With the rapid development of artificial intelligence,the intelligence level of software is increasingly improving.Intelligent software,which is widely applied in crucial fields such as autonomous driving,intelligent ...With the rapid development of artificial intelligence,the intelligence level of software is increasingly improving.Intelligent software,which is widely applied in crucial fields such as autonomous driving,intelligent customer service,and medical diagnosis,is constructed based on complex technologies like machine learning and deep learning.Its uncertain behavior and data dependence pose unprecedented challenges to software testing.However,existing software testing courses mainly focus on conventional contents and are unable to meet the requirements of intelligent software testing.Therefore,this work deeply analyzed the relevant technologies of intelligent software testing,including reliability evaluation indicator system,neuron coverage,and test case generation.It also systematically designed an intelligent software testing course,covering teaching objectives,teaching content,teaching methods,and a teaching case.Verified by the practical teaching in four classes,this course has achieved remarkable results,providing practical experience for the reform of software testing courses.展开更多
In the context of large language model(LLM)reshaping software engineering education,this paper presents OSSerCopilot,a LLM-based tutoring system designed to address the critical challenge faced by newcomers(especially...In the context of large language model(LLM)reshaping software engineering education,this paper presents OSSerCopilot,a LLM-based tutoring system designed to address the critical challenge faced by newcomers(especially student contributors)in open source software(OSS)communities.Leveraging natural language processing,code semantic understanding,and learner profiling,the system functions as an intelligent tutor to scaffold three core competency domains:contribution guideline interpretation,project architecture comprehension,and personalized task matching.By transforming traditional onboarding barriers-such as complex contribution documentation and opaque project structures-into interactive learning journeys,OSSerCopilot enables newcomers to complete their first OSS contribution more easily and confidently.This paper highlights how LLM technologies can redefine software engineering education by bridging the gap between theoretical knowledge and practical OSS participation,offering implications for curriculum design,competency assessment,and sustainable OSS ecosystem cultivation.A demonstration video of the system is available at https://figshare.com/articles/media/OSSerCopilot_Introduction_mp4/29510276.展开更多
Heavy-ion collisions(HICs)is a unique experimental tool for investigating the properties of nuclear matter under extreme conditions in the laboratory.At HIRFL-CSR energies,HICs can create nuclear matter with 2-3 times...Heavy-ion collisions(HICs)is a unique experimental tool for investigating the properties of nuclear matter under extreme conditions in the laboratory.At HIRFL-CSR energies,HICs can create nuclear matter with 2-3 times the saturation density(ρ_(0)).The HIRFL-CSR external-target experiment(CEE)is a large-acceptance spectrometer designed to explore frontier topics in high-energy nuclear physics,such as the QCD phase structure and nuclear matter equation of states.In this letter,we introduce simulation and analysis software for the CEE experiment(CeeROOT).Based on the CEE conceptual design and CeeROOT software,the configurations of its subdetectors were optimized by considering foreseeable physical constraints.The final detector layout of the CEE spectrometer and its acceptances were validated through simulations of U+U collisions at 500 MeV/u and pp collisions at 2.8 GeV,which demonstrated that the CEE experiment will serve as a detector with wide acceptance and multi-particle identification capabilities for studying high-energy nuclear physics topics at HIRFL-CSR energies with pp,pA,and A A collisions.展开更多
While parametric Software Reliability Growth Models(SRGMs)serve as a cornerstone in software reliability assessment,their reliance on known fault-detection time distributions often presents a significant limitation in...While parametric Software Reliability Growth Models(SRGMs)serve as a cornerstone in software reliability assessment,their reliance on known fault-detection time distributions often presents a significant limitation in practical software testing.In this study,the authors develop a novel shaperestricted spline estimator for quantifying software reliability.Compared with parametric SRGMs,the proposed estimator not only shares a key characteristic with parametric SRGMs,but also obviates the need for specifying fault-detection time distributions.More importantly,it effectively utilizes the critical shape information of the mean value function(MVF)of fault-detection process,a detail seldom considered in prior work.Moreover,the authors investigate the predictive performance of the proposed methods by employing the so-called one-step look-ahead prediction method.Furthermore,the authors show that under certain conditions,the shape-restricted spline estimator will attain the point-wise convergence rate O_P(n~(-3/7)).In numerical experiment,the authors show that spline estimators under restriction demonstrate competitive performance compared to parametric and certain non-parametric models.展开更多
In the modern era of ubiquitous and highly interconnected information technology,cybersecurity threats stemming from software code vulnerabilities have become increasingly severe,posing significant risks to the confid...In the modern era of ubiquitous and highly interconnected information technology,cybersecurity threats stemming from software code vulnerabilities have become increasingly severe,posing significant risks to the confidentiality,integrity,and availability of modern information systems.To enhance software code quality,enterprises often integrate static code analysis tools into Continuous Integration(CI) pipelines.However,the high rates of false positives and false negatives remain a challenge.The advent of large language models(LLMs),such as ChatGPT,presents a new opportunity to address these challenges.In this paper,we propose AI-SCDF,a framework that utilizes the custombuilt Nebula-Coder AI model for detecting and fixing code security issues in real time during the developer ' s personal build process.We construct a static code checking rule knowledge base through summarizing and classifying Common Weakness Enumeration(CWE) code security problems identified by security and quality assurance teams.The rule knowledge base is combined with CodeFuse-processed code contexts to serve as input for an AI code security detection microservice,which assists in identifying code quality and security issues.If any abnormalities are detected,they are addressed by an AI code security patching microservice,which alerts the developer and requests confirmation before committing the code into the repository.Experimental results show that our approach effectively improves code quality.We also develop a VS Code plugin for code alert detection and fix based on LLMs,which facilitates test shift-left and lowers the risk of software development.展开更多
