期刊文献+
共找到90,249篇文章
< 1 2 250 >
每页显示 20 50 100
OSSerCopilot:An LLM-driven Tutoring System for Fostering Open Source Competency in Software Engineering Education
1
作者 Xin Tan Jingyi Tan +4 位作者 Weimiao Ren Keqing Fan Xiao Long Fang Liu Li Zhang 《计算机教育》 2026年第3期119-129,共11页
In the context of large language model(LLM)reshaping software engineering education,this paper presents OSSerCopilot,a LLM-based tutoring system designed to address the critical challenge faced by newcomers(especially... In the context of large language model(LLM)reshaping software engineering education,this paper presents OSSerCopilot,a LLM-based tutoring system designed to address the critical challenge faced by newcomers(especially student contributors)in open source software(OSS)communities.Leveraging natural language processing,code semantic understanding,and learner profiling,the system functions as an intelligent tutor to scaffold three core competency domains:contribution guideline interpretation,project architecture comprehension,and personalized task matching.By transforming traditional onboarding barriers-such as complex contribution documentation and opaque project structures-into interactive learning journeys,OSSerCopilot enables newcomers to complete their first OSS contribution more easily and confidently.This paper highlights how LLM technologies can redefine software engineering education by bridging the gap between theoretical knowledge and practical OSS participation,offering implications for curriculum design,competency assessment,and sustainable OSS ecosystem cultivation.A demonstration video of the system is available at https://figshare.com/articles/media/OSSerCopilot_Introduction_mp4/29510276. 展开更多
关键词 software engineering education Open source software education Intelligent tutoring systems Newcomer onboarding Large language models AI-driven educational tools OSS contribution
在线阅读 下载PDF
Research and Practice of a New Training Model for Software Engineering Courses Based on Generative AI and OBE Concepts
2
作者 Shengshai Zhang Xiaodong Yu +1 位作者 Jianhui Jiang Lixiao Zhang 《计算机教育》 2026年第3期139-147,共9页
With the advent of the AI era,how can students effectively utilize generative AI large models to assist in course learning?At the same time,how can teachers utilize generative AI tools and the teaching concept of OBE ... With the advent of the AI era,how can students effectively utilize generative AI large models to assist in course learning?At the same time,how can teachers utilize generative AI tools and the teaching concept of OBE to stimulate students’innovative consciousness and teamwork ability,enabling students to identify some problems in a certain industry or field and creatively propose feasible solutions,and truly achieve the cultivation of new models in software engineering course teaching with the assistance of generative AI tools?This paper presents research and practice on a new model for cultivating software engineering courses that integrates generative AI and OBE,introduces the specific process of teaching reform and practice,and finally explains the achievements of teaching reform. 展开更多
关键词 Generative AI OBE software engineering Teaching reform
在线阅读 下载PDF
GranuSAS:Software of rapid particle size distribution analysis from small angle scattering data
3
作者 Qiaoyu Guo Fei Xie +3 位作者 Xuefei Feng Zhe Sun Changda Wang Xuechen Jiao 《Chinese Physics B》 2026年第2期216-225,共10页
Small angle x-ray scattering(SAXS)is an advanced technique for characterizing the particle size distribution(PSD)of nanoparticles.However,the ill-posed nature of inverse problems in SAXS data analysis often reduces th... Small angle x-ray scattering(SAXS)is an advanced technique for characterizing the particle size distribution(PSD)of nanoparticles.However,the ill-posed nature of inverse problems in SAXS data analysis often reduces the accuracy of conventional methods.This article proposes a user-friendly software for PSD analysis,GranuSAS,which employs an algorithm that integrates truncated singular value decomposition(TSVD)with the Chahine method.This approach employs TSVD for data preprocessing,generating a set of initial solutions with noise suppression.A high-quality initial solution is subsequently selected via the L-curve method.This selected candidate solution is then iteratively refined by the Chahine algorithm,enforcing constraints such as non-negativity and improving physical interpretability.Most importantly,GranuSAS employs a parallel architecture that simultaneously yields inversion results from multiple shape models and,by evaluating the accuracy of each model's reconstructed scattering curve,offers a suggestion for model selection in material systems.To systematically validate the accuracy and efficiency of the software,verification was performed using both simulated and experimental datasets.The results demonstrate that the proposed software delivers both satisfactory accuracy and reliable computational efficiency.It provides an easy-to-use and reliable tool for researchers in materials science,helping them fully exploit the potential of SAXS in nanoparticle characterization. 展开更多
