NAIMMCQ: Software Engineering

Consider the situation where you have the following 4 requirements for an employee information system: - response time for short queries must be less then 1 sec. - in defining employee record, user must be able to enter employee name and be prompted for all the remaining employee attributes that are needed for the employee record - employee information may be searched using either the employee number or employee’s last name. - only authorized (employee himself, managers in his/her chain of command, personnel) search will show employee salary, benefits, and family information.

Consider the situation where you have the following 4 requirements for an employee information system:

- response time for short queries must be less then 1 sec.

- in defining employee record, user must be able to enter employee name and be prompted for
all the remaining employee attributes that are needed for the employee record

- employee information may be searched using either the employee number or employee’s last name.

- only authorized (employee himself, managers in his/her chain of command, personnel) search will
show employee salary, benefits, and family information.

Perform Analytical Hierarchy Process and rank these based on your choices.

Assume the following pair-wise relationship:

Req 1 Req2 Req3 Req4

Req 1 1 3 5 2

Req2 1/3 1 2 2

Req3 1/5 ½ 1 4

Req4 ½ ½ ¼ 1

Answer:
Rank 1: Req 1
Rank 2: Req 2
Rank 3: Req 3
Rank 4: Req 4

What is BDD?

Answer: BDD stands for Behavior Driven Development which uses normal language to describe the required behavior of the software. As such, it provides the conditions for testing the software as seen from the regular stakeholders such as the customers. And software code may be developed based on satisfying these specified test conditions of requirements.

Give an example of software security problem related to software defect.

Answer: A software product that does not thoroughly check its inputs, which is a defect, can be the cause of a security problem. For example, the unchecked and purposefully erroneous input may cause buffer overflow and SQL injection problems.

What is software obfuscation?

Answer: Software obfuscation is a technique of making software less comprehensible to combat reverse engineering and provide more protection for the original software.