With the advent of the AI era,how can students effectively utilize generative AI large models to assist in course learning?At the same time,how can teachers utilize generative AI tools and the teaching concept of OBE ...With the advent of the AI era,how can students effectively utilize generative AI large models to assist in course learning?At the same time,how can teachers utilize generative AI tools and the teaching concept of OBE to stimulate students’innovative consciousness and teamwork ability,enabling students to identify some problems in a certain industry or field and creatively propose feasible solutions,and truly achieve the cultivation of new models in software engineering course teaching with the assistance of generative AI tools?This paper presents research and practice on a new model for cultivating software engineering courses that integrates generative AI and OBE,introduces the specific process of teaching reform and practice,and finally explains the achievements of teaching reform.展开更多
The rapid development of new-quality productive forces(NQPF)has intensified the demand for high-level innovative talent.As a representative of NQPF,generative artificial intelligence(GenAI)offers powerful tools to res...The rapid development of new-quality productive forces(NQPF)has intensified the demand for high-level innovative talent.As a representative of NQPF,generative artificial intelligence(GenAI)offers powerful tools to reshape talent cultivation but also presents significant challenges,including skill hollowing,ethical risks,and a growing disconnect between education and industry needs.Currently,graduate-level software engineering education struggles with outdated curricula and insufficient alignment with practical demands.In this paper,we propose a dual-core collaborative framework driven by“GenAI technology”and“industry demand”.Under this framework,we design a four-dimensional capability development path to enhance graduate students’innovation in software engineering practice.This path focuses on①scientific research innovation,②engineering problem-solving,③cross-domain collaborative evolution,and④ethical risk governance.The proposed approach promotes a shift from traditional knowledge transfer to human-machine collaborative innovation,aligning talent cultivation with the demands of the NQPF.展开更多
The rapid development of artificial intelligence(AI)has placed significant pressure on universities to rethink how they train software engineering students.Tools like GitHub Copilot can now generate basic code in seco...The rapid development of artificial intelligence(AI)has placed significant pressure on universities to rethink how they train software engineering students.Tools like GitHub Copilot can now generate basic code in seconds.This raises important questions:What is the value of traditional programming education?What role should instructors play when AI becomes a powerful teaching assistant?How should the goals of software engineering programs change as companies increasingly use AI to handle coding tasks?This paper explores the key challenges AI brings to software engineering education and proposes practical strategies for updating talent development models to meet these changes.展开更多
Small angle x-ray scattering(SAXS)is an advanced technique for characterizing the particle size distribution(PSD)of nanoparticles.However,the ill-posed nature of inverse problems in SAXS data analysis often reduces th...Small angle x-ray scattering(SAXS)is an advanced technique for characterizing the particle size distribution(PSD)of nanoparticles.However,the ill-posed nature of inverse problems in SAXS data analysis often reduces the accuracy of conventional methods.This article proposes a user-friendly software for PSD analysis,GranuSAS,which employs an algorithm that integrates truncated singular value decomposition(TSVD)with the Chahine method.This approach employs TSVD for data preprocessing,generating a set of initial solutions with noise suppression.A high-quality initial solution is subsequently selected via the L-curve method.This selected candidate solution is then iteratively refined by the Chahine algorithm,enforcing constraints such as non-negativity and improving physical interpretability.Most importantly,GranuSAS employs a parallel architecture that simultaneously yields inversion results from multiple shape models and,by evaluating the accuracy of each model's reconstructed scattering curve,offers a suggestion for model selection in material systems.To systematically validate the accuracy and efficiency of the software,verification was performed using both simulated and experimental datasets.The results demonstrate that the proposed software delivers both satisfactory accuracy and reliable computational efficiency.It provides an easy-to-use and reliable tool for researchers in materials science,helping them fully exploit the potential of SAXS in nanoparticle characterization.展开更多
Faculty development serves as a critical foundation for ensuring the quality of higher education.To meet the needs of cultivating specialized software talents and promoting teaching reform,it is particularly crucial t...Faculty development serves as a critical foundation for ensuring the quality of higher education.To meet the needs of cultivating specialized software talents and promoting teaching reform,it is particularly crucial to build a faculty team with knowledge in industry application fields and experience in domestic software development.This paper first analyzes the new requirements for the faculty imposed by the cultivation of specialized software talents and the existing problems in the current faculty.Then,in response to these issues,it introduces the reforms and explorations carried out by the School of Software Engineering at Beijing Jiaotong University in the construction of the faculty for cultivating specialized software talents.The aim is to build a high-caliber and diversified faculty that boasts strong political qualities,interdisciplinary integration,complementary advantages between full-time and part-time faculty,and in-depth integration of industry and education.展开更多
