Costas Voliotis (CodeWeTrust) – An AI-driven approach to source code evaluation

•

0 j'aime•51 vues

Codiax

www.codiax.co

Technologie

Source code Inspection
An AI-driven approach to source
code quality evaluation
BI focusing on the efficiency of SDLC
Costas Voliotis
5/13/21
1

Source code Inspection
“The ability for engineering teams to deliver high
quality software at velocity is the difference between
companies that gain a competitive edge versus those
that fall behind” Undo CEO, Barry Morris
Today, every company is a software company

Source code Inspection
The Source Code Quality? What is this?

Source code Inspection
Why we should care about it?

Source code Inspection
the sooner the cheaper!

Source code Inspection
… quick take-away!

Source code Inspection
… we propose an AI-driven process that helps
reduce the technical debt burden
Time, and resources are limited ...

Source code Inspection
AI-driven SDLC management
8

Source code Inspection
The c2m SQA evaluation process

Source code Inspection
… digging a little bit deeper
10
Reduce the cost
maintenance
Reduce the cost of
integration
Improve the defence
against web attacks.
Simplify License
Compliance
resolution
Classify the level of maintenance required per version (Classiﬁcation)
Reduce the size of code requires maintenance (Clustering)
Optimise and Standardize maintenance process (Rules Based Workﬂows)
Detect Version Similarities (K-Means-), Suggest Eliminate/Merge of
versions ( Recommendations), Reduce False-Positives, (Learning),
Classify tech stacks (Classification) reduce downtime (Predictive analytics)
Detect Vulnerabilities(Pattern Matching)-Identify Hotspots (Rule based
recommendations). Classify Business Risk (Rule based/Classification)
Identify vulnerabilities based on dependencies (Learning/Matching)
Detect Licenses (Name matching/Pattern Matching), Licenses Resolution
(Rules based recommendations). Classify Business Risk (Rule
based/Classiﬁcation). Reduce false-positives (Learning)
AI ML

Source code Inspection
How does c2m look like? Dashboard view

Source code Inspection
Issues distribution-Interactive heatmaps

Source code Inspection
Technical Reports and Code Viewer
Web Interface -
visualizes all the
aspects of SW
quality
Code Viewer -
enables detailed
inspection of the
ﬁndings

Source code Inspection
Our vision:Optimization of the SDLC’s efﬁciency
Input : dev team alignment +
Continuous SQA
assessment
Process : Federation, SQA
part of CI/CD + Flexibility
Monitoring + Learning
Output : Proﬁtable,
sustainable, ﬂexible, evolving
sw development process
14

Source code Inspection
Resources
Code we trust website: https://www.codewetrust.com/
Freemium Server +
CI/CD download page: https://www.codewetrust.com/download
Live demo / test cases : https://www.codewetrust.com/test-cases

Contenu connexe

Similaire à Costas Voliotis (CodeWeTrust) – An AI-driven approach to source code evaluation

Agile Independent Verification & Validation Body of Knowledge v1.1

commercescape

Maturity of-code-mgmt-2016-04-06

Bogusz Jelinski

Software Quality Architecture And Code Audit

Xebia IT Architects

Oak Systems - When you build Software, we build Quality in it

Oak Systems

MOND Semantics Integration

Sales Emea

ISG Agile Enterprise Summit presentation October 28, 2019 Allowing teams autonomy is a key principle in digital and agile organisations, whether we call them product teams, Scrums teams, release trains, or squads it comes down to the same thing - self-directed teams. However, autonomy is fast becoming a major problem for many organisations, with issues of alignment and governance. In this session we will focus on measuring the maturity of teams to assess the level of autonomy they can be given, and how measurement can be used to Gamify the process to encourage teams to strive for greater maturity. Key issues - Why is autonomy becoming such a problem, and why are so many senior executives ignoring it? - How can we assess agile and DevOps team maturity and align it to a level of autonomy they can be trusted with? - How can system of systems governance processes be applied to autonomous agile teams to measure enterprise effectiveness?