关键词 small angle x-ray scattering data analysis software particle size distribution inverse problem
原文传递
A Hybrid Approach to Software Testing Efficiency:Stacked Ensembles and Deep Q-Learning for Test Case Prioritization and Ranking
4
作者 Anis Zarrad Thomas Armstrong Jaber Jemai 《Computers, Materials & Continua》 2026年第3期1726-1746,共21页
Test case prioritization and ranking play a crucial role in software testing by improving fault detection efficiency and ensuring software reliability.While prioritization selects the most relevant test cases for opti... Test case prioritization and ranking play a crucial role in software testing by improving fault detection efficiency and ensuring software reliability.While prioritization selects the most relevant test cases for optimal coverage,ranking further refines their execution order to detect critical faults earlier.This study investigates machine learning techniques to enhance both prioritization and ranking,contributing to more effective and efficient testing processes.We first employ advanced feature engineering alongside ensemble models,including Gradient Boosted,Support Vector Machines,Random Forests,and Naive Bayes classifiers to optimize test case prioritization,achieving an accuracy score of 0.98847 and significantly improving the Average Percentage of Fault Detection(APFD).Subsequently,we introduce a deep Q-learning framework combined with a Genetic Algorithm(GA)to refine test case ranking within priority levels.This approach achieves a rank accuracy of 0.9172,demonstrating robust performance despite the increasing computational demands of specialized variation operators.Our findings highlight the effectiveness of stacked ensemble learning and reinforcement learning in optimizing test case prioritization and ranking.This integrated approach improves testing efficiency,reduces late-stage defects,and improves overall software stability.The study provides valuable information for AI-driven testing frameworks,paving the way for more intelligent and adaptive software quality assurance methodologies. 展开更多
关键词 software testing test case prioritization test case ranking machine learning reinforcement learning deep Q-learning
在线阅读 下载PDF
Exploration and Practice of School-Enterprise Cooperation Model of Software Engineering Majors from Multi-Perspectives
5
作者 Linpeng Zhong Yong Liao 《计算机教育》 2026年第3期38-46,共9页
Promoting the integration of industry and education and deepening school-enterprise cooperation in talent cultivation and collaborative innovation are long-term goals of higher education.This paper systematically anal... Promoting the integration of industry and education and deepening school-enterprise cooperation in talent cultivation and collaborative innovation are long-term goals of higher education.This paper systematically analyzes the multiple perspectives,practical challenges,and implementation paths of in-depth school-enterprise cooperation.Based on the typical case of school-enterprise cooperation at the School of Information and Software Engineering,University of Electronic Science and Technology of China(UESTC),this paper explores the innovative practices of in-depth school-enterprise cooperation in talent cultivation,scientific research,and faculty construction.It also explores a multi-party collaborative mechanism from the perspectives of universities,enterprises,students,and the government.By policy guidance,resource integration,and benefit sharing,this mechanism achieves in-depth integration of industry and education,providing references and examples for further development of school-enterprise cooperation in the new era. 展开更多
关键词 software engineering School-enterprise cooperation Integration of industry and education collaborative talent cultivation multi-perspective analysis
在线阅读 下载PDF
Exploration and Practice in Building a Diversified Faculty Team for Specialized Software Talent Cultivation
6
作者 Fangshi Wang Weiwei Xing +1 位作者 Wei Lu Shunli Zhang 《计算机教育》 2026年第3期67-73,共7页
Faculty development serves as a critical foundation for ensuring the quality of higher education.To meet the needs of cultivating specialized software talents and promoting teaching reform,it is particularly crucial t... Faculty development serves as a critical foundation for ensuring the quality of higher education.To meet the needs of cultivating specialized software talents and promoting teaching reform,it is particularly crucial to build a faculty team with knowledge in industry application fields and experience in domestic software development.This paper first analyzes the new requirements for the faculty imposed by the cultivation of specialized software talents and the existing problems in the current faculty.Then,in response to these issues,it introduces the reforms and explorations carried out by the School of Software Engineering at Beijing Jiaotong University in the construction of the faculty for cultivating specialized software talents.The aim is to build a high-caliber and diversified faculty that boasts strong political qualities,interdisciplinary integration,complementary advantages between full-time and part-time faculty,and in-depth integration of industry and education. 展开更多