Test case prioritization and ranking play a crucial role in software testing by improving fault detection efficiency and ensuring software reliability.While prioritization selects the most relevant test cases for opti...Test case prioritization and ranking play a crucial role in software testing by improving fault detection efficiency and ensuring software reliability.While prioritization selects the most relevant test cases for optimal coverage,ranking further refines their execution order to detect critical faults earlier.This study investigates machine learning techniques to enhance both prioritization and ranking,contributing to more effective and efficient testing processes.We first employ advanced feature engineering alongside ensemble models,including Gradient Boosted,Support Vector Machines,Random Forests,and Naive Bayes classifiers to optimize test case prioritization,achieving an accuracy score of 0.98847 and significantly improving the Average Percentage of Fault Detection(APFD).Subsequently,we introduce a deep Q-learning framework combined with a Genetic Algorithm(GA)to refine test case ranking within priority levels.This approach achieves a rank accuracy of 0.9172,demonstrating robust performance despite the increasing computational demands of specialized variation operators.Our findings highlight the effectiveness of stacked ensemble learning and reinforcement learning in optimizing test case prioritization and ranking.This integrated approach improves testing efficiency,reduces late-stage defects,and improves overall software stability.The study provides valuable information for AI-driven testing frameworks,paving the way for more intelligent and adaptive software quality assurance methodologies.展开更多
Promoting the integration of industry and education and deepening school-enterprise cooperation in talent cultivation and collaborative innovation are long-term goals of higher education.This paper systematically anal...Promoting the integration of industry and education and deepening school-enterprise cooperation in talent cultivation and collaborative innovation are long-term goals of higher education.This paper systematically analyzes the multiple perspectives,practical challenges,and implementation paths of in-depth school-enterprise cooperation.Based on the typical case of school-enterprise cooperation at the School of Information and Software Engineering,University of Electronic Science and Technology of China(UESTC),this paper explores the innovative practices of in-depth school-enterprise cooperation in talent cultivation,scientific research,and faculty construction.It also explores a multi-party collaborative mechanism from the perspectives of universities,enterprises,students,and the government.By policy guidance,resource integration,and benefit sharing,this mechanism achieves in-depth integration of industry and education,providing references and examples for further development of school-enterprise cooperation in the new era.展开更多
Traditional grade-centered evaluation models are inadequate for high-quality software engineering talents in the digital and AI era.This study develops an academic development monitoring system to address shortcomings...Traditional grade-centered evaluation models are inadequate for high-quality software engineering talents in the digital and AI era.This study develops an academic development monitoring system to address shortcomings in dynamics,interdisciplinary integration,and industry adaptability.It builds a multi-dimensional dynamic model covering seven core dimensions with quantitative scoring,non-linear weighting,and DivClust grouping.An intelligent platform with real-time monitoring,early warning,and personalized recommendations integrates AI like multi-modal fusion and large-model diagnosis.The“monitoring-warning-improvement”loop helps optimize training programs,support personalized planning,and bridge talent-industry gaps,enabling digital transformation in software engineering education evaluation.展开更多
Software security poses substantial risks to our society because software has become part of our life. Numerous techniques have been proposed to resolve or mitigate the impact of software security issues. Among them, ...Software security poses substantial risks to our society because software has become part of our life. Numerous techniques have been proposed to resolve or mitigate the impact of software security issues. Among them, software testing and analysis are two of the critical methods, which significantly benefit from the advancements in deep learning technologies. Due to the successful use of deep learning in software security, recently,researchers have explored the potential of using large language models(LLMs) in this area. In this paper, we systematically review the results focusing on LLMs in software security. We analyze the topics of fuzzing, unit test, program repair, bug reproduction, data-driven bug detection, and bug triage. We deconstruct these techniques into several stages and analyze how LLMs can be used in the stages. We also discuss the future directions of using LLMs in software security, including the future directions for the existing use of LLMs and extensions from conventional deep learning research.展开更多
Building a collaborative education mechanism,improving students’engineering practice and innovation abilities,and cultivating software engineering innovation talents that meet industry needs are of great significance...Building a collaborative education mechanism,improving students’engineering practice and innovation abilities,and cultivating software engineering innovation talents that meet industry needs are of great significance for fully implementing the“Excellent Engineer Education and Training Program”of the Ministry of Education and achieving the goal of building a strong engineering education country.The School of Information and Software Engineering of the University of Electronic Science and Technology of China(UESTC)has been thoroughly studying and implementing Xi Jinping Thought on Socialism with Chinese Characteristics for a New Era and the spirit of the 20th CPC National Congress.The school has steadfastly promoted the Project of Nurturing the Soul of the New Era.The school has taken moral education as its core,deeply explored the resources of“all staff,throughout the process,in all aspects”,and constructed and implemented the collaborative education mechanism.These efforts have laid a solid foundation for cultivating excellent talents in software engineering in the new era.展开更多
Spectrum-based fault localization (SBFL) generates a ranked list of suspicious elements by using the program execution spectrum, but the excessive number of elements ranked in parallel results in low localization accu...Spectrum-based fault localization (SBFL) generates a ranked list of suspicious elements by using the program execution spectrum, but the excessive number of elements ranked in parallel results in low localization accuracy. Most researchers consider intra-class dependencies to improve localization accuracy. However, some studies show that inter-class method call type faults account for more than 20%, which means such methods still have certain limitations. To solve the above problems, this paper proposes a two-phase software fault localization based on relational graph convolutional neural networks (Two-RGCNFL). Firstly, in Phase 1, the method call dependence graph (MCDG) of the program is constructed, the intra-class and inter-class dependencies in MCDG are extracted by using the relational graph convolutional neural network, and the classifier is used to identify the faulty methods. Then, the GraphSMOTE algorithm is improved to alleviate the impact of class imbalance on classification accuracy. Aiming at the problem of parallel ranking of element suspicious values in traditional SBFL technology, in Phase 2, Doc2Vec is used to learn static features, while spectrum information serves as dynamic features. A RankNet model based on siamese multi-layer perceptron is constructed to score and rank statements in the faulty method. This work conducts experiments on 5 real projects of Defects4J benchmark. Experimental results show that, compared with the traditional SBFL technique and two baseline methods, our approach improves the Top-1 accuracy by 262.86%, 29.59% and 53.01%, respectively, which verifies the effectiveness of Two-RGCNFL. Furthermore, this work verifies the importance of inter-class dependencies through ablation experiments.展开更多
