1. Software Team Development Practices based on Java Development Teams at CERN Rostislav Titov, GS-AIS-EB Section Leader, CERN

2. CERN AIS The reality today Failure 31.1% of IT projects will be canceled before they ever get completed 52.7% of projects will cost 189% of their original estimate More than 50% of software projects fail today. Success Only 16.2% software projects that are completed on time and on budget In the large companies only 9% of their projects come in on time and on budget. Catastrophe –Ariane 5 (7bn dev, 500 million) – numerical conversion error –Mars Climate Orbiter ($125 million) – metric conversion error –Mars Polar Lander ($165 million) – design error

3. CERN AIS Typical Failures User requirements not met Software unreliable Too late (You took so long that our requirements have changed…) It works great for me, now deploy it for 10,000 users… You did what I asked. but I didn’t say what I meant… Projects completed by the largest American companies have only approximately 42% of the originally proposed features and functions.

4. CERN AIS Reasons Unrealistic Schedules –When faced with an unrealistic schedule, engineering teams often behave irrationally. They race through the requirements, produce a superficial design and rush into coding. Inappropriate Staffing Changing Requirements During Development Poor-Quality Work –There's a saying about software quality: “If it doesn't have to work, we can build it really fast.”

5. CERN AIS Project Success factors Project Success Factors and % of Responses 1User Involvement15.90% 2Executive Management Support13.90% 3Clear Statement of Requirements13.00% 4Proper Planning9.60% 5Realistic Expectations8.20% 6Smaller Project Milestones0 - 7.7% 7Competent Staff7.20% 8Ownership5.30% 9Clear Vision & Objectives2.90% 10Hardworking, Focused Staff2.40% Other13.90% Project Challenged Factors and % of Responses 1Lack of User Inputs12.80% 2Incomplete Requirements & Specifications12.30% 3Changing Requirements & Specifications11.80% 4Lack of Executive Support7.50% 5Technology Incompetence7.00% 6Lack of Resources6.40% 7Unrealistic Expectations5.90% 8Unclear Objectives5.30% Other23.00%

6. CERN AIS Factors CostQuality Speed Risk Four interdependent factors Not possible to have best of all four Cannot have cheap, high quality, little risk & built quickly You can achieve 2 successfully and other 2 have to be managed Risk and quality are most important: The system must work and successfully meet user requirements. This leaves speed (time) and cost (money) to be adjusted accordingly Cheap Good Fast Choose two

7. CERN AIS Software Development Cycle Analysis “Failing to build the right thing” Design “We didn't have time to do a design." Implementation “Do you want it on time or documented?” Test “It's not a bug, it's a feature”

8. CERN AIS Requirements Analysis “Writing software from Requirements is like walking on water – its easier when frozen”

9. CERN AIS Analysis State Goal “send a man to the moon before end of the decade & return him safely to Earth”, JF Kennedy Specify the problem not the solution Classification M Must o S Should C Could 0 W Would Concept of Operations document “This is my understanding of what you want” Beware of requirements ‘gold plating’ 80/20 rule Verifiable : use-cases

10. CERN AIS Design One of the things that tools can do is to help bad designers create ghastly designs much more quickly than they ever could in the past

11. CERN AIS Example Failures Ariane 5 (half billion dollars) Y2K bug F-16 & equator Mars Polar Lander

12. CERN AIS Good Design Principles Consider alternative approaches Not tunnel vision Traceable to the requirements Correct & complete Not reinvent the wheel Use a pattern Adaptability Accommodate Change Maximize Cohesion Minimize Coupling Understandabilty A design must be understandable if it is to support modification.

