SD Week 7-9 Yu

This technique involves examining the source code of a program looking for patterns that are known to cause errors or security vulnerabilities, but it is performed without actually running the software.

In reliability testing, it is crucial to test the software using input patterns that reflect how actual users are expected to behave in a real-world environment. This set of expected behaviors is called the ____________________.

When a testing tool incorrectly flags a safe piece of code as having a vulnerability, wasting the developer's time investigating a non-existent problem, this result is known as a ____________________.

This specific type of dynamic testing involves throwing massive amounts of random, malformed, or invalid data at a system to see if it crashes or reveals a security hole. ____________________.

To assure security, a team may simulate an attack on the system using known hacking techniques to identify weaknesses before malicious actors can exploit them. This is widely known as ____________________.

This metric represents the probability that a system will fail specifically when a request for service is made, rather than over a period of time. ____________________.

A structured document that presents arguments and evidence demonstrating that a system is safe to operate in a specific context is called a ____________________.

Unlike functional testing which checks if features work, this type of analysis focuses purely on how the software behaves under extreme pressure or load to ensure it does not fail catastrophically. ____________________.

This automated process runs immediately after code changes are committed to ensure that new modifications have not introduced defects into previously working features. ____________________.

In the context of static analysis, this term refers to the scope of variables and whether a variable is used before it is initialized. ____________________.

This form of review involves a small group of developers methodically reading through code line-by-line to find logic errors that automated tools might miss. ____________________.

When measuring reliability, this unit refers to the average amount of time a system functions correctly between observable failures. ____________________.

A mathematical approach to software verification that uses logic and math to prove that a program conforms to its specification is known as ____________________.

This security assurance activity involves reviewing the system architecture and design specifically to identify potential threats and the assets that need protection. ____________________.

This type of error occurs when a static analysis tool fails to identify a real vulnerability that actually exists in the code. ____________________.

This phrase refers to a common cultural resistance among developers who refuse to use third-party code because they believe they can write better code themselves or do not trust external quality. ____________________

In this specific type of reuse, a generic application structure is provided as a set of abstract classes and interfaces; the developer extends these classes to create a specific system, effectively handing over flow control to the generic structure. ____________________

This large-scale reuse strategy involves creating a set of software systems that share a common core architecture and set of reusable components, but are individually customized for specific customers or market segments. ____________________

This term describes pre-packaged, complete software systems that can be bought and configured to run without requiring access to their source code (e.g., Microsoft Office, Oracle Database). ____________________

Within a software product line, these are the specific locations in the design or code where the core system can be modified or extended to adapt to different requirements. ____________________

This reuse approach involves wrapping legacy systems or distinct functional units as accessible endpoints that can be accessed over a network, often using standard protocols like SOAP or REST. ____________________

A fundamental benefit of reuse is that recycled code has often been tested across many different systems, leading to a higher level of confirmed ____________________ than new code.

This term refers to the cost associated with searching for, understanding, and modifying a reusable component to fit a new context. ____________________

In the context of framework-based development, this design principle dictates that the framework calls the custom code (rather than the custom code calling a library), often described as 'Don't call us, we'll call you.' ____________________

This type of reuse involves integrating huge, stand-alone systems (like an Enterprise Resource Planning system) to support business processes, often requiring significant configuration but little actual coding. ____________________

This visual mapping tool helps decision-makers understand the different available reuse approaches, ranging from 'System Reuse' to 'Component Reuse' to 'Object Reuse,' and their associated costs. ____________________

When a company relies too heavily on a specific COTS product, they face this risk where the vendor might discontinue support, increase prices, or go out of business, leaving the company with no control. ____________________

This specific layer in a reuse-oriented architecture acts as the glue code that converts data and calls between the reusable components and the specific application requirements. ____________________

This method of reuse involves reusing abstract algorithms or designs rather than actual code, often codified as solutions to common problems (e.g., Observer, Singleton). ____________________

In a product line architecture, this term refers to the shared set of software assets (code, documentation, designs) that are used across all members of the product family. ____________________

This entity is an independent software unit that can be deployed without compiling other parts of the system, often treated as a binary 'black box' by the user. ____________________

In a component definition, this specific part of the contract defines the services that the component must receive from other components in order to function correctly. ____________________

This infrastructure software (such as EJB, COM+, or .NET) provides the standard environment and services (like transaction management and security) that allow components to communicate. ____________________

When two components have incompatible interfaces, this specialized piece of code is written to convert the calls and data from one format to another, bridging the gap. ____________________

This specific type of interface definition specifies the services that a component offers to other components in the system. ____________________

This rigorous standard definition (e.g., CORBA, JavaBeans) prescribes how components are implemented, how they document their interfaces, and how they interact with the infrastructure. ____________________

In this type of composition, two components are executed in an alternating sequence, where the output of the first component becomes the input for the second. ____________________

This development process focuses on creating reusable software units specifically designed to be general-purpose and adhering to a standard model, rather than solving a specific application problem. ____________________

This issue arises when a component's internal operation is hidden, making it difficult for the integrator to know if the component will perform efficiently or reliably in a new environment. ____________________

This type of composition occurs when one component calls the services of another component directly, establishing a parent-child relationship in the control flow. ____________________

Unlike Object-Oriented programming where classes are source-code level entities, components are typically distributed as ____________________ units.

