With increasing popularity of Deep Learning (DL) software development, code quality issues arise in DL software development. Code smell is one of the factors which reduce the quality of source code. Several previous studies investigated the prevalence of code smell in DL software systems to evaluate the quality of DL source code. However, there is still a lack of understanding of the awareness of individual DL developers in code smell. To more deeply understand the code smell risk in DL software development, it is needed to investigate the code smell awareness of DL developers. In this paper, we present an empirical study on code smell practices of DL developers. Specifically, we performed a quantitative analysis on code smell introduction and removal practices of DL developers. We collected a dataset of code smell introduction and removal history of DL developers from several open source DL software GitHub repositories. We then quantitatively analyzed the collected dataset. As a result of the quantitative analysis, we observed the following three findings on code smell introduction and removal practices of DL developers. First, DL developers tend to perform code smell introduction practice more than code smell removal practice. Second, DL developers have slightly broader code smell introduction scope than code smell removal scope. Third, regular and irregular DL developers have less difference in both code smell introduction and removal practices. The results indicate that DL developers have very poor awareness on code smell risk. Our findings suggest that DL software development project managers should provide a helpful guideline that makes DL developers actively participate code smell removal tasks.

JavaScript code blocks on Stack Overflow (SO) are often used in software projects. However, little is known about the issue of rule violation risk in SO JavaScript code blocks. Rule violation is one of the factors which degrades the quality of Java Script code. To prevent prevalence of rule violation by reusing SO JavaScript code blocks, it is needed to investigate how secure SO JavaScript code blocks are against rule violation. To examine the issue, we performed a quantitative analysis to investigate how many rule violations are, when first rule violation occurs and what is the trend of rule violations in evolution history of Stack Overflow JavaScript code blocks. We collected SO posts related to JavaScript and extracted the code blocks contained in the posts. By using ESLint, the most popular rule violation detection tool, we identified rule violations in the evolution history of our target code blocks. We then performed quantitative analyses on the identified rule violations. As the results of the analyses, we found that: (1) 60% of the studied code blocks evolve with any rule violations. (2) In the rule violated code blocks, 92% of the code blocks get first rule violation occurrence in the early phase of their evolution. (3) 80% of the rule violated code blocks never fix existing rule violations during their evolution. Our findings suggest that SO should provide a policy which can reduce rule violations in submitted JavaScript code blocks. The findings can also make SO users attend to rule violations when reusing SO JavaScript code blocks.

As it has been recently proven that the public key-based RSA algorithms that are currently used in encryption can be unlocked by Shor’s algorithm of quantum computers in a short time, conventional security systems are facing new threats, and accordingly, studies have been actively conducted on new security systems. They are classified into two typical methods: Post Quantum Cryptography (PQC) and Quantum Key Distribution (QKD). PQC aims to design conventional cryptography systems in a more robust way so that they will not be decrypted by a quantum computer in a short time whereas QKD aims to make data tapping and interception physically impossible by using quantum mechanical characteristics. In this paper, we design a quantum key management system, which is most crucial for constructing a QKD network and analyze the design requirements to apply them to Korea Research Environment Open NETwork (KREONET). The quantum key management system not only manages the lifecycle, such as storage, management, derivation, allocation, and deletion of the symmetric key generated in QKD but also enables many-to-many communication in QKD communication based on the key relay function and P2P communication to overcome the limitation of distance, which is a disadvantage of QKD. We have validated the designed quantum key management system through simulations to supplement the parts that were not considered during the initial design.

GitHub and Stack Overflow are often used together for software development. GH-SO users, who use both GitHub and Stack Overflow, contribute to the development of various software projects in GitHub and share their knowledge and experience on software development in Stack Overflow. To widely understand the interests and working habits of GH-SO users on software development, it is important to investigate how GH-SO users utilize GitHub and Stack Overflow. In this paper, we present an exploratory study on GitHub commit and Stack Overflow post activities of GH-SO users. Specifically, we investigate the working habits of GH-SO users on GitHub commit and Stack Overflow post activities. We randomly selected 19,756 of GH-SO users as our target sample and collected 2,819,483 and 2,147,317 of commit activity data and post activity data of the GH-SO users. We then categorized the collected commit and post activity datasets into specific categories on programming languages and statistically analyzed the categorized commit and post activity datasets. As the results of our analysis, we found the following: (1) The overall commit and post activities of the GH-SO users share some similarity. (2) The commit activities gradually change while the post activities drastically change over time. (3) The commit activities of the GH-SO users are broadly distributed while the post activities are narrowly distributed and the commit activity can be better predictor for post activity. (4) The commit activity of the GH-SO users tends to be performed prior post activity. We believe that our findings can contribute to finding the ways to better support commit and post activities of GitHub and Stack Overflow users.