关键词 Specialized software talents Diversified faculty team Interdisciplinary integration Integration of industry and education
在线阅读 下载PDF
Research and Implementation of the Academic Development Monitoring System for High-quality Software Engineering Talents
7
作者 Kun Niu Kaiyang Zhang +5 位作者 Tan Yang Hui Gao Hongfeng Gu Ting Diao Jing Li Honglin Fu 《计算机教育》 2026年第3期199-209,共11页
Traditional grade-centered evaluation models are inadequate for high-quality software engineering talents in the digital and AI era.This study develops an academic development monitoring system to address shortcomings... Traditional grade-centered evaluation models are inadequate for high-quality software engineering talents in the digital and AI era.This study develops an academic development monitoring system to address shortcomings in dynamics,interdisciplinary integration,and industry adaptability.It builds a multi-dimensional dynamic model covering seven core dimensions with quantitative scoring,non-linear weighting,and DivClust grouping.An intelligent platform with real-time monitoring,early warning,and personalized recommendations integrates AI like multi-modal fusion and large-model diagnosis.The“monitoring-warning-improvement”loop helps optimize training programs,support personalized planning,and bridge talent-industry gaps,enabling digital transformation in software engineering education evaluation. 展开更多
关键词 software engineering talents Academic development monitoring multi-dimensional dynamic evaluation Intelligent monitoring platform AI-driven evaluation Industry adaptability
在线阅读 下载PDF
An Eulerian-Lagrangian parallel algorithm for simulation of particle-laden turbulent flows 被引量:1
8
作者 Harshal P.Mahamure Deekshith I.Poojary +1 位作者 Vagesh D.Narasimhamurthy Lihao Zhao 《Acta Mechanica Sinica》 2026年第1期15-34,共20页
This paper presents an Eulerian-Lagrangian algorithm for direct numerical simulation(DNS)of particle-laden flows.The algorithm is applicable to perform simulations of dilute suspensions of small inertial particles in ... This paper presents an Eulerian-Lagrangian algorithm for direct numerical simulation(DNS)of particle-laden flows.The algorithm is applicable to perform simulations of dilute suspensions of small inertial particles in turbulent carrier flow.The Eulerian framework numerically resolves turbulent carrier flow using a parallelized,finite-volume DNS solver on a staggered Cartesian grid.Particles are tracked using a point-particle method utilizing a Lagrangian particle tracking(LPT)algorithm.The proposed Eulerian-Lagrangian algorithm is validated using an inertial particle-laden turbulent channel flow for different Stokes number cases.The particle concentration profiles and higher-order statistics of the carrier and dispersed phases agree well with the benchmark results.We investigated the effect of fluid velocity interpolation and numerical integration schemes of particle tracking algorithms on particle dispersion statistics.The suitability of fluid velocity interpolation schemes for predicting the particle dispersion statistics is discussed in the framework of the particle tracking algorithm coupled to the finite-volume solver.In addition,we present parallelization strategies implemented in the algorithm and evaluate their parallel performance. 展开更多
关键词 DNS Eulerian-Lagrangian Particle tracking algorithm Point-particle Parallel software
原文传递
When Software Security Meets Large Language Models:A Survey 被引量:4
9
作者 Xiaogang Zhu Wei Zhou +3 位作者 Qing-Long Han Wanlun Ma Sheng Wen Yang Xiang 《IEEE/CAA Journal of Automatica Sinica》 2025年第2期317-334,共18页
Software security poses substantial risks to our society because software has become part of our life. Numerous techniques have been proposed to resolve or mitigate the impact of software security issues. Among them, ... Software security poses substantial risks to our society because software has become part of our life. Numerous techniques have been proposed to resolve or mitigate the impact of software security issues. Among them, software testing and analysis are two of the critical methods, which significantly benefit from the advancements in deep learning technologies. Due to the successful use of deep learning in software security, recently,researchers have explored the potential of using large language models(LLMs) in this area. In this paper, we systematically review the results focusing on LLMs in software security. We analyze the topics of fuzzing, unit test, program repair, bug reproduction, data-driven bug detection, and bug triage. We deconstruct these techniques into several stages and analyze how LLMs can be used in the stages. We also discuss the future directions of using LLMs in software security, including the future directions for the existing use of LLMs and extensions from conventional deep learning research. 展开更多
关键词 Large language models(LLms) software analysis software security software testing
在线阅读 下载PDF
Design and Exploration of Intelligent Software Testing Course
10
作者 Depeng Gao Rui Wu +1 位作者 Shihan Xiao Shuxi Chen 《计算机教育》 2026年第3期47-53,共7页
