Detecting and Recommending Mitigations for Impactful Risky Software Changes

软件系统在我们的日常生活中扮演着重要的角色，因此软件系统的质量至关重要。为了保证软件系统的质量，大量的研究集中在检测包含缺陷的源代码包、文件和更改上。然而，这种做法在实践中的采用和有用性仍然有限。缺乏采用的一些最常见的原因是：1)在检测中使用的度量是不可操作的，2)没有考虑缺陷的影响，以及3)没有给出如何减轻检测到的缺陷的指导。

Software systems play an important role in our daily lives, making the quality of software systems of paramount importance. To ensure the quality of software systems, a large amount of research focused on the detection of source code packages, files and changes that contain defects. However, the adoption and usefulness of such approaches in practice remains limited. Some of the most commonly cited reasons for the lack of adoption are 1) metrics used in the detection are not actionable, 2) the impact of defects is not taken into consideration and 3) no guidance is given on how to mitigate the detected defects. The aim of the proposed research is to address the aforementioned limitations, making defect detection techniques more pragmatic. To do so, we plan to propose models that use actionable metrics to detect impactful risky changes. Furthermore, we will use historical data and employ qualitative and quantitative approaches on the fixes of the impactful risky changes in order to propose mitigations for the detected impactful risky changes. The successful completion of this proposed project will enable software researchers and practitioners to better understand the key development factors that enable pragmatic defect detection. The novel contributions of the proposed research are: 1) the proposal of models that use actionable metrics to effectively detect impactful risky changes and 2) a catalog of mitigations that can be applied to address these impactful risky changes. Large-scale empirical studies will be performed using large open source and industrial projects, to determine the effectiveness of the proposed models, actionable metrics and proposed mitigations. The proposed research will have a direct impact on the software engineering research and practice since it will advance the field by providing pragmatic detection techniques, proposing novel mitigation strategies and providing an extensible tooling framework. Furthermore, the proposed research will expose, train and enable highly qualified personnel (HQP) to contribute to the state-of-the-art in software quality research.