Continuous Security Testing: a case study on integrating dynamic security testing tools in CI/CD pipelines

Continuous Integration (CI) and Continuous Delivery (CD) have become a well-known practice in DevOps to ensure fast delivery of new features. This is achieved by automatically testing and releasing new software versions, e.g. multiple times per day. However, classical security management techniques cannot keep up with this quick Software...

Application of modern software engineering principles for continuous quality (CQ) management in research

Transparency of changes, automated testing of new developments against documented criteria, combination of developments from different sources and automated publication of validated results are key aspects of modern collaborative software engineering. Various infrastructures, guidelines and tools are available for continuous integration (CI) and...

Model-based software restructuring: Lessons from cleaning up COM interfaces in industrial legacy code

The high-tech industry is faced with ever growing amounts of software to be maintained and extended. To keep the associated costs under control, there is a demand for more human overview and for large-scale code restructurings. Language technology such as parsing can assist in this, but classical restructuring tools are typically not flexible...

Privacy transparency patterns

This paper describes two privacy patterns for creating privacy transparency: the Personal Data Table pattern and the Privacy Policy Icons pattern, as well as a full overview of privacy transparency patterns. It is a first step in creating a full set of privacy design patterns, which will aid software developers with the realization of privacy by...

Early Fault Detection in DSLs using SMT Solving and Automated Debugging

In the context of Domain Specific Languages (DSLs), we study ways to detect faults early in the software development cycle. We propose techniques that validate a wide range of properties, classified into basic and advanced. Basic validation includes syntax checking, reference checking and type checking. Advanced validation concerns domain...