This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
www.eu-etics.org
INFSOM-RI-026753
Toward standardization of an Toward standardization of an automated software quality automated software quality
ETICS 2ETICS 2ndnd EC Review (CERN) EC Review (CERN)15 February 200815 February 2008
ETICS 2nd EU Review - CERN - 15 February 2008 2INFSOM-RI-026753
Summary
• Introduction to QA conceptsIntroduction to QA concepts
• The starting point of the studyThe starting point of the study
• The proposed The proposed Grid Quality Certification ModelGrid Quality Certification Model (Grid- (Grid-QCM)QCM)
• FAQsFAQs
• Timeline and feedbacksTimeline and feedbacks
• ConclusionsConclusions
ETICS 2nd EU Review - CERN - 15 February 2008 3INFSOM-RI-026753
Quality Assurance refers to several concepts
• Quality of the implementation Quality of the implementation process process – High level steps of the software High level steps of the software
production cycle suggesting what production cycle suggesting what the organization must do (not how) the organization must do (not how) to have effective development to have effective development processes that “processes that “may leadmay lead” to good ” to good software.software.
• Quality of the requirements Quality of the requirements management management – Correct collection/management of Correct collection/management of
requirements and relation with the requirements and relation with the customer and stakeholders, to customer and stakeholders, to reduce the percentage of failures reduce the percentage of failures due to misinterpreted requirements.due to misinterpreted requirements.
• Quality of the service Quality of the service – Performances and correctness of Performances and correctness of
the servicethe service
• Finally quality of the software…Finally quality of the software…
QUALITY
Quality of Product
Quality of Process
Grid-QCMGrid-QCMCMMCMM
ITILITILISO – 900xISO – 900x
ETICS 2nd EU Review - CERN - 15 February 2008 4INFSOM-RI-026753
Some QA Terminology
• According to ISO 9126 documentation we can define:According to ISO 9126 documentation we can define:
• Measure: Measure: the number or category assigned to an the number or category assigned to an attribute of an entity by making a measurement attribute of an entity by making a measurement (sometimes used as synonymous of metric)(sometimes used as synonymous of metric)
• MetricMetric: : The defined method to measure an attribute and The defined method to measure an attribute and the scalethe scale
• MeasurementMeasurement: : The use of a metric to assign a value The use of a metric to assign a value (which may be a number or category) from a scale to (which may be a number or category) from a scale to an attribute of an entity)an attribute of an entity)
ETICS 2nd EU Review - CERN - 15 February 2008 5INFSOM-RI-026753
Quality is a matter of measure!
• State-of-the-art provide hundreds of metricsState-of-the-art provide hundreds of metrics– The most commonThe most common
– Cyclomatic complexityCyclomatic complexity
– Lines of CodeLines of Code
– Function PointsFunction Points
– Mean Time Between (To) FailureMean Time Between (To) Failure
– Bugs densityBugs density
– ……
– Other approaches (Goal Question Metric - GQM) promote user defined Other approaches (Goal Question Metric - GQM) promote user defined metricsmetrics
– Anomalies distributionAnomalies distribution
– Effort used to solve anomaliesEffort used to solve anomalies
– Cost of not founded anomaliesCost of not founded anomalies
– ……
• An exhaustive list is provided within deliverable D5.7An exhaustive list is provided within deliverable D5.7
ETICS 2nd EU Review - CERN - 15 February 2008 6INFSOM-RI-026753
Quality Standards
• There are There are many standardsmany standards to asses the quality of the processes to asses the quality of the processes of an organization of an organization – CMMCMM– ISO family (e.g. ISO 9126, ISO 900X)ISO family (e.g. ISO 9126, ISO 900X)– ITILITIL– AQAPAQAP
• But QA means initial investments and managing QA means But QA means initial investments and managing QA means devote resources to it!devote resources to it!