Software-defined networking(SDN)is an innovative paradigm that separates the control and data planes,introducing centralized network control.SDN is increasingly being adopted by Carrier Grade networks,offering enhance...Software-defined networking(SDN)is an innovative paradigm that separates the control and data planes,introducing centralized network control.SDN is increasingly being adopted by Carrier Grade networks,offering enhanced networkmanagement capabilities than those of traditional networks.However,because SDN is designed to ensure high-level service availability,it faces additional challenges.One of themost critical challenges is ensuring efficient detection and recovery from link failures in the data plane.Such failures can significantly impact network performance and lead to service outages,making resiliency a key concern for the effective adoption of SDN.Since the recovery process is intrinsically dependent on timely failure detection,this research surveys and analyzes the current literature on both failure detection and recovery approaches in SDN.The survey provides a critical comparison of existing failure detection techniques,highlighting their advantages and disadvantages.Additionally,it examines the current failure recovery methods,categorized as either restoration-based or protection-based,and offers a comprehensive comparison of their strengths and limitations.Lastly,future research challenges and directions are discussed to address the shortcomings of existing failure recovery methods.展开更多
The Guidelines for the Construction of Ideological and Political Education in Courses at Institutions of Higher Learning emphasizes that“the construction of ideological and political education in courses is an import...The Guidelines for the Construction of Ideological and Political Education in Courses at Institutions of Higher Learning emphasizes that“the construction of ideological and political education in courses is an important task for comprehensively improving the quality of talent cultivation”and“clarifying the target requirements and key content of the construction of ideological and political education in courses.”In vocational colleges,as an important discipline in the field of information technology,the construction of ideological and political education in software technology courses is of great significance for cultivating students’comprehensive qualities and establishing correct values.Based on sorting out the core literacy of the construction of ideological and political education in software technology courses,this article actively explores its construction path,hoping to provide references for relevant educators.展开更多
The advancement of Internet of Things(IoT)technology is driving industries toward intelligent digital transformation,highlighting the crucial role of software engineering.Despite this,the integration of software engin...The advancement of Internet of Things(IoT)technology is driving industries toward intelligent digital transformation,highlighting the crucial role of software engineering.Despite this,the integration of software engineering into IoT engineering education remains underexplored.To address this gap,the School of Software at North University of China,in collaboration with QST Innovation Technology Group Co.,Ltd.(QST),has developed an innovative educational mechanism.This initiative focuses on the software engineering IoT track and optimizes the teaching process through the outcome-based education(OBE)concept.It incorporates military-industrial characteristics,introduces advanced information and technology curricula,and enhances laboratory infrastructure.The goal is to cultivate innovative talents with unique capabilities,thereby fostering the comprehensive development and application of IoT technology.展开更多
Software-related security aspects are a growing and legitimate concern,especially with 5G data available just at our palms.To conduct research in this field,periodic comparative analysis is needed with the new techniq...Software-related security aspects are a growing and legitimate concern,especially with 5G data available just at our palms.To conduct research in this field,periodic comparative analysis is needed with the new techniques coming up rapidly.The purpose of this study is to review the recent developments in the field of security integration in the software development lifecycle(SDLC)by analyzing the articles published in the last two decades and to propose a way forward.This review follows Kitchenham’s review protocol.The review has been divided into three main stages including planning,execution,and analysis.From the selected 100 articles,it becomes evident that need of a collaborative approach is necessary for addressing critical software security risks(CSSRs)through effective risk management/estimation techniques.Quantifying risks using a numeric scale enables a comprehensive understanding of their severity,facilitating focused resource allocation and mitigation efforts.Through a comprehensive understanding of potential vulnerabilities and proactive mitigation efforts facilitated by protection poker,organizations can prioritize resources effectively to ensure the successful outcome of projects and initiatives in today’s dynamic threat landscape.The review reveals that threat analysis and security testing are needed to develop automated tools for the future.Accurate estimation of effort required to prioritize potential security risks is a big challenge in software security.The accuracy of effort estimation can be further improved by exploring new techniques,particularly those involving deep learning.It is also imperative to validate these effort estimation methods to ensure all potential security threats are addressed.Another challenge is selecting the right model for each specific security threat.To achieve a comprehensive evaluation,researchers should use well-known benchmark checklists.展开更多
基金Computer Basic Education Teaching Research Project of Association of Fundamental Computing Education in Chinese Universities(Nos.2025-AFCEC-527 and 2024-AFCEC-088)Research on the Reform of Public Course Teaching at Nantong College of Science and Technology(No.2024JGG015).
