Category Archives: 4.3 Finished Theses

Final Thesis: A Method to Determine the Return on Investement of Inner Source

Abstract: Inner source is the use of open source software developing practices in proprietary software development across organizational borders. A significant amount of
companies are adopting inner source. Some companies already utilize inner source practices without a coordinated effort to adopt inner source. It is unclear if the gains of inner source outweight the costs of running and adopting it because there is no quantitative method to determine the return on investment for inner source yet. In this paper, we develop a quantitative method to determine the return on investment of inner source. We followed a four phase research approach: First, we conducted a methodological literature review to collect methods and best practices on how to create a return on investment model. Second, we performed a exploratory literature review to identify typical inner source costs and gains. Third, we hypothesized formulas to quantify the costs and gains. Fourth, we prepared but not fully conducted an industry case study to evaluate the method. We provide a methode on how to determine the gains and costs induced by inner source and on how to aggregate them to the return on investment value. We evaluated our method at an organization already adopting inner source. As the results were inconclusive, we suggest further research on evaluating the method. This paper contains the first method to determine the return on investment for inner source.

Keywords: Software engineering, open source, inner source, return on investement

PDFs: Master Thesis, Thesis Description

Reference: Sebastian Duda. A Method to Determine the Return on Investement of Inner Source. Bachelor Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Sweble Security Programming Plugin – Security Rules Engine

Abstract: Within the scope of industry 4.0 and digitalization, there is a growing danger of cyber crime and security attacks, causing huge harm for digital business. Therefore, in nowadays software development, IT-security is regarded as a quality criterion, determining the success of a product or project. Nevertheless, the complexity of security attacks, vulnerabilities and software development as a whole, complicates the reliable protection against and mitigation of security attacks.

To support software engineers to develop more secure software, this thesis shows the concept and presents a prototype of a software security rules methodology called Serum. Serum is designed to help software developers and all other project members in creating a more secure software. A domain-specific language was designed and integrated into a global knowledge management system (Sweble), to allow modeling and describing software assets, associated security attacks as well as known countermeasures. A second component, using the gathered security knowledge, was implemented, focusing on the support of software architects during the creation of a threat- and risk analysis. To facilitate the consideration of security even more a custom test- and dashboard system allows developers and test architects to monitor their contribution towards a more secure system.

The thesis should provide a basis for a holistic security support during all phases of the software development life cycle.

Keywords: IT-Security, threat analysis, DSL, Sweble, structured data

PDFs: Master Thesis

Reference: Florian Gerdes. Sweble Security Programming Plugin – Security Rules Engine. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Implementierung und Performance-Optimierung von SCM-Adaptern

Abstract: Inner source (IS) is the use of open source software development practices and the establishment of an open source-like culture within organizations. To create metrics about the usage of IS within a specific corporation, data about the software development need to be extracted from source code management (SCM) systems. A developed crawl process retrieves the data over specially implemented adapters. To date adapters for git and manually exported CSV files from Microsoft Team Foundation Server (TFS) are in use. To automate data extraction from TFS a new adapter must be developed. Furthermore, the poor performance of the existing git adapter along with the crawl process needs to be improved. To validate the performance increase execution time and resource metrics are measured and compared. The result of this work is a newly developed TFS adapter and a performance-optimized git adapter and crawl process.

Keywords: Engineering thesis, inner source metrics, performance optimization

PDFs: Master Thesis, Thesis Description

Reference: Constantin Hasler. Implementierung und Performance-Optimierung von SCM-Adaptern. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Design and Implementation of an Adaptable Metric Dashboard

Abstract: Many software companies use open source development practices inside the company‘s boundaries, which is called inner source. The Collaboration Management Suite (CMSuite), developed by the Open Source Research Group at the Friedrich-Alexander- University Erlangen-Nuernberg, is a software tool for extraction, analysis, and visualization of data and metrics regarding inner source. Prior to this thesis, CMSuite lacked features to visualize metrics and let stakeholders define their own metrics and visualizations. A programmer had to write code from scratch, where he defines a metric and then visualizes the result. Furthermore is not fully researched, which metrics will be important in the future, so adding new ones without wasting much time is desirable. This thesis discusses a new Java-based REST-service, which makes it possible to easily add and define new metrics, using the data integration tool Pentaho Kettle. The result is then visualized in an AngularJS 2.0 client component for a metric dashboard. Now the user does not have to write any code, but only has to define a metric with the help of Kettle and can see the results of his metric, immediately. Thus, this addition to CMSuite will enable him to save time and test new metrics much more efficiently.

Keywords: Engineering thesis, inner source metrics, adaptable dashboard

PDFs: Master Thesis, Thesis Description

Reference: Achim Däubler. Design and Implementation of an Adaptable Metric Dashboard. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: QDAcity Quality Metrics

Abstract: The cloud-based QDAcity platform allows to conduct collaborative research projects applying Qualitative Data Analysis methods and research validation through crowdsourcing. When using Qualitative Data Analysis as a research method, expressive measurements of the quality and maturity of the results are essential to prove the validity of the research Findings. Common measures for validity of ratings are inter-coder agreement metrics, and for measuring the maturity of a qualitative research project, a prevalent approach is to calculate saturation. However, with a high number of raters, inter-coder agreement metrics become inconvenient to evaluate and the calculation of saturation requires a clean documentation of many project variables. The cloud environment of QDAcity can solve both of these problems, because it can efficiently store all ratings and project variables, and thus integrate both metrics more conveniently for the researcher. This thesis presents the implementation of the two inter-coder agreement metrics Krippendorff’s Alpha and Fleiss’ Kappa in QDAcity and a new approach with its implementation of theoretical saturation.

Keywords: Intercoder Agreement, Theoretical Saturation, Qualitative Data Analysis, QDA

PDFs: Master Thesis, Work Description

Reference: Matthias Schöpe. QDAcity Quality Metrics. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: A Quality Model for Inner Source

Abstract: Inner Source (IS) ist die Verwendung von Open Source (OS) Entwicklungspraktiken innerhalb einer Organisation. Einige Organisationen führen IS Projekte oder sogar IS Programme durch. Bisher gibt es zwar veröffentlichte OS Qualitätsmodelle, allerdings ist kein Qualitätsmodell speziell für IS bekannt. Dieses Papier präsentiert ein Qualitätsmodell für IS Programme und Projekte. Wir führen fünf Interviews mit IS Experten durch und analysieren diese mittels thematischer Analyse. Anhand der daraus entstandenen Einblicke entwickeln wir ein hierarchisches Qualitätsmodell für IS Programme und IS Projekte, die wir anschließend zu recherchierten OS Qualitätsmodellen abgrenzen.

Keywords: Inner source, inner source quality, inner source metrics

PDFs: Master ThesisThesis Description

Reference: Bernd Grillenberger. A Quality Model for Inner Source. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: The Benefits of Continuous Deployment Evaluated Using the JDownloader Software

Abstract: Continuous Delivery and Continuous Deployment approaches have seen widespread adoption in the software industry. To harness such techniques effectively, close monitoring and detailed knowledge about the state of software in production is highly desirable. This thesis analyzes the JDownloader Immune System, a real-time monitoring and error detection mechanism developed for the open source download manager software JDownloader. It describes the mathematical model for error detection based on time series analysis and Holt-Winters-Forecasting. The thesis continues to provide insight on the architecture of the immune system and shows how it provides useful information to developers and users through state dashboards. Finally, it evaluates the effectiveness of the immune system compared to manual user reports. The thesis finds that error detection speed for severe issues is 16 times faster than through manual reports and critical bugs are more than four times more likely to be detected within the first 24 hours after their first appearance.

Keywords: Continuous software engineering, continuous deployment, continuous delivery, JDownloader

PDFs: Master Thesis, Thesis Description

Reference: Michael Weber. The Benefits of continuous deployment evaluated using the JDownloader software. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Managing Organization Data for Patch-Flow Measurement

Abstract: Open source practices and the establishment of an open source like culture within organizations is also called Inner Source (IS). The existing software Collaboration Metric Suite (CMSuite) provides metrics about collaboration between software projects. These metrics can validate the application of IS in organizations. However, the underlying model of the CMSuite currently only supports simple hierarchical organizational structures. Organizations with a more complex structure can not be correctly mapped. In this thesis, a model was designed and integrated into the CMSuite, that fulfills the requirements of a complex organizational structure. For this purpose, two case studies, which show the weaknesses of the current model, were studied. Finally, it was shown that dealing with complex organization structures is not a problem for the CMSuite anymore.

Keywords: Software engineering, mining software repositories, inner source

PDFs: Master Thesis, Thesis Description

Reference: Andreas Bauer. Managing Organization Data for Patch-Flow Measurement. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: A Theory of Industry Best Practices of FLOSS Governance and Compliance

Abstract: Using open source code in commercial software development is gaining more and more momentum during the recent years. While providing benefits along all three dimensions of the software development’s magic triangle of cost, time and scope, use of open source in commercial setting holds certain risks and challenges that can be addressed with FLOSS governance and compliance in the organization. However, the surveys show that about a half of the companies dealing with open source in their software development do not have any specific FLOSS governance procedures. The objective of this thesis is to develop a theory of FLOSS governance and compliance best practices in software development companies. The study uses case study research methodology applied to five German companies. The best practices are derived from the data collected during semi-structured interviews with the help of Qualitative Data Analysis. Key research findings are summarized and the full list of derived best practices in the form of best practice patterns is presented. The formulated best practices in the categories “Policies”, “Processes” and “People and Tools” can be used by software companies to leverage the advantages of using open source while mitigating the associated risks.

Keywords: Open source software, FLOSS, FOSS, proprietary software, FLOSS government, open source license compliance, software development management, case study, best practice

PDFs: Master Thesis, Work Description

Reference: Viktoriya Promyshlyanska. Theory of Industry Best Practices of FLOSS Governance and Compliance. Master Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.

Final Thesis: Integration of a Refactoring UI into the Sweble Hub Software

Abstract: Wikis are an essential part of modern internet in order to store knowledge. However, to date, they lack functions which assist on restructuring and transforming the contents of a wiki. The task of maintaining the contents and structure is therefore time-consuming and error-prone. This thesis designs and implements a user interface for restructurings in wikis build on the Sweble Hub software, which is a software similar to most wikis. In contrast to classic wikis, it is able to provide assistance on restructurings. With Sweble Hub and the user interface designed in this thesis, the wiki authors’ efficiency is greatly improved.

Keywords: Wiki, AST, Refactoring, Transformation, UI

PDFs: Master Thesis, Work Description

Reference: Gabriel Bauer. Integration of a Refactoring UI into the Sweble Hub Software. Bachelor Thesis, Friedrich-Alexander-Universität Erlangen-Nürnberg: 2017.