SFSCon19 - Kristian Schwienbacher - Custom error and event tracking for Ember js apps

•

0 likes•51 views

This bachelor's thesis discusses a system for identifying bug-inducing commits based on user activity logs from an Ember.js application. The system includes an error tracking addon to log errors and user events, which are sent to a measurement server. The server analyzes the stack traces to determine the bug-inducing commit and compares this approach to the traditional SZZ algorithm. The thesis evaluates the system through data exploration and case studies, finding it was able to more accurately identify the bug-inducing commit than the SZZ algorithm when stack traces were available.

Technology

Kristian Schwienbacher
Custom error and event tracking for
Ember.js apps

“Identiﬁcation of Bug-Inducing
Commits Based on User Activity”
Kristian Schwienbacher
Free University of Bolzano - Bachelor in Computer Science
Bachelor Thesis

PROBLEM SOLUTION
EVALUATION
Comparison with the SZZ Algorithm
PROBLEM STATEMENT
Implementation of the System
Outline
DISCUSSION
01
02
03
04
Goal of the project and Requirements of the System
Limitations and Scope of Application

● Errors inside running applications must be tracked
● Interactions of users are logged in form of
stack-traces
● Error-log are analyzed to determine bug-inducing
commit
● Comparison with traditional bug-localization
algorithm
PROBLEM STATEMENT

Phase 1
SZZ Algorithm
Bug-ﬁxing
commits git blame
bug-introducing
commits candidates
● Sliwersky, Zimmermann, Zeller (2005)
● Find bug-ﬁxing commits
● Trace back to bug-introducing commit

PROBLEM SOLUTION
Error Tracking Addon
● Catches all errors occurring during run-time
● Adds event listeners for pre-deﬁned user events
● When error occurs, log is sent to API-endpoint
● Distributed as an open source NPM package

PROBLEM SOLUTION
Measurement Server
● initial state of application repository is analyzed
○ SZZ algorithm
○ average bug-ﬁxing time
● logging endpoint
○ analyzes stack-traces to determine
bug-inducing-commit
○ GitHub Issues

EVALUATION
Data Exploration
Weekday distribution of bug-introducing commits

EVALUATION
Data Exploration
Weekday distribution of bug-ﬁxing commits

EVALUATION
Data Exploration
Bug introducing commit message analysis

EVALUATION
Case Study I
● Bug: no plans would be available when existing
customer tried to upgrade one of their applications
● Fixing Commit: 92 line modiﬁcations, 7 ﬁles
● SZZ: pointed to commit made 17 days prior to bugﬁx
● Error Logger: bug was introduced 74 days before
being ﬁxed

Discussion
● The majority of the bugs do not generate any error
message
● SZZ algorithm can be applied on most bugs
● Approach of this project only applicable when stack
traces are generated
● When stack trace is available this approach was
determined to be more accurate in the case studies

References
● T. Zimmermann J. Sliwerski and A. Zeller. When do changes induce
ﬁxes? In Proceedings of International Workshop on Mining Software
Repositories, pages 24–28, Saint Louis, Missouri, USA, 2005.
● Sunghun Kim, Thomas Zimmermann, Kai Pan, and E. James Whitehead Jr.
Automatic identiﬁcation of bug introducing changes. In Proceedings of the 21st
IEEE/ACM International Conference on Automated Software Engineering, pages
81–90, September 2006.
● Kim Herzig, Sascha Just, and Andreas Zeller. It’s not a bug, it’s a feature: How
misclassiﬁcation impacts bug prediction. In Proceedings of the 2013
International Conference on Software Engineering, ICSE ’13, pages 392–401,
Piscataway, NJ, USA, 2013. IEEE Press
● Gema Rodríguez-Pérez, Gregorio Robles, and Jesús M González-Barahona.
Reproducibility and Credibility in Empirical Software Engineering: A Case Study
based on a Systematic Literature Review of the use of the SZZ algorithm.
Information and Software Technology

What's hot

Assertions are often used to test the assumptions that developers have about a program. An assertion contains a boolean expression which developers believe to be true at a particular program point. It throws an error if the expression is not satisfied, which helps developers to detect and correct bugs. Since assertions make developer assumptions explicit, assertions are also believed to improve understandability of code. Recently, Casalnuovo et al. analyse C and C++ programs to understand the relationship between assertion usage and defect occurrence. Their results show that asserts have a small effect on reducing the density of bugs and developers often add asserts to methods they have prior knowledge of and larger ownership. In this study, we perform a partial replication of the above study on a large dataset of Java projects from GitHub (185 projects, 20 million LOC, 4 million commits, 0.2 million files and 1 million methods). We collect metrics such as number of asserts, number of defects, number of developers and number of lines changed to a method, and examine the relationship between asserts and defect occurrence. We also analyse relationship between developer experience and ownership and the number of asserts. Furthermore, we perform a study of what are different types of asserts added and why they are added by developers. We find that asserts have a small yet significant relationship with defect occurrence and developers who have added asserts to methods often have higher ownership of and experience with the methods than developers who did not add asserts.

