Category Archives: 4 Theses

Final Thesis: A Theory of Open Source Engineering Processes

Abstract: Open Source communities are largely people centric and work on customized software processes created by people while trying to solve a problem. Hence, most Open Source projects do not have formal processes or do not follow software engineering best practices. But at the same time, they are successful and the processes followed are instrumental in their success. The objective of this thesis is to build a theory of Open Source Engineering processes. This theory can be used by Open Source communities to design their own processes and to compare their processes with that of other communities. The theory is presented as categories and sub-categories and is derived from qualitative data analysis of interviews and supplemental materials. The model is then applied to three polar Open Source communities.

Keywords: Open source engineering process, open source development process, qualitative research, decision-making in open source

PDFs: Master Thesis, Work Description

Reference: Harisree Radhakrishnan. A Theory of Open Source Engineering Processes. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: A Visual UML-Editor for QDAcity

Abstract: QDAcity ist eine Webanwendung zur Unterstützung der qualitativen Datenanalyse (QDA) von Text-Daten. Bei der qualitativen Datenanalyse geht es darum Informationen und Zusammenhänge aus unstrukturierten Daten wie Interviewtranskriptionen zu gewinnen. Ein wichtiger Prozess bei der QDA ist die Kodierung, bei der Textstellen mit selbstdefinierten Codes versehen werden, um die Inhalte besser zu strukturieren. Die Anwendung QDAcity unterstützt die Kodierung von Texten mit einem Codesystem, welches die Codes hierarchisch strukturiert. In dieser Arbeit wurde für QDAcity eine Software entwickelt, durch die es erstmals möglich ist, einzelne Elemente des konzeptuellen Modells (Klassen oder Beziehungen) mit Elementen aus qualitativen Daten (Codes) zu verknüpfen. Es wurde also ein Domänenmodell-Editor entwickelt, der auf Basis eines Codesystems arbeitet, und bei dem sowohl für das Klassendiagramm, als auch für das Codesystem ein gemeinsames Modell verwendet wird. Für die Umsetzung wurde das Codesystem um eine Codesystem-Language erweitert, die die Kategorisierung und damit die Abbildung in einen UML-Klassen-Diagramm ermöglicht.

Keywords: Domain Modeling, Qualitative Data Analysis, QDA, UML

PDFs: Master Thesis, Work Description

Reference: Felix Loos. A Visual UML-Editor for QDAcity. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: A Method to Determine the Return on Investement of Inner Source

Abstract: Inner source is the use of open source software developing practices in proprietary software development across organizational borders. A significant amount of
companies are adopting inner source. Some companies already utilize inner source practices without a coordinated effort to adopt inner source. It is unclear if the gains of inner source outweight the costs of running and adopting it because there is no quantitative method to determine the return on investment for inner source yet. In this paper, we develop a quantitative method to determine the return on investment of inner source. We followed a four phase research approach: First, we conducted a methodological literature review to collect methods and best practices on how to create a return on investment model. Second, we performed a exploratory literature review to identify typical inner source costs and gains. Third, we hypothesized formulas to quantify the costs and gains. Fourth, we prepared but not fully conducted an industry case study to evaluate the method. We provide a methode on how to determine the gains and costs induced by inner source and on how to aggregate them to the return on investment value. We evaluated our method at an organization already adopting inner source. As the results were inconclusive, we suggest further research on evaluating the method. This paper contains the first method to determine the return on investment for inner source.

Keywords: Software engineering, open source, inner source, return on investement

PDFs: Master Thesis, Thesis Description

Reference: Sebastian Duda. A Method to Determine the Return on Investement of Inner Source. Bachelor Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Sweble Security Programming Plugin – Security Rules Engine

Abstract: Within the scope of industry 4.0 and digitalization, there is a growing danger of cyber crime and security attacks, causing huge harm for digital business. Therefore, in nowadays software development, IT-security is regarded as a quality criterion, determining the success of a product or project. Nevertheless, the complexity of security attacks, vulnerabilities and software development as a whole, complicates the reliable protection against and mitigation of security attacks.

To support software engineers to develop more secure software, this thesis shows the concept and presents a prototype of a software security rules methodology called Serum. Serum is designed to help software developers and all other project members in creating a more secure software. A domain-specific language was designed and integrated into a global knowledge management system (Sweble), to allow modeling and describing software assets, associated security attacks as well as known countermeasures. A second component, using the gathered security knowledge, was implemented, focusing on the support of software architects during the creation of a threat- and risk analysis. To facilitate the consideration of security even more a custom test- and dashboard system allows developers and test architects to monitor their contribution towards a more secure system.

The thesis should provide a basis for a holistic security support during all phases of the software development life cycle.

Keywords: IT-Security, threat analysis, DSL, Sweble, structured data

PDFs: Master Thesis

Reference: Florian Gerdes. Sweble Security Programming Plugin – Security Rules Engine. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

New Grading Scheme for Final Theses

We designed a new and simplified grading scheme for final theses, replacing the old one. A thesis still has to pass some basic [OK|NOK] checks like completeness of declaration of materials built on, relevant topic, no plagiarism, etc. However, this is a binary decision and does not affect the grade directly (except for failing if these criteria are not met).

The grade then is derived using only four main measures. These are:

  • Results quality
  • Method competence
  • Effort expended
  • Presentation quality

Each measure is taken on scale of [0..10], where 0 means not present at all and 10 means perfect, with a linear distribution around the mean. The four measures are combined using the geometric mean, from which a grade in the German 1,00 – 5,00 grading system is derived.

