arXiv subjects

Stefan Wagner

Publications and source records attributed to Stefan Wagner.

At least 91 records · Page 5Linked to original sources

arXiv2023

Evidence Profiles for Validity Threats in Program Comprehension Experiments

Searching for clues, gathering evidence, and reviewing case files are all techniques used by criminal investigators to draw sound conclusions and avoid wrongful convictions. Similarly, in software engineering (SE) research, we can develop sound methodologies and mitigate threats to validity by basing study design decisions on evidence. Echoing a recent call for the empirical evaluation of design decisions in program comprehension experiments, we conducted a 2-phases study consisting of systematic literature searches, snowballing, and thematic synthesis. We found out (1) which validity threat categories are most often discussed in primary studies of code comprehension, and we collected evidence to build (2) the evidence profiles for the three most commonly reported threats to validity. We discovered that few mentions of validity threats in primary studies (31 of 409) included a reference to supporting evidence. For the three most commonly mentioned threats, namely the influence of programming experience, program length, and the selected comprehension measures, almost all cited studies (17 of 18) did not meet our criteria for evidence. We show that for many threats to validity that are currently assumed to be influential across all studies, their actual impact may depend on the design and context of each specific study. Researchers should discuss threats to validity within the context of their particular study and support their discussions with evidence. The present paper can be one resource for evidence, and we call for more meta-studies of this type to be conducted, which will then inform design decisions in primary studies. Further, although we have applied our methodology in the context of program comprehension, our approach can also be used in other SE research areas to enable evidence-based experiment design decisions and meaningful discussions of threats to validity.

cs.SE↗

arXiv2023

Teaching Computer Science Students to Communicate Scientific Findings More Effectively

Science communication forms the bridge between computer science researchers and their target audience. Researchers who can effectively draw attention to their research findings and communicate them comprehensibly not only help their target audience to actually learn something, but also benefit themselves from the increased visibility of their work and person. However, the necessary skills for good science communication must also be taught, and this has so far been neglected in the field of software engineering education. We therefore designed and implemented a science communication seminar for bachelor students of computer science curricula. Students take the position of a researcher who, shortly after publication, is faced with having to draw attention to the paper and effectively communicate the contents of the paper to one or more target audiences. Based on this scenario, each student develops a communication strategy for an already published software engineering research paper and tests the resulting ideas with the other seminar participants. We explain our design decisions for the seminar, and combine our experiences with responses to a participant survey into lessons learned. With this experience report, we intend to motivate and enable other lecturers to offer a similar seminar at their university. Collectively, university lecturers can prepare the next generation of computer science researchers to not only be experts in their field, but also to communicate research findings more effectively.

cs.CY↗

arXiv2022

Contact Resistance Study of Various Metal Electrodes with CVD Graphene

In this study, the contact resistance of various metals to chemical vapour deposited (CVD) monolayer graphene is investigated. Transfer length method (TLM) structures with varying widths and separation between contacts have been fabricated and electrically characterized in ambient air and vacuum condition. Electrical contacts are made with five metals: gold, nickel, nickel/gold, palladium and platinum/gold. The lowest value of 92 Ωμm is observed for the contact resistance between graphene and gold, extracted from back-gated devices at an applied back-gate bias of -40 V. Measurements carried out under vacuum show larger contact resistance values when compared with measurements carried out in ambient conditions. Post processing annealing at 450°C for 1 hour in argon-95% / hydrogen-5% atmosphere results in lowering the contact resistance value which is attributed to the enhancement of the adhesion between metal and graphene. The results presented in this work provide an overview for potential contact engineering for high performance graphene-based electronic devices.

cond-mat.mtrl-sci↗

arXiv2022

Adopting Microservices and DevOps in the Cyber-Physical Systems Domain: A Rapid Review and Case Study

