LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis

The article discusses the need for a lightweight software architecture evaluation framework that can address practitioners' concerns. Specifically, the proposed framework uses process mining and Petri nets to analyze security and performance in software development's early and late stages....

Full description

Bibliographic Details
Main Authors: Mahdi Sahlabadi, Ravie Chandren Muniyandi, Zarina Shukur, Md Rezanur Islam, Morteza SaberiKamarposhti, Kangbin Yim
Format: Article
Language:English
Published: Elsevier 2024-03-01
Series:Heliyon
Subjects:
Online Access:http://www.sciencedirect.com/science/article/pii/S2405844024030007
_version_ 1797259834456801280
author Mahdi Sahlabadi
Ravie Chandren Muniyandi
Zarina Shukur
Md Rezanur Islam
Morteza SaberiKamarposhti
Kangbin Yim
author_facet Mahdi Sahlabadi
Ravie Chandren Muniyandi
Zarina Shukur
Md Rezanur Islam
Morteza SaberiKamarposhti
Kangbin Yim
author_sort Mahdi Sahlabadi
collection DOAJ
description The article discusses the need for a lightweight software architecture evaluation framework that can address practitioners' concerns. Specifically, the proposed framework uses process mining and Petri nets to analyze security and performance in software development's early and late stages. Moreover, the framework has been implemented in six case studies, and the results show that it is a feasible and effective solution that can detect security and performance issues in complex and heterogeneous architecture with less time and effort. Furthermore, the article provides a detailed explanation of the framework's features, factors, and evaluation criteria. Additionally, this article discusses the challenges associated with traditional software architecture documentation methods using Unified Modeling Language diagrams and the limitations of code alone for creating comprehensive Software Architecture models. Various methods have been developed to extract implicit Software Architecture from code artifacts, but they tend to produce code-oriented diagrams instead of Software Architecture diagrams. Therefore, to bridge the model-code gap, the article proposes a framework that considers existing Software Architecture in the source code as architectural components and focuses on Software Architecture behaviors for analyzing performance and security. The proposed framework also suggests comparing Software Architecture extracted by different Process Mining algorithms to achieve consensus on architecture descriptions, using visualizations to understand differences and similarities. Finally, the article suggests that analyzing the previous version of a system's Software Architecture can lead to improvements and deviations from planned Software Architecture can be detected using traceability approaches to aid software architects in detecting inconsistencies.
first_indexed 2024-03-07T18:36:46Z
format Article
id doaj.art-fe8cabba5c5f4ec78eafb08622f9c1d1
institution Directory Open Access Journal
issn 2405-8440
language English
last_indexed 2024-04-24T23:15:44Z
publishDate 2024-03-01
publisher Elsevier
record_format Article
series Heliyon
spelling doaj.art-fe8cabba5c5f4ec78eafb08622f9c1d12024-03-17T07:56:55ZengElsevierHeliyon2405-84402024-03-01105e26969LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysisMahdi Sahlabadi0Ravie Chandren Muniyandi1Zarina Shukur2Md Rezanur Islam3Morteza SaberiKamarposhti4Kangbin Yim5Department of Information Security Engineering, Soonchunhyang University, Chungnam, Asan-si, 31538, South Korea; Corresponding author.Center For Cyber Security, Universiti Kebangsaan Malaysia, Bangi, Selangor, 43600, MalaysiaCenter For Cyber Security, Universiti Kebangsaan Malaysia, Bangi, Selangor, 43600, MalaysiaSoftware Convergence, Soonchunhyang University, Chungnam, Asan-si, 31538, South KoreaCenter For Cyber Security, Universiti Kebangsaan Malaysia, Bangi, Selangor, 43600, MalaysiaDepartment of Information Security Engineering, Soonchunhyang University, Chungnam, Asan-si, 31538, South KoreaThe article discusses the need for a lightweight software architecture evaluation framework that can address practitioners' concerns. Specifically, the proposed framework uses process mining and Petri nets to analyze security and performance in software development's early and late stages. Moreover, the framework has been implemented in six case studies, and the results show that it is a feasible and effective solution that can detect security and performance issues in complex and heterogeneous architecture with less time and effort. Furthermore, the article provides a detailed explanation of the framework's features, factors, and evaluation criteria. Additionally, this article discusses the challenges associated with traditional software architecture documentation methods using Unified Modeling Language diagrams and the limitations of code alone for creating comprehensive Software Architecture models. Various methods have been developed to extract implicit Software Architecture from code artifacts, but they tend to produce code-oriented diagrams instead of Software Architecture diagrams. Therefore, to bridge the model-code gap, the article proposes a framework that considers existing Software Architecture in the source code as architectural components and focuses on Software Architecture behaviors for analyzing performance and security. The proposed framework also suggests comparing Software Architecture extracted by different Process Mining algorithms to achieve consensus on architecture descriptions, using visualizations to understand differences and similarities. Finally, the article suggests that analyzing the previous version of a system's Software Architecture can lead to improvements and deviations from planned Software Architecture can be detected using traceability approaches to aid software architects in detecting inconsistencies.http://www.sciencedirect.com/science/article/pii/S2405844024030007Lightweight early and late evaluationSoftware architectureProcess miningPetri nets complex and heterogeneous architecture
spellingShingle Mahdi Sahlabadi
Ravie Chandren Muniyandi
Zarina Shukur
Md Rezanur Islam
Morteza SaberiKamarposhti
Kangbin Yim
LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis
Heliyon
Lightweight early and late evaluation
Software architecture
Process mining
Petri nets complex and heterogeneous architecture
title LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis
title_full LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis
title_fullStr LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis
title_full_unstemmed LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis
title_short LPMSAEF: Lightweight process mining-based software architecture evaluation framework for security and performance analysis
title_sort lpmsaef lightweight process mining based software architecture evaluation framework for security and performance analysis
topic Lightweight early and late evaluation
Software architecture
Process mining
Petri nets complex and heterogeneous architecture
url http://www.sciencedirect.com/science/article/pii/S2405844024030007
work_keys_str_mv AT mahdisahlabadi lpmsaeflightweightprocessminingbasedsoftwarearchitectureevaluationframeworkforsecurityandperformanceanalysis
AT raviechandrenmuniyandi lpmsaeflightweightprocessminingbasedsoftwarearchitectureevaluationframeworkforsecurityandperformanceanalysis
AT zarinashukur lpmsaeflightweightprocessminingbasedsoftwarearchitectureevaluationframeworkforsecurityandperformanceanalysis
AT mdrezanurislam lpmsaeflightweightprocessminingbasedsoftwarearchitectureevaluationframeworkforsecurityandperformanceanalysis
AT mortezasaberikamarposhti lpmsaeflightweightprocessminingbasedsoftwarearchitectureevaluationframeworkforsecurityandperformanceanalysis
AT kangbinyim lpmsaeflightweightprocessminingbasedsoftwarearchitectureevaluationframeworkforsecurityandperformanceanalysis