Security versus performance bugs: A case study on firefox

Proceedings - International Conference on Software Engineering

Volumn , Issue , 2011, Pages 93-102

  Zaman, Shahed ^a   Adams, Bram ^a   Hassan, Ahmed E ^a  

^a QUEEN S UNIVERSITY   (Canada)

Author keywords

bugzilla; empirical study; firefox; performance bugs; security bugs

Indexed keywords

BUGZILLA; EMPIRICAL STUDY; FIREFOX; PERFORMANCE BUGS; SECURITY BUGS;

COMPUTER SOFTWARE SELECTION AND EVALUATION; RESEARCH;

PROGRAM DEBUGGING;

EID: 79959268545     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1985441.1985457     Document Type: Conference Paper

References (42)

1. Emad Shihab, Akinori Ihara, Yasutaka Kamei, Walid M. Ibrahim, Masao Ohira, Bram Adams, Ahmed E. Hassan, and Ken-ichi Matsumoto. Predicting re-opened bugs: A case study on the eclipse project. In Proceedings of the 17th Working Conference on Reverse Engineering, WCRE '10, pages 249-258, Washington, DC, USA, 2010. IEEE Computer Society.
2. L. Erlikh. Leveraging legacy system dollars for e-business. IT Professional, 2(3):17 -23, 2000.
3. Thomas Zimmermann, Rahul Premraj, and Andreas Zeller. Predicting defects for eclipse. In Proceedings of the Third International Workshop on Predictor Models in Software Engineering, PROMISE '07, pages 9-, Washington, DC, USA, 2007. IEEE Computer Society.
4. M. Cataldo, A. Mockus, J.A. Roberts, and J.D. Herbsleb. Software dependencies, work dependencies, and their impact on failures. Software Engineering, IEEE Transactions on, 35(6):864-878, 2009.
5. Marco D'Ambros, Michele Lanza, and Romain Robbes. On the relationship between change coupling and software defects. In Proceedings of the 16th Working Conference on Reverse Engineering, WCRE '09, pages 135-144, Washington, DC, USA, 2009. IEEE Computer Society.
6. T.L. Graves, A.F. Karr, J.S. Marron, and H. Siy. Predicting fault incidence using software change history. Software Engineering, IEEE Transactions on, 26(7):653-661, July 2000.
7. Raimund Moser, Witold Pedrycz, and Giancarlo Succi. A comparative analysis of the efficiency of change metrics and static code attributes for defect prediction. In Proceedings of the 30th international conference on Software engineering, ICSE '08, pages 181-190, New York, NY, USA, 2008. ACM.
8. Christian Bird, Nachiappan Nagappan, Premkumar Devanbu, Harald Gall, and Brendan Murphy. Does distributed development affect software quality? an empirical case study of windows vista. In Proceedings of the 31st International Conference on Software Engineering, ICSE '09, pages 518-528, Washington, DC, USA, 2009. IEEE Computer Society.
9. Nachiappan Nagappan, Brendan Murphy, and Victor Basili. The influence of organizational structure on software quality: an empirical case study. In Proceedings of the 30th international conference on Software engineering, ICSE '08, pages 521-530, New York, NY, USA, 2008. ACM.
10. Lucas D. Panjer. Predicting eclipse bug lifetimes. In Proceedings of the 4th International Workshop on Mining Software Repositories, MSR '07, pages 29-, Washington, DC, USA, 2007. IEEE Computer Society.
11. Cathrin Weiss, Rahul Premraj, Thomas Zimmermann, and Andreas Zeller. How long will it take to fix this bug? In Proceedings of the 4th International Workshop on Mining Software Repositories, MSR '07, pages 1-, Washington, DC, USA, 2007. IEEE Computer Society.
12. Sunghun Kim and E. James Whitehead, Jr. How long did it take to fix bugs? In Proceedings of the 3rd international workshop on Mining software repositories, MSR '06, pages 173-174, New York, NY, USA, 2006. ACM.
13. John Anvik, Lyndon Hiew, and Gail C. Murphy. Who should fix this bug? In Proceedings of the 28th international conference on Software engineering, ICSE '06, pages 361-370, New York, NY, USA, 2006. ACM.
14. Zhen Ming Jiang. Automated analysis of load testing results. In Proceedings of the 19th international symposium on Software testing and analysis, ISSTA '10, pages 143-146, New York, NY, USA, 2010. ACM.
15. Graham Kalton. Introduction to Survey Sampling. Sage Publications, Inc, 1983.
16. Mozilla foundation security advisory. http://www.mozilla.org/security/ announce/, February 2011.
17. David M. Blei, Andrew Y. Ng, and Michael I. Jordan. Latent dirichlet allocation. J. Mach. Learn. Res., 3:993-1022, March 2003.
18. Stephen W. Thomas, Bram Adams, Ahmed E. Hassan, and Dorothea Blostein. Validating the use of topic models for software evolution. In Proceedings of the 2010 10th IEEE Working Conference on Source Code Analysis and Manipulation, SCAM '10, pages 55-64, Washington, DC, USA, 2010. IEEE Computer Society.
19. Jonathan I. Maletic and Andrian Marcus. Supporting program comprehension using semantic and structural information. In Proceedings of the 23rd International Conference on Software Engineering, ICSE '01, pages 103-112, Washington, DC, USA, 2001. IEEE Computer Society.
