CAREER: Analysis and Repair of Build Scripts for DevOps Software Practice

职业：DevOps 软件实践的构建脚本分析和修复

• 批准号: 1846467
• 负责人: Xiaoyin Wang
• 金额: $ 49.24万
• 依托单位: University of Texas at San Antonio
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-04-01 至 2025-03-31
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1846467&HistoricalAwards=false
• 关键词: CAREER; Analysis; Repair; Build; Scripts

DevOps is a software development methodology that combines software development (Dev) with information technology operations (Ops). The goal of DevOps is to enhance software productivity and reliability by shortening the software development life cycle while delivering features, fixes, and updates in close alignment with business objectives. The key to adopt the DevOps methodology is to automate the whole process of software configuration, build, testing, and deployment, so that they can be performed after any software code changes. Such automation requires developers to write comprehensive and complicated build scripts and maintain them frequently. Since build scripts often consist of heterogeneous code components and have significant dependency and impact on system environments, they raise unique challenges to traditional code analysis, defect detection, and repair techniques. This project targets an integrated suite of techniques supporting maintenance and quality assurance of build scripts, so that developers may have a similar level of confidence on their build scripts as on their source code. If successful, the project will lead to higher-quality build scripts, more productive build script maintenance, fewer delays in software integration process, as well as more robust software products, especially for those supporting different system environments and configurations. The project will also develop set-up tutorials for popular software frameworks based on analysis of their build scripts to help novice software developers learning the frameworks. To overcome the challenges on analyzing and repairing build scripts, the project will develop (1) concolic analysis of build scripts which enables executions of build process under different system environments and configurations, (2) partial static analyses based on data collected during concolic analysis to detect defects in unexplored paths, and (3) techniques to repair build failures by learning script revisions from software projects with similar build configurations. During the development of above techniques, the project is expected to advance knowledge boundary in four ways. First, it will lead to better understanding of software build practice and common failures. Second, to address system-environment dependencies and impacts, the project will provide comprehensive knowledge on how build scripts interact with system environments, and develop novel symbolic operators, constraint solvers, and abstractions to support system-environment states in concolic and static analyses. Third, to address code heterogeneity, the project will reveal common correlation patterns among different components of build scripts and develop novel algorithms to transfer symbolic expressions and static analysis results across script boundaries via dynamic analyses. Fourth, the project will study the redundancy among build scripts revisions, system environments, configurations, and build logs from different projects, and develop techniques on summarizing common repair templates.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

DevOps是一种将软件开发（Dev）与信息技术运营（Ops）相结合的软件开发方法。DevOps的目标是通过缩短软件开发生命周期来提高软件生产力和可靠性，同时提供与业务目标密切相关的功能，修复和更新。采用DevOps方法的关键是自动化软件配置，构建，测试和部署的整个过程，以便在任何软件代码更改后都可以执行。这种自动化要求开发人员编写全面而复杂的构建脚本并经常维护它们。由于构建脚本通常由异构代码组件组成，并且对系统环境具有显著的依赖性和影响，因此它们对传统的代码分析，缺陷检测和修复技术提出了独特的挑战。这个项目的目标是一套集成的技术，支持构建脚本的维护和质量保证，以便开发人员可以对他们的构建脚本和源代码有类似的信心。如果成功，该项目将导致更高质量的构建脚本，更有成效的构建脚本维护，减少软件集成过程中的延迟，以及更强大的软件产品，特别是那些支持不同系统环境和配置的软件产品。该项目还将根据对构建脚本的分析，为流行的软件框架开发设置教程，以帮助新手软件开发人员学习框架。为了克服分析和修复构建脚本的挑战，该项目将开发（1）构建脚本的concolic分析，使构建过程能够在不同的系统环境和配置下执行，（2）基于concolic分析期间收集的数据的部分静态分析，以检测未探索路径中的缺陷，以及（3）通过从具有类似构建配置的软件项目学习脚本修订来修复构建失败的技术。在上述技术的开发过程中，该项目预计将从四个方面推进知识边界。首先，它将导致更好地理解软件构建实践和常见故障。其次，为了解决系统环境依赖性和影响，该项目将提供有关构建脚本如何与系统环境交互的全面知识，并开发新的符号运算符，约束求解器和抽象，以支持concolic和静态分析中的系统环境状态。第三，为了解决代码异构性，该项目将揭示构建脚本的不同组件之间的共同相关模式，并开发新的算法，通过动态分析跨脚本边界传输符号表达式和静态分析结果。第四，研究不同项目的构建脚本修订、系统环境、配置和构建日志之间的冗余，开发总结通用修复模板的技术。该奖项反映了NSF的法定使命，通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

DAISY: Dynamic-Analysis-Induced Source Discovery for Sensitive Data

• DOI: 10.1145/3569936
• 发表时间: 2022-10
• 期刊: ACM Transactions on Software Engineering and Methodology
• 影响因子: 4.4
• 作者: Xueling Zhang;John Heaps;Rocky Slavin;Jianwei Niu;T. Breaux;Xiaoyin Wang

TestMig: migrating GUI test cases from iOS to Android

• DOI: 10.1145/3293882.3330575
• 发表时间: 2019-07
• 期刊: Proceedings of the 28th ACM SIGSOFT International Symposium on Software Testing and Analysis
• 作者: Xue Qin;Hao Zhong;Xiaoyin Wang

UniLoc: Unified Fault Localization of Continuous Integration Failures

• DOI: 10.1145/3593799
• 发表时间: 2023-05
• 期刊: ACM Transactions on Software Engineering and Methodology
• 影响因子: 4.4
• 作者: Foyzul Hassan;Na Meng;Xiaoyin Wang

Taming Behavioral Backward Incompatibilities via Cross-Project Testing and Analysis

• DOI: 10.1145/3377811.3380436
• 发表时间: 2020-06
• 期刊: 2020 IEEE/ACM 42nd International Conference on Software Engineering (ICSE)
• 作者: Lingchao Chen;Foyzul Hassan;Xiaoyin Wang;Lingming Zhang

PExReport: Automatic Creation of Pruned Executable Cross-Project Failure Reports

• DOI: 10.1109/icse48619.2023.00027
• 发表时间: 2023-05
• 期刊: 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE)
• 作者: Sunzhou Huang;Xiaoyin Wang