Revisiting Assert Use in GitHub Projects

Pavneet Singh Kochhar

Winning open source vulnerabilities without loosing your deveopers - Azure De...

WhiteSource

Supply Chain Solutions for Modern Software Development

Sonatype

We know that software is important to our lives. Today, software was applied to diverse applications, but there are still many problems. Software Engineering was established to find solutions to various problems. About Software Development I expect that this presentation will be the one that keeps pushing, as a starting point or inspires you to interested in learning further about software engineering.

Introduction to software engineering

สาโรจน์ แสงผ่องอำไพ

Daily checklist example

jjallab

The success of software engineering projects is in a large part dependent on social and organization aspects of the development community. Indeed, it not only depends on the complexity of the product or the number of requirements to be implemented, but also on people, processes, and how they impact the technical side of software development. Social debt represents patterns across the organizational structure around a software system that may lead to additional unforeseen project costs. Condescending behavior, disgruntlement or rage quitting are just some examples of social issues that may occur among the developers of a software project. While the research community has recently investigated the underlying dynamics leading to the introduction of social debt (e.g., the so-called “community smells” which represent symptoms of the presence of social problems in a community), as well as how such debt can be payed off, there is still a noticeable lack of empirical evidence on how social debt impacts software maintenance and evolution. In this paper, we present our position on how social debt can impacts technical aspects of source code by presenting a road map toward a deeper understanding of such relationship.

Social Debt Analytics for Improving the Management of Software Evolution Tasks

Fabio Palomba

resume_cs

Aileen Cheng

According to my previous slide share, Introduction to software engineering, http://www.slideshare.net/ssuser45a683/introduction-to-software-engineering-48462625. I would like to expand further in part of software testing. Software testing is vital, no less than software development. It can be said that software testing should be the same level as software development. The content of this slide will discuss the meaning of software testing. The importance of software and concepts of software testing.

Thinking in software testing

สาโรจน์ แสงผ่องอำไพ

In the tradition of James Whittaker’s book series How to Break … Software, Jon Hagar applies the testing “attack” concept to the domain of mobile app software. Jon defines the sub-domain of mobile software and examines industry product failure caused by defects in that software. Next, Jon summarizes a set of attacks against mobile software based on these common modes of failure that testers can direct against their own app software to quickly find bugs. Specific attack methods identified include developer based cases, computation and control structures for batteries and sensor hubs, hardware-software interfaces, and communications. This session is based on the book: “Software Test Attacks to Break Mobile and Embedded Devices” CRC press, 2013 Key Takeaways: - Breaking Mobile App Software to find bugs - Embedded risk-based exploratory testing concepts - Attack based testing specific to mobile devices

Mobile App Test Attacks to Efficiently Explore Software

TEST Huddle

Mentors View: Aligning Your Team and Your Powers for Success

Sonatype

Google, quality and you

nelinger

Many organizations are using virtualization technology to increase the number of available test machines. However, this increase creates a new dilemma for testers. How can you confirm that all test systems are running properly and not showing signs of serious defects? Since many companies are reluctant to add additional staff members to simply “babysit” test environments, teams are forced to do more with less. Stephen Burlingame shares a solution to this problem that takes a proactive, rather than reactive, approach—in the form of a daily status report—to gather data, perform analysis, and generate results. This analysis of each test machine helps expose defects that, if ignored, could pose serious issues once the software is deployed to production. Take away an understanding of how such analysis is completed and a meaningful report compiled. See how critical data points are collected and presented efficiently. Leave with an understanding of how to create a similar early warning tool for your own organization and change the conversations testers are having.

The Canary in the Coal Mine: Create an Early Warning Tool to Help Your Testing

Josiah Renaudin

The SZZ algorithm for identifying bug-inducing changes has been widely used to evaluate defect prediction techniques and to empirically investigate when, how, and by whom bugs are introduced. Over the years, researchers have proposed several heuristics to improve the SZZ accuracy, providing various implementations of SZZ. However, fairly evaluating those implementations on a reliable oracle is an open problem: SZZ evaluations usually rely on (i) the manual analysis of the SZZ output to classify the identified bug-inducing commits as true or false positives; or (ii) a golden set linking bug-fixing and bug-inducing commits. In both cases, these manual evaluations are performed by researchers with limited knowledge of the studied subject systems. Ideally, there should be a golden set created by the original developers of the studied systems. We propose a methodology to build a "developer-informed" oracle for the evaluation of SZZ variants. We use Natural Language Processing (NLP) to identify bug-fixing commits in which developers explicitly reference the commit(s) that introduced a fixed bug. This was followed by a manual filtering step aimed at ensuring the quality and accuracy of the oracle. Once built, we used the oracle to evaluate several variants of the SZZ algorithm in terms of their accuracy. Our evaluation helped us to distill a set of lessons learned to further improve the SZZ algorithm. Giovanni Rosa (University of Molise), Luca Pascarella (Università della Svizzera italiana), Simone Scalabrino (University of Molise), Rosalia Tufano (Università della Svizzera Italiana), Gabriele Bavota (Software Institute, USI Università della Svizzera italiana), Michele Lanza (Software Institute, USI Università della Svizzera italiana), Rocco Oliveto (University of Molise), * Live Presentation: https://www.youtube.com/watch?v=ZiuAaysj_Sk * IEEE Digital Library: https://www.computer.org/csdl/proceedings-article/icse/2021/029600a436/1sEXo2zV4OI