This specific incompatibility issue occurs when the calling component provides data in units (e.g., inches) that differ from what the receiving component expects (e.g., centimeters). ____________________

In the CBSE lifecycle, this phase involves searching databases or libraries to identify existing components that match the system requirements. ____________________

This composition issue occurs when a component requires a specific parameter (like a security token) that the calling component does not possess or provide. ____________________

This term refers to the process of wiring or integrating components together to create a functional system or a larger aggregate component. ____________________

This property of distributed systems describes their ability to continue operating correctly even when some components of the system fail or go offline. ____________________

A specific type of architecture where the system is organized into layers, and each layer provides services to the layer immediately above it, often used to separate presentation, logic, and data. ____________________

Software that sits between the operating system and the distributed applications, managing communication and data transfer so that the distribution is transparent to the user. ____________________

In this architectural model, a set of identical processes run on different processors to share the workload, improving performance and reliability. ____________________

This term refers to the ability of a system to handle an increasing amount of work or to be readily enlarged to accommodate that growth without changing the system architecture. ____________________

A distributed system interaction model where one component initiates a request for a service and waits for a response from another component that provides the service. ____________________

The specific risk in distributed systems where an unauthorized entity intercepts and potentially alters communication between two valid components. ____________________

This architectural pattern involves multiple clients accessing a shared database or file system directly, without an intervening server to manage the logic. ____________________

In a client-server architecture, this term describes a client that handles not just the user interface but also a significant portion of the application processing logic. ____________________

This type of attack seeks to make a distributed system unavailable to its intended users by overwhelming it with a flood of illegitimate requests. ____________________

A distributed application design where the user interface runs on the user's computer, but all application processing and data management occur on a remote server (often accessed via a web browser). ____________________

The characteristic of a distributed system that allows it to effectively hide the fact that resources and processes are physically separated across a network. ____________________

In this specific peer-to-peer (P2P) architecture, there is no central server to index files; instead, the network relies on a decentralized discovery mechanism. ____________________

This communication standard allows objects written in different programming languages and running on different platforms to interact seamlessly. ____________________

A distributed system configuration where resources (like printers or files) are managed by specific servers, and users access these resources through their workstations. ____________________

In this specific software delivery model, a single instance of the software runs on a server and serves multiple distinct customer organizations simultaneously. ____________________

This financial term describes the shift in cost structure where software is paid for via a recurring subscription rather than a large upfront purchase of a permanent license. ____________________

Because SaaS users cannot modify the source code, this mechanism is provided to allow them to adapt the software's behavior (e.g., branding, workflow rules) to their specific business needs. ____________________

This legal contract between the cloud provider and the customer specifies the guaranteed performance metrics, such as uptime percentage and response time latency. ____________________

This risk refers to the difficulty a customer faces when trying to migrate their data and business processes away from a specific cloud provider to a competitor or back on-premise. ____________________

This underlying technology allows a single physical server to simulate multiple independent computing environments, forming the foundation of modern cloud resource allocation. ____________________

Unlike the 'Application Service Provider' (ASP) model where each customer had a separate installation, modern SaaS relies on this database design strategy where customer data is separated logically but stored physically in shared tables. ____________________

This characteristic of cloud computing refers to the ability of the system to automatically increase or decrease allocated resources based on the current traffic demand. ____________________

In SaaS architecture, the software is typically accessed through this universal client interface, eliminating the need for specialized client software installation. ____________________

This term describes the delay introduced by transmitting data over the network between the user's client and the cloud server, which is a critical design constraint for interactive SaaS applications. ____________________

This specific category of cloud service offers a platform allowing developers to build and deploy applications without managing the underlying operating systems or hardware (e.g., Google App Engine). ____________________

To maintain data security in a shared environment, SaaS architects must ensure rigorous ____________________ of data, preventing one tenant from accidentally accessing another tenant's records.

This type of software update mechanism is a key benefit of SaaS, ensuring that all users are immediately and simultaneously using the latest version of the application without manual patching. ____________________

A cloud deployment model where the infrastructure is provisioned for open use by the general public and exists on the premises of the cloud provider. ____________________

This design principle suggests that web server components in a cloud architecture should not retain user session data locally, allowing any server to handle any request from any user. ____________________