Fine-Grained Analysis of Software Ecosystems as Networks

Informazioni relative al progetto

FASTEN

ID dell’accordo di sovvenzione: 825328

DOI

10.3030/825328

Progetto chiuso

Data della firma CE 14 Novembre 2018

Data di avvio 1 Gennaio 2019

Data di completamento 30 Giugno 2022

Finanziato da

• INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)

Costo totale

€ 4 016 581,43

Contributo UE

€ 3 488 536,00

Coordinato da

TECHNISCHE UNIVERSITEIT DELFT
Netherlands

CORDIS fornisce collegamenti ai risultati finali pubblici e alle pubblicazioni dei progetti ORIZZONTE.

I link ai risultati e alle pubblicazioni dei progetti del 7° PQ, così come i link ad alcuni tipi di risultati specifici come dataset e software, sono recuperati dinamicamente da .OpenAIRE .

Risultati finali

Open Research Data Pilot (1)

Open Research Data Pilot - Data Management Plan - Final

Open Research Data Pilot Data Management Plan Final version

Demonstrators, pilots, prototypes (9)

Implementation of application-specific Java, C and Python build graphs - V1

Implementation of application-specific Java, C and Python build graphs – intermediate version

Detection of license obligations and metadata and application to the call graphs - Final

Detection of license obligations and metadata and application to the call graphs.

Ranked search engine for reachability and impact queries - Final

Ranked search engine for reachability and impact queries.

Detection of license obligations and metadata and application to the call graphs - V1

Detection of license obligations and metadata and application to the call graphs – intermediate version

Implementation of a extensible framework of rules-based compatibility and compliance checks and reporting

Implementation of a extensible framework ofrules-based compatibility and compliance checksand reporting

Ranked search engine for reachability and impact queries - V1

Ranked search engine for reachability and impact queries – intermediate version

Implementation of application-specific Java, C and Python build graphs- Final

Implementation of application-specific Java, C and Python build graphs - Final

Implementation of a license compliance and compatibility solver operating on the call graphs - V1

Implementation of a license compliance and compatibility solver operating on the call graphs (intermediate version).

Implementation of a license compliance and compatibility solver operating on the call graphs - Final

Implementation of a license compliance and compatibility solver operating on the call graphs – Final version

Documents, reports (31)

Integrating centrality measures
Dissemination, Communication and Standardisation Plan

Dissemination Communication and Standardisation Plan

Validation report number three

Evaluate and report on the work done and the progress of the FASTEN project after three years according to the procedures defined in D61 and KPIs provided by D62

Requirements and KPIs with baseline values for use case stakeholders - Final

Requirements and KPIs with baseline values for use case stakeholders Final version

Service/integration that provides the outcomes of quality and risk propagation of software ecosystems - Final

Serviceintegration that provides the outcomes of quality and risk propagation of software ecosystems Final version

Static call graph for C code, Java code and Python code - V1

Static call graph for C code, Java code and Python code - intermediate version

Service/integration that provides the outcomes of quality and risk propagation of software ecosystems - V1

Serviceintegration that provides the outcomes of quality and risk propagation of software ecosystems

Validation report number one

Evaluate and report on the work done and the progress of the FASTEN project after 18 months according to the procedures defined in D6.1 and KPIs provided by D6.2.

Procedures and practices for validation
Specifications and documentation for REST API endpoints

Specifications and documentation for REST APIendpoints

Specifications for the call graph storage format - Final

Specifications for the call graph storage format - Final version

Specifications for the FASTEN service plug-ins - Final

Specifications for the FASTEN service plugin Final

The FASTEN Knowledge Base
Comparative studies of algorithms and heuristics for reachability on the call graphs
Static call graph for C code, Java code and Python code - Final

Static call graph for C code Java code and Python code final version

Report on application of the propagation model to quality metrics
Industrialization, Exploitation and Market Takeup Report

Industrialization Exploitation and Market Takeup Report

Validation report number four (final)

Evaluate and report on the final results and achievements of the FASTEN project and ensure it fulfil the objectives of the industrial stakeholders as well as the global objectives laid out in the Grant Agreement

Specifications for the call graph storage format
Specifications for the FASTEN service plug-ins - V1

Specifications for the FASTEN service plug-ins.

