Slides of February 2011 Java User Group in Lausanne dedicated to Software Quality Analysis Videos soon available on Parleys: http://parleys.com/#id=102931&st=4

1. Thursday February 10th, 2011
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique

2. The Good Old Way...
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 2

3. The JUGL Way
 A head-to-head live comparison
 But don’t expect any winner...
 A quick overview of the market
 The leading products (*)
 Showcased by experts
 An introduction to software assessment and software
quality management
 A first contact with vendors
 If you would like to start tomorrow...
(*) CAST, a clear leader, is missing. They unfortunately declined our invitation.
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 3

4. Tonight « Wrestlers »
Alan Perkins
Sales Engineering Manager EMEA
Chris Chedgey
CEO
Bogdan Czwartkowski
Professional Services Manager
Freddy Mallet
Co-director & co-founder
Henri Tremblay
Senior Architect
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 4

5. Their Mission
 No fluff just stuff
 A maximum of time dedicated to demos, 2-3 slides max.
 Have each vendor assess the same application
 An open-source application
 Select an application close to (y)our daily work
 A web application, not a framework
 All issues are interesting
 At all levels: code correctness, logic, architecture, performance...
 In all codes: Java code, DB code and schema, HTML/CSS...
 Detected in any ways, static or dynamic
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 5

6. The Target
“ IceScrumScrumJ2EE application
for using
is an
while keeping
the spirit of a collaborative
workspace
”
Scrum Alliance: www.scrumalliance.org IceScrum: www.icescrum.org
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 6

7. Some Background and Architecture
2005 IceScrum 1: Desktop application in Java / Swing
2008 IceScrum 2: Web application in Java / JSF
JSF / IceFaces
Tonight
Maven
Spring
Hibernate
Link to SVN repository on SourceForge
2010 IceScrum 3: Web application in Grails
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 7

8. Agenda
 Introduction: 5 minutes You are here
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend
 Headway
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 8

9. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar You are here
 Parasoft
 XDepend
 Headway
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 9

10. SONAR - Dashboard
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 10

11. SONAR - SQALE Quality Model
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 11

12. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft You are here
 XDepend
 Headway
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 12

13. Parasoft JTest - Metrics
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 13

14. Parasoft JTest – Static Analysis
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 14

15. Parasoft JTest – Duplications
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 15

16. Parasoft JTest – Flow Analysis
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 16

17. Parasoft JTest – Runtime Error Detection
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 17

18. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend You are here
 Headway
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 18

19. XDepend - Fonctionnalités
Fonctionnalités Support Fonctionnalités Support
Règles de nommage ✓ Intégration IDE ✗
Règles d'architecture ✓ Historique ✓
Structure du code ✓ Langage de requêtage ✓
Erreur de logique ✗ Implémentation de ✓
Analyse dynamique ✗ nouvelles règles
Intégration des tests ✓ Règles de sécurité ✗
Intégration continue ✓ Dashboard pour le ✗
manager
Richesse de l‘éco- ✗
système
Prix: 299 € dégressif en fonction du nombre de licences
Copyright © 2011– OCTO Technology – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 19

20. XDepend - Vue principale
Copyright © 2011– OCTO Technology – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 20

21. XDepend - Métriques
Copyright © 2011– OCTO Technology – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 21

22. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend
 Headway You are here
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 22

27. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend
 Headway
 Coverity You are here
 Discussion panel: 20 minutes This session has not been
! recorded according to Coverity’s
will
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 27

28. Coverity Integrity Center
Precision Software Analysis Across Lifecycle
• Increase customer satisfaction by
eliminating product delays and recalls
caused by software problems
• Speed time to market by making software
changes faster and with less risk
• Innovate rapidly by reducing time
developers spend fixing software design,
code, and delivery problems

29. Steps To Mitigate Risk
1 Scan Fix
Emacs
your priority
software defects
4
5 Report
Integrity defect
Analysis
Engine
remediation
Map
2 Find defect
priority impact PRODUCTS
List of Defects
_ 10001 critical
defects
_ 10002 major
Browse code 3 Project 1
_ 10003 major
_ 10004 critical Code
Project 2
_ 10005 major base
Impact Rankings Project 3

30. Shared Code Branching & Defect Impact
2.6.2.1 release
2.6.2 release
Merge
2.6 release
fix
Mainline/Trunk/Head/Development
2.4 release
2.4.1 release
Defect in the original Defect introduced in a Defect introduced in a
development branch and release branch before a release branch after a
never fixed affects all merge merge
products

31. Analyze 2.6, 2.6.2 and 2.6.2.1 releases
Branch of a codebase:
Project 2.4
2 streams
2.6.2.1 release
2.6.2 release
2.6 release
Mainline/Trunk/Head/Development
2.4 release
2.4.1 release

32. Common Defects are merged by CIM
Branch of a codebase:
Project 2.4
2 streams
2.6.2.1 release
Stream 1
2.6.2 release Project 2.6
Stream 2
2.6 release Stream 3
Mainline/Trunk/Head/Development
2.4 release
2.4.1 release

33. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend
 Headway
 Coverity
 Discussion panel: 20 minutes You are here
 Conclusion: 5 minutes
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 33

34. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend
 Headway
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes You are here
 Aperitif
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 34

35. What the IceScrum Team Says
 Pain points – Interview with Vincent Barrier
 Much pain with JSF
 SW architecture leading to difficult and costly evolutions
 Strong performance issues
 Tooling issues (m2 plugin)
 Difficulty to take new developers on board
 Heterogeneous code and quality issues
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 35

36. Share It!
 Find these + the vendors’ slides on the JUGL web site
 http://jugl.ch
 Live it on Parleys
 http://parleys.com/#id=102931&st=4
 React and follow further discussions on Twitter
 #jugl or @cyrilpicat
 Read Kalistick report and
SQuORING report on IceScrum2 http://bit.ly/eB7oRM
http://bit.ly/gDtmnj
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 36

37. Agenda
 Introduction: 5 minutes
 20 minutes by vendor to assess IceScrum2, in this order:
 Sonar
 Parasoft
 XDepend
 Headway
 Coverity
 Discussion panel: 20 minutes
 Conclusion: 5 minutes
 Aperitif You are here
Copyright © 2011 – Licence CC – Creative Commons 2.0 France – Paternité – Pas d'Utilisation Commerciale – Partage des Conditions Initiales à l'Identique 37