文摘With the rapid development of artificial intelligence,the intelligence level of software is increasingly improving.Intelligent software,which is widely applied in crucial fields such as autonomous driving,intelligent customer service,and medical diagnosis,is constructed based on complex technologies like machine learning and deep learning.Its uncertain behavior and data dependence pose unprecedented challenges to software testing.However,existing software testing courses mainly focus on conventional contents and are unable to meet the requirements of intelligent software testing.Therefore,this work deeply analyzed the relevant technologies of intelligent software testing,including reliability evaluation indicator system,neuron coverage,and test case generation.It also systematically designed an intelligent software testing course,covering teaching objectives,teaching content,teaching methods,and a teaching case.Verified by the practical teaching in four classes,this course has achieved remarkable results,providing practical experience for the reform of software testing courses.
基金supported by the National Natural Science Foundation of China (62202022, 92582204, and 62572030)the Fundamental Research Funds for the Central Universitiesthe exploratory elective projects of the State Key Laboratory of Complex and Critical Software Environments
文摘In the context of large language model(LLM)reshaping software engineering education,this paper presents OSSerCopilot,a LLM-based tutoring system designed to address the critical challenge faced by newcomers(especially student contributors)in open source software(OSS)communities.Leveraging natural language processing,code semantic understanding,and learner profiling,the system functions as an intelligent tutor to scaffold three core competency domains:contribution guideline interpretation,project architecture comprehension,and personalized task matching.By transforming traditional onboarding barriers-such as complex contribution documentation and opaque project structures-into interactive learning journeys,OSSerCopilot enables newcomers to complete their first OSS contribution more easily and confidently.This paper highlights how LLM technologies can redefine software engineering education by bridging the gap between theoretical knowledge and practical OSS participation,offering implications for curriculum design,competency assessment,and sustainable OSS ecosystem cultivation.A demonstration video of the system is available at https://figshare.com/articles/media/OSSerCopilot_Introduction_mp4/29510276.
基金supported by the Strategic Priority Research Program of Chinese Academy of Sciences(No.XDB34030000)the National Natural Science Foundation of China(Nos.11927901 and 12475133)+1 种基金the Youth Team Program in Basic Research Fields Stably Supported by the Chinese Academy of Sciences(No.YSBR-088)the Western Light Project of the Chinese Academy of Sciences。
文摘Heavy-ion collisions(HICs)is a unique experimental tool for investigating the properties of nuclear matter under extreme conditions in the laboratory.At HIRFL-CSR energies,HICs can create nuclear matter with 2-3 times the saturation density(ρ_(0)).The HIRFL-CSR external-target experiment(CEE)is a large-acceptance spectrometer designed to explore frontier topics in high-energy nuclear physics,such as the QCD phase structure and nuclear matter equation of states.In this letter,we introduce simulation and analysis software for the CEE experiment(CeeROOT).Based on the CEE conceptual design and CeeROOT software,the configurations of its subdetectors were optimized by considering foreseeable physical constraints.The final detector layout of the CEE spectrometer and its acceptances were validated through simulations of U+U collisions at 500 MeV/u and pp collisions at 2.8 GeV,which demonstrated that the CEE experiment will serve as a detector with wide acceptance and multi-particle identification capabilities for studying high-energy nuclear physics topics at HIRFL-CSR energies with pp,pA,and A A collisions.
文摘While parametric Software Reliability Growth Models(SRGMs)serve as a cornerstone in software reliability assessment,their reliance on known fault-detection time distributions often presents a significant limitation in practical software testing.In this study,the authors develop a novel shaperestricted spline estimator for quantifying software reliability.Compared with parametric SRGMs,the proposed estimator not only shares a key characteristic with parametric SRGMs,but also obviates the need for specifying fault-detection time distributions.More importantly,it effectively utilizes the critical shape information of the mean value function(MVF)of fault-detection process,a detail seldom considered in prior work.Moreover,the authors investigate the predictive performance of the proposed methods by employing the so-called one-step look-ahead prediction method.Furthermore,the authors show that under certain conditions,the shape-restricted spline estimator will attain the point-wise convergence rate O_P(n~(-3/7)).In numerical experiment,the authors show that spline estimators under restriction demonstrate competitive performance compared to parametric and certain non-parametric models.
