.
Azureus (Vuze). (2009). Available in http://www.azureus.sourceforge.net. Last access on February.
Barcelos, P. P., Leite, F., Silva, T. W. (1999) “Implementação de um Injetor de Falhas de Comunicação”. SCTF ’99 – VIII Simpósio de Computação Tolerante a Falhas. Campinas, Brazil, p. 225-239.
Carreira, J., Madeira, H. and Silva, J. G. (1995) “Xception: Software Fault Injection and Monitoring in Processor Functional Units”. 5º IFIP International Working Conference on Dependable Computing for Critical Applications. Urbana-Champaign, EUA, p. 135-149.
Chillarege, R. (1995) “Orthogonal Defect Classification”, Chapter 9 of “Handbook of Software Reliability Engineering”, Michael R. Lyu Ed., IEEE Computer Society Press, McGraw-Hill.
Chillarege, R., Bhandari, I. S., Chaar, J. K., Halliday, M. J., Moebus, D., Ray, B. and Wong, M. (1992) “Orthogonal Defect Classification – A Concept for In-Process Measurement”. IEEE Transactions on Software Engineering, vol. 18, n. 11, p. 943-956.
Durães, J. and Madeira, H. (2006) "Emulation of Software Faults: A Field Data Study and Practical Approach". IEEE Trans. on Software Engineering, vol. 32, n. 11, p. 849-867.
Fonseca, J. and Vieira, M. (2008) “Mapping software faults with web security vulnerability”. IEEE/IFIP Int. Conf. on Dependable Systems and Networks (DSN), Anchorage, USA, p. 257-266
FreeMind. (2009). Available in http://www.freemind.sourceforge.net. Last access on February.
Gage, D. and McCormick, J. (2004) "Why Software Quality Matters", Baseline Magazine, p. 32-59.
JEdit. (2009). Available in http://www.jedit.org. Last access on February.
Kalyanakrishnam, M., Kalbarczyk, Z. and Iyer, R. (1999) “Failure Data Analysis of a LAN of Windows NT Based Computers”, Symposium on Reliable Distributed Database Systems, SRDS-18, Switzerland, p. 178-187.
Lee, I. and Iyer, R. K. (1995) “Software Dependability in the Tandem GUARDIAN System”, IEEE Trans. on Software Engineering, vol. 21, no. 5, p. 455-467
Lyu, M. (1996) “Handbook of Software Reliability Engineering”, IEEE Computer Society Press, MCGraw-Hill.
Martins, E., Rubira, C. and Leme, N. (2002) “Jaca: A reflective fault injection tool based on patterns”. Proc of the 2002 International Conference on Dependable Systems & Networks, Washington D.C. USA, p. 483-487.
Musa, J. (1996) “Software Reliability Engineering”, McGraw-Hill.
Neves, N., Antunes, J., Correia, M., Veríssimo, P., Neves, R. “Using Attack Injection to Discover New Vulnerabilities”. Proc. of the International Conference on Dependable Systems and Networks (DSN), 2006, p. 457-466.
Pfleeger, S. (2000) "Risky Business: what we have yet to learn about risk management", The Journal of Systems and Software, 53, p. 265-273.
Phex. (2009). Available in http://www.phex.org. Last access on February.
Reilly, D. (2009). Top Ten Errors Java Programmers Make. Available in http://www.javacoffeebreak.com/articles/toptenerrors.html. Last access on May.
Struts.(2009). Available in http://www.struts.apache.org. Last access on February.
Sullivan, M. and Chillarege, R. (1992) “Comparison of Software Defects in DataDatabase Management Systems and Operating Systems”, Proc. of the 22nd IEEE Fault Tolerant Computing Symposium, FTCS-22, p. 475-484.
Tomcat. (2009). Available in http://www.tomcat.apache.org. Last access on February.
WinMerge. (2009). Avaliable in http://www.winmerge.org. Last access on February.
Publicado
31/08/2009
Como Citar
BASSO, Tania; MORAES, Regina L. O.; SANCHES, Bruno P.; JINO, Mario.
An Investigation of Java Faults Operators Derived from a Field Data Study on Java Software Faults. In: WORKSHOP DE TESTES E TOLERÂNCIA A FALHAS (WTF), 10. , 2009, João Pessoa/PB.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2009
.
p. 156-168.
ISSN 2595-2684.
DOI: https://doi.org/10.5753/wtf.2009.23141.