With the rapid development of artificial intelligence,the intelligence level of software is increasingly improving.Intelligent software,which is widely applied in crucial fields such as autonomous driving,intelligent ... With the rapid development of artificial intelligence,the intelligence level of software is increasingly improving.Intelligent software,which is widely applied in crucial fields such as autonomous driving,intelligent customer service,and medical diagnosis,is constructed based on complex technologies like machine learning and deep learning.Its uncertain behavior and data dependence pose unprecedented challenges to software testing.However,existing software testing courses mainly focus on conventional contents and are unable to meet the requirements of intelligent software testing.Therefore,this work deeply analyzed the relevant technologies of intelligent software testing,including reliability evaluation indicator system,neuron coverage,and test case generation.It also systematically designed an intelligent software testing course,covering teaching objectives,teaching content,teaching methods,and a teaching case.Verified by the practical teaching in four classes,this course has achieved remarkable results,providing practical experience for the reform of software testing courses. 展开更多
关键词 Intelligent software testing Intelligent software software testing course design
在线阅读 下载PDF
Compatible Remediation for Vulnerabilities in the Presence and Absence of Security Patches
11
作者 Xiaohu Song Zhiliang Zhu 《Computers, Materials & Continua》 2026年第1期297-315,共19页
Vulnerabilities are a known problem in modern Open Source Software(OSS).Most developers often rely on third-party libraries to accelerate feature implementation.However,these libraries may contain vulnerabilities that... Vulnerabilities are a known problem in modern Open Source Software(OSS).Most developers often rely on third-party libraries to accelerate feature implementation.However,these libraries may contain vulnerabilities that attackers can exploit to propagate malicious code,posing security risks to dependent projects.Existing research addresses these challenges through Software Composition Analysis(SCA)for vulnerability detection and remediation.Nevertheless,current solutions may introduce additional issues,such as incompatibilities,dependency conflicts,and additional vulnerabilities.To address this,we propose Vulnerability Scan and Protection(VulnScanPro),a robust solution for detection and remediation vulnerabilities in Java projects.Specifically,VulnScanPro builds a finegrained method graph to identify unreachable methods.The method graph is mapped to the project’s dependency tree,constructing a comprehensive vulnerability propagation graph that identifies unreachable vulnerable APIs and dependencies.Based on this analysis,we propose three solutions for vulnerability remediation:(1)Removing unreachable vulnerable dependencies,thereby resolving security risks and reducing maintenance overhead.(2)Upgrading vulnerable dependencies to the closest non-vulnerable versions,while pinning the versions of transitive dependencies introduced by the vulnerable dependency,in order to mitigate compatibility issues and prevent the introduction of new vulnerabilities.(3)Eliminating unreachable vulnerable APIs,particularly when security patches are either incompatible or absent.Experimental results show that these solutions effectively mitigate vulnerabilities and enhance the overall security of the project. 展开更多
关键词 Open source software vulnerability detection vulnerability remediation software composition analysis software vulnerability
在线阅读 下载PDF
Messages from CEISEE 2025 Chairs
12
作者 Xiaofei Xu Bing Wu +8 位作者 Chunming Hu Yves Ducq Xiangqian Wu Li Zhang Stephan Reiff-Marganiec Lanshun Nie Huobin Tan Weiwei Xing Weihua Guo 《计算机教育》 2026年第3期37-37,共1页
Welcome to the 21st China-Europe International Symposium on Software Engineering Education in 2025(CEISEE 2025),successfully held on September 20-21,2025,in Hangzhou,China.With the rapid development of generative AI a... Welcome to the 21st China-Europe International Symposium on Software Engineering Education in 2025(CEISEE 2025),successfully held on September 20-21,2025,in Hangzhou,China.With the rapid development of generative AI and the digital economy,software engineering education is entering a new era.CEISEE continues to be an important platform for educational institutions,the software industry,and educational authorities from China and Europe to exchange visions,share experience,and discuss innovative approaches to software engineering education and university-industry cooperation. 展开更多
关键词 university industry cooperation generative ai software industryand software engineering education software engineering digital economy
在线阅读 下载PDF
Developing Innovation Capacity in Graduate Software Engineering Practice Through Newquality Productive Forces
13
作者 Ting Cai Tianyuan Yin +2 位作者 Yuxin Wu Shan Lin Zhiwei Ye 《计算机教育》 2026年第3期220-229,共10页
