System and method to determine defect risks in software solutions

• US 9,558,464 B2
• Filed: 01/22/2014
• Issued: 01/31/2017
• Est. Priority Date: 09/11/2009
• Status: Active Grant

• Current Assignee: HCL Technologies Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Bassin, Kathryn A., Hess, Howard M., Huang, Sheng, Kagan, Steven, Li, Shao C., Li, Zhong J., Liu, He H., Skrabanek, Susan E., Tan, Hua F., Zhu, Jun
• Primary Examiner(s): Tsai, Henry
• Assistant Examiner(s): BARTELS, CHRISTOPHER A.
• Application Number:
  US14/160,954
• Publication Number:
  US 20140136277A1
• Time in Patent Office: 1,105 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 11/008 Reliability or availability analysis
• CPC Class Codes: G06F 11/3466 Performance evaluation by tracing or monitoring
• CPC Class Codes: G06F 8/10 Requirements analysis; Specification techniques
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities

Abstract

A method is implemented in a computer infrastructure having computer executable code tangibly embodied on a computer readable storage medium having programming instructions. The programming instructions are operable to receive one or more risk factors, receive one or more contexts, identify one or more context relationships and associate the one or more contexts with the one or more risk factors. Additionally, the programming instructions are operable to map the one or more risk factors for an associated context to a software defect related risk consequence to determine a risk model and execute a risk-based testing based on the risk model to determine a defect related risk evaluation for a software development project.

Claims

1. A method comprising:

determining risk factor definitions, the determining comprising;

collecting risk factors that influence an injection of defects during a software development process;

defining how to measure each of the collected risk factors;

creating a list of risk factors from the collected risk factors;

analyzing the list of risk factors; and

re-factoring the list of risk factors, wherein the re-factoring the list of risk factors comprises determining, by at least one computer device, a relationship between each of the collected risk factors,

wherein measuring each of the collected risk factors is performed by subdividing each of the collected risk factors, including a connection complexity factor, into sub-factors, and calculating a risk factor value for the collected risk factors from sub-factor values, the connection complexity factor being broken down into at least four orthogonal sub-factors comprising cross platform, data transformation, third-party integration and new protocol.

2. The method of claim 1, wherein the determining the risk factor definitions is performed automatically via an expert system.

3. The method of claim 1, wherein the collecting the risk factors includes using a literature survey that can influence the injection of the defects during the software development process.

4. The method of claim 1, wherein the determining the relationship between each of the collected risk factors comprises identifying ambiguities or overlaps between each of the collected risk factors.

5. The method of claim 1, wherein the re-factoring the list of risk factors comprises making the list of risk factors orthogonal based on the analyzing.

6. The method of claim 5, wherein the orthogonal list of risk factors requires that every two risk factors are independent of each other.

7. The method of claim 1, wherein the determining the relationship between each of the collected risk factors comprises determining at least one of three different relationships between each of the collected risk factors, the three different relationships includes:

(i) subset, (ii) equivalent, and (iii) overlap.

8. The method of claim 1, wherein the re-factoring further comprises at least one of deleting, merging, splitting, and adding at least one of the collected risk factors from the list of risk factors.

9. A system comprising:

a CPU, a computer readable memory and a computer readable storage medium;

program instructions to collect risk factors;

program instructions to measure each of the collected risk factors by subdividing each of the collected risk factors, including a connection complexity factor, into sub-factors, and calculating a risk factor value for the collected risk factors from sub-factor values, the connection complexity factor being broken down into at least four orthogonal sub-factors comprising cross platform, data transformation, third-party integration and new protocol;

program instructions to create a list of the collected risk factors;

program instructions to analyze the list of the collected risk factors;

program instructions to determine a relationship between the collected risk factors in the list of collected risk factors; and

program instructions to re-factor the list of the collected risk factors,

wherein the program instructions are stored on the computer readable storage medium for execution by the CPU via the computer readable memory.

10. The system of claim 9, wherein the program instructions to determine the risk factor value subdivides each of the collected risk factors into sub-factors and calculates the risk factor value for the collected risk factors from sub-factor values.

11. The system of claim 10, wherein the program instructions to re-factor the list of the collected risk factors comprises making the list of risk factors orthogonal based on the analyzing.

12. The system of claim 11, wherein the orthogonal list of risk factors requires that every two risk factors are independent of each other.