Have things changed now?: An empirical study of bug characteristics in modern open source software

ASID'06: 1st Workshop on Architectural and System Support for Improving Software Dependability

Volumn , Issue , 2006, Pages 25-33

  Li, Zhenmin ^a   Tan, Lin ^a   Wang, Xuanhui ^a   Lu, Shan ^a   Zhou, Yuanyuan ^a   Zhai, Chengxiang ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Bug characteristics; Bug detection; Empirical study; Open source; Security

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER ARCHITECTURE; COMPUTER CRIME; ERROR ANALYSIS; PROGRAM DEBUGGING; SEMANTICS;

BUG CHARACTERISTICS; BUG DETECTION; EMPIRICAL STUDY; OPEN SOURCES;

OPEN SYSTEMS;

EID: 34547229642     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1181309.1181314     Document Type: Conference Paper

References (37)

1. ASF bugzilia. http://issues.apache.org/bugzilla, 2005.
2. Coverity: Automated error prevention and source code analysis. http://www.coverity.com, 2005.
3. Def. of NVD severity metric. http://nvd.nist.gov/faq.cfm.#8, 2005.
4. Mozilla.org Bugzilia. https://bugzilla.mozilla.org, 2005.
5. National vulnerability database. http://nvd.nist.gov, 2005.
6. Anonymous. Once upon a free(). http://www.phrack.org/phrack/57/p57-0x09.
7. B. Beizer. Software testing techniques (2nd ed.). Van Nostrand Reinhold Co., New York, NY, USA, 1990.
8. S. Chandra and P. Chen. Whither generic recovery from application faults? a fault study using open-source software. In DSN '00: Proceedings of the 2000 International Conference on Dependable Systems and Networks (formerly FTCS-30 and DCCA-8), 2000.
9. R. Chillarege, W.-L. Kao, and R. G. Condit. Defect type and its impact on the growth curve. In ICSE '91: Proceedings of the 13th international conference on Software engineering, 1991.
10. A. Chou, J. Yang, B. Chelf, S. Hallem, and D. R. Engler. An empirical study of operating system, errors. In SOSP, 2001.
11. C. Cowan. Software security for open-source systems. IEEE Security and Privacy, 2003.
12. C. Cowan, C. Pu, D. Maier, J. Walpole, P. Bakke, S. Beattie, A. Grier, P. Wagle, Q. Zhang, and H. Hinton. StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks. In Proc. 7th USENIX Security Conference, pages 63-78, Jan 1998.
13. C. Cowan, P. Wagle, C. Pu, S. Beattie, and J. Walpole. Buffer overflows: Attacks and defenses for the vulnerability of the decade. In Proceedings of the DARPA Information Survivability Conference and Exposition (DISCEX), Jan. 2000.
14. A. Endres. An analysis of errors and their causes in system. programs. In Proc. of the Intl. Conf. on Reliable software, 1975.
15. M. D. Ernst, J. Cockrell, W. G. Griswold, and D. Notkin. Dynamically discovering likely program invariants to support program evolution. IEEE TSE, 27(2):99-123, 2001.
16. N. E. Fenton and N. Ohlsson. Quantitative analysis of faults and failures in a complex software system. IEEE TSE, 2000.
17. R. Glass. Persistent software errors. IEEE TSE, 7(2), 1981.
18. J. Gray. Why do computer stop and what can be about it? In the 5th Symposium on Reliablity in Dist. Softw. and Database Sys., 1985.
19. W. Gu, Z. Kalbarczyk, R. K. Iyer, and Z.-Y. Yang. Characterization of linux kernel behavior under errors. In Proceedings of the 2003 International Conference on Dependable Systems and Networks, 2003.
20. R. Hastings and B. Joyce. Purify: Fast detection of memory leaks and access errors. In Proc. of the USENIX Winter Technical Conf., 1992.
21. T. Joachims. Learning to classify text using support vector machines. Kluwer Academic Publishers, 2002.
22. K. S. Jones, S. Walker, and S. E. Robertson. A probabilistic model of information retrieval: development and comparative experiments part 2. Inf. Process. Manage., 36(6):809-840, 2000.
23. Z. Li, S. Lu, S. Myagmar, and Y. Zhou. CP-Miner: A tool for finding copy-paste and related bugs in operating system code. In Sixth Symposium on Operating Systems Design and Implementation, 2004.
24. Z. Li and Y. Zhou. PR-Miner: Automatically extracting implicit programming rules and detecting violations in large software code. In 13th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE'05), 2005.
25. S. Lu, Z. Li, F. Qin, L. Tan, P. Zhou, and. Y. Zhou. BugBench: A benchmark for evaluating bug detection tools. In Bugs 2005 (Workshop on the Evaluation of Software Defect Detection Tools) on Programming Language Design and Implementation (PLDI) 2005, 2005.
26. A. M. Memon. GUI testing: Pitfalls and process. Computer, 2002.
27. N. Nethercote and J. Seward. Valgrind: A program supervision framework. In the 3rd Workshop on Runtime Verification, 2003.
28. T. Ostrand and E. Weyuker. Collecting and categorizing software error data in an industrial environment. Journal of Sys. and Softw., 1984.
29. T. Ostrand and E. Weyuker. The distribution of faults in a large industrial software system. In ISSTA '02: Proceedings of the 2002 ACM SIGSOFT international symposium on Software testing and analysis, 2002.
30. T. Ostrand, E. Weyuker, and R. Bell. Predicting the location and number of faults in large software systems. IEEE TSE, 31(4), 2005.
31. C. Payne. On the security of open source software. Information Systems Journal, 2002.
32. A. Podgurski, D. Leon, P. Francis, W Masri, M. Minch, J. Sun, and B. Wang. Automated support for classifying software failure reports. In ICSE '03: Proceedings of the 23th International Conference on Software Engineering, pages 465-475, 2003.
33. D. Roth and D. Zelenko. Part of speech tagging using a network of linear separators. In COLING-ACL, pages 1136-1142, 1998.
34. G. Rothermel, R. Untch, C. Chu, and M. Harrold. Test case prioritization: An empirical study. In ICSM '99: Proceedings of the IEEE International Conference on Software Maintenance, 1999.
35. M. Sullivan and R. Chillarege. Software defects and their impact on system availability - a study of field failures in operating systems. In 21st Int. Symp. on Fault-Tolerant Computing (FTCS-21), 1991.
36. M. Sullivan and R. Chillarege. A comparison of software defects in database management systems and operating systems. In FTCS '92: 22nd Annual International Symposium on Fault-Tolerant Computing, 1992.
37. V. Vapnik. The Nature of Statistical Learning Theory. Springer, 1995.