20. Denys Poshyvanyk and Andrian Marcus. Combining formal concept analysis with information retrieval for concept location in source code. In Proceedings of the 15th IEEE International Conference on Program Comprehension, pages 37-48, Washington, DC, USA, 2007. IEEE Computer Society.
21. Adrian Kuhn, Stéphane Ducasse, and Tudor Gírba. Semantic clustering: Identifying topics in source code. Inf. Softw. Technol., 49:230-243, March 2007.
22. Pierre F. Baldi, Cristina V. Lopes, Erik J. Linstead, and Sushil K. Bajracharya. A theory of aspects as latent topics. In Proceedings of the 23rd ACM SIGPLAN conference on Object-oriented programming systems languages and applications, OOPSLA '08, pages 543-562, New York, NY, USA, 2008. ACM.
23. Scott C. Deerwester, Susan T. Dumais, Thomas K. Landauer, George W. Furnas, and Richard A. Harshman. Indexing by Latent Semantic Analysis. Journal of the American Society of Information Science, 41(6):391-407, 1990.
24. A. Hindle, M.W. Godfrey, and R.C. Holt. What's hot and what's not: Windowed developer topic analysis. In Proceedings of the 25th IEEE International Conference on Software Maintenance, ICSM '09, pages 339 -348, 2009.
25. Firefox LDA outputs. http://www.cs.queensu.ca/~zaman/fx-lda/, February 2011.
26. Andreas Zeller. Why Programs Fail: A Guide to Systematic Debugging. Morgan Kaufmann Publishers Inc., San Francisco, CA, USA, 2005.
27. Gaeul Jeong, Sunghun Kim, and Thomas Zimmermann. Improving bug triage with bug tossing graphs. In Proceedings of the the 7th joint meeting of the European software engineering conference and the ACM SIGSOFT symposium on The foundations of software engineering, ESEC/FSE '09, pages 111-120, New York, NY, USA, 2009. ACM.
28. Stephan Neuhaus and Thomas Zimmermann. Security trend analysis with cve topic models. In Proceedings of the 21st International Symposium on Software Reliability Engineering, ISSRE '10, pages 111-120, Washington, DC, USA, 2010. IEEE Computer Society.
29. Mark S. Ackerman and Christine Halverson. Considering an organization's memory. In Proceedings of the 1998 ACM conference on Computer supported cooperative work, CSCW '98, pages 39-48, New York, NY, USA, 1998. ACM.
30. A. Mockus and J.D. Herbsleb. Expertise browser: a quantitative approach to identifying expertise. In Proceedings of the 24rd international conference on Software engineering, ICSE '02, pages 503-512, 2002.
31. C. R. Reis and R. P. de Mattos Fortes. An overview of the software engineering process and tools in the mozilla project. In Proceedings of the Open Source Software Development Workshop, pages 155-175, 2002.
32. Christian Bird, Alex Gourley, and Prem Devanbu. Detecting patch submission and acceptance in oss projects. In Proceedings of the 4th International Workshop on Mining Software Repositories, MSR '07, pages 26-, Washington, DC, USA, 2007. IEEE Computer Society.
33. Christian Bird, Alex Gourley, Prem Devanbu, Michael Gertz, and Anand Swaminathan. Mining email social networks. In Proceedings of the 3rd international workshop on Mining software repositories, MSR '06, pages 137-143, New York, NY, USA, 2006. ACM.
34. Ahmed E. Hassan. Predicting faults using the complexity of code changes. In Proceedings of the 31st International Conference on Software Engineering, ICSE '09, pages 78-88, Washington, DC, USA, 2009. IEEE Computer Society.
35. Jacek Śliwerski, Thomas Zimmermann, and Andreas Zeller. When do changes induce fixes? SIGSOFT Softw. Eng. Notes, 30:1-5, May 2005.
36. Kai Pan, Sunghun Kim, and E. James Whitehead, Jr. Toward an understanding of bug fix patterns. Empirical Softw. Engg., 14:286-315, June 2009.
37. Draft standard for ieee standard classification for software anomalies. IEEE Unapproved Draft Std P1044/D00003, Feb 2009, 2009.
38. M. Hamill and K. Goseva-Popstojanova. Common trends in software fault and failure data. IEEE Transactions on Software Engineering, 35(4):484-496, 2009.
39. Syed Nadeem Ahsan, Javed Ferzund, and Franz Wotawa. Automatic software bug triage system (bts) based on latent semantic indexing and support vector machine. In Proceedings of the 4th International Conference on Software Engineering Advances, ICSEA '09, pages 216-221, Washington, DC, USA, 2009. IEEE Computer Society.
40. M. Gegick, P. Rotella, and Tao Xie. Identifying security bug reports via text mining: An industrial case study. In Proceedings of the 7th international workshop on Mining software repositories, pages 11-20, May 2010.
41. Yonghee Shin and Laurie Williams. An empirical model to predict security vulnerabilities using code complexity metrics. In Proceedings of the Second ACM-IEEE international symposium on Empirical software engineering and measurement, ESEM '08, pages 315-317, New York, NY, USA, 2008. ACM.
42. I. Chowdhury and M. Zulkernine. Using complexity, coupling, and cohesion metrics as early indicators of vulnerabilities. In Special Issue on "Security and Dependability Assurance of Software Architectures," Journal of Systems Architecture, 2010.