The rapid development of new-quality productive forces(NQPF)has intensified the demand for high-level innovative talent.As a representative of NQPF,generative artificial intelligence(GenAI)offers powerful tools to res... The rapid development of new-quality productive forces(NQPF)has intensified the demand for high-level innovative talent.As a representative of NQPF,generative artificial intelligence(GenAI)offers powerful tools to reshape talent cultivation but also presents significant challenges,including skill hollowing,ethical risks,and a growing disconnect between education and industry needs.Currently,graduate-level software engineering education struggles with outdated curricula and insufficient alignment with practical demands.In this paper,we propose a dual-core collaborative framework driven by“GenAI technology”and“industry demand”.Under this framework,we design a four-dimensional capability development path to enhance graduate students’innovation in software engineering practice.This path focuses on①scientific research innovation,②engineering problem-solving,③cross-domain collaborative evolution,and④ethical risk governance.The proposed approach promotes a shift from traditional knowledge transfer to human-machine collaborative innovation,aligning talent cultivation with the demands of the NQPF. 展开更多
关键词 New-quality productive forces GenAI Graduate student software engineering Innovation ability
在线阅读 下载PDF
Exploring Reform Strategies for Software Engineering Talent Development Models in the AI Era
14
作者 Linying Jiang Guibing Guo +1 位作者 Jianzhe Zhao Xiaochun Yang 《计算机教育》 2026年第3期95-100,共6页
The rapid development of artificial intelligence(AI)has placed significant pressure on universities to rethink how they train software engineering students.Tools like GitHub Copilot can now generate basic code in seco... The rapid development of artificial intelligence(AI)has placed significant pressure on universities to rethink how they train software engineering students.Tools like GitHub Copilot can now generate basic code in seconds.This raises important questions:What is the value of traditional programming education?What role should instructors play when AI becomes a powerful teaching assistant?How should the goals of software engineering programs change as companies increasingly use AI to handle coding tasks?This paper explores the key challenges AI brings to software engineering education and proposes practical strategies for updating talent development models to meet these changes. 展开更多
关键词 Artificial intelligence software engineering education Talent development Reform strategies
在线阅读 下载PDF
Exploration and Practice of Collaborative Education Mechanism for Software Engineering Education in the New Era:Take School of Information and Software Engineering of UESTC as an Example 被引量:2
15
作者 Linpeng Zhong Yili Li Xueying Yang 《计算机教育》 2025年第3期95-102,共8页
Building a collaborative education mechanism,improving students’engineering practice and innovation abilities,and cultivating software engineering innovation talents that meet industry needs are of great significance... Building a collaborative education mechanism,improving students’engineering practice and innovation abilities,and cultivating software engineering innovation talents that meet industry needs are of great significance for fully implementing the“Excellent Engineer Education and Training Program”of the Ministry of Education and achieving the goal of building a strong engineering education country.The School of Information and Software Engineering of the University of Electronic Science and Technology of China(UESTC)has been thoroughly studying and implementing Xi Jinping Thought on Socialism with Chinese Characteristics for a New Era and the spirit of the 20th CPC National Congress.The school has steadfastly promoted the Project of Nurturing the Soul of the New Era.The school has taken moral education as its core,deeply explored the resources of“all staff,throughout the process,in all aspects”,and constructed and implemented the collaborative education mechanism.These efforts have laid a solid foundation for cultivating excellent talents in software engineering in the new era. 展开更多
关键词 software engineering collaborative education Talent cultivation School-enterprise cooperation
在线阅读 下载PDF
Training of Engineering-oriented Mindset with Application of an IUR Collaboration Project
16
作者 Liang Dong Shouqiang Liu Qingzhen Xu 《计算机教育》 2026年第3期61-66,共6页
Software engineering has been embraced by almost all industries to promote work efficiency,improve user experience or cut cost.In line with this,the education on software engineering should be made more adaptable to m... Software engineering has been embraced by almost all industries to promote work efficiency,improve user experience or cut cost.In line with this,the education on software engineering should be made more adaptable to meet the needs of industries.Industry-university-research(IUR)collaboration project,which was initially designed to reinforce the association between universities and enterprises,brought added value to this end.In this paper,an IUR collaboration project on tele-rehabilitation is presented as an example for education practice,where emphasis is laid on the ways of analyzing users’needs,converting users’needs to infrastructure design,decomposing a project into tasks,etc.The project had been used as both student assignments and case studies in software engineering courses,where students were motivated to deal with real medical problems from an engineering perspective.It was shown that by introducing the IUR collaboration project,it helped the students to build up engineering-oriented mindset besides improving their R&D ability on software engineering. 展开更多