In our present technological age, most manual and semi-automated tasks are being automated for efficient productivity or convenience. In particular, industrial sites are rapidly being automated to increase productivity and improve work efficiency. However, while networks are increasingly deployed as an integral part of the automation of industrial processes, there are also many resultant dangers such as security threats, malfunctions, and interruption of industrial processes. In particular, while the security of business networks is reinforced and their information is not easily accessible, intruders are now targeting industrial networks whose security is relatively poor, wherein attacks could directly lead to physical damage. Therefore, numerous studies have been conducted to counter security threats through network traffic monitoring, and to minimize physical loss through the detection of malfunctions. In the case of industrial processes, such as in nuclear facilities and petroleum facilities, thorough monitoring is required as security issues can lead to significant danger to humans and damage to property. Most network traffic in industrial facilities uses proprietary protocols for efficient data transmission, and these protocols are kept confidential because of intellectual property and security reasons. Protocol reverse engineering is a preparatory step to monitor network traffic and achieve more accurate traffic analysis. The field extraction method proposed in this study is a method for identifying the structure of proprietary protocols used in industrial sites. From the extracted fields, the structure of commands and protocols used in the industrial environment can be derived. To evaluate the feasibility of the proposed concept, an experiment was conducted using the Modbus/TCP protocol and Ethernet/IP protocol used in actual industrial sites, and an additional experiment was conducted to examine the results of the analysis of conventional protocols using the file transfer protocol.

As personalized digital healthcare is attracting attention, recognition of data sovereignty has been essential in healthcare data exchange. Dynamic consent is a new approach that patients enable to tailor and manage their consent. It expands patients' autonomy by giving the right to intervene in the healthcare data exchange process. This study proposes a Coded Dynamic Consent framework based on blockchain. We developed five design criteria to support dynamic consent and represent consent preferences as a coded format. The framework ensures data sovereignty and autonomy of a data provider so that patient-centered healthcare data exchange environment could be achieved.

Medication errors are one of the problems to be solved not only in Korea but also across the world. To prevent a medication accident in advance, the comprehensive management of individual medication history is essential. Currently, in the hospital-centric Personal Health Record system, if the patient is prescribed medicines at multiple hospitals, he/she needs to go to the hospital where a medicine was prescribed to get the corresponding needs such as prescription or medical certification to record the prescription information on his/her own. Alternatively, the patient needs to record the prescription information on his/her own. This is very time consuming, inconvenient, and even worse, not reliable method because of input errors. Therefore, in this study, we developed Patient-centric medication history recording system using blockchain, which is directly capturing QR code printed on the envelop by drug store based on prescription. All the information are stored using the hash value of the data in a blockchain and it prevents the tampering of the data. In addition, this system adopted Fast Healthcare Interoperability Resources, which is the international health information exchange standard, as way to improve interoperability.

The rapid increase in the elderly population is increasing the demand for effective elderly health care as the demand for health care for the elderly increases. Existing medical services have relied on hospital or genetic information to improve the health of the elderly. However, recent studies have shown that the health status of older people is more affected by social determinants of health (SDoH) than medical and genetic information. Therefore, in order to understand the health status of the elderly in detail, it is necessary to consider SDoH. However, integrating SDoH into a hospital EHR system has a problem that it is difficult to share SDoH between hospitals because the EHR system uses a different format for each hospital. Therefore, if the elderly are to be seen at another hospital, compatibility should be supported so that SDoH can be referred to. This study utilizes SDoH measurement tools such as smoking, drinking, physical activity, social function, etc. used by KFACS, an institution that identifies and analyzes the causes and effects of senility in elderly people. We aim to use SDoH to comprehensively assess the health status of older people and to use it for successful senior health care at an older age. In addition, it builds a system that is profiled with international standard technology, FHIR Resource, and stored and managed by FHIR server.

Web applications are becoming more and more important with the rapid increase in the web environment. The maintenance of web applications is also one of the main problems in that area. Traditional maintenance approach can no longer be applied to web applications, because of the specific characteristics of web applications. In this paper, a complexity measure for web application, WCOX, is proposed. It is related to the maintenance efforts. WCOX is defined using the entropy theory and a web model extracted by static analysis. The entropy of software is regarded as an average information quantity of the software and it means the aging and degradation of the software. Most of the existing web complexity measures are simply based on count, which means that they only show limited viewpoints of a system. Since WCOX is concerned with an information quantity and understandability, it not only represents the structural complexity, but can also be used as a practical maintenance indicator. Experimental results demonstrate the applicability and effectiveness of the proposed measure.

Computing environments are evolving from mainframe systems to distributed systems. Stand-alone programs that have been developed using object-oriented technology are not suitable for these new environments. However, programs that have been developed using a component-based technology have proven to be more suitable for the new environments due to their granularity and reusability. In this paper, we present a reengineering process for migrating from an object-oriented legacy system to a component-based system. This process consists of two steps: first, to create basic components with the relationship of their constituent classes, second, to refine components using the metrics we propose.