JISBD 2023 (Ciudad Real)
URI permantente para esta comunidad:
Las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023) se han celebrado en Ciudad Real del del 12 al 14 de septiembre de 2023, como parte de las Jornadas Sistedes.
El programa de JISBD 2023 se ha organizado en torno a sesiones temáticas o tracks.
Examinar
Examinando JISBD 2023 (Ciudad Real) por Fecha de publicación
Mostrando 1 - 20 de 118
Resultados por página
Opciones de ordenación
Artículo Propuesta metodológica para integrar la Privacidad en OWASP MASLavín, Irene; Aparicio, Amador; Martínez, M. Mercedes. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Las dos principales vías por las que los usuarios acceden a los servicios en Internet son a través de la Web y a través de las aplicaciones instaladas en los dispositivos móviles. El uso masivo de dispositivos móviles los convierte en una de las principales fuentes de vulnerabilidades para la privacidad de sus usuarios. Es interesante pues preguntarse cuál es el nivel de privacidad que estas herramientas proporcionan a los usuarios y a sus datos personales. OWASP Mobile Application Security (MAS) es una metodología estándar específica para aplicaciones móviles, que permite detectar y corregir vulnerabilidades de seguridad. La privacidad no forma parte de su diseño por defecto. Por ello, es necesario cuestionar si sus pruebas son suficientes y adecuadas para garantizar la privacidad de los usuarios de dispositivos móviles. Este trabajo presenta una propuesta metodológica para integrar la privacidad en OWASP MAS.Artículo Clasificación de Delitos con IncertidumbreNavarrete, Francisco J; Atencia, Manuel; Vallecillo, Antonio. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.La clasificación de atestados policiales es un tema complejo en el que la incertidumbre juega un papel importante. Por ejemplo, en muchos informes faltan información o es inconsistente. También es posible que diferentes expertos hagan interpretaciones distintas de los hechos a la hora de calificar un mismo delito. Este trabajo presenta una primera aproximación a la incorporación explícita de la incertidumbre en el tratamiento de informes policiales sobre delitos contra la propiedad. Mostraremos cómo representar dicha incertidumbre en los atestados y cómo razonar con esta información, centrándonos en un ejemplo concreto.Resumen EDALoCo: Enhancing the accessibility of blockchains through a low-code approach to the development of event-driven applications for smart contract managementRosa-Bilbao, Jesús; Boubeta-Puig, Juan; Rutle, Adrian. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Blockchain is a cutting-edge technology based on a distributed, secure and immutable ledger that facilitates the registration of transactions and the traceability of tangible and intangible assets without requiring central governance. The agreements between the nodes participating in a blockchain network are defined through smart contracts. However, the compilation, deployment, interaction and monitoring of these smart contracts is a barrier compromising the accessibility of blockchains by non-expert developers. To address this challenge, in this paper, we propose a low-code approach, called EDALoCo, that facilitates the development of event-driven applications for smart contract management. These applications make blockchain more accessible for software developers who are non-experts in this technology as these can be modeled through graphical flows, which specify the communications between data producers, data processors and data consumers. Specifically, we have enhanced the open-source Node-RED low-code platform with blockchain technology, giving support for the creation of user-friendly and lightweight event-driven applications that can compile and deploy smart contracts in a particular blockchain. Additionally, this platform extension allows users to interact with and monitor the smart contracts already deployed in a blockchain network, hiding the implementation details from non-experts in blockchain. This approach was successfully applied to a case study of COVID-19 vaccines to monitor and obtain the temperatures to which these vaccines are continuously exposed, to process them and then to store them in a blockchain network with the aim of making them immutable and traceable to any user. As a conclusion, our approach enables the integration of blockchain with the low-code paradigm, simplifying the development of lightweight event-driven applications for smart contract management. The approach comprises a novel open-source solution that makes data security, immutability and traceability more accessible to software developers who are non-blockchain experts.Resumen Dealing with Belief Uncertainty in Domain ModelsBurgueño, Lola; Muñoz, Paula; Clarisó, Robert; Cabot Sagrera, Jordi; Gérard, Sébastien; Vallecillo, Antonio. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.There are numerous domains in which information systems need to deal with uncertain information. These uncertainties may originate from different reasons such as vagueness, imprecision, incompleteness or inconsistencies; and, in many cases, they cannot be neglected. In this paper, we are interested in representing and processing uncertain information in domain models, considering the stakeholders’ beliefs (opinions). We show how to associate beliefs to model elements, and how to propagate and operate with their associated uncertainty so that domain experts can individually reason about their models enriched with their personal opinions. In addition, we address the challenge of combining the opinions of different domain experts on the same model elements, with the goal to come up with informed collective decisions. We provide different strategies and a methodology to optimally merge individual opinions.Artículo Arquitectura de un Framework para la Generación Automatizada de Datasets Temporales en Data LakesSal, Brian; de La Vega, Alfonso; López Martínez, Patricia; García-Saiz, Diego; Grande, Alicia; López, David; Sánchez Barreiro, Pablo. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.En los últimos años, los data lakes se han popularizado como solución para el almacenamiento centralizado de grandes volúmenes de datos heterogéneos procedentes de fuentes dispares. Estos datos suelen tener un marcado carácter temporal, ya que los datos suelen extraerse periódicamente de diversas fuentes a diferentes frecuencias y se almacenan directamente en crudo. Por tanto, estos datos deben ser adecuadamente preprocesados antes de ser consumidos por las aplicaciones que los explotan. Esta tarea de preprocesamiento se realiza actualmente de manera manual, mediante la escritura de scripts en lenguajes de transformación de datos. Este proceso es laborioso, costoso y, por lo general, propenso a errores. Para tratar de aliviar este problema, este artículo presenta la arquitectura inicial de Hannah, un framework que busca automatizar la generación de datasets para la minería de series temporales a partir de datos en bruto provenientes de data lakes. El objetivo es que, utilizando la menor cantidad de información posible como entrada, el framework sea capaz de recuperar los datos requeridos del data lake y procesarlos para que encajen adecuadamente dentro de un dataset.Artículo I Need a Hero: ChatGPT al rescate de los desarrolladores recién incorporadosGaldos, Aritz; Azanza, Maider; Pérez Lamancha, Beatriz; Paz, Iñaki. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.El proceso de incorporación de nuevos desarrolladores a un equipo u onboarding es costoso en términos de tiempo y dinero para cualquier organización, ya que implica que los desarrolladores más senior dediquen tiempo a formar y apoyar a la persona que se incorpora, quien debe familiarizarse rápidamente con un entorno de trabajo desconocido. Por ello, incorporar nuevos desarrolladores a un proyecto disminuye la productividad en el corto plazo. LKS Next, una empresa cooperativa integrada en el Grupo Mondragón, ha sufrido estos problemas de primera mano. Como parte de un proyecto destinado a mejorar los procesos de onboarding y retención de talento, se presenta "I need a hero", una aplicación web que utiliza ChatGPT, un Large Language Model (LLM), para proporcionar una lista de personas de la organización que poseen las competencias para ayudar, ante un obstáculo, a la persona recién incorporada. Aunque INAH es un prototipo, se ha llevado a cabo una evaluación cuantitativa con un focus group de cuatro personas recién incorporadas a la organización.Artículo Distributed algorithms for big spatial and spatio-textual query processingGarcia-Muñoz, Raul; García-García, Francisco; Corral, Antonio. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.A vast amount of geo-referenced data is generated daily by mobile devices, GPS-enabled devices, and other sensors, increasing the importance of spatio-textual analyses of such data. Big Spatio-Textual Data requires new distributed processing technologies for managing, storing, analyzing, and visualizing large-scale spatio-textual data. Distributed Spatio-Textual Data Management Systems (DSTDMSs) consist of shared nothing clusters of computers specifically designed for distributed processing of large-scale spatio-textual data. This paper presents our emerging work on designing new storage methods and query processing algorithms for Apache Sedona (a recent open-source in-memory cluster computing system for spatial data processing) to support batch and streaming spatio-textual data processing. Our research aims to incorporate new partitioning methods and indexing mechanisms that will help to implement new (static and continuous) spatio-textual queries, especially distance-based spatio-textual joins. Finally, we will evaluate the new proposals with exhaustive experiments over Apache Sedona as a DSTDMS, analyzing and drawing conclusions from the experimental result.Preliminares ComitésActas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Presidentes, coordinadores y comités de los distintos tracks de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023).Resumen Semantic Modelling of Earth Observation Remote SensingAldana-Martín, José F.; García-Nieto, José Manuel; Roldán-García, María del Mar; Aldana-Montes, José F.. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Earth Observation (EO) based on Remote Sensing (RS) is gaining importance nowadays, since it offers a well-grounded technological framework for the development of advanced applications in multiple domains, such as climate change, precision agriculture, smart urbanism, safety, and many others. This promotes the continuous generation of data-driven software facilities oriented to advanced processing, analysis and visualization, which often offer enhanced computing capabilities. Nevertheless, the development of knowledge-driven approaches is still an open challenge in remote sensing, besides they provide human experts with domain knowledge representation, support for data standardization and semantic integration of sources, which indeed enhance the construction of advanced on-top applications. To this end, the use of ontologies and web semantic technologies have shown high success in knowledge representation in many fields, in which the Earth Observation is not an exception. However, as argued by the research community, there is large room for improvement in the specific case of remote sensing, where ontologies that consider the special nature and structure of different satellital and airborne data products are demanded. This article addresses, in first instance, part of this need by proposing a semantic model for the consolidation, integration, reasoning and linking of data (and meta-data), in the context of satellital remote sensing products for EO. With this objective, an OWL ontology has been developed and an RDF repository has been generated to allow advanced SPARQL querying. Although the proposal has been designed to consider remote sensing data products in general, the current study is mainly focused on the Sentinel 2 satellite mission from the Copernicus Programme of the European Space Agency (ESA). Four different use cases are showcased to check potentials of the proposed semantic model in terms of ontology integration, federated querying, data analysis and reasoning.Resumen DICE simulation: a tool for software performance assessment at the design stageBernardi, Simona; Gómez, Abel; Merseguer, José; Perez-Palacin, Diego; Requeno, Jose Ignacio. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.In recent years, we have seen many performance fiascos in the deployment of new systems, such as the US health insurance web. This paper describes the functionality and architecture, as well as success stories, of a tool that helps address these types of issues. The tool allows assessing software designs regarding quality, in particular performance and reliability. Starting from a UML design with quality annotations, the tool applies model-transformation techniques to yield analyzable models. Such models are then leveraged by the tool to compute quality metrics. Finally, quality results, over the design, are presented to the engineer, in terms of the problem domain. Hence, the tool is an asset for the software engineer to evaluate system quality through software designs. While leveraging the Eclipse platform, the tool uses UML and the MARTE, DAM and DICE profiles for the system design and quality modeling.Resumen Silence - A web framework for an agile generation of RESTful APIsBorrego, Agustin; Bermudo, Miguel; Sola Espinosa, Fernando Luis; Ayala, Daniel; Hernandez, Inma; Ruiz, David. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Silence is a web framework made in Python that allows users to automatically generate a REST-compliant API and a set of test skeletons given a relational database. Silence provides the user with a number of console commands to create, manage and run projects. In contrast with other existing web frameworks, Silence makes it quick and straightforward to publish existing data available online, and it is flexible enough to be used for both research and general-purpose applications. Silence is published as a Python package, making it easy to install and operate, and does not require knowledge of any specific programming language to be used.Resumen Is the Revisited Hypervolume an Appropriate Quality Indicator to Evaluate Multi-Objective Test Case Selection Algorithms?Arrieta, Aitor. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Multi-objective test case selection techniques are widely investigated with the goal of devising novel solutions to increase the cost-effectiveness of verification processes. When evaluating such approaches the entire Pareto-frontier of the algorithm needs to be considered. To do so, several quality indicators exist. The \textit{hypervolume} (HV) is one of the most well-known and applied quality indicator. However, in the context of test case selection, this metric has certain limitations. For instance, two different fitness function combinations are not comparable if this metric is used at the search algorithm's objective function level. Consequently, researchers proposed the revisited HV ($rHV$) indicator. To compute the $rHV$, each solution of the search algorithm is individually assessed through two external utility functions: the cost and the fault detection capability (FDC). However, this increases the risk of having dominated solutions, which in practice may lead a {decision maker} (DM) to select such dominated solution. In this paper we assess whether the $rHV$ is an appropriate quality indicator to assess multi-objective test case selection algorithms. To do so, we empirically assess whether the results between the $rHV$ and the FDC of the different DM instances hold. Long story short, the $rHV$ is an appropriate quality indicator.Artículo Towards Self-Adaptive Software for Wildfire Monitoring with Unmanned Air VehiclesVílchez, Enrique; Troya, Javier; Cámara, Javier. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Wildfires have evolved significantly over the last decades, burning increasingly large forest areas every year. Smart cyber-physical systems like small Unmanned Air Vehicles (UAVs) can help to monitor, predict, and mitigate wildfires. In this paper, we present an approach to build control software for UAVs that allows autonomous monitoring of wildfires. Our proposal is underpinned by an ensemble of artificial intelligence techniques that include: (i) Recurrent Neural Networks (RNNs) to make local UAV predictions about how the fire will spread over its surrounding area; and (ii) Deep Reinforcement Learning (DRL) to learn policies that will optimize the operation of the UAV team.Resumen A model-driven approach for systematic reproducibility and replicability of data science projectsGonzález, Francisco Javier Melchor; Rodríguez-Echeverría, Roberto; Conejero, José María; Prieto Ramos, Álvaro E.; Gutiérrez Gallardo, Juan Diego. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.En los últimos años se ha producido un importante incremento en el número de herramientas y enfoques para la definición de pipelines que permiten el desarrollo de proyectos de ciencia de datos. Estas herramientas permiten tanto la definición del pipeline como la generación del código necesario para ejecutar el proyecto, proporcionando una forma sencilla de realizar estos proyectos incluso para usuarios no expertos. Sin embargo, todavía existen algunos retos que estas herramientas no abordan. Por ejemplo, la posibilidad de ejecutar pipelines en entornos tecnológicos diferentes a los de su definición (reproducibilidad y replicabilidad), o la identificación de operaciones inconsistentes (intencionalidad). Para paliar estos problemas, este trabajo presenta un framework basado en modelos para la definición de pipelines de ciencia de datos independientes de la plataforma de ejecución y de las herramientas concretas. Este framework se basa en la separación de la definición del pipeline en dos capas de modelado diferentes: conceptual, en el que el científico de datos puede especificar todas las operaciones de datos que conforman el pipeline; operacional, en el que el ingeniero de datos puede describir los detalles concretos del entorno de ejecución donde se implementarán las operaciones finalmente. Basado en esta definición abstracta y en la separación en capas, nuestra propuesta permite: el uso de diferentes herramientas mejorando, así, la replicabilidad del proceso; la automatización de la ejecución del proceso, mejorando la reproducibilidad del proceso; y la definición de reglas de verificación del modelo, proporcionando restricciones de intencionalidad.Artículo Configurabilidad multinivel en sistemas de gobernanza inteligenteMuñoz-Hermoso, Salvador; Benavides Cuevas, David Felipe; Domínguez Mayo, Francisco José. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Los sistemas para gobernanza inteligente cuentan con necesidades diferentes según el tipo de organización, que junto a su complejidad inherente, dificultan su configurabilidad. Sin embargo, no hallamos soluciones que faciliten la configuración de estos sistemas de gran interés en el sector público. Proponemos una solución de configurabilidad compuesta por una arquitectura de configuración multinivel basada en frameworks software, y un modelo de características (FM) para representar de forma compacta la variabilidad a través de la configuración de los diferentes niveles de un mismo software. Así, podremos obtener una línea de productos personalizados para distintas organizaciones. En un primer nivel se gestiona la variabilidad de los procesos de colaboración tipo, en un segundo nivel los distintos modelos de colaboración; que se concretan en un tercer y cuarto nivel de configuración respectivamente del sistema de gobernanza inteligente general, y del adaptado a las necesidades concretas de la organización.Resumen GeoSPARQL Query Support for Scientific Raster Array DataAlmobydeen, Shahed Bassam; Ríos Viqueira, José Ramón; Lama Penín, Manuel. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Este artículo describe el diseño de una solución de procesamiento de consultas GeoSPARQL, llamada GeoLD, para datos raster científicos. La solución permite la implementación de endpoints SPARQL sobre servicios web que siguen el estándar Web Coverage Processing Service (WCPS) del OGC. Así, no será necesario incorporar funciones específicas de arrays raster en el lenguaje de consulta para habilitar la consulta semántica de este tipo de datos. Para lograr esto, en primer lugar se definen soluciones de mapeado entre coberturas raster y RDF, basadas en estándares bien conocidos de mapeado relacional-RDF del W3C. A continuación, el álgebra SPARQL se extiende con un nuevo operador que permite delegar parte de la consulta GeoSPARQL en el servicio WCPS. La optimización de consultas reemplaza las partes del plan de consulta SPARQL que pueden delegarse en el servicio WCPS por instancias de este nuevo operador WCPS. La implementación de un primer prototipo se ha realizado extendiendo el motor de consultas ARQ de Apache Jena. El componente Petascope proporciona la implementación del servicio WCPS sobre la base de datos de arrays raster Rasdaman. Una evaluación inicial con datos reales de tipo meteorológico muestra, como era de esperar, que GeoLD tiene un rendimiento mejor que una implementación de referencia GeoSPARQL basada en una base de datos espacial.Artículo A comparison between traditional and Serverless technologies in a microservices settingMera Menéndez, Juan; Labra Gayo, Jose Emilio; Riesgo Canal, Enrique; Echevarría Fernández, Aitor. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Serverless technologies, also known as FaaS (Function as a Service), are promoted as solutions that provide dynamic scalability, speed of development, cost-per-consumption model, and the ability to focus on the code while taking attention away from the infrastructure that is managed by the vendor. A microservices architecture is defined by the interaction and management of the application state by several independent services, each with a well-defined domain. When implementing software architectures based on microservices, there are several decisions to take about the technologies and the possibility of adopting Serverless. In this study, we implement 9 prototypes of the same microservice application using different technologies. Some architectural decisions and their impact on the performance and cost of the result obtained are analysed. We use Amazon Web Services and start with an application that uses a more traditional deployment environment (Kubernetes) and migration to a serverless architecture is performed by combining and analysing the impact (both cost and performance) of the use of different technologies such as AWS ECS Fargate, AWS Lambda, DynamoDB or DocumentDB.Resumen The role of awareness and gamification on technical debt managementCrespo, Yania; López-Nozal, Carlos; Marticorena-Sánchez, Raúl; Gonzalo-Tasis, Margarita; Piattini Velthuis, Mario Gerardo. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Context. Managing technical debt and developing easy-to-maintain software are very important aspects for technological companies. Integrated development environments (IDEs) and static measurement and analysis tools are used for this purpose. Meanwhile, gamification also is gaining popularity in professional settings, particularly in software development. Objective. This paper aims to analyse the improvement in technical debt indicators due to the use of techniques to raise developers' awareness of technical debt and the introduction of gamification into technical debt management. Method. A quasi-experiment that manipulates a training environment with three different treatments was conducted. The first treatment was based on training in the concept of technical debt, bad smells and refactoring, while using multiple plugins in IDEs to obtain reports on quality indicators of both the code and the tests. The second treatment was based on enriching previous training with the use of Sonarqube to continuously raise awareness of technical debt. The third was based on adding a gamification component to technical debt management based on a contest with a top ten ranking. The results of the first treatment are compared with the use of Sonarqube for continuously raising developers' awareness of technical debt; while the possible effect of gamification is compared with the results of the previous treatment. Results. It was observed that continuously raising awareness using a technical debt management tool, such as Sonarqube, significantly improves the technical debt indicators of the code developed by the participants versus using multiple code and test quality checking tools. On the other hand, incorporating some kind of competition between developers by defining a contest and creating a ranking does not bring about any significant differences in the technical debt indicators. Conclusions. Investment in staff training through tools to raise developers’ awareness of technical debt and incorporating it into continuous integration pipelines does bring improvements in technical debt management.Resumen Development Effort Estimation in Free/Open Source Software from Activity in Version Control SystemsRobles, Gregorio; Capiluppi, Andrea; Gonzalez-Barahona, Jesus M.; Lundell, Bjorn; Gamalielsson, Jonas. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.Effort estimation models are a fundamental tool in software management, and used as a forecast for resources, constraints and costs associated to software development. For Free/Open Source Software (FOSS) projects, effort estimation is especially complex: professional developers work alongside occasional, volunteer developers, so the overall effort (in person-months) becomes non-trivial to determine. The objective of this work it to develop a simple effort estimation model for FOSS projects, based on the historic data of developers’ effort. The model is fed with direct developer feedback to ensure its accuracy. After extracting the personal development profiles of several thousands of developers from 6 large FOSS projects, we asked them to fill in a questionnaire to determine if they should be considered as full-time developers in the project that they work in. Their feedback was used to fine-tune the value of an effort threshold, above which developers can be considered as full-time. With the help of the over 1,000 questionnaires received, we were able to determine, for every project in our sample, the threshold of commits that separates full-time from non-full-time developers. We finally offer guidelines and a tool to apply our model to FOSS projects that use a version control system.Artículo Contrastive and counterfactual explanations for test case prioritization: Ideas and challengesRamírez, Aurora; Berrios, Mario; Feldt, Robert; Romero, José Raúl. Actas de las XXVII Jornadas de Ingeniería del Software y Bases de Datos (JISBD 2023), 2023-09-12.As machine learning (ML) is increasingly used in software engineering (SE), explainable artificial intelligence (XAI) is crucial for understanding choices made by opaque, "black-box" models. Test case prioritization (TCP) is an important SE problem that can benefit from ML. In this paper, we explore two approaches for generating explanations in ML-based TCP, contrastive and counterfactual XAI, and present application scenarios where they can enhance testers' comprehension of model outputs. Specifically, we use DiCE, a method for generating counterfactual explanations, as an illustrative example and conclude by discussing open issues.