Evaluating SZZ Implementations Through a Developer-informed Oracle (ICSE 2021)

Giovanni Rosa

Infrastructure as Code (IaC) has rapidly become a key part of cloud native engineering. The hard gained experience from writing software can be applied to infrastructure, but fundamental differences means some fundamental approached need to be reconsidered. This talk will explore the implications for test driven development and build pipelines applied to IaC. Jon Barber is an Engineer with Equal Experts. He has been paid to write software for over 30 years, and has spent most of his time recently in the platform engineering space. He’s a keen advocate of XP values and practices, and sees himself more as an engineer than craftsman.

Software development practices & Infrastructure as Code - how well do they wo...

Equal Experts

Starting with mobile application pen testing

Stephanie Vanroelen

How automation can help boost security

TestingXperts

Nas base15.ppt

Yann-Gaël Guéhéneuc

Gain new insights on how to deliver higher quality software even faster -- with less unplanned, unscheduled rework. If you are using open source components as part of development you may be unknowingly sabotaging your efforts by introducing known vulnerabilities – shockingly there are 24 vulnerabilities in the average application. Hear the results of an extensive analysis of open source usage across 106,000 development organizations. We’ll be drawing analogies between modern software development and traditional manufacturing supply chains, focusing on proven steps to improve speed, efficiency and quality. Watch the on-demand recording.

Findings Revealed: 2015 State of the Software Supply Chain

Sonatype

infoShare 2014: Paweł Brodziński, Efektywny czy zajęty? Jesteś pewien, że dob...

Infoshare

Verification Bug Metrics: A Different Approach

DVClub

What's hot (20)

Revisiting Assert Use in GitHub Projects

Winning open source vulnerabilities without loosing your deveopers - Azure De...

Supply Chain Solutions for Modern Software Development

Introduction to software engineering

Daily checklist example

Social Debt Analytics for Improving the Management of Software Evolution Tasks

resume_cs

Thinking in software testing

Mobile App Test Attacks to Efficiently Explore Software

Mentors View: Aligning Your Team and Your Powers for Success

Google, quality and you

The Canary in the Coal Mine: Create an Early Warning Tool to Help Your Testing

Evaluating SZZ Implementations Through a Developer-informed Oracle (ICSE 2021)

Software development practices & Infrastructure as Code - how well do they wo...

Starting with mobile application pen testing

How automation can help boost security

Nas base15.ppt

Findings Revealed: 2015 State of the Software Supply Chain

infoShare 2014: Paweł Brodziński, Efektywny czy zajęty? Jesteś pewien, że dob...

Verification Bug Metrics: A Different Approach

Similar to SFSCon19 - Kristian Schwienbacher - Custom error and event tracking for Ember js apps

Assignment 1 Week 2.docx 1 Assignment 1: Topic Selection Assignment 1: Topic Selection Software Engineering: The Autotest Framework Jessica Hill Scott Dr. Teresa Wilburn RES 531: Research Methods January 12th 2014 Topic Selection: Software Engineering: Automated Testing/Programs That Test Themselves Topic Description: Software testing is any activity aimed at evaluating an attribute or capability of a program or system and determining that it meets its required results. Although crucial to software quality and widely deployed by programmers and testers, software testing still remains an art, due to limited understanding of the principles of software. The difficulty in software testing stems from the complexity of software: we cannot completely test a program with moderate complexity. Testing is more than just debugging. The purpose of testing can be quality assurance, verification and validation, or reliability estimation. Testing can be used as a generic metric as well. Correctness testing and reliability testing are two major areas of testing. Software testing is a trade-off between budget, time and quality (Hetzel). Automated testing is a widely used phrase. To understand what it entails, it is necessary to distinguish several increasingly ambitious levels of automation. What is best automated today is test execution. In a project that has generated thousands of test cases, running them manually would be tedious, especially as testing campaigns occur repeatedly. For example, it is customary to run extensive tests before every release. Traditionally, testers wrote scripts to run the tests. A related goal, also addressed by some of today’s tools, is regression testing. It is a common phenomenon of software development that some corrected faults reappear in later versions, indicating that the software has partly “regressed.” A project should retain any test that failed at any stage of its history, then passed after the fault was corrected; test campaigns should run all such tests to spot cases of regression. Automated tools should provide resilience. A large test suite is likely to contain some test cases that, in a particular execution, crash the program. Resilience means that the process may continue anyway with the remaining cases. One of the most tedious aspects of testing is test case generation. With modern computers we can run very large numbers of test cases. Usually, developers or testers have to devise them; this approach, limited by people’s time, does not scale up. Commonly used frameworks mostly address the first three goals: test execution, regression testing, and resilience. They do not address the most labor-intensive tasks: preparing test cases, possibly in a minimized form, and interpreting test results. Without progress on these issues, testing confronts a paradox: While the growth of computing power should enable us to perform ever more exhaustive tes ...