13. CERN AIS Good & Bad design Good Design Change in one part of the system doesn't always require a change in another part of the system. Every piece of logic has one and one home. The logic is near the data it operates on. System can be extended with changes in only one place. Simplicity Bad Design One conceptual change requires changes to many parts of the system. Logic has to be duplicated. Cost of a bad design becomes overwhelming. Can't remember where all the implicitly linked changes have to take place. Can't add a new function without breaking an existing function. Complexity

14. CERN AIS The Cost of Change Cost CERN AIS Time

15. CERN AIS Lessons Learned It’s not always right first time –Refactoring is OK Keep the vision simple Automate repetitive tasks TEST the design –By modifying the problem

16. CERN AIS Coding “It doesn’t matter if I write poor code… the compiler will tell me if there is problem” “It doesn’t matter if I make a mistake… it will come out in testing” Mars Climate Orbiter ($125 million) metric conversion error

17. CERN AIS Bugs Experienced software engineers inject one defect in about every 10 lines of code. The programmers aren't incompetent or lazy - they're just human. All humans make mistakes, but in software, these mistakes result in defects. This means that a modest-size program of 100,000 lines of code typically would start with about 10,000 defects. Examples : INTEL Pentium : no more than 80-90 Bugs Cell Phone (200 000 loc) up to 600 errors. Windows-95: 10 Mill. loc: up to 200 000 errors.

18. CERN AIS Now imagine you have A multi-domain, multi-lingual horizontal software application supporting over 14’000 users in 42 countries composed of : 1.5 millionLines of Code 6,000 Java classes 10,000HTML templates many other files Welcome to EDH!

19. CERN AIS EDH: Good Old Days (1991-98) “Imagination rules the world” Mac or PC or Unix? C or C++ or ? University atmosphere Freedom & Individualism Choice, choice, choice...

20. CERN AIS Results Healthy outside, but unhealthy inside Evolution from freedom to Chaos! Development Platform : Mac, PC & Unix Code : C,C++,Python, Prolog, ProC, PL/SQL, Perl... Comments : Spanish, Italian, French & English... Bugs : “Y2K don’t care” Obvious code never reviewed : Why would you show your code to anybody? Never did at university... Results count! Consequence : Maintenance became the primary resource-consuming activity

21. CERN AIS The “authoritarian” new days (1998...) Autocratic –You will use a PC –You will use the chosen IDE –You will use Version Control –You will develop in Java –You will adhere to coding standards –You will show your code to others –You will have to document every change Production Environment is Sacred –Scheduled Deploys –Team decision, No individual actions –No unreviewed code goes live Doesn’t sound very motivating? Ironically it is more motivating!

22. CERN AIS From University to Industry Individual Development Practices Team Development Practices Freedom of Choice for Development Environment Uniform development environment Common set of tools Choice of language & technology Single technology choice Free selection of tools Individual Code Responsibility (& blame) Common Code Ownership (& learning)... driven by the members of the team (not management imposed) Quality of the Product Quality of the Process

23. CERN AIS Requires Concrete Practices Code Reviews Coding Standards Design Reviews Mentoring Uniform development environment Coherent set of development & deployment tools Single language & Technology Test procedures, unit testing & usability studies

24. CERN AIS Code Review Example Can you understand the following? public class ba { public static final String cur = “USD"; public void dep (int i) { bal -=i; } public void wit (int i) { bal +=i;} public String get () { return Integer.toString (bal) + " " + cur } private int bal; } And identify the defect?

25. CERN AIS The same code public class BankAccount { public static final String CURRENCY = “ USD " ; private int m_balance; public void deposit (int amount) { balance = balance - amount; } public void withdraw (int amount) { balance = balance + amount; } public String getBalance () { return Integer.toString (bal) + " " + CURRENCY; }

26. CERN AIS Coding Standards – why? Why ? 80% of the lifetime cost of a piece of software goes to maintenance. Hardly any software is maintained for its whole life by the original author. Code conventions improve the readability of the software, allowing engineers to understand new code more quickly and thoroughly. Cannot review unless you have standards... endless debate – was driving too fast? Cannot answer without defined speed limits Recommend best practices, avoid bad practices Maintainable & reliable software is key Produces Common Code Ownership