Proposed model for quality and risk propagation & aggregation - Final

Proposed model for quality and risk propagation aggregation Final version

FASTEN project handbook
A survey of property propagation and aggregation approaches

A survey of property propagation and aggregation approaches

Industrialization, Exploitation and Market Takeup Plan

Industrialization Exploitation and Market Takeup Plan

Validation report number two

Evaluate and report on the work done and the progress of the FASTEN project after two years according to the procedures defined in D61 and KPIs provided by D62

Graph schema and its representation
Report on application of the propagation model to security vulnerabilities

Report on application of the propagation modelto security vulnerabilities

Code sourcing process
Proposed model for quality and risk propagation & aggregation

Proposed model for quality and risk propagation & aggregation

Requirements and KPIs with baseline values for use case stakeholders - V1

Requirements and KPIs with baseline values foruse case stakeholdersProvide exhaustive KPIs along with baseline values in order to allow for tracking of the evolution of the project

Dissemination, Communication and Standardisation Report

Dissemination Communication and Standardisation Report

Other (10)

Integrated call graph
FASTEN PyPI plug-in - Final

FASTEN PyPI plug-in

FASTEN Maven plug-in
The FASTEN Analyzer
FASTEN Maven plug-in - V1

FASTEN Maven plug-in - intermediate version

Dynamic call graph for diverse application stacks - Final

Dynamic call graph for diverse application stacks - final version

Computation of query-independent centrality measures on the call graphs
Dynamic call graph for diverse application stacks - V1

Dynamic call graph for diverse application stacks

FASTEN PyPI plug-in - V1

FASTEN PyPI plug-in - intermediate version

Computation of query-dependent centrality measures for change-impact analysis

Computation of query-dependent centrality measuresfor change-impact analysis

Websites, patent fillings, videos etc. (2)

Project Website
Project Collateral

Pubblicazioni

Conference proceedings (15)

Selecting third-party libraries: The practitioners' perspective.

Autori: Larios Vargas, E., Aniche, M., Treude, C., Bruntink, M., & Gousios, G.
Pubblicato in: ACM (Association for Computing Machinery) Conference Proceedings: Engineering Conference and Symposium on the Foundations of Software Engineering(ESEC/FSE’20),November8–13,2020,VirtualEvent,USA.ACM,New York,NY,USA,12pages, 2020
Editore: ACM
DOI: 10.1145/3368089.3409711

PyCG: Practical Call Graph Generation in Python

Autori: Vitalis Salis; Thodoris Sotiropoulos; Panos Louridas; Diomidis Spinellis; Dimitris Mitropoulos
Pubblicato in: ICSE, Numero 10, 2021, ISBN 978-1-6654-0296-5
Editore: IEEE
DOI: 10.1109/icse43902.2021.00146

A Dataset of Enterprise-Driven Open Source Software

Autori: Diomidis Spinellis; Zoe Kotti; Konstantinos Kravvaritis; Georgios Theodorou; Panos Louridas
Pubblicato in: MSR, Numero 20, 2020
Editore: ACM
DOI: 10.1145/3379597.3387495

A Model for Detecting Faults in Build Specifications

Autori: Sotiropoulos, Thodoris; Chaliasos, Stefanos; Mitropoulos, Dimitris; Spinellis, Diomidis
Pubblicato in: PACMPL Numero OOPSLA 2020, Numero 2, 2020
Editore: PACMPL
DOI: 10.5281/zenodo.4064035

How Network Analysis Can Improve the Reliability of Modern Software Ecosystems

Autori: Paolo Boldi
Pubblicato in: 2019 IEEE First International Conference on Cognitive Machine Intelligence (CogMI), 2019, Pagina/e 168-172, ISBN 978-1-7281-6737-4
Editore: IEEE
DOI: 10.1109/cogmi48466.2019.00032

ManyTypes4Py: A Benchmark Python Dataset for Machine Learning-based Type Inference

Autori: Amir M. Mir, Evaldas Latoškinas, Georgios Gousios
Pubblicato in: IEEE/ACM 18th International Conference on Mining Software Repositories (MSR), 2021
Editore: IEEE Computer Society
DOI: 10.48550/arxiv.2104.04706

Measuring the impact of library dependency on maintenance

Autori: Núria Bruch Tàrrega, Miroslav Živković, Ana Oprescu
Pubblicato in: Proceedings of the 13th Seminar Series on Advanced Techniques & Tools for Software Evolution (SATToSE 2020), Numero Vol 2754, 2020, ISSN 1613-0073
Editore: CEUR Workshop Proceedings CEUR-WS.org

Ultra-Large-Scale Repository Analysis via Graph Compression

Autori: P. Boldi, A. Pietri, S. Vigna and S. Zacchiroli
Pubblicato in: IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), 2020, Pagina/e 184-194, ISSN 1534-5351
Editore: IEEE
DOI: 10.1109/saner48275.2020.9054827

