<form name="aspnetForm" method="post" action="exploring-the-relationship-between-architecture-coupling-and-software-vulnerabilities-a-google-chrome-case?item=exploring-the-relationship-between-architecture-coupling-and-software-vulnerabilities-a-google-chrome-case" id="aspnetForm">
<input type="hidden" name="MSOWebPartPage_PostbackSource" id="MSOWebPartPage_PostbackSource" value="" />
<input type="hidden" name="MSOTlPn_SelectedWpId" id="MSOTlPn_SelectedWpId" value="" />
<input type="hidden" name="MSOTlPn_View" id="MSOTlPn_View" value="0" />
<input type="hidden" name="MSOTlPn_ShowSettings" id="MSOTlPn_ShowSettings" value="False" />
<input type="hidden" name="MSOGallery_SelectedLibrary" id="MSOGallery_SelectedLibrary" value="" />
<input type="hidden" name="MSOGallery_FilterString" id="MSOGallery_FilterString" value="" />
<input type="hidden" name="MSOTlPn_Button" id="MSOTlPn_Button" value="none" />
<input type="hidden" name="__REQUESTDIGEST" id="__REQUESTDIGEST" value="0x8EDF1E94148A418A4EE747ECAF1CE1D9ABA58135D9184C0FE57CDDB3F10DF35F00EDCB556AAA7E81CF9E26C7B202EAD44D05A962BC3408C7668E58D0440FB2F1,26 Jun 2019 23:01:39 -0000" />
<input type="hidden" name="MSOSPWebPartManager_DisplayModeName" id="MSOSPWebPartManager_DisplayModeName" value="Browse" />
<input type="hidden" name="MSOSPWebPartManager_ExitingDesignMode" id="MSOSPWebPartManager_ExitingDesignMode" value="false" />
<input type="hidden" name="MSOWebPartPage_Shared" id="MSOWebPartPage_Shared" value="" />
<input type="hidden" name="MSOLayout_LayoutChanges" id="MSOLayout_LayoutChanges" value="" />
<input type="hidden" name="MSOLayout_InDesignMode" id="MSOLayout_InDesignMode" value="" />
<input type="hidden" name="MSOSPWebPartManager_OldDisplayModeName" id="MSOSPWebPartManager_OldDisplayModeName" value="Browse" />
<input type="hidden" name="MSOSPWebPartManager_StartWebPartEditingName" id="MSOSPWebPartManager_StartWebPartEditingName" value="false" />
<input type="hidden" name="MSOSPWebPartManager_EndWebPartEditing" id="MSOSPWebPartManager_EndWebPartEditing" value="false" />
<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="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" />

<script type="text/javascript">
//<![CDATA[
var MSOWebPartPageFormName = 'aspnetForm';
var g_presenceEnabled = true;var _fV4UI=true;var _spPageContextInfo = {webServerRelativeUrl: "\u002f", webLanguage: 1033, currentLanguage: 1033, webUIVersion:4,pageListId:"{229a3fa1-d23f-4194-af04-83f712f16168}",pageItemId:24, alertsEnabled:true, siteServerRelativeUrl: "\u002f", allowSilverlightPrompt:'True'};//]]>
</script>
<script type="text/javascript" src="/_layouts/1033/init.js?rev=0OHTJmtljdkrRniX3Vao7A%3D%3D"></script>
<script src="/WebResource.axd?d=KzYTxvKcuTEp7j51joTea5GVr92AuJ4SL5aQ9QUnLuUrG7rTi8YCbgNYedMwdv6fDwv5Ou7X64HliGCav7hiwmuBylh2hjGhv6JU0lkokc63lAPUBD0MIaMGwGty9ueA82idlgs7ktVQj8-X5TCDW8nNPkA1&t=636767462854137053" type="text/javascript"></script>
<script type="text/javascript">
//<![CDATA[
var dlc_fvsi = {"DefaultViews":[],"ViewUrls":[],"WebUrl":"\/"};//]]>
</script>

<script type="text/javascript">
//<![CDATA[
function _spNavigateHierarchy(nodeDiv, dataSourceId, dataPath, url, listInContext, type) {
    CoreInvoke('ProcessDefaultNavigateHierarchy', nodeDiv, dataSourceId, dataPath, url, listInContext, type, document.forms.aspnetForm, "", "\u002fitem\u002fexploring-the-relationship-between-architecture-coupling-and-software-vulnerabilities-a-google-chrome-case");