文摘In the modern era of ubiquitous and highly interconnected information technology,cybersecurity threats stemming from software code vulnerabilities have become increasingly severe,posing significant risks to the confidentiality,integrity,and availability of modern information systems.To enhance software code quality,enterprises often integrate static code analysis tools into Continuous Integration(CI) pipelines.However,the high rates of false positives and false negatives remain a challenge.The advent of large language models(LLMs),such as ChatGPT,presents a new opportunity to address these challenges.In this paper,we propose AI-SCDF,a framework that utilizes the custombuilt Nebula-Coder AI model for detecting and fixing code security issues in real time during the developer ' s personal build process.We construct a static code checking rule knowledge base through summarizing and classifying Common Weakness Enumeration(CWE) code security problems identified by security and quality assurance teams.The rule knowledge base is combined with CodeFuse-processed code contexts to serve as input for an AI code security detection microservice,which assists in identifying code quality and security issues.If any abnormalities are detected,they are addressed by an AI code security patching microservice,which alerts the developer and requests confirmation before committing the code into the repository.Experimental results show that our approach effectively improves code quality.We also develop a VS Code plugin for code alert detection and fix based on LLMs,which facilitates test shift-left and lowers the risk of software development.
基金supported by the Shanghai Municipal Education Research Project“Exploring the Practical Application of Generative Artificial Intelligence in Cultivating Innovative Thinking and Capabilities of Interdisciplinary Application Technology Talents‘Practice Path’”(C2025299)the university-level postgraduate course project“Software Process Management”(PX-2025251502)of Shanghai Sanda Universitythe key course project at the university level of Shanghai Sanda University,“Introduction to Software Engineering”(PX-5241216).
文摘With the advent of the AI era,how can students effectively utilize generative AI large models to assist in course learning?At the same time,how can teachers utilize generative AI tools and the teaching concept of OBE to stimulate students’innovative consciousness and teamwork ability,enabling students to identify some problems in a certain industry or field and creatively propose feasible solutions,and truly achieve the cultivation of new models in software engineering course teaching with the assistance of generative AI tools?This paper presents research and practice on a new model for cultivating software engineering courses that integrates generative AI and OBE,introduces the specific process of teaching reform and practice,and finally explains the achievements of teaching reform.
基金supported in part by the Graduate Education Reform Research Project of Hubei University of Technology under Grant 2024YB003the Hubei University of Arts and Science,Teaching Research Project,under Grant JY2025018.
文摘The rapid development of new-quality productive forces(NQPF)has intensified the demand for high-level innovative talent.As a representative of NQPF,generative artificial intelligence(GenAI)offers powerful tools to reshape talent cultivation but also presents significant challenges,including skill hollowing,ethical risks,and a growing disconnect between education and industry needs.Currently,graduate-level software engineering education struggles with outdated curricula and insufficient alignment with practical demands.In this paper,we propose a dual-core collaborative framework driven by“GenAI technology”and“industry demand”.Under this framework,we design a four-dimensional capability development path to enhance graduate students’innovation in software engineering practice.This path focuses on①scientific research innovation,②engineering problem-solving,③cross-domain collaborative evolution,and④ethical risk governance.The proposed approach promotes a shift from traditional knowledge transfer to human-machine collaborative innovation,aligning talent cultivation with the demands of the NQPF.
基金supported in part by the Northeastern University’s 2024 Undergraduate Education and Teaching Reform Research Project:Innovation and Practice of Professional Course Teaching Paradigms in the Context of Digital Education.
文摘The rapid development of artificial intelligence(AI)has placed significant pressure on universities to rethink how they train software engineering students.Tools like GitHub Copilot can now generate basic code in seconds.This raises important questions:What is the value of traditional programming education?What role should instructors play when AI becomes a powerful teaching assistant?How should the goals of software engineering programs change as companies increasingly use AI to handle coding tasks?This paper explores the key challenges AI brings to software engineering education and proposes practical strategies for updating talent development models to meet these changes.
基金Project supported by the Project of the Anhui Provincial Natural Science Foundation(Grant No.2308085MA19)Strategic Priority Research Program of the Chinese Academy of Sciences(Grant No.XDA0410401)+2 种基金the National Natural Science Foundation of China(Grant No.52202120)the National Key Research and Development Program of China(Grant No.2023YFA1609800)USTC Research Funds of the Double First-Class Initiative(Grant No.YD2310002013)。
文摘Small angle x-ray scattering(SAXS)is an advanced technique for characterizing the particle size distribution(PSD)of nanoparticles.However,the ill-posed nature of inverse problems in SAXS data analysis often reduces the accuracy of conventional methods.This article proposes a user-friendly software for PSD analysis,GranuSAS,which employs an algorithm that integrates truncated singular value decomposition(TSVD)with the Chahine method.This approach employs TSVD for data preprocessing,generating a set of initial solutions with noise suppression.A high-quality initial solution is subsequently selected via the L-curve method.This selected candidate solution is then iteratively refined by the Chahine algorithm,enforcing constraints such as non-negativity and improving physical interpretability.Most importantly,GranuSAS employs a parallel architecture that simultaneously yields inversion results from multiple shape models and,by evaluating the accuracy of each model's reconstructed scattering curve,offers a suggestion for model selection in material systems.To systematically validate the accuracy and efficiency of the software,verification was performed using both simulated and experimental datasets.The results demonstrate that the proposed software delivers both satisfactory accuracy and reliable computational efficiency.It provides an easy-to-use and reliable tool for researchers in materials science,helping them fully exploit the potential of SAXS in nanoparticle characterization.