Agile Team Autonomy – Don’t Just Give It Away Make Teams Earn It

Consortium for Information & Software Quality (CISQ)

Rhapsody Software

Bill Duncan

Learn how to accelerate your cloud migration: https://www.castsoftware.com/use-cases/cloud-readiness-and-migration Cloud migration is table stakes for digital transformation initiatives. The driving factors to get to the cloud vary from organization to organization...for some, it's about cost savings and for others, it's about creating smarter apps that support continuous innovation. IaaS – For organizations looking to reduce costs, Infrastructure as a Service (IaaS) is a great option. IaaS is sometimes described as "Lift and Shift" – when applications are moved from an existing infrastructure to a cloud infrastructure. This helps save money by reducing the hardware needed to run those applications and providing flexibility to adjust infrastructure requirements on-demand. PaaS – For organizations looking for smarter deployments that facilitate digital transformation, streamline the delivery of new feature and support emerging technologies like IoT and Machine Learning, Platform as a Service (PaaS) is a more suitable option. While a considerable percentage of new application development is done with a cloud-first mentality, most legacy software is not optimized for a cloud environment. So now the question becomes, how do I get my existing application portfolios ready for cloud migration so I can take full advantage of new technologies and processes Software Intelligence-Based Cloud Readiness So you’re ready for PaaS, but before you begin to assess the technical and structural requirements of the migration, you must also determine the business drivers for cloud and the desired outcomes. Setting a cloud migration roadmap that is based on comprehensive Software Intelligence that considers both business drivers and technical features of your applications is a critical first step. Learn how to accelerate your cloud migration: https://www.castsoftware.com/use-cases/cloud-readiness-and-migration

Cloud Migration: Azure acceleration with CAST Highlight

CAST

50% of the Fortune 500 companies from 2000 are gone! Facebook just became more valuable than Walmart! Next Generation Giants are being created every day and they are standing on the shoulders of technology and new business models to get there. Billions of connected people, apps and things are leading to the creation of new digital communities and ecosystems. Next Generation Giants harness API enabled businesses models to deliver hyper-relevant, orchestrated communications to customers. Smart things change how we experience the world. Deep insights power decisions for internal and external users. This session will answer questions such as What’s the right alchemic formula of integrating, aggregating, mashing, and stacking to fuel the innovation necessary to meet the needs of these Next Generation Giants so that we may build one? What expectations and experiences will our new digital neighbors demand? How will we work dynamically in secure cyber communities? How do we continue to disrupt how it has always been done?

WSO2Con USA 2015: The Needs of Next Generation Giants

WSO2

Introduction to the Microsoft Azure Cloud.pptx

EverestMedinilla2

[India Merge World Tour] Coverity

Perforce

2018 Pivotal DevOps Day_Pivotal 소개 및 세션 아젠다 소개

VMware Tanzu Korea

2018 Pivotal DevOps Day_마이크로서비스 전환 방법론과 사례

VMware Tanzu Korea

Case Study: Automating Code Reviews for Custom SAP ABAP Applications with Vir...

Virtual Forge

Apidays Paris 2023 - Software and APIs for Smart, Sustainable and Sovereign Societies December 6, 7 & 8, 2023 API Security Challenges for Cloud-native Software Architects Pierre Versali, Cloud-native Software Architect | Principal Consultant at Devoteam ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Paris 2023 - API Security Challenges for Cloud-native Software Archit...

apidays

Building high volume software factories is all about combining workflow and automation functionality to ensure that each application development team is able to repeatedly deliver secure, high quality, feature rich iterations and operate them on scalable, highly available cloud infrastructure. Attendees will learn how GitLab and Amazon Web Services (AWS) integrate together to provide best of breed development workflows and rock solid cloud application infrastructure. Overview: Hard lessons for CI / CD from how Ford automated automobile manufacturing. GitLab CI / CD is a factory toolkit for software manufacturing. GitLab CI/CD accelerates time to automation maturity with premade assembly lines and components. GitLab CI/CD accelerates AppSec (DevSecOps) time to maturity with premade Security assembly lines. How to have a tortured transformation to software manufacturing. GitLab rich CI / CD workflows ensure cross-team (Dev, Ops, Sec) collaborative engagement and compliance with change gating controls with auditability. GitLab CI / CD integrates with AWS infrastructure with multiple possible points of integration.