Assignment 1 Week 2.docx1Assignment 1 Topic Selection.docx

sherni1

Software engineering practices and software quality empirical research results

Nikolai Avteniev

IRJET- A Detailed Analysis on Windows Event Log Viewer for Faster Root Ca...

IRJET Journal

Using Fuzzy Clustering and Software Metrics to Predict Faults in large Indust...

IOSR Journals

IOSR Journal of Computer Engineering (IOSR-JCE) is a double blind peer reviewed International Journal that provides rapid publication (within a month) of articles in all areas of computer engineering and its applications. The journal welcomes publications of high quality papers on theoretical developments and practical applications in computer technology. Original research papers, state-of-the-art reviews, and high quality technical notes are invited for publications.

A Review on Software Fault Detection and Prevention Mechanism in Software Dev...

iosrjce

F017652530

IOSR Journals

In the article the question of use of the static code analyzers in modern parallel program development processes is considered. Having appeared in 70-80s as an addition to compilers, the static analyzers stopped to be popular with the developers in 90s. The reason was probably the increase of the errors diagnostics quality by the compilers. But in 2000s the interest to the static code analyzers started to increase again. It is explained by the fact that new static code analyzers were created, which started to detect quite difficult errors in programs. If the static code analyzers of the past made it possible, for example, to detect an uninitialized variable, modern static code analyzers tend to detect an unsafe access to data from several threads. The modern tendency of static code analyzers development became their use for diagnosing errors in parallel programs. In the work the situations are considered, where the use of such tools makes it possible to considerably simplify the process of creating parallel program solutions.

Adaptation of the technology of the static code analyzer for developing paral...

PVS-Studio

IRJET- Data Reduction in Bug Triage using Supervised Machine Learning

IRJET Journal

Software reliability

Anand Kumar

With the rise of agile development, software teams all over the world embrace faster release cycles as *the* way to incorporate customer feedback into product development processes. Yet, faster release cycles imply rethinking the traditional notion of software quality: agile teams must balance reliability (minimize known defects) against agility (maximize ease of change). This talk will explore the state-of-the-art in software test automation and the opportunities this may present for maintaining this balance. We will address questions like: Will our test suite detect critical defects early? If not, how can we improve our test suite? Where should we fix a defect? (Keynote for the SHIFT 2020 and IWSF 2020 Workshops, October 2020)

Finding Bugs, Fixing Bugs, Preventing Bugs — Exploiting Automated Tests to In...

University of Antwerp

An Empirical Comparison of the Development History of CloudStack and Eucalyptus

Ahmed Zerouali

Christopher N. Bull History-Sensitive Detection of Design Flaws B ...

butest

Week1.pptx

MarriamNawaz

Issue management is a costly part of software development. In large projects, the continuous inflow of issue reports contributes to the information overload in a project, i.e., "a state where individuals do not have time or capacity to process all available information". In issue triaging, an initial step in issue management, a developer must be able to overview existing issue reports and easily navigate the software engineering project landscape. In this presentation, we present support for two work tasks involved in issue management: 1) issue assignment and 2) change impact analysis. We use machine learning to harness the ever-growing number of issue reports, by training recommendation systems on previous issues. Our industrial evaluations on 50,000+ issue reports in two large software development organizations indicate that automated issue assignment performs in line with current manual work. Moreover, we present how traceability from already resolved issue reports to various artifacts can be reused to jump start change impact analyses for newly submitted issues. Finally, we speculate on future ways to tame information overload into helpful software engineering recommendations.

Automation in the Bug Flow - Machine Learning for Triaging and Tracing

Markus Borg

Embedded software static analysis_Polyspace-WhitePaper_final

TAMILMARAN C

Chapter 1-Object Oriented Software Engineering.pptx

aroraritik30

The software execution process is tracked with event logs. The event logs are used to maintain the execution process flow in a textual log file. The log file also manages the error values and their source of classes. The error values are used to analyze the failure of the software. The data mining methods are used to evaluate the quality and software failure rate analysis process. The text logs are processed and data values are extracted from the data values. The data values are mined using the machine learning methods for failure analysis. The service error, service complaints, interaction error and crash errors are maintained under the log files. The events and their reactions are also maintained under the log files. Software termination and execution failures are identified using the log details. The log file parsing process is applied to extract data from the logs. The associations rule mining methods are used to analyze the log files for failure detection process. The system uses the Weighted Association Rule Mining (WARM) scheme to fetch failure rate in the software execution flow. The system improves the failure rate detection accuracy in WARM model.