文摘Faculty development serves as a critical foundation for ensuring the quality of higher education.To meet the needs of cultivating specialized software talents and promoting teaching reform,it is particularly crucial to build a faculty team with knowledge in industry application fields and experience in domestic software development.This paper first analyzes the new requirements for the faculty imposed by the cultivation of specialized software talents and the existing problems in the current faculty.Then,in response to these issues,it introduces the reforms and explorations carried out by the School of Software Engineering at Beijing Jiaotong University in the construction of the faculty for cultivating specialized software talents.The aim is to build a high-caliber and diversified faculty that boasts strong political qualities,interdisciplinary integration,complementary advantages between full-time and part-time faculty,and in-depth integration of industry and education.
文摘Test case prioritization and ranking play a crucial role in software testing by improving fault detection efficiency and ensuring software reliability.While prioritization selects the most relevant test cases for optimal coverage,ranking further refines their execution order to detect critical faults earlier.This study investigates machine learning techniques to enhance both prioritization and ranking,contributing to more effective and efficient testing processes.We first employ advanced feature engineering alongside ensemble models,including Gradient Boosted,Support Vector Machines,Random Forests,and Naive Bayes classifiers to optimize test case prioritization,achieving an accuracy score of 0.98847 and significantly improving the Average Percentage of Fault Detection(APFD).Subsequently,we introduce a deep Q-learning framework combined with a Genetic Algorithm(GA)to refine test case ranking within priority levels.This approach achieves a rank accuracy of 0.9172,demonstrating robust performance despite the increasing computational demands of specialized variation operators.Our findings highlight the effectiveness of stacked ensemble learning and reinforcement learning in optimizing test case prioritization and ranking.This integrated approach improves testing efficiency,reduces late-stage defects,and improves overall software stability.The study provides valuable information for AI-driven testing frameworks,paving the way for more intelligent and adaptive software quality assurance methodologies.
文摘Promoting the integration of industry and education and deepening school-enterprise cooperation in talent cultivation and collaborative innovation are long-term goals of higher education.This paper systematically analyzes the multiple perspectives,practical challenges,and implementation paths of in-depth school-enterprise cooperation.Based on the typical case of school-enterprise cooperation at the School of Information and Software Engineering,University of Electronic Science and Technology of China(UESTC),this paper explores the innovative practices of in-depth school-enterprise cooperation in talent cultivation,scientific research,and faculty construction.It also explores a multi-party collaborative mechanism from the perspectives of universities,enterprises,students,and the government.By policy guidance,resource integration,and benefit sharing,this mechanism achieves in-depth integration of industry and education,providing references and examples for further development of school-enterprise cooperation in the new era.
基金supported by the Research Funding Project for Graduate Education and Teaching Reform of Beijing University of Posts and Telecommunications(No.2024Y036)the Postgraduate Education and Teaching Reform Research Fund Project of Beijing University of Posts and Telecommunications(No.2024Z007)the Postgraduate Education and Teaching Reform Project of Beijing University of Posts and Telecommunications(2025).
文摘Traditional grade-centered evaluation models are inadequate for high-quality software engineering talents in the digital and AI era.This study develops an academic development monitoring system to address shortcomings in dynamics,interdisciplinary integration,and industry adaptability.It builds a multi-dimensional dynamic model covering seven core dimensions with quantitative scoring,non-linear weighting,and DivClust grouping.An intelligent platform with real-time monitoring,early warning,and personalized recommendations integrates AI like multi-modal fusion and large-model diagnosis.The“monitoring-warning-improvement”loop helps optimize training programs,support personalized planning,and bridge talent-industry gaps,enabling digital transformation in software engineering education evaluation.
文摘Software security poses substantial risks to our society because software has become part of our life. Numerous techniques have been proposed to resolve or mitigate the impact of software security issues. Among them, software testing and analysis are two of the critical methods, which significantly benefit from the advancements in deep learning technologies. Due to the successful use of deep learning in software security, recently,researchers have explored the potential of using large language models(LLMs) in this area. In this paper, we systematically review the results focusing on LLMs in software security. We analyze the topics of fuzzing, unit test, program repair, bug reproduction, data-driven bug detection, and bug triage. We deconstruct these techniques into several stages and analyze how LLMs can be used in the stages. We also discuss the future directions of using LLMs in software security, including the future directions for the existing use of LLMs and extensions from conventional deep learning research.
文摘Building a collaborative education mechanism,improving students’engineering practice and innovation abilities,and cultivating software engineering innovation talents that meet industry needs are of great significance for fully implementing the“Excellent Engineer Education and Training Program”of the Ministry of Education and achieving the goal of building a strong engineering education country.The School of Information and Software Engineering of the University of Electronic Science and Technology of China(UESTC)has been thoroughly studying and implementing Xi Jinping Thought on Socialism with Chinese Characteristics for a New Era and the spirit of the 20th CPC National Congress.The school has steadfastly promoted the Project of Nurturing the Soul of the New Era.The school has taken moral education as its core,deeply explored the resources of“all staff,throughout the process,in all aspects”,and constructed and implemented the collaborative education mechanism.These efforts have laid a solid foundation for cultivating excellent talents in software engineering in the new era.
基金funded by the Youth Fund of the National Natural Science Foundation of China(Grant No.42261070).
文摘Spectrum-based fault localization (SBFL) generates a ranked list of suspicious elements by using the program execution spectrum, but the excessive number of elements ranked in parallel results in low localization accuracy. Most researchers consider intra-class dependencies to improve localization accuracy. However, some studies show that inter-class method call type faults account for more than 20%, which means such methods still have certain limitations. To solve the above problems, this paper proposes a two-phase software fault localization based on relational graph convolutional neural networks (Two-RGCNFL). Firstly, in Phase 1, the method call dependence graph (MCDG) of the program is constructed, the intra-class and inter-class dependencies in MCDG are extracted by using the relational graph convolutional neural network, and the classifier is used to identify the faulty methods. Then, the GraphSMOTE algorithm is improved to alleviate the impact of class imbalance on classification accuracy. Aiming at the problem of parallel ranking of element suspicious values in traditional SBFL technology, in Phase 2, Doc2Vec is used to learn static features, while spectrum information serves as dynamic features. A RankNet model based on siamese multi-layer perceptron is constructed to score and rank statements in the faulty method. This work conducts experiments on 5 real projects of Defects4J benchmark. Experimental results show that, compared with the traditional SBFL technique and two baseline methods, our approach improves the Top-1 accuracy by 262.86%, 29.59% and 53.01%, respectively, which verifies the effectiveness of Two-RGCNFL. Furthermore, this work verifies the importance of inter-class dependencies through ablation experiments.
文摘Software-defined networking(SDN)is an innovative paradigm that separates the control and data planes,introducing centralized network control.SDN is increasingly being adopted by Carrier Grade networks,offering enhanced networkmanagement capabilities than those of traditional networks.However,because SDN is designed to ensure high-level service availability,it faces additional challenges.One of themost critical challenges is ensuring efficient detection and recovery from link failures in the data plane.Such failures can significantly impact network performance and lead to service outages,making resiliency a key concern for the effective adoption of SDN.Since the recovery process is intrinsically dependent on timely failure detection,this research surveys and analyzes the current literature on both failure detection and recovery approaches in SDN.The survey provides a critical comparison of existing failure detection techniques,highlighting their advantages and disadvantages.Additionally,it examines the current failure recovery methods,categorized as either restoration-based or protection-based,and offers a comprehensive comparison of their strengths and limitations.Lastly,future research challenges and directions are discussed to address the shortcomings of existing failure recovery methods.
文摘The Guidelines for the Construction of Ideological and Political Education in Courses at Institutions of Higher Learning emphasizes that“the construction of ideological and political education in courses is an important task for comprehensively improving the quality of talent cultivation”and“clarifying the target requirements and key content of the construction of ideological and political education in courses.”In vocational colleges,as an important discipline in the field of information technology,the construction of ideological and political education in software technology courses is of great significance for cultivating students’comprehensive qualities and establishing correct values.Based on sorting out the core literacy of the construction of ideological and political education in software technology courses,this article actively explores its construction path,hoping to provide references for relevant educators.
基金supported in part by the Universityindustry Collaborative Education Program of the Ministry of Education under Grant No.202102383004。
文摘The advancement of Internet of Things(IoT)technology is driving industries toward intelligent digital transformation,highlighting the crucial role of software engineering.Despite this,the integration of software engineering into IoT engineering education remains underexplored.To address this gap,the School of Software at North University of China,in collaboration with QST Innovation Technology Group Co.,Ltd.(QST),has developed an innovative educational mechanism.This initiative focuses on the software engineering IoT track and optimizes the teaching process through the outcome-based education(OBE)concept.It incorporates military-industrial characteristics,introduces advanced information and technology curricula,and enhances laboratory infrastructure.The goal is to cultivate innovative talents with unique capabilities,thereby fostering the comprehensive development and application of IoT technology.
文摘Software-related security aspects are a growing and legitimate concern,especially with 5G data available just at our palms.To conduct research in this field,periodic comparative analysis is needed with the new techniques coming up rapidly.The purpose of this study is to review the recent developments in the field of security integration in the software development lifecycle(SDLC)by analyzing the articles published in the last two decades and to propose a way forward.This review follows Kitchenham’s review protocol.The review has been divided into three main stages including planning,execution,and analysis.From the selected 100 articles,it becomes evident that need of a collaborative approach is necessary for addressing critical software security risks(CSSRs)through effective risk management/estimation techniques.Quantifying risks using a numeric scale enables a comprehensive understanding of their severity,facilitating focused resource allocation and mitigation efforts.Through a comprehensive understanding of potential vulnerabilities and proactive mitigation efforts facilitated by protection poker,organizations can prioritize resources effectively to ensure the successful outcome of projects and initiatives in today’s dynamic threat landscape.The review reveals that threat analysis and security testing are needed to develop automated tools for the future.Accurate estimation of effort required to prioritize potential security risks is a big challenge in software security.The accuracy of effort estimation can be further improved by exploring new techniques,particularly those involving deep learning.It is also imperative to validate these effort estimation methods to ensure all potential security threats are addressed.Another challenge is selecting the right model for each specific security threat.To achieve a comprehensive evaluation,researchers should use well-known benchmark checklists.
