{"id":298634,"date":"2009-10-07T13:00:28","date_gmt":"2009-10-07T20:00:28","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/research\/?p=298634"},"modified":"2016-09-28T10:28:49","modified_gmt":"2016-09-28T17:28:49","slug":"exploding-software-engineering-myths","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/research\/blog\/exploding-software-engineering-myths\/","title":{"rendered":"Exploding Software-Engineering Myths"},"content":{"rendered":"

By Janie Chang, Writer, Microsoft Research<\/em><\/p>\n

At Microsoft Research, there are computer scientists and mathematicians who live in a world of theory and abstractions. Then there is Nachi Nagappan<\/a>, who was on loan to the Windows development group for a year while building a triage system for software bugs. For Nagappan, a senior researcher at Microsoft Research Redmond<\/a> with the Empirical Software Engineering Group<\/a> (ESE), the ability to observe software-development processes firsthand is critical to his work.<\/p>\n

The ESE group studies large-scale software development and takes an empirical approach. When Nagappan gets involved in hands-on projects with Microsoft development teams, it\u2019s all part of ongoing research in his quest to validate conventional software-engineering wisdom.<\/p>\n

\"Nachi

Nachi Nagappan<\/p><\/div>\n

\u201cA big part of my learning curve when I joined Microsoft in 2005,\u201d Nagappan says, \u201cwas getting familiar with how Microsoft does development. I found then that many of the beliefs I had in university about software engineering were actually not that true in real life.\u201d<\/p>\n

That discovery led Nagappan to examine more closely the observations made by Frederick Brooks in The Mythical Man Month,<\/em> his influential book about software engineering and project management.<\/p>\n

\u201cTo some degree, The Mythical Man Month<\/em> formed the foundation of a lot of the work we did,\u201d Nagappan says. \u201cBut we also studied other existing assumptions in software engineering. They can be good or bad, because people make decisions based on these assumptions. Our primary goal was to substantiate some of these beliefs in a Microsoft context, so managers can make decisions based on data rather than gut feel or subjective experience.\u201d<\/p>\n

More Isn\u2019t Always Better<\/h2>\n

One assumption Nagappan examined was the relationship between code coverage and software quality. Code coverage measures how comprehensively a piece of code has been tested; if a program contains 100 lines of code and the quality-assurance process tests 95 lines, the effective code coverage is 95 percent. The ESE group measures quality in terms of post-release fixes, because those bugs are what reach the customer and are expensive to fix. The logical assumption would be that more code coverage results in higher-quality code. But what Nagappan and his colleagues saw was that, contrary to what is taught in academia, higher code coverage was not the best measure of post-release failures in the field.<\/p>\n

\u201cFurthermore,\u201d Nagappan says, \u201cwhen we shared the findings with developers, no one seemed surprised. They said that the development community has known this for years.\u201d<\/p>\n

The reason is that software quality depends on so many other factors and dynamics that no one metric can predict quality\u2014and not all metrics apply to all projects. Nagappan points out two of the most obvious reasons why code coverage alone fails to predict error rates: usage and complexity.<\/p>\n

Code coverage is not indicative of usage. If 99 percent of the code has been tested, but the 1 percent that did not get tested is what customers use the most, then there is a clear mismatch between usage and testing. There is also the issue of code complexity; the more complex the code, the harder it is to test. So it becomes a matter of leveraging complexity versus testing. After looking closely at code coverage, Nagappan now can state that, given constraints, it is more beneficial to achieve higher code coverage of more complex code than to test less complex code at an equivalent level. Those are the kinds of tradeoffs that development managers need to keep in mind.<\/p>\n

Write Test Code First<\/h2>\n

Nagappan and his colleagues then examined development factors that impact quality, another area of software engineering discussed in The Mythical Man Month<\/em>. One of the recent trends that caught their interest was development practices; specifically, test-driven development (TDD) versus normal development. In TDD, programmers first write the test code, then the actual source code, which should pass the test. This is the opposite of conventional development, in which writing the source code comes first, followed by writing unit tests. Although TDD adherents claim the practice produces better design and higher quality code, no one had carried out an empirical substantiation of this at Microsoft.<\/p>\n

\u201cThe nice thing about working at Microsoft,\u201d Nagappan says, \u201cis that the development organization is large enough that we could select teams that allowed for an apples-to-apples comparison. We picked three development projects under the same senior manager and looked at teams that used TDD and those that didn\u2019t. We collected data from teams working on Visual Studio, Windows, and MSN and also got data from a team at IBM, since the project was a joint study.\u201d<\/p>\n

The study and its results were published in a paper entitled Realizing quality improvement through test driven development: results and experiences of four industrial teams<\/em><\/a>, by Nagappan and research colleagues E. Michael Maximilien of the IBM Almaden Research Center; Thirumalesh Bhat, principal software-development lead at Microsoft; and Laurie Williams of North Carolina State University. What the research team found was that the TDD teams produced code that was 60 to 90 percent better in terms of defect density than non-TDD teams. They also discovered that TDD teams took longer to complete their projects\u201415 to 35 percent longer.<\/p>\n