The domain of cyber-physical systems (CPS) has recently seen strong growth, e.g., due to the rise of the Internet of Things (IoT) in industrial domains, commonly referred to as "Industry 4.0". However, CPS challenges like the strong hardware focus can impact modern software development practices, especially in the context of modernizing legacy systems. While microservices and DevOps have been widely studied for enterprise applications, there is insufficient coverage for the CPS domain. Our goal is therefore to analyze the peculiarities of such systems regarding challenges and practices for using and migrating towards microservices and DevOps. We conducted a rapid review based on 146 scientific papers, and subsequently validated our findings in an interview-based case study with 9 CPS professionals in different business units at Siemens AG. The combined results picture the specifics of microservices and DevOps in the CPS domain. While several differences were revealed that may require adapted methods, many challenges and practices are shared with typical enterprise applications. Our study supports CPS researchers and practitioners with a summary of challenges, practices to address them, and research opportunities.

cs.SE↗

arXiv2022

Methodical Approach for Centralization Evaluation of Modern Automotive E/E Architectures

Centralization is considered as a key enabler to master the CPU-intensive features of the modern car. The development and architecture change towards the next generation car is influenced by ADAS, connectivity, infotainment and the consequential need for cyber-security. There is already a high number of papers describing future centralized E/E architectures and technical instruments for centralization. What is missing is a methodical approach to analyze an existing system and find its potential for centralization on the function level. This paper introduces an approach, which serves a system designer or engineer to abstract functions and thus enables to shape a more centralized system architecture. The commonly known E/E architecture designs and the named instruments of current research are the basis for this abstraction. Based on the approach, new system architecture proposals can be set up to discuss and outweigh advantages and disadvantages of those. The approach is validated by applying it step by step to the inlet's derating function of a modern electric vehicle. A following discussion points out that many different factors affect the potential for centralization and centralization may not be the future of every function and system in general.

eess.SY↗

arXiv2022

Non-Abelian extensions of groupoids and their groupoid rings

We present a geometrically oriented classification theory for non-Abelian extensions of groupoids generalizing the classification theory for Abelian extensions of groupoids by Westman as well as the familiar classification theory for non-Abelian extensions of groups by Schreier and Eilenberg-MacLane. As an application of our techniques we demonstrate that each extension of groupoids $\mathcal{N} \to \mathcal{E} \to \mathcal{G}$ gives rise to a groupoid crossed product of $\mathcal{G}$ by the groupoid ring of $\mathcal{N}$ which recovers the groupoid ring of $\mathcal{E}$ up to isomorphism. Furthermore, we make the somewhat surprising observation that our classification methods naturally transfer to the class of groupoid crossed products, thus providing a classification theory for this class of rings. Our study is motivated by the search for natural examples of groupoid crossed products.

math.RA↗

arXiv2022

Towards Immediate Feedback for Security Relevant Code in Development Environments

Nowadays, the correct use of cryptography libraries is essential to ensure the necessary information security in different kinds of applications. A common practice in software development is the use of static application security testing (SAST) tools to analyze code regarding security vulnerabilities. Most of these tools are designed to run separately from development environments. Their results are extensive lists of security notifications, which software developers have to inspect manually in a time-consuming follow-up step. To support developers in their tasks of developing secure code, we present an approach for providing them with continuous immediate feedback of SAST tools in integrated development environments (IDEs). Our approach also considers the understandability of security notifications and aims for a user-centered approach that leverages developers' feedback to build an adaptive system tailored to each individual developer.

cs.SE↗

arXiv2022

The Present and Future of Bots in Software Engineering

We are witnessing a massive adoption of software engineering bots, applications that react to events triggered by tools and messages posted by users and run automated tasks in response, in a variety of domains. This thematic issues describes experiences and challenges with these bots.