• Several studies show that lot of companies (e.g. many Several studies show that lot of companies (e.g. many Small/Medium Enterprises) Small/Medium Enterprises) can’t afford the initial effortcan’t afford the initial effort and don’t and don’t recognise the promised recognise the promised increase of valueincrease of value..– Only ~70 companies in the world are certified at level 5 Only ~70 companies in the world are certified at level 5
– 50 of them are in India50 of them are in India– source: Gartnersource: Gartner
– Only 25% of the companies in the world are level 2 or above Only 25% of the companies in the world are level 2 or above – source: Kulik, Weber: “Software Metrics Best Practices – 2001”source: Kulik, Weber: “Software Metrics Best Practices – 2001”
and “Software Metrics State of the Art – 2000”and “Software Metrics State of the Art – 2000”
ETICS 2nd EU Review - CERN - 15 February 2008 7INFSOM-RI-026753
QA in non commercial short-live project (e.g. research projects) is missing!
• Current quality assurance standards are useful butCurrent quality assurance standards are useful but– They need lot of time to be applied. The organisation need to They need lot of time to be applied. The organisation need to
be structured and certified. be structured and certified. What for the short-live consortiaWhat for the short-live consortia??
– They provide onlyThey provide only theoretical guidelines theoretical guidelines which need to be which need to be adapted and implemented. adapted and implemented. What for homogeneity and What for homogeneity and comparability comparability of results?of results?
– It’s It’s hard to systematically verify hard to systematically verify goodness of results: goodness of results: managing tools neededmanaging tools needed
– They They need resourcesneed resources to be devoted to to be devoted to
– People needPeople need training training and certification needs and certification needs inspections and inspections and time time to be achievedto be achieved
ETICS 2nd EU Review - CERN - 15 February 2008 8INFSOM-RI-026753
QA in grids: our solution
• Grid-QCM is aGrid-QCM is a modelmodel forfor quality assurance that isquality assurance that is
– fully automatablefully automatable in measuring and verifying activities to in measuring and verifying activities to reduce investments and management effort,reduce investments and management effort,
– not subjectivenot subjective, to certify the object not the process nor the , to certify the object not the process nor the organization,organization,
– product orientedproduct oriented, not process oriented,, not process oriented,
• ……easily adoptable within (Grid) Research Projectseasily adoptable within (Grid) Research Projects
ETICS 2nd EU Review - CERN - 15 February 2008 9INFSOM-RI-026753
Grid-QCM: Preliminary Remarks (1/2)
• Using the ETICS tool people can have Grid-QCM the Using the ETICS tool people can have Grid-QCM the model implemented for free.model implemented for free.
• Grid-QCM has been developed within a Grid project Grid-QCM has been developed within a Grid project and to asses the quality of grid software research and to asses the quality of grid software research projects but it projects but it can be used for any software can be used for any software applicationsapplications . .
• Grid-QCM has been developed Grid-QCM has been developed according to according to – The gotten feedbacks from expert people and potential usersThe gotten feedbacks from expert people and potential users – several standards:several standards:
– Grid-QCMGrid-QCM has been described has been described according to ISO standardsaccording to ISO standards (e.g. (e.g. ISO/IEC ISO/IEC 25000, 1459825000, 14598))
– Grid-QCMGrid-QCM has been restructured has been restructured according to ISO 25041according to ISO 25041– Quality attributesQuality attributes has been named using the same terminology as has been named using the same terminology as
ISO 9126ISO 9126
ETICS 2nd EU Review - CERN - 15 February 2008 10INFSOM-RI-026753
ETICS 2nd EU Review - CERN - 15 February 2008 11INFSOM-RI-026753
Grid-QCM: Structure
• Grid-QCM is structured in Grid-QCM is structured in Evaluation Modules (EM)Evaluation Modules (EM)..
• The set of evaluation techniques are grouped in The set of evaluation techniques are grouped in families. Every family is an Evaluation Modulefamilies. Every family is an Evaluation Module
– Static analysis of classes. Statistics on measures are used as Static analysis of classes. Statistics on measures are used as predictor of quality characteristics.predictor of quality characteristics.