Association Rule Mining Scheme for Software Failure Analysis

Editor IJMTER

Duplicate Bug Reports are widely considered harmful, adding additional burden on developers, and holding up software development processes. 10 Years ago we demonstrated that duplicate reports contain valuable additional information that helps developers get their jobs done faster and better. Thus duplicate reports should not be thrown away, but instead merged with their original reports to make that helpful information available to practitioners. This talk is a 10 year retrospective.

10 Year Impact Award Presentation - Duplicate Bug Reports Considered Harmful ...

Nicolas Bettenburg

Introduction to Software Engineering

Rizwan411667

Presentation

Zachary Ratliff

Similar to SFSCon19 - Kristian Schwienbacher - Custom error and event tracking for Ember js apps (20)

Assignment 1 Week 2.docx1Assignment 1 Topic Selection.docx

Software engineering practices and software quality empirical research results

IRJET- A Detailed Analysis on Windows Event Log Viewer for Faster Root Ca...

Using Fuzzy Clustering and Software Metrics to Predict Faults in large Indust...

A Review on Software Fault Detection and Prevention Mechanism in Software Dev...

F017652530

Adaptation of the technology of the static code analyzer for developing paral...

IRJET- Data Reduction in Bug Triage using Supervised Machine Learning

Software reliability

Finding Bugs, Fixing Bugs, Preventing Bugs — Exploiting Automated Tests to In...

An Empirical Comparison of the Development History of CloudStack and Eucalyptus

Christopher N. Bull History-Sensitive Detection of Design Flaws B ...

Week1.pptx

Automation in the Bug Flow - Machine Learning for Triaging and Tracing

Embedded software static analysis_Polyspace-WhitePaper_final

Chapter 1-Object Oriented Software Engineering.pptx

Association Rule Mining Scheme for Software Failure Analysis

10 Year Impact Award Presentation - Duplicate Bug Reports Considered Harmful ...

Introduction to Software Engineering

Presentation

More from South Tyrol Free Software Conference

The complexity of agricultural droughts requires a consistent, reliable, and systematic method for monitoring and reporting. Amongst the various indices used to monitor this phenomenon, the soil moisture anomaly has been proven to be a more reliable predictor. However, the datasets required for computing this index are often large and computationally demanding. To address this challenge, we have developed SMODEX, a Python package that enables scalable, fast, and open-source standard-compliant computation and visualization of soil moisture anomalies. SMODEX simplifies the computation and visualization of time-series for soil moisture and soil moisture anomalies from high-dimensional climate datasets. It allows for quick and easy parallelization of the computation on a daily, weekly, and monthly timescale. Additionally, SMODEX implements a straightforward workflow for automating the use of FAIR (Findable, Accessible, Interoperable, and Reusable) principles in producing and sharing outputs by leveraging the open source STAC API. The package is extendible and provides information on how to contribute to the project, test suites, test coverage, and a use case for the South Tyrol region, all provided in the package repository. In the future, additional agricultural drought indices and indicators would be included to serve to even larger community of researchers, policy makers, and individual users.

SFSCON23 - Rufai Omowunmi Balogun - SMODEX – a Python package for understandi...

South Tyrol Free Software Conference

The Open Hardware PowerPC Notebook designed around GNU/Linux will be showed at NOI Techpark. We had presented here its motherboard design in 2018. We will updates regarding last developments for u-boot AMD video drivers, re-design of heat pipes, and CE test certification process. We will give future availability milestones of this notebook and details regarding the GNU/Linux distributions or other OS that could runs on it.

SFSCON23 - Roberto Innocenti - From the design to reality is here the Communi...

South Tyrol Free Software Conference

Tracking aeroplanes in real time with Open Source Software is possible. Aircrafts must continuously send their current flight parameters to air traffic controllers on the ground and to other aircrafts. This generates a lot of data, especially when planes are being tracked by multiple sensors. The Open Data Hub on the other hand offers a great backbone for data storing and processing, where the correct datasets have to be identified and filtered. After all transformation on the data is done, it will be exposed via API to be further used by a web application. Bringing together sensor generated data, the Open Data Hub and custom web applications, is a showcase on how the Open Data Hub can be used as a service: OaaS.

SFSCON23 - Martin Rabanser - Real-time aeroplane tracking and the Open Data Hub

South Tyrol Free Software Conference

The transition from Web 2.0 to Web 3.0 has fueled the need for a secure and decentralized cloud storage solution for digital assets. Web 2.0 was characterized by centralized platforms where user data was under the control of companies. In contrast, Web 3.0 aims to empower individuals and foster a decentralized web that supports and benefits the Free Software and Open Data Communities. Blockchain technologies facilitate seamless collaboration and interoperability among diverse stakeholders in the Free Software and Open Data communities. Developers can establish open and transparent ecosystems where data can be shared, verified, and integrated across multiple platforms. Beez, with its own blockchain infrastructure, offers a secure and transparent platform for digital asset exchanges, bolstering transaction integrity and trust. By distributing data across a network of nodes, Beez ensures security and mitigates the risk of single points of failure. Users retain control over their data, safeguard their privacy, and can take advantage of the incentive mechanisms offered by blockchain networks. During our presentation, we will explore the role of AI within Beez's ecosystem, facilitating accelerated data processing, correlation, and intelligent automation. AI unlocks valuable insights from blockchain data, and we will touch upon the use of Inductive Logic Programming (ILP) to enhance programming performance. The integration of Blockchain and AI technologies holds great potential for advancing the safety and efficiency of the Open Data ecosystem. By combining decentralized data storage, trust-building mechanisms, and intelligent data processing, Beez is paving the way for a more secure, transparent, and user-centric digital landscape.