This new grading scheme has been put into effect starting the academic year of 2017/18.

Final Thesis: Implementierung und Performance-Optimierung von SCM-Adaptern

Abstract: Inner source (IS) is the use of open source software development practices and the establishment of an open source-like culture within organizations. To create metrics about the usage of IS within a specific corporation, data about the software development need to be extracted from source code management (SCM) systems. A developed crawl process retrieves the data over specially implemented adapters. To date adapters for git and manually exported CSV files from Microsoft Team Foundation Server (TFS) are in use. To automate data extraction from TFS a new adapter must be developed. Furthermore, the poor performance of the existing git adapter along with the crawl process needs to be improved. To validate the performance increase execution time and resource metrics are measured and compared. The result of this work is a newly developed TFS adapter and a performance-optimized git adapter and crawl process.

Keywords: Engineering thesis, inner source metrics, performance optimization

PDFs: Master Thesis, Thesis Description

Reference: Constantin Hasler. Implementierung und Performance-Optimierung von SCM-Adaptern. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Design and Implementation of an Adaptable Metric Dashboard

Abstract: Many software companies use open source development practices inside the company‘s boundaries, which is called inner source. The Collaboration Management Suite (CMSuite), developed by the Open Source Research Group at the Friedrich-Alexander- University Erlangen-Nuernberg, is a software tool for extraction, analysis, and visualization of data and metrics regarding inner source. Prior to this thesis, CMSuite lacked features to visualize metrics and let stakeholders define their own metrics and visualizations. A programmer had to write code from scratch, where he defines a metric and then visualizes the result. Furthermore is not fully researched, which metrics will be important in the future, so adding new ones without wasting much time is desirable. This thesis discusses a new Java-based REST-service, which makes it possible to easily add and define new metrics, using the data integration tool Pentaho Kettle. The result is then visualized in an AngularJS 2.0 client component for a metric dashboard. Now the user does not have to write any code, but only has to define a metric with the help of Kettle and can see the results of his metric, immediately. Thus, this addition to CMSuite will enable him to save time and test new metrics much more efficiently.

Keywords: Engineering thesis, inner source metrics, adaptable dashboard

PDFs: Master Thesis, Thesis Description

Reference: Achim Däubler. Design and Implementation of an Adaptable Metric Dashboard. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: QDAcity Quality Metrics

Abstract: The cloud-based QDAcity platform allows to conduct collaborative research projects applying Qualitative Data Analysis methods and research validation through crowdsourcing. When using Qualitative Data Analysis as a research method, expressive measurements of the quality and maturity of the results are essential to prove the validity of the research Findings. Common measures for validity of ratings are inter-coder agreement metrics, and for measuring the maturity of a qualitative research project, a prevalent approach is to calculate saturation. However, with a high number of raters, inter-coder agreement metrics become inconvenient to evaluate and the calculation of saturation requires a clean documentation of many project variables. The cloud environment of QDAcity can solve both of these problems, because it can efficiently store all ratings and project variables, and thus integrate both metrics more conveniently for the researcher. This thesis presents the implementation of the two inter-coder agreement metrics Krippendorff’s Alpha and Fleiss’ Kappa in QDAcity and a new approach with its implementation of theoretical saturation.

Keywords: Intercoder Agreement, Theoretical Saturation, Qualitative Data Analysis, QDA

PDFs: Master Thesis, Work Description

Reference: Matthias Schöpe. QDAcity Quality Metrics. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: A Quality Model for Inner Source

Abstract: Inner Source (IS) ist die Verwendung von Open Source (OS) Entwicklungspraktiken innerhalb einer Organisation. Einige Organisationen führen IS Projekte oder sogar IS Programme durch. Bisher gibt es zwar veröffentlichte OS Qualitätsmodelle, allerdings ist kein Qualitätsmodell speziell für IS bekannt. Dieses Papier präsentiert ein Qualitätsmodell für IS Programme und Projekte. Wir führen fünf Interviews mit IS Experten durch und analysieren diese mittels thematischer Analyse. Anhand der daraus entstandenen Einblicke entwickeln wir ein hierarchisches Qualitätsmodell für IS Programme und IS Projekte, die wir anschließend zu recherchierten OS Qualitätsmodellen abgrenzen.

Keywords: Inner source, inner source quality, inner source metrics

PDFs: Master ThesisThesis Description

Reference: Bernd Grillenberger. A Quality Model for Inner Source. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: The Benefits of Continuous Deployment Evaluated Using the JDownloader Software

Abstract: Continuous Delivery and Continuous Deployment approaches have seen widespread adoption in the software industry. To harness such techniques effectively, close monitoring and detailed knowledge about the state of software in production is highly desirable. This thesis analyzes the JDownloader Immune System, a real-time monitoring and error detection mechanism developed for the open source download manager software JDownloader. It describes the mathematical model for error detection based on time series analysis and Holt-Winters-Forecasting. The thesis continues to provide insight on the architecture of the immune system and shows how it provides useful information to developers and users through state dashboards. Finally, it evaluates the effectiveness of the immune system compared to manual user reports. The thesis finds that error detection speed for severe issues is 16 times faster than through manual reports and critical bugs are more than four times more likely to be detected within the first 24 hours after their first appearance.

Keywords: Continuous software engineering, continuous deployment, continuous delivery, JDownloader

PDFs: Master Thesis, Thesis Description

Reference: Michael Weber. The Benefits of continuous deployment evaluated using the JDownloader software. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.