ETICS 2nd EU Review - CERN - 15 February 2008 14INFSOM-RI-026753
Grid-QCM: Final Score
• Final score should be provided according to the following Final score should be provided according to the following schema. The items which should be available for the users are:schema. The items which should be available for the users are:– A A table summarizing the resultstable summarizing the results– A A list of passed and failed testslist of passed and failed tests– All the All the important informationimportant information as: as:
– Standard compliance (for each standard: name, version, date)Standard compliance (for each standard: name, version, date)
– Identification of evaluation report (organization, report number, date)Identification of evaluation report (organization, report number, date)
– Identification of certification body (organization, contact information)Identification of certification body (organization, contact information)
– Certification data (dates, certification number)Certification data (dates, certification number)
– Electronic signature of certification record Electronic signature of certification record
ETICS 2nd EU Review - CERN - 15 February 2008 15INFSOM-RI-026753
Grid-QCM: FAQ
• I can’t add any overhead to my projectI can’t add any overhead to my project– This model (and the capability of automate) reduce the effort in This model (and the capability of automate) reduce the effort in
performing continuous build and test activities (e.g. coverage performing continuous build and test activities (e.g. coverage tests) on different SW releases.tests) on different SW releases.
• What about the cost?What about the cost?– Using the ETICS tool people can have the model implemented Using the ETICS tool people can have the model implemented
and applied for free!and applied for free!
• My organisation is certified ISO/CMMI so I…My organisation is certified ISO/CMMI so I…– The model is a standalone quality certification model.The model is a standalone quality certification model.– However it can be easily integrated in yet ISO/CMMI certified However it can be easily integrated in yet ISO/CMMI certified
organisations.organisations.
ETICS 2nd EU Review - CERN - 15 February 2008 16INFSOM-RI-026753
ETICS 2nd EU Review - CERN - 15 February 2008 18INFSOM-RI-026753
Grid-QCM: feedback
• OGF 20OGF 20• Possibility to automatePossibility to automate• Name of the modelName of the model
• Belief/EELA ConferenceBelief/EELA Conference• Automation, CMMI/ISO compatibility, HomogeneityAutomation, CMMI/ISO compatibility, Homogeneity• Structure of some parts of the modelStructure of some parts of the model
• EGEE’07EGEE’07• Automation, ETICS + Grid-QCM = free, people asked for Automation, ETICS + Grid-QCM = free, people asked for
documentation documentation • Metrics for the processMetrics for the process
• OGF 21OGF 21• Automation, Integration in CMMI/ISO, people asked for Automation, Integration in CMMI/ISO, people asked for
• QualiPSo ConferenceQualiPSo Conference• Automation, Standards to develop Grid-QCM, ETICS + Automation, Standards to develop Grid-QCM, ETICS +
Grid-QCM = free, many people interested in Grid-QCM = free, many people interested in specific specific information and documentationinformation and documentation
ETICS 2nd EU Review - CERN - 15 February 2008 19INFSOM-RI-026753
Conclusions
• Grid-QCM is a certification modelGrid-QCM is a certification model– AutomatableAutomatable– Provided for free using the ETICS toolProvided for free using the ETICS tool– Not in contraddiction with classical standardsNot in contraddiction with classical standards– Ready to interact with classical standards Ready to interact with classical standards – Not limited to research projectsNot limited to research projects– Not limited to grid softwareNot limited to grid software
• Grid-QCM require less human effort to be used because it is Grid-QCM require less human effort to be used because it is almost fully automatablealmost fully automatable
• ETICS tool is ready to implement Grid-QCMETICS tool is ready to implement Grid-QCM
• During the ETICS 2 project, Grid-QCM will be proposed for During the ETICS 2 project, Grid-QCM will be proposed for standardisation under ISO.standardisation under ISO.
ETICS 2nd EU Review - CERN - 15 February 2008 20INFSOM-RI-026753
Q&A
http://www.eu-etics.org
ETICS 2nd EU Review - CERN - 15 February 2008 21INFSOM-RI-026753