SFSCON23 - Marianna d'Atri Enrico Zanardo - How can Blockchain technologies i...

South Tyrol Free Software Conference

We are becoming more and more dependent on the Internet for our work, education, communication, personal relations and entertainment. Our digital devices conquered an unprecedented level of importance in our life. However, we are facing a loss of control over our smartphones, tablets and other devices for internet connection. It's time to resolve monopolies and re-establish democratic control over the technology we most depend upon. This talk will present the challenges end-users are facing to get more control over their devices and how Free Software is key for a consumer re-empowerement. The talk will present real-life examples of policy demands against gatekeepers on digital markets, such as the struggle for Router Freedom in the last years and how Device Neutrality can serve as an important instrument for pushing forward end-user-oriented digital policies.

SFSCON23 - Lucas Lasota - The Future of Connectivity, Open Internet and Human...

South Tyrol Free Software Conference

MOSH and MOAH are the abbreviation of two groups of chemical compounds found in mineral oils. “MOSH” stands for Mineral Oil Saturated Hydrocarbons. MOAH stands for Mineral Oil Aromatic Hydrocarbons. Both of them are under European deeply evaluation because there are two food contaminants. According to the current state of scientific knowledge, there is no sufficient toxicological evidence to prove a health risk to humans from saturated mineral oil fractions (MOSH). Meanwhile, MOAH are suspected to be carcinogenic (especially PAH-like compounds with 3-7 ring systems), therefore their levels in food should be reduced according to the ALARA-principle (as low as reasonably achievable). Gruppo FOS with CNR ( MOSH and MOAH are the abbreviation of two groups of chemical compounds found in mineral oils. “MOSH” stands for Mineral Oil Saturated Hydrocarbons. MOAH stands for Mineral Oil Aromatic Hydrocarbons. Both of them are under European deeply evaluation because there are two food contaminants. According to the current state of scientific knowledge, there is no sufficient toxicological evidence to prove a health risk to humans from saturated mineral oil fractions (MOSH). Meanwhile, MOAH are suspected to be carcinogenic (especially PAH-like compounds with 3-7 ring systems), therefore their levels in food should be reduced according to the ALARA-principle (as low as reasonably achievable). Gruppo FOS with CNR (Consiglio Nazionale delle Ricerche), Santagata 1907 and Enginius are searching the system for finding and trace their presence in the virgin and extra virgin olive oils by using open fingerprints methods, open hardware and open source blockchain and AI technologies.

SFSCON23 - Giovanni Giannotta - Intelligent Decision Support System for trace...

South Tyrol Free Software Conference

Up-to date measurements of surface meteorological variables are essential to monitor weather conditions, their spatio-temporal variability and the potential effects on a wide range of sectors and applications. Moreover, when included in continuous records of long historical observations spanning several decades, they become essential for assessing long-term climate variability and change locally and on a regional level. Automated pipelines capable of retrieving and processing near-real time meteorological data satisfy the primary prerequisites towards the development and advancement of effective and operational climate services. With a public and operational near real-time monitoring web platform in mind, we present automated pipelines to collect and process up-to-date daily temperature and precipitation records for Trentino South Tyrol (Italy) and surrounding areas, and to derive their spatially interpolated fields at sub-km scale. Our pipelines are composed by multiple steps including data download, sanity checks, reconstruction of missing daily records, integration into the historical archive, spatial interpolation and publication onto online FAIR catalogues as (openEO) “datacubes”. The different APIs, data formats and structure across the various data sources, and the need to merge the data onto harmonized meteorological layers, make this a typical case of the so-called Extract, Transform and Load (ETL) pipelines, and, in order to follow the principles of data reproducibility and Open Science, we embraced open-source automated workflow management through GitLab’s Continuous Integration / Continuous Development (CI/CD) capabilities. CI/CD workflows greatly help the management of the relatively complex graphs of tasks required for our climate application, ensuring seamless orchestration with thorough flow monitoring, application logs, transactions rollbacks, and exception handling in general. Native pipeline-oriented software development also fosters a clean separation of roles among the tasks, and a more modular architecture. This effectively reduces barriers to collaborative development and paves the way for robust operational climate services for researchers and decision makers in the face of the changing climate.

SFSCON23 - Elena Maines - Embracing CI/CD workflows for building ETL pipelines

South Tyrol Free Software Conference

The Open Science movement aims to increase the transparency, reproducibility and inclusiveness of academic research. One of its central goals is therefore to make research outputs broadly available, e.g., manuscripts (Open Access) or research data (Open Data). While software/code created in the course of scientific research is a key artifact of scientific research that is clear distinct from the latter two, it has until recently not received the same attention as manuscripts or data, although it follows its own set of paradigms. In this talk I will present an overview on how the core concepts of Free Software and the FAIR (findable, accessible, interoperable, reuseable) Principles intersect, what this means for managing code as research output and recent initiatives on the European level that will provide support for these issues.

SFSCON23 - Christian Busse - Free Software and Open Science

South Tyrol Free Software Conference

Software freedom can be defined in many ways but in legal terms it is squarely defined by a set of approved FSF and OSI software licenses. Yet everyone realizes that beyond these licenses the goal of software freedom and digital sovereignty cannot be achieved without the ability to master and create hardware components and systems - and beyond that, to rely on open digital infrastructure (servers, datacenters, and resources) . This talk will present the challenges around these topics and what we, collectively in Europe already do and can do to ensure our independence and our freedoms.

SFSCON23 - Charles H. Schulz - Why open digital infrastructure matters

South Tyrol Free Software Conference

EDP-portal is the access point to the Environmental Data Platform of Eurac Research since 2021 to achieve FAIRness of our datasets. It allows to publish data and metadata and provides APIs and web services for data access. In the last 2 years the EDP improved the findability and accessibility of the data collected throughout the curation of metadata that was improved with the DOI registration for datasets. The result is a higher metadata quality where the final user can easily find how to properly cite datasets with a persistent identifier. The portal itself and main data repositories are registered in FAIR-sharing portal with their own DOI. The SW components of the EDP are totally based on open source projects.

SFSCON23 - Andrea Vianello - Achieving FAIRness with EDP-portal

South Tyrol Free Software Conference

This lightning talk will explore the transformative potential of integrating Internet of Things (IoT) and Artificial Intelligence (AI) in Mass Customization (MC). There is a significant collective impact of these technologies on businesses, enabling the delivery of personalized products and exceptional customer experiences. Besides giving an overview of MC and the potential ways of integrating IoT and AI, the focus will be on the process of real-time data collection and facilitation of the customization process by IoT on one hand, and on the role of AI in data analysis and generation of personalized recommendations on the other hand. By presenting real-world case studies to demonstrate the practical implementation of IoT and AI in providing customized products and seamless customer experiences, attendees will gain insights into the future of customization and learn actionable strategies to effectively leverage IoT and AI.

SFSCON23 - Thomas Aichner - How IoT and AI are revolutionizing Mass Customiza...

South Tyrol Free Software Conference

SFSCON23 - Stefan Mutschlechner - Smart Werke Meran

South Tyrol Free Software Conference

As open source software becomes the foundation to build digital products, to run the backbones of ICT infrastructure and to ensure digital sovereignty and cyber resilience, both the technology as well as the communities that develop it inevitably move into the focus of regulators. The European Union is advancing a number of policy initiatives that regulate liability, cyber security, data handling and AI applications in digital products, among others. This is a challenge for the still quite decentralised and globally operating open source community. How could the open source community participate in legislative processes, and what may be the potential impacts of the upcoming regulation on the open source development process and community dynamics?

SFSCON23 - Mirko Boehm - European regulators cast their eyes on maturing OSS ...

South Tyrol Free Software Conference

SFSCON23 - Marco Pavanelli - Monitoring the fleet of Sasa with free software

South Tyrol Free Software Conference

AICS is the Italian Agency for Development Cooperation that started operating in 2016 with the ambition of aligning Italy with the main European and international partners in the commitment to development. KNOWAGE Labs are developing for AICS a platform that is probably unique in the world and will allow both the Agency and the public to access all the major indicators on the UN Sustainable Development Goals provided by international sources (World Bank, WTO, ILO..) and easily compare them. The solution will allow analysis to start from 3 different touch points: the infographic of SDG goals, the advanced search criteria, and the virtual assistant. Then, a customized dashboard will be provided to the user, allowing to further expand the analysis by interacting with charts, maps, tables, etc. This talk will show the state of art of the solution, highlighting objectives and expected results of the project, but also the new developments of KNOWAGE related to AI.

SFSCON23 - Marco Cortella - KNOWAGE and AICS for 2030 agenda SDG goals monito...

South Tyrol Free Software Conference

Interoperability is a core element of the ongoing digitalisation of Europe. With the Interoperable Europe Act, the EU is aiming to create a dedicated legal framework for interoperability and to enhance cross-border digital public services across the European Union. This talk will give an overview of the state of play of this proposed regulation in the ongoing EU legislative process, some of its flaws, and the important role that Free Software and its community can play in it.

SFSCON23 - Lina Ceballos - Interoperable Europe Act - A real game changer

South Tyrol Free Software Conference

How to sharpen the demand for public code across Europe and monitor progress with TEDective For six years, the Free Software Foundation Europe has been calling with a broad alliance for publicly funded software to be published as Free Software. This initiative has become a great success: Our demand "Public Money? Public Code!" has found its way into government strategy papers, party programs, as well as coalition treaties, and is being discussed in public administrations across Europe. At the same time, we see less progress than expected and vendor lock ins remain a crucial issue. Digital sovereignty is redefined bypassing Free Software. There is openwashing in publicly funded companies, and government projects in favour of Free Software remain empty words. Public statistics on the procurement of Free Software are largely unavailable. It is therefore no longer enough to promote the idea of "Public Money? Public Code!". We as the Free Software community should be even more vigilant than before – continuing to praise small steps in the right direction, but pointing out and criticising omissions and lack of implementation. We should become more like watchdogs. In the talk we will look at some examples of lack of implementation of Free Software policies. We will discuss how we, as civil society, can identify such shortcomings and how to deal with them. We will present our initiative TEDective – a free-software solution that makes European public procurement data explorable for non-experts, aiming to provide you with a powerful tool to keep an eye on real progress towards "Public Money? Public Code!" across Europe.

SFSCON23 - Johannes Näder Linus Sehn - Let’s monitor implementation of Free S...

South Tyrol Free Software Conference

The Internet today forms the backbone of the digitisation of our society and economy. As connectivity increases, the boundaries between the real and digital world get increasingly blurred. However, there has been an erosion of trust in the Internet following revelations about the exploitation of personal data, large-scale cybersecurity and data breaches, and growing awareness of the proliferation and impacts of online disinformation. What can be done to improve the Internet as a platform for future generations? What initiatives are currently in place to build key technological blocks of an Internet that supports human-centric values, such as privacy, security, and inclusion, while reflecting the values and norms all citizens should enjoy in Europe? This talk will explore why the current state of the internet must be re-imagined and re-engineered in order to support healthy societies, the existing European Commission initiative to work towards doing so, and the role of Free Software in accomplishing these goals.

SFSCON23 - Gabriel Ku Wei Bin - Why Do We Need A Next Generation Internet

South Tyrol Free Software Conference

2023 saw the launch, after a long and well-structured revision and development process, all based on a fruitful collaboration between several departments of the Autonomous Province of Bolzano, most of the township in South Tyrol, Informatica Alto Adige (SIAG - Technical partner) and the Consortium of Municipalities of the Province of Bolzano, of the new version of the integrated geographic data management system IGis Maps. In use for years in South Tyrol, has in the Consortium one of its most enthusiastic contributors and supporters. The very first version was released about eight years ago and its implementation was based on the idea of creating a multi-purpose GIS management system that could support different types of users, that was highly customizable, and, above all, that could be widely shared among the various management entities, both public and private, present within our territory. After years of use and ad-hoc developments, we can finally present the new version of the IGis Maps system, which incorporates all the technical and technological improvements we realized the system needed. It was not just a major update together with new functionalities combined inside the previous software structure, but a true re-engineering that led, among other things, to a new and more efficient user interface, a major advancement regarding the internal security, an optimization and improvement of the entire editing section as well as an optimization of the section regarding the automatic geo-processes. A mobile version is currently under development to better support any field activities, for which a very powerful option will be included, the possibility of creating special work sessions in off-line mode so as to be able to operate even in areas without a proper cellular line network coverage. Other very important peculiarities concern that the system is developed using a totally free software code and infrastructure, that a detailed documentation has been produced to ensure sustainability to any further future evolution, even in case of technical partner turnover, and finally, that by taking advantage of the high standards and levels of security access can be guaranteed to any type of user. From professional users, through dedicated access and qualifications or, using the ordinary SPID, to the private citizen. We will show examples of how different types of users and stakeholders now permanently use the system for the management of a variety of tasks related to their activities, and how it was possible to customize IGis Maps to create visualization and data management contexts that best meet their needs. We will also present a related project concerning the updating and the correction of the new technical basal cartography, built upon the new Basic Core specification, achieved through the automatic conversion implemented by the SIAG team starting from the previous National Core cartography. With the new IGis Maps it was possible to create an a

SFSCON23 - Edoardo Scepi - The Brand-New Version of IGis Maps

South Tyrol Free Software Conference

KNOWAGE is the open source analytics and business intelligence suite made in Italy. KNOWAGE aims to provide company and organizations with analytical capabilities to exploit data to increase their efficiency and sustainability. Also thanks to the open source community support, the suite is constantly evolving combining the reliability of the most popular business intelligence solutions with the security and the transparency guaranteed by open source. This talk will show the last year advancements and new features towards a more mobile, accessible and user-friendly product, focusing on the newly rewritten dashboarding tool.

SFSCON23 - Davide Vernassa - Empowering Insights Unveiling the latest innova...

South Tyrol Free Software Conference

More from South Tyrol Free Software Conference (20)