cs.SE↗

arXiv2022

Towards an Architecture-centric Methodology for Migrating to Microservices

The euphoria around microservices has decreased over the years, but the trend of modernizing legacy systems to this novel architectural style is unbroken to date. A variety of approaches have been proposed in academia and industry, aiming to structure and automate the often long-lasting and cost-intensive migration journey. However, our research shows that there is still a need for more systematic guidance. While grey literature is dominant for knowledge exchange among practitioners, academia has contributed a significant body of knowledge as well, catching up on its initial neglect. A vast number of studies on the topic yielded novel techniques, often backed by industry evaluations. However, practitioners hardly leverage these resources. In this paper, we report on our efforts to design an architecture-centric methodology for migrating to microservices. As its main contribution, a framework provides guidance for architects during the three phases of a migration. We refer to methods, techniques, and approaches based on a variety of scientific studies that have not been made available in a similarly comprehensible manner before. Through an accompanying tool to be developed, architects will be in a position to systematically plan their migration, make better informed decisions, and use the most appropriate techniques and tools to transition their systems to microservices.

cs.SE↗

arXiv2022

Can Requirements Engineering Support Explainable Artificial Intelligence? Towards a User-Centric Approach for Explainability Requirements

With the recent proliferation of artificial intelligence systems, there has been a surge in the demand for explainability of these systems. Explanations help to reduce system opacity, support transparency, and increase stakeholder trust. In this position paper, we discuss synergies between requirements engineering (RE) and Explainable AI (XAI). We highlight challenges in the field of XAI, and propose a framework and research directions on how RE practices can help to mitigate these challenges.

cs.SE↗

arXiv2022

Learning in Feedback-driven Recurrent Spiking Neural Networks using full-FORCE Training

Feedback-driven recurrent spiking neural networks (RSNNs) are powerful computational models that can mimic dynamical systems. However, the presence of a feedback loop from the readout to the recurrent layer de-stabilizes the learning mechanism and prevents it from converging. Here, we propose a supervised training procedure for RSNNs, where a second network is introduced only during the training, to provide hint for the target dynamics. The proposed training procedure consists of generating targets for both recurrent and readout layers (i.e., for a full RSNN system). It uses the recursive least square-based First-Order and Reduced Control Error (FORCE) algorithm to fit the activity of each layer to its target. The proposed full-FORCE training procedure reduces the amount of modifications needed to keep the error between the output and target close to zero. These modifications control the feedback loop, which causes the training to converge. We demonstrate the improved performance and noise robustness of the proposed full-FORCE training procedure to model 8 dynamical systems using RSNNs with leaky integrate and fire (LIF) neurons and rate coding. For energy-efficient hardware implementation, an alternative time-to-first-spike (TTFS) coding is implemented for the full- FORCE training procedure. Compared to rate coding, full-FORCE with TTFS coding generates fewer spikes and facilitates faster convergence to the target dynamics.

cs.AI↗

arXiv2022

How Are Communication Channels on GitHub Presented to Their Intended Audience? -- A Thematic Analysis

Communication is essential in software development, and even more in distributed settings. Communication activities need to be organized and coordinated to defend against the threat of productivity losses, increases in cognitive load, and stress among team members. With a plethora of communication channels that were identified by previous research in open-source projects, there is a need to explore organizational issues in how these communication channels are introduced, explained, and motivated for use among all project members. In this study, we wanted to understand which communication channels are used in GitHub projects and how they are presented to the GitHub project audience. We employed thematic analysis to analyze 151 artifacts in 90 GitHub projects. Our results revealed 32 unique communications channels that can be divided into nine different types. Projects mostly provide channels of different types, but for some types (e.g., chat) it is common to provide several channels. Maintainers are aware that channels have different properties and help the developers to decide which channel should be used in which case. However, this is not true for all projects, and often we have not found any explicit reasons why maintainers chose to provide one channel over another. Different channels can be used for different purposes and have different affordances, so maintainers have to decide wisely which channels they want to provide and make clear which channel should be used in which case. Otherwise, developers might feel overwhelmed of too many channels and information can get fragmented over multiple channels.

cs.SE↗

arXiv2022

Text and Team: What Article Metadata Characteristics Drive Citations in Software Engineering?