\u201cOver a development cycle of 12 months, 35 percent is another four months, which is huge,\u201d Nagappan says. \u201cHowever, the tradeoff is that you reduce post-release maintenance costs significantly, since code quality is so much better. Again, these are decisions that managers have to make\u2014where should they take the hit? But now, they actually have quantified data for making those decisions.\u201d<\/p>\n

Proving the Utility of Assertions<\/h2>\n

Another development practice that came under scrutiny was the use of assertions. In software development, assertions are contracts or ingredients in code, often written as annotations in the source-code text, describing what the system should do rather than how to do it.<\/p>\n

\u201cOne of our very senior researchers is Turing Award winner Tony Hoare of Microsoft Research Cambridge<\/a> in the U.K.,\u201d Nagappan says. \u201cTony has always promoted the utility of assertions in software. But nobody had done the work to quantify just how much assertions improved software quality.\u201d<\/p>\n

One reason why assertions have been difficult to investigate is a lack of access to large commercial programs and bug databases. Also, many large commercial applications contain significant amounts of legacy code in which there is minimal use of assertions. All of this contributes to lack of conclusive analysis.<\/p>\n

At Microsoft however, there is systematic use of assertions in some Microsoft components, as well as synchronization between the bug-tracking system and source-code versions; this made it relatively easy to link faults against lines of code and source-code files. The research team managed to find assertion-dense code in which assertions had been used in a uniform manner; they collected the assertion data and correlated assertion density to code defects. The results are presented in the technical paper Assessing the Relationship between Software Assertions and Code Quality: An Empirical Investigation<\/em><\/a>, by Gunnar Kudrjavets, a senior development lead at Microsoft, along with Nagappan and Tom Ball<\/a>.<\/p>\n

The team observed a definite negative correlation: more assertions and code verifications means fewer bugs. Looking behind the straight statistical evidence, they also found a contextual variable: experience. Software engineers who were able to make productive use of assertions in their code base tended to be well-trained and experienced, a factor that contributed to the end results. These factors built an empirical body of knowledge that proved the utility of assertions.<\/p>\n

The work also brings up another issue: What kind of action should development managers take based on these findings? The research team believes that enforcing the use of assertions would not work well; rather, there needs to be a culture of using assertions in order to produce the desired results. Nagappan and his colleagues feel there is an urgent need to promote the use of assertions and plan to collaborate with academics to teach this practice in the classroom. Having the data makes this easier.<\/p>\n

Has there been any feedback from Hoare?<\/p>\n

\u201cAbsolutely,\u201d Nagappan says. \u201cHe followed up and read our work on assertions and was very happy that someone was proving the relationship between assertions and software quality.\u201d<\/p>\n

Organizational Structure Does Matter\u2014a Lot.<\/h2>\n

Nagappan recognized that although metrics such as code churn, code complexity, code dependencies, and other code-related factors have an impact on software quality, his team had yet to investigate the people factor. The Mythical Man Month<\/em> is most famous for describing how communication overhead increases with the number of programmers on a project, but it also cites Conway\u2019s Law, paraphrased as, \u201cIf there are N product groups, the result will be a software system that to a large degree contains N versions or N components.\u201d In other words, the system will resemble the organization building the system.<\/p>\n

The first challenge was to somehow describe the relationships between members of a development group. The team settled on using organizational structure, taking the entire tree structure of the Windows group as an example. They took into account reporting structure but also degrees of separation between engineers working on the same project, the level to which ownership of a code base rolled up, the number of groups contributing to the project, and other metrics developed for this study.<\/p>\n

The Influence of Organizational Structure on Software Quality: An Empirical Case Study<\/em><\/a>, by Nagappan, Brendan Murphy<\/a> of Microsoft Research Cambridge, and Victor R. Basili of the University of Maryland, presents startling results: Organizational metrics, which are not related to the code, can predict software failure-proneness with a precision and recall of 85 percent. This is a significantly higher precision than traditional metrics such as churn, complexity, or coverage that have been used until now to predict failure-proneness. This was probably the most surprising outcome of all the studies.<\/p>\n

\u201cThat took us by surprise,\u201d Nagappan says. \u201cWe didn’t expect it to be that accurate. We thought it would be comparable to other code-based metrics, but these factors were at least 8 percent better in terms of precision and recall than the closest factor we got from the code measures. Eight percent, on a code base the size of Windows, is a huge difference.\u201d<\/p>\n

Geographical Distance Doesn\u2019t Matter\u2014Much.<\/h2>\n

One of the most cherished beliefs in software project management is that a distributed-development model has a negative impact on software quality because of problems with communication, coordination, culture, and other factors. Again, this meant looking at organizational metrics.<\/p>\n

\u201cThe fact is,\u201d Nagappan says, \u201cthat no one has really studied a large project. Most studies were either based on assumptions or on an outsourced model where a piece of the project is handled outside. But at Microsoft, we don\u2019t outsource product development. Our global development teams are Microsoft employees: the same management structure, access to the same resources.\u201d<\/p>\n

But first of all, how do you define \u201cdistributed\u201d? The research team took the corporate address book and came up with six degrees of distribution:<\/p>\n