}
//]]>
</script>
<input type="hidden" name="__VIEWSTATEGENERATOR" id="__VIEWSTATEGENERATOR" value="7BAFC84E" />
<script type="text/javascript">RegisterSod("sp.core.js", "\u002f_layouts\u002fsp.core.js?rev=7ByNlH\u00252BvcgRJg\u00252BRCctdC0w\u00253D\u00253D");</script><script type="text/javascript">RegisterSod("sp.res.resx", "\u002f_layouts\u002fScriptResx.ashx?culture=en\u00252Dus\u0026name=SP\u00252ERes\u0026rev=b6\u00252FcRx1a6orhAQ\u00252FcF\u00252B0ytQ\u00253D\u00253D");</script><script type="text/javascript">RegisterSod("sp.ui.dialog.js", "\u002f_layouts\u002fsp.ui.dialog.js?rev=Tpcmo1\u00252FSu6R0yewHowDl5g\u00253D\u00253D");RegisterSodDep("sp.ui.dialog.js", "sp.core.js");RegisterSodDep("sp.ui.dialog.js", "sp.res.resx");</script><script type="text/javascript">RegisterSod("core.js", "\u002f_layouts\u002f1033\u002fcore.js?rev=Emb5hNX1RZMNXk9oS82yvA\u00253D\u00253D");</script>
<script type="text/javascript">
//<![CDATA[
var _spFormDigestRefreshInterval = 1440000;window.g_updateFormDigestPageLoaded = new Date(); window.g_updateFormDigestPageLoaded.setDate(window.g_updateFormDigestPageLoaded.getDate() -5);function loadMDN2() { EnsureScript('MDN.js', typeof(loadFilterFn), null); }
function loadMDN1() { ExecuteOrDelayUntilScriptLoaded(loadMDN2, 'sp.ribbon.js'); }
_spBodyOnLoadFunctionNames.push('loadMDN1');//]]>
</script>
<script type="text/javascript">RegisterSod("sp.runtime.js", "\u002f_layouts\u002fsp.runtime.js?rev=IGffcZfunndj0247nOxKVg\u00253D\u00253D");RegisterSodDep("sp.runtime.js", "sp.core.js");RegisterSodDep("sp.runtime.js", "sp.res.resx");</script><script type="text/javascript">RegisterSod("sp.js", "\u002f_layouts\u002fsp.js?rev=\u00252B4ZEyA892P3T0504qi0paw\u00253D\u00253D");RegisterSodDep("sp.js", "sp.core.js");RegisterSodDep("sp.js", "sp.runtime.js");RegisterSodDep("sp.js", "sp.ui.dialog.js");RegisterSodDep("sp.js", "sp.res.resx");</script><script type="text/javascript">RegisterSod("cui.js", "\u002f_layouts\u002fcui.js?rev=OOyJv78CADNBeet\u00252FvTvniQ\u00253D\u00253D");</script><script type="text/javascript">RegisterSod("inplview", "\u002f_layouts\u002finplview.js?rev=WB6Gy8a027aeNCq7koVCUg\u00253D\u00253D");RegisterSodDep("inplview", "core.js");RegisterSodDep("inplview", "sp.js");</script><script type="text/javascript">RegisterSod("ribbon", "\u002f_layouts\u002fsp.ribbon.js?rev=F\u00252BUEJ66rbXzSvpf7nN69wQ\u00253D\u00253D");RegisterSodDep("ribbon", "core.js");RegisterSodDep("ribbon", "sp.core.js");RegisterSodDep("ribbon", "sp.js");RegisterSodDep("ribbon", "cui.js");RegisterSodDep("ribbon", "sp.res.resx");RegisterSodDep("ribbon", "sp.runtime.js");RegisterSodDep("ribbon", "inplview");</script><script type="text/javascript">RegisterSod("sp.ui.policy.resources.resx", "\u002f_layouts\u002fScriptResx.ashx?culture=en\u00252Dus\u0026name=SP\u00252EUI\u00252EPolicy\u00252EResources\u0026rev=YhBHGmUAGyJ3lAgSdE4V\u00252Fw\u00253D\u00253D");</script><script type="text/javascript">RegisterSod("mdn.js", "\u002f_layouts\u002fmdn.js?rev=gwmFFJ2\u00252FfFacqXWAqG\u00252FqKg\u00253D\u00253D");RegisterSodDep("mdn.js", "sp.core.js");RegisterSodDep("mdn.js", "sp.runtime.js");RegisterSodDep("mdn.js", "sp.js");RegisterSodDep("mdn.js", "cui.js");RegisterSodDep("mdn.js", "ribbon");RegisterSodDep("mdn.js", "sp.ui.policy.resources.resx");</script>
<script type="text/javascript">
//<![CDATA[

function _spNavigateHierarchyEx(nodeDiv, dataSourceId, dataPath, url, listInContext, type, additionalQString) {
    SetAdditionalNavigateHierarchyQString(additionalQString);
    g_originalSPNavigateFunc(nodeDiv, dataSourceId, dataPath, url, listInContext, type);
}

g_originalSPNavigateFunc = _spNavigateHierarchy;
_spNavigateHierarchy = _spNavigateHierarchyEx;
var _fV4UI = true;//]]>
</script>
<script type="text/javascript">RegisterSod("msstring.js", "\u002f_layouts\u002f1033\u002fmsstring.js?rev=QtiIcPH3HV7LgVSO7vONFg\u00253D\u00253D");</script><script type="text/javascript">RegisterSod("browserScript", "\u002f_layouts\u002f1033\u002fnon_ie.js?rev=EVTj1bu32\u00252FMla6SDN\u00252FsNTA\u00253D\u00253D");</script>
<script type="text/javascript">
//<![CDATA[
var __wpmExportWarning='This Web Part Page has been personalized. As a result, one or more Web Part properties may contain confidential information. Make sure the properties contain information that is safe for others to read. After exporting this Web Part, view properties in the Web Part description file (.WebPart) by using a text editor such as Microsoft Notepad.';var __wpmCloseProviderWarning='You are about to close this Web Part.  It is currently providing data to other Web Parts, and these connections will be deleted if this Web Part is closed.  To close this Web Part, click OK.  To keep this Web Part, click Cancel.';var __wpmDeleteWarning='You are about to permanently delete this Web Part.  Are you sure you want to do this?  To delete this Web Part, click OK.  To keep this Web Part, click Cancel.';//]]>
</script>
</form>

Skip to Main Content

09 Mar 2017Working Paper Summaries

Exploring the Relationship Between Architecture Coupling and Software Vulnerabilities: A Google Chrome Case

by Robert Lagerström, Carliss Y. Baldwin, Alan MacCormack, Dan Sturtevant, and Lee Doolan

Managing software vulnerabilities is a top issue in today’s society. By studying the Google Chrome codebase, the authors explore software metrics including architecture coupling measures in relation to software vulnerabilities. This paper adds new findings to research on software metrics and vulnerabilities, bringing the field closer to generalizable and conclusive results.

Author Abstract

Employing software metrics, such as size and complