What makes a code review trustworthy?

Proceedings of the Hawaii International Conference on System Sciences

Volumn 37, Issue , 2004, Pages 4837-4846

  Nelson, Stacy ^a   Schumann, Johann ^b  

^a Nelson Consulting Company   (New Zealand)

^b NASA AMES RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AEROSPACE INDUSTRY; COMPUTER SOFTWARE; DECISION MAKING; ENGINEERS; SECURITY OF DATA; STANDARDS;

CODE REVIEW; CODING STANDARDS; COMPUTER SCIENTISTS; SAFETY-CRITICAL SOFTWARE;

CODES (SYMBOLS);

EID: 12344253671     PISSN: 10603425     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/hicss.2004.1265711     Document Type: Conference Paper

References (28)

1. ANSI/ANS-10.4 Guidelines for the Verification and Validation of Scientific and Engineering Computer Programs for the Nuclear Industry, 1987.
2. An abbreviated C++ code inspection checklist. URL: http://www2.ics. hawaii.edu/~johnson/FTR/Bib/-Baldwin92.html, 1992.
3. N. Birrell and M. Ould. A Practical Handbook for Software Development. Cambridge University Press, 1985.
4. C. Colby, P. Lee, G. C. Necula, F. Blau, M. Plesko, and K. Cline. A certifying compiler for Java. ACM SIGPLAN Notices, 35(5):95-107, 2000.
5. D. Detlefs, K. R. Leino, G. Nelson, and J. Saxe. Extended static checking. Technical Report 159, SRC Research Report, 1998.
6. DO-178B: Software considerations in airborne systems and equipment certification. URL: http://www.rtca.org, 1992.
7. M. Fagan. Design and code inspections to reduce errors in program development. IBM Systems Journal, 15:182-211, 1976.
8. C. Flanagan and K. R. M. Leino. Houdini, an annotation assistant for ESC/Java. In J. Oliveira and P. Zave, editors, Proc. Intl. Symp. Formal Methods Europe 2001: Formal Methods for Increasing Software Productivity, volume 2021 of Lect. Notes Comp. Sci., pages 500-517. Springer, 2001.
9. Starts Group. The Starts Purchasers' Handbook, 1987.
10. M. Henricson and E. Nyquist. Programming in C++: rules and recommendations. http://www.doc.ic.ac.uk/lab/cplus/c++.rules/, 1992.
11. Reviewer guidance for computer controlled devices undergoing 510(k) review, 2999.
12. IEEE STD. 1028-1997 IEEE Standard for Software Reviews and Audits, 1997.
13. IEEE 610.12 IEEE Standard Glossary of Software Engineering Terminology, 1990.
14. IEEEP STD 1059 IEEE Guide for Software Verification and Validation Plans (draft), 1991.
15. M. Lowry, T. Pressburger, and G. Rosu. Certifying domain-specific policies. In M. S. Feather and M. Goedicke, editors, Proc. 16th Intl. Conf. Automated Software Engineering, pages 118-125, IEEE Comp. Soc. Press, 2001.
16. B. Marick. A question catalog for code inspections, 1991.
17. G. C. Necula and P. Lee. Efficient representation and validation of logical proofs. In Proceedings of the 13th Annual Symposium on Logic in Computer Science (LICS'98), pages 93-104. IEEE Computer Society Press, 1998.
18. P. G. Neumann. Computer Related Risks. ACM Press, 1995.
19. F. Nielson, H. Nielson, and C. Hankin. Principles of Program Analysis. Springer, 1998.
20. Polyspace technologies. http://www.polyspace.com.
21. F. J. Redmill, editor. Dependability of Critical Computer Systems 2; The European Workshop on Industrial Computer Systems Technical Committee 7 (EWICS TC7). Elsevier, 1989.
22. I. Rus, V. Basili, and B. Boehm. Empirical evaluation of techniques and methods used for achieving and assessing software high dependability. In Proc. DSN Workshop on Dependability Benchmarking, 2002.
23. F. B. Schneider. Enforceable security policies. Computer Science Technical Report TR98-1644, Cornell University, Computer Science Department, September 1998.
24. J. Schumann, B. Fischer, M. Whalen, and J. Whittle. Certification support for automatically generated programs. In In Proceedings of the Thirty-Sixth Annual Hawaii International Conference on System Sciences (HICSS-36). IEEE, 2003.
25. A. Shostack. Security code review guidelines, 2000. http://www.homeport. org/adam/review.html
26. F. Shull, V. R. Basili, B. Boehm, A. W. Brown, P. Costa, M. Lindvall, D. Port, I. Rus, R. Tesoriero, and M. V. Zelkowitz. What we have learned about fighting defects. In In Proceedings of 8th International Software Metrics Symposium, Ottawa, Canada, pages 249-258. IEEE, 2002.
27. Standard for Software Engineering of Safety Critical Software, 1990.
28. D. R. Wallace, W. W. Peng, and L. M. Ippolito. Nistir 4909: Software quality assurance: Documentation and reviews. http://hissa.ncsl.nist.gov/ publications/-nistir4909/, 1995.