Eduardo B. Fernandez, Nobukazu Yoshioka and Hironori Washizaki, “Cloud Access Security Broker (CASB): A pattern for accessing secure cloud services,” Proceedings of the 4th Asian Conference on Pattern Languages of Programs (AsianPLoP 2015), March 5-7, 2015, Tokyo, Japan. (to appear)

Companies are using more and more cloud services, especially SaaS. These applications may handle sensitive data and the companies’ IT departments need to manage the security of a potentially large number of applications. Although the service provider may have a strong security infrastructure, the consumer is responsible for the security of the data used in these applications (the provider does not understand the data semantics). A new type of system software has recently appeared that can organize this security management; this is the Cloud Access Security Broker (CASB). A CASB controls access to the resources available to application users and also protects the data from malware. We present a pattern for this type of system. CASBs are an important part of the cloud ecosystems.

Hironori Washizaki, Tian Xia, Yoshiaki Fukazawa, “Introducing Software Reading Techniques into Pattern Writer’s Workshop: Checklists and Perspectives,” Proceedings of the 4th Asian Conference on Pattern Languages of Programs (AsianPLoP 2015), March 5-7, 2015, Tokyo, Japan. (to appear)

Pattern Writer’s Workshop (WW) is a method to review, evaluate, and improve each other’s pattern or pattern language papers under the guidance of a moderator. Although the WW has been well accepted at the pattern community and xPLoP conferences, there could be several problems such as poor moderations leading to “ad hoc” review meetings. To address the problems, we propose an approach for introducing two existing major software reading techniques, Checklist-Based Reading (CBR) and Perspective-Based Reading (PBR), to the WW targeting software patterns and pattern languages, and discuss potential benefits and drawbacks. Moreover we confirmed benefits and drawbacks of the approach by conducting an experiment.

Timetable of the ‎SamurAICoding‬ 2014-15 World Final on March 18, collocated with 77th IPSJ National Convention at Kyoto University, has been announced. Everyone is welcome so that come to Kyoto, and watch exiting game together!

情報処理学会全国大会併設のSamurAI Coding 2014-15 決勝 World Finalの進行を掲載しました。どなたでも観戦いただけます。ぜひご一緒に、白熱の試合を観戦しましょう！

鷲崎准教授が防衛大学にて「ゴール指向に基づくソフトウェア品質評価とIT経営」について講義しました。具体的にはメトリクスの概念と留意事項、ゴール指向の測定評価の枠組みであるGQM法、ならびに、組織目標と戦略の整合を扱うGQM+Strategies手法を解説し、活発な議論を行いました。

鷲崎 弘宜、”ゴール指向に基づくソフトウェア品質評価とIT経営”、防衛大学 講義、2015年2月10日

Ryosuke Tsuchiya, Hironori Washizaki, Yoshiaki Fukazawa, Keishi Oshima, and Ryota Mibe, “Interactive Recovery of Requirements Traceability Links Using User Feedback and Configuration Management Logs,” Proceedings of 27th International Conference on Advanced Information Systems Engineering (CAiSE 2015), pp.XX-YY, 8-12 June 2015 in Stockholm, Sweden (to appear)

Traceability links can assist in software maintenance tasks. There are some automatic traceability recovery methods. Most of them are similarity-based methods recovering links by comparing representation similarity between requirements and code. They cannot work well if there are some links indepen-dent of the representation similarity. Herein to cover weakness of them and im-prove the accuracy of recovery, we propose a method that extends the similari-ty-based method using two elemental techniques: a log-based traceability re-covery method using the configuration management log and a link recommen-dation from user feedback. These techniques are independent of the representa-tion similarity between requirements and code. As a result of applying our me-thod to a large enterprise system, we successfully improved both recall and pre-cision by more than a 20 percent point in comparison with singly applying the similarity-based method (recall: 60.2% to 80.4%, precision: 41.1% to 64.8%).

‪‎SQuBOK‬ v2 講演会にて、鷲崎准教授がSQuBOKの設計開発領域およびそれを活用した品質の組み入れ活動について事例を交えて講演しました。品質への取り組みの一助となれぱ幸いです。

鷲崎 弘宜, “SQuBOK V2設計開発領域について”,  ソフトウェア品質知識体系ガイド （第2版） SQuBOK Guide V2発行記念講演会, 2015年2月9日

Shohei Yamazaki received Best Student Paper Award at Australasian Computing Education Conference (ACE 2015) for the paper “Comparative Study on Programmable Robots as Programming Educational Tools” authored by Shohei Yamazaki, Kazunori Sakamoto, Kiyoshi Honda, Hironori Washizaki, Yoshiaki Fukazawa. Congratulations, Yamazaki-kun!

IPSJ International AI Programming Contest: SamurAI Coding 2014-15
http://samuraicoding.info/preliminary.html

We received more than 130 submissions to the Preliminary round! By conducting the preliminary round according to the way described in About the Preliminary Round, 16 teams have been selected for advancing to the World final. By considering actual regional balance, 14 teams with the highest ratings among all teams and 2 international teams with good results have been selected. The game results are on the online execution server.

櫨山淳雄, 齊藤大仁, 吉岡信和, 熊谷梓, 小橋孝紀, 鷲崎弘宜, 海谷治彦, 大久保隆夫, “ソフトウェアセキュリティ知識ベースを活用したセキュアなWebアプリケーション開発事例ベースの試作”, 電子情報通信学会 知能ソフトウェア工学研究会 (KBSE) , 2015年1月研究会, 東京, 2015年1月27日.

櫨山淳雄, 齊藤大仁, 吉岡信和, 熊谷梓, 小橋孝紀, 鷲崎弘宜, 海谷治彦, 大久保隆夫, “ソフトウェアセキュリティ知識ベースを活用したセキュアなソフトウェア開発事例ベースの提案”, 情報処理学会 第77回全国大会, 京都大学, 2015年3月17-19日.

鷲崎弘宜、ソフトウェア品質プロフェッショナルに求められる専門性と倫理性: 知識、スキル、コンピテンシ、倫理綱領、IPA/SEC Journal, Vol.39（「今品質について考える」特集）, 2015.

ソフトウェア品質のプロフェッショナルは、知識、スキル、コンピテンシからなる高い専門性と、高い倫理性の両方を備える必要がある。本稿では、代表的な知識体系やスキル・コンピテンシの枠組み、および、それらを用いるうえでの留意点を説明する。例えばスキルやコンピテンシの定義は枠組みによって大きく異なるため、複数を参照する場合は注意が必要である。またソフトウェア品質に携わることが職業として真にプロフェッションと認められることに向けて、倫理の重要性とプロフェッショナル認定の動向を説明する。