27. CERN AIS Code Reviews - guidelines Form –Product is guilty until proven innocent –Producer is innocent because he/she is not on trial –More likely to find bugs if you assume they are there –Evaluate product not producer –Emphasize "review" aspect; do not "fix it here". –Raise problems. Do not discuss solutions

28. CERN AIS Code Reviews - guidelines Management Involvement –NONE! –Not a manager's status meeting –Management is not represented during inspections –Inspections must not be used as a tool to evaluate workers –… Not a committee, not a working group, not a status report & not an appraisal instrument …

29. CERN AIS Benefits Primary objective –remove defects as early as possible in the development process Other benefits : –Early Testing –Project Tracking –Educational – share best practices –Training of new/junior programmers –Improved Communication –Improved Individual Quality –Cross-training –Process-improvement –Shared Responsibility – no individual blame

30. CERN AIS The “Yes, buts...” I don’t have time for this... Good programmer’s code doesn’t need reviewing Its only a ‘minor’ piece of code Code Changes, then what? –2 nd pair eyes rule –Pair programming

31. CERN AIS Coding: Tools Atlassian JIRA –Issue tracking and project tracking –EDH: every change must have a JIRA Process should be as lightweight as possible Atlassian GreenHopper –Agile project management (Scrum) –EDH: 2-week sprints Atlassian Confluence –Documentation (WIKI style)

32. CERN AIS Coding: Tools (2) Atlassian Crucible –Online code reviews –EDH: Every production line of code must be reviewed Atlassian FishEye –Browse version control repository (CVS, SVN) –Real-time notifications of code changes –Web-based reporting, visualisation and code sharing Atlassian Bamboo –Continuous integration Atlassian Clover –Java code coverage metrics

33. CERN AIS Coding: Tools (3)

34. CERN AIS Testing Bugs Standard Software: 25 bugs per 1000 lines of program. Good Software: 2 errors per 1000 lines. Space Shuttle Software: < 1 errors per 10000 lines. Example Handy (Cellular Phone): 200 000 lines of program: up to 600 errors. Windows-95: 10 Mill. lines: up to 200 000 errors. Sept 24 2004 – Jpeg buffer overrun bug in MS windows “an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges” Defects Testing ≠ Debugging You may have zero bugs, but s/w may not meet requirements, scale, respond-in time…

35. CERN AIS What do you test? Correctness testing Security testing Reliability testing Stress testing Scalability testing Performance testing Usability testing

36. CERN AIS Testing Software testing is an art : requires a tester's creativity, experience and intuition, together with proper techniques. Most of the testing methods and practices are not very different from 20 years ago. Testing is more than just debugging. Testing is expensive. Automation helps. Complete testing is infeasible. Tradeoff Testing, while essential, may not be the most effective method to improve software quality.

37. CERN AIS And after that? Sofware Maintenance 80% of lifetime of software The Legacy Crisis The relative cost for maintaining software and managing its evolution now represents more than 90% of its total cost. Example costs –Annual software maintenance cost in USA has been estimated to be more than $70 billion –Y2K : $8.38 billion US dollar, $90 million for Nokia 50% of their time is spent in the process of understanding the code!!!

38. CERN AIS Types of Maintenance Corrective Maintenance (21%) –A process that includes diagnosis and correction of errors. Adaptive Maintenance (25%) –Activity that modifies software to properly interface with a changing environment (hardware and software). Perfective Maintenance (50%) –Activity for adding new capabilities, modifying existing functions and making general enhancements. –This accounts for the majority of all effort expended on maintenance. Preventive Maintenance (4%) –Activity which changes software to improve future maintainability or reliability or to provide a better basis for future enhancements. –Still relatively rare.

39. CERN AIS Your challenge ! Come in the 9% of projects on time & in budget Engineer your software (design, review & maintenance in mind) Control the spiraling IT costs & improve the reputation of the industry

40. CERN AIS Thank You E-mail: Rostislav.Titov@cern.ch For More Information