关键词 Industry-university-research(IUR)collaboration software engineering education Tele-rehabilitation Engineering-oriented mindset
在线阅读 下载PDF
Reform of Teacher-Machine-Student Interactive Teaching Model of“HarmonyOS Development Technology”Course Based on Congyou Platform
17
作者 Yixian Liu Jun Guo +1 位作者 Dongming Chen Zhiliang Zhu 《计算机教育》 2026年第3期158-166,共9页
Aiming at the problems of lagging curriculum,weak practice,and single evaluation in the cultivation of HarmonyOS Development talents,this study constructs a“teacher-machine-student”ternary interactive teaching model... Aiming at the problems of lagging curriculum,weak practice,and single evaluation in the cultivation of HarmonyOS Development talents,this study constructs a“teacher-machine-student”ternary interactive teaching model based on the Congyou platform.Through the building block curriculum system,the HarmonyOS technology stack is decoupled into dynamic capability units,and a multi-disciplinary cross-case library is jointly built with Huawei,which significantly improves the synchronization of teaching content and industrial technology.This paper innovatively designs an AI collaborative teaching system,which employs knowledge graphs to plan learning paths,utilizes virtual equipment clusters to simulate development environments,and establishes a“diagnosis-feedback-enhancement”closed loop through AI-based review,thereby effectively improving students’development efficiency and code reuse rate.A three-dimensional evaluation model integrating task outcomes,process performance,and innovation is constructed,incorporating indicators such as code standardization and an innovation index to strengthen the cultivation of engineering thinking and innovative ability.Furthermore,a data-driven support platform is built to generate student competency profiles,open up the“credit-competency-certification”pathway,promote the transformation of course achievements into contributions to the Huawei ecosystem,and significantly shorten the job adaptation cycle for graduates.The research results provide a replicable paradigm for the cultivation of domestic operating system talents. 展开更多
关键词 Interactive teaching model HarmonyOS development technology Building-block curriculum system Domestic software ecosystem
在线阅读 下载PDF
Construction of a Teaching System Through School-enterprise Collaboration in an Integration and Innovation Framework:A Case Study of the Internet of Things Specialization in the Software Engineering Program 被引量:1
18
作者 Jing Tang Donglai Fu +2 位作者 Jun Hong Guoyu Qi Yan Qiang 《计算机教育》 2025年第3期41-47,共7页
The advancement of Internet of Things(IoT)technology is driving industries toward intelligent digital transformation,highlighting the crucial role of software engineering.Despite this,the integration of software engin... The advancement of Internet of Things(IoT)technology is driving industries toward intelligent digital transformation,highlighting the crucial role of software engineering.Despite this,the integration of software engineering into IoT engineering education remains underexplored.To address this gap,the School of Software at North University of China,in collaboration with QST Innovation Technology Group Co.,Ltd.(QST),has developed an innovative educational mechanism.This initiative focuses on the software engineering IoT track and optimizes the teaching process through the outcome-based education(OBE)concept.It incorporates military-industrial characteristics,introduces advanced information and technology curricula,and enhances laboratory infrastructure.The goal is to cultivate innovative talents with unique capabilities,thereby fostering the comprehensive development and application of IoT technology. 展开更多
关键词 software engineering IoT track School-enterprise collaboration Integration and innovation framework Outcome-based education
在线阅读 下载PDF
Review of Techniques for Integrating Security in Software Development Lifecycle
19
作者 Hassan Saeed Imran Shafi +3 位作者 Jamil Ahmad Adnan Ahmed Khan Tahir Khurshaid Imran Ashraf 《Computers, Materials & Continua》 SCIE EI 2025年第1期139-172,共34页
Software-related security aspects are a growing and legitimate concern,especially with 5G data available just at our palms.To conduct research in this field,periodic comparative analysis is needed with the new techniq... Software-related security aspects are a growing and legitimate concern,especially with 5G data available just at our palms.To conduct research in this field,periodic comparative analysis is needed with the new techniques coming up rapidly.The purpose of this study is to review the recent developments in the field of security integration in the software development lifecycle(SDLC)by analyzing the articles published in the last two decades and to propose a way forward.This review follows Kitchenham’s review protocol.The review has been divided into three main stages including planning,execution,and analysis.From the selected 100 articles,it becomes evident that need of a collaborative approach is necessary for addressing critical software security risks(CSSRs)through effective risk management/estimation techniques.Quantifying risks using a numeric scale enables a comprehensive understanding of their severity,facilitating focused resource allocation and mitigation efforts.Through a comprehensive understanding of potential vulnerabilities and proactive mitigation efforts facilitated by protection poker,organizations can prioritize resources effectively to ensure the successful outcome of projects and initiatives in today’s dynamic threat landscape.The review reveals that threat analysis and security testing are needed to develop automated tools for the future.Accurate estimation of effort required to prioritize potential security risks is a big challenge in software security.The accuracy of effort estimation can be further improved by exploring new techniques,particularly those involving deep learning.It is also imperative to validate these effort estimation methods to ensure all potential security threats are addressed.Another challenge is selecting the right model for each specific security threat.To achieve a comprehensive evaluation,researchers should use well-known benchmark checklists. 展开更多
关键词 software development lifecycle systematic literature review critical software security risks national institute of standards and technology DevSecOps open web application security project mcGraw’s touch points
在线阅读 下载PDF
A Decentralized and TCAM-Aware Failure Recovery Model in Software Defined Data Center Networks
20
作者 Suheib Alhiyari Siti Hafizah AB Hamid Nur Nasuha Daud 《Computers, Materials & Continua》 SCIE EI 2025年第1期1087-1107,共21页
Link failure is a critical issue in large networks and must be effectively addressed.In software-defined networks(SDN),link failure recovery schemes can be categorized into proactive and reactive approaches.Reactive s... Link failure is a critical issue in large networks and must be effectively addressed.In software-defined networks(SDN),link failure recovery schemes can be categorized into proactive and reactive approaches.Reactive schemes have longer recovery times while proactive schemes provide faster recovery but overwhelm the memory of switches by flow entries.As SDN adoption grows,ensuring efficient recovery from link failures in the data plane becomes crucial.In particular,data center networks(DCNs)demand rapid recovery times and efficient resource utilization to meet carrier-grade requirements.This paper proposes an efficient Decentralized Failure Recovery(DFR)model for SDNs,meeting recovery time requirements and optimizing switch memory resource consumption.The DFR model enables switches to autonomously reroute traffic upon link failures without involving the controller,achieving fast recovery times while minimizing memory usage.DFR employs the Fast Failover Group in the OpenFlow standard for local recovery without requiring controller communication and utilizes the k-shortest path algorithm to proactively install backup paths,allowing immediate local recovery without controller intervention and enhancing overall network stability and scalability.DFR employs flow entry aggregation techniques to reduce switch memory usage.Instead of matching flow entries to the destination host’s MAC address,DFR matches packets to the destination switch’s MAC address.This reduces the switches’Ternary Content-Addressable Memory(TCAM)consumption.Additionally,DFR modifies Address Resolution Protocol(ARP)replies to provide source hosts with the destination switch’s MAC address,facilitating flow entry aggregation without affecting normal network operations.The performance of DFR is evaluated through the network emulator Mininet 2.3.1 and Ryu 3.1 as SDN controller.For different number of active flows,number of hosts per edge switch,and different network sizes,the proposed model outperformed various failure recovery models:restoration-based,protection by flow entries,protection by group entries and protection by Vlan-tagging model in terms of recovery time,switch memory consumption and controller overhead which represented the number of flow entry updates to recover from the failure.Experimental results demonstrate that DFR achieves recovery times under 20 milliseconds,satisfying carrier-grade requirements for rapid failure recovery.Additionally,DFR reduces switch memory usage by up to 95%compared to traditional protection methods and minimizes controller load by eliminating the need for controller intervention during failure recovery.Theresults underscore the efficiency and scalability of the DFR model,making it a practical solution for enhancing network resilience in SDN environments. 展开更多
关键词 software defined networking failure detection failure recovery RESTORATION protection TcAm size
在线阅读 下载PDF
上一页 1 2 250 下一页 到第
使用帮助 返回顶部