Debloating Java Dependencies смотреть онлайн

PhD Defense - Presentation
June 1st, 2023

The full PhD thesis is here: https://www.cesarsotovalero.net/files/thesis/cesar-fulltext.pdf
The slides are here: https://www.cesarsotovalero.net/files/thesis/slides/cesar-phd-defense.pptx

Blog: https://www.cesarsotovalero.net/blog
GitHub: https://github.com/cesarsotovalero
Twitter: https://twitter.com/cesarsotovalero
LinkedIn: https://www.linkedin.com/in/cesarsotovalero

# Summary Of the Thesis

Software systems have a natural tendency to grow in size and complexity. A part of this growth comes with the addition of new features or bug fixes, while another part is due to useless code that accumulates over time. This phenomenon, known as "software bloat," increases with the practice of reusing software dependencies, which has exceeded the capacity of human developers to efficiently manage them. Software bloat in third-party dependencies presents a multifaceted challenge for application development, encompassing issues of security, performance, and maintenance. To address these issues, researchers have developed software debloating techniques that automatically remove unnecessary code.

Despite significant progress has been made in the realm of software debloating, the pervasive issue of dependency bloat warrants special attention. In this thesis, we contribute to the field of software debloating by proposing novel techniques specifically targeting dependencies in the Java ecosystem. First, we investigate the growth of completely unused software dependencies, which we call "bloated dependencies.'' We propose a technique to automatically detect and remove bloated dependencies in Java projects built with Maven. We empirically study the usage status of dependencies in the Maven Central repository and remove bloated dependencies in mature Java projects. We demonstrate that once a bloated dependency is detected, it can be safely removed as its future usage is unlikely.

Second, we focus on dependencies that are only partially used. We introduce a technique to specialize these dependencies in Java projects based on their actual usage. Our approach systematically identifies the subset of functionalities within each dependency that is sufficient to build the project and removes the rest. We demonstrate that our dependency specialization approach can halve the project classes to dependency classes ratio. Last, we assess the impact of debloating projects with respect to client applications that reuse them. We present a novel coverage-based debloating technique that determines which class members in Java libraries and their dependencies are necessary for their clients. Our debloating technique effectively decreases the size of debloated libraries while preserving the essential functionalities required to successfully build their clients.

#phdthesis #computerscience #softwareengineering #softwaredebloating