Context: Citations are a key measure of scientific performance in most fields, including software engineering. However, there is limited research that studies which characteristics of articles' metadata (title, abstract, keywords, and author list) are driving citations in this field. Objective: In this study, we propose a simple theoretical model for how citations come to be with respect to article metadata, we hypothesize theoretical linkages between metadata characteristics and citations of articles, and we empirically test these hypotheses. Method: We use multiple regression analyses to examine a data set comprising the titles, abstracts, keywords, and authors of 16,131 software engineering articles published between 1990 and 2020 in 20 highly influential software engineering venues. Results: We find that number of authors, number of keywords, number of question marks and dividers in the title, number of acronyms, abstract length, abstract propositional idea density, and corresponding authors in the core Anglosphere are significantly related to citations. Conclusion: Various characteristics of articles' metadata are linked to the frequency with which the corresponding articles are cited. These results partially confirm and partially go counter to prior findings in software engineering and other disciplines.

cs.SE↗

arXiv2022

An Atiyah Sequence for Noncommutative Principal Bundles

We present a derivation-based Atiyah sequence for noncommutative principal bundles. Along the way we treat the problem of deciding when a given $^*$-automorphism on the quantum base space lifts to a $^*$-automorphism on the quantum total space that commutes with the underlying structure group.

math.OA↗

arXiv2022

Complex group rings and group C*-algebras of group extensions

Let $N$ and $H$ be groups, and let $G$ be an extension of $H$ by $N$. In this article we describe the structure of the complex group ring of $G$ in terms of data associated with $N$ and $H$. In particular, we present conditions on the building blocks $N$ and $H$ guaranteeing that $G$ satisfies the zero-divisor and idempotent conjectures. Moreover, for central extensions involving amenable groups we present conditions on the building blocks guaranteeing that the Kadison-Kaplansky conjecture holds for the group C*-algebra of $G$.

math.RA↗

arXiv2021

Intertwining and Duality for Consistent Markov Processes

In this paper we derive intertwining relations for a broad class of conservative particle systems both in discrete and continuous setting. Using the language of point process theory, we are able to derive a natural framework in which duality and intertwining can be formulated. We prove falling factorial and orthogonal polynomial intertwining relations in a general setting. These intertwinings unite the previously found classical and orthogonal self-dualities in the context of discrete particle systems and provide new dualities for several interacting systems in the continuum. We also introduce a new process, the symmetric inclusion process in the continuum, for which our general method applies and yields generalized Meixner polynomials as orthogonal self-intertwiners.

math.PR↗

arXiv2021

Cybersecurity for Quantum Computing

With rising cyberattack frequency and range, Quantum Computing companies, institutions and research groups may become targets of nation-state actors, cybercriminals and hacktivists for sabotage, espionage and fiscal motivations as the Quantum computing race intensifies. Quantum applications have expanded into commercial, classical information systems and services approaching the necessity to protect their networks, software, hardware and data from digital attacks. This paper discusses the status quo of quantum computing technologies and the quantum threat associated with it. We proceed to outline threat vectors for quantum computing systems and the respective defensive measures, mitigations and best practices to defend against the rapidly evolving threat landscape. We subsequently propose recommendations on how to proactively reduce the cyberattack surface through threat intelligence and by ensuring security by design of quantum software and hardware components.

quant-ph↗

arXiv2021

Using a Cyber Digital Twin for Continuous Automotive Security Requirements Verification

A Digital Twin (DT) is a digital representation of a physical object used to simulate it before it is built or to predict failures after the object is deployed. In this article, we introduce our approach, which applies the concept of a Cyber Digital Twin (CDT) to automotive software for the purpose of security analysis. In our approach, automotive firmware is transformed into a CDT, which contains automatically extracted, security-relevant information from the firmware. Based on the CDT, we evaluate security requirements through automated analysis and requirements verification using policy enforcement checks and vulnerabilities detection. The evaluation of a CDT is conducted continuously integrating new checks derived from new security requirements and from newly disclosed vulnerabilities. We applied our approach to about 100 automotive firmwares. In average, about 600 publicly disclosed vulnerabilities and 80 unknown weaknesses were detected per firmware in the pre-production phase. Therefore, the use of a CDT enables efficient continuous verification of security requirements.

cs.CR↗