Optimize your CI/CD with GitLab and AWS

DevOps.com

Gary Gruver, Vice President of QE, Release and Operations, Macy's, at DevOps Enterprise Summit 2014 Transforming Traditional Enterprise Software Development Processes by applying DevOps and Agile Principles at Scale How to transform traditional Enterprise Software development processes by applying DevOps and Agile principles at scale instead of the more typical approach of scaling scrum. This approach starts with clarity in business objectives for the transformation. Next it highlights the importance of creating an Enterprise level continuous improvement process, which is very different from an aggregation of team level continuous improvement process. One of the most important steps for creating an Agile Enterprise is keeping code releasable across the Enterprise. This presentation will go deep on the fundamentals of Devops, CI, and CD based on what has been found to be successful transforming legacy organizations. The final step will provide a framework for re-thinking the planning process to provide an Enterprise level backlog and long-term commitments.

DOES14 - Gary Gruver - Macy's - Transforming Traditional Enterprise Software ...

DevOps Enterprise Summmit

Care with Source2VALUE

meijerandre

DOES14 - Gary Gruver - Macy's - Transforming Traditional Enterprise Software ...

Gene Kim

Part5 - enforcing coding standard and best practices with jas forge v1.0

Jasmine Conseil

Similaire à Costas Voliotis (CodeWeTrust) – An AI-driven approach to source code evaluation (20)

Agile Independent Verification & Validation Body of Knowledge v1.1

Maturity of-code-mgmt-2016-04-06

Software Quality Architecture And Code Audit

Oak Systems - When you build Software, we build Quality in it

MOND Semantics Integration

Agile Team Autonomy – Don’t Just Give It Away Make Teams Earn It

Rhapsody Software

Cloud Migration: Azure acceleration with CAST Highlight

WSO2Con USA 2015: The Needs of Next Generation Giants

Introduction to the Microsoft Azure Cloud.pptx

[India Merge World Tour] Coverity

2018 Pivotal DevOps Day_Pivotal 소개 및 세션 아젠다 소개

2018 Pivotal DevOps Day_마이크로서비스 전환 방법론과 사례

Case Study: Automating Code Reviews for Custom SAP ABAP Applications with Vir...

Apidays Paris 2023 - API Security Challenges for Cloud-native Software Archit...

Optimize your CI/CD with GitLab and AWS

DOES14 - Gary Gruver - Macy's - Transforming Traditional Enterprise Software ...

Care with Source2VALUE

DOES14 - Gary Gruver - Macy's - Transforming Traditional Enterprise Software ...

Part5 - enforcing coding standard and best practices with jas forge v1.0

Plus de Codiax

Dr. Laura Kerber (NASA’s Jet Propulsion Laboratory) – Exploring Caves on the ...

Codiax

Dr. Lobna Karoui (Fortune 500) – Disruption, empathy & Trust for sustainable ...

Codiax

Luka Postružin (Superbet) – ‘From zero to hero’ in early life customer segmen...

Codiax

Gema Parreno Piqueras (Apium Hub) – Videogames and Interactive Narrative Cont...

Codiax

Janos Puskas (Accenture) – Azure IoT Reference Architecture for enterprise Io...

Codiax

Adria Recasens, DeepMind – Multi-modal self-supervised learning from videos

Codiax

Roelof Pieters (Overstory) – Tackling Forest Fires and Deforestation with Sat...

Codiax

Javier Fuentes Alonso (Uizard) – Using machine learning to turn you into a de...

Codiax

Emeli Dral (Evidently AI) – Analyze it: production monitoring for machine lea...

Codiax

Matthias Feys (ML6) – Bias in ML: A Technical Intro

Codiax

Christophe Tallec, Hello Tomorrow – Solving our next decade challenges throug...

Codiax

Sean Holden (University of Cambridge) - Proving Theorems_ Still A Major Test ...

Codiax

Olga Afanasjeva (GoodAI) - Towards general artificial intelligence for common...

Codiax

Maciej Marek (Philip Morris International) - The Tools of The Trade

Codiax

Joanna Bryson (University of Bath) - Intelligence by Design_ Systems engineer...

Codiax

Jakub Langr (University of Oxford) - Overview of Generative Adversarial Netwo...

Codiax

Jakub Bartoszek (Samsung Electronics) - Hardware Security in Connected World

Codiax

Jair Ribeiro - Defining a Successful Artificial Intelligence Strategy for you...

Codiax

Cindy Spelt (Zoom In Zoom Out) - How to beat the face recognition challenges?

Codiax

Alexey Borisenko (Cisco) - Creating IoT solution using LoRaWAN Network Server

Codiax

Plus de Codiax (20)