A Dataset for GitHub Repository Deduplication

Autori: Diomidis Spinellis, Zoe Kotti, Audris Mockus
Pubblicato in: Proceedings of the 17th International Conference on Mining Software Repositories, 2020, Pagina/e 523-527, ISBN 9781450375177
Editore: ACM
DOI: 10.1145/3379597.3387496

A Dataset for GitHub Repository Deduplication: Extended Description

Autori: Spinellis, Diomidis; Kotti, Zoe; Mockus, Audris
Pubblicato in: MSR '20: Proceedings of the 17th International Conference on Mining Software Repositories, Numero 21, 2020
Editore: ACM
DOI: 10.5281/zenodo.3740594

The Software Heritage Graph Dataset: Public Software Development Under One Roof

Autori: Antoine Pietri, Diomidis Spinellis, Stefano Zacchiroli
Pubblicato in: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Pagina/e 138-142, ISBN 978-1-7281-3412-3
Editore: IEEE
DOI: 10.1109/msr.2019.00030

Time Present and Time Past: Analyzing the Evolution of JavaScript Code in the Wild

Autori: Dimitris Mitropoulos, Panos Louridas, Vitalis Salis, Diomidis Spinellis
Pubblicato in: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Pagina/e 126-137, ISBN 978-1-7281-3412-3
Editore: IEEE
DOI: 10.1109/msr.2019.00029

Standing on Shoulders or Feet? The Usage of the MSR Data Papers

Autori: Zoe Kotti, Diomidis Spinellis
Pubblicato in: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Pagina/e 565-576, ISBN 978-1-7281-3412-3
Editore: IEEE
DOI: 10.1109/msr.2019.00085

A Dataset of Enterprise-Driven Open Source Software: Extended Description

Autori: Spinellis, Diomidis; Kotti, Zoe; Kravvaritis, Konstantinos; Theodorou, Georgios; Louridas, Panos
Pubblicato in: MSR '20: Proceedings of the 17th International Conference on Mining Software Repositories, Numero 18, 2020
Editore: Association for Computing Machinery
DOI: 10.5281/zenodo.3742854

Type4Py: Practical Deep Similarity Learning-Based Type Inference for Python

Autori: Mir, Amir M.; Latoskinas, Evaldas; Proksch, Sebastian; Gousios, Georgios
Pubblicato in: ICSE '22: Proceedings of the 44th International Conference on Software Engineering, Numero 16, 2022
Editore: Association for Computing Machinery
DOI: 10.48550/arxiv.2101.04470

Peer reviewed articles (4)

Can we trust tests to automate dependency updates? A case study ofJava Projects

Autori: Joseph Hejderup, Georgios Gousios
Pubblicato in: Journal of Systems and Software, 2022, ISSN 0164-1212
Editore: Elsevier BV
DOI: 10.1016/j.jss.2021.111097

PDGuard: an architecture for the control and secure processing of personal data

Autori: Dimitris Mitropoulos, Thodoris Sotiropoulos, Nikos Koutsovasilis, Diomidis Spinellis
Pubblicato in: International Journal of Information Security, Numero 19/4, 2020, Pagina/e 479-498, ISSN 1615-5262
Editore: Springer Verlag
DOI: 10.1007/s10207-019-00468-5

Präzi: From Package-based to Call-based Dependency Networks

Autori: Joseph Hejderup, Moritz Beller, Konstantinos Triantafyllou, Georgios Gousios
Pubblicato in: Empirical Software Engineering, 2022, ISSN 1382-3256
Editore: Kluwer Academic Publishers
DOI: 10.1007/s10664-021-10071-9

Fine-Grained Network Analysis for Modern Software Ecosystems

Autori: Paolo Boldi; Georgios Gousios
Pubblicato in: Transactions on Internet Technology, Numero 14, 2020, ISSN 1533-5399
Editore: Association for Computing Machinary, Inc.
DOI: 10.1145/3418209

Book chapters (1)

Mime Artist: Bypassing Whitelisting for the Web with JavaScript Mimicry Attacks

Autori: Stefanos Chaliasos, George Metaxopoulos, George Argyros, Dimitris Mitropoulos
Pubblicato in: Computer Security – ESORICS 2019 - 24th European Symposium on Research in Computer Security, Luxembourg, September 23–27, 2019, Proceedings, Part II, Numero 11736, 2019, Pagina/e 565-585, ISBN 978-3-030-29961-3
Editore: Springer International Publishing
DOI: 10.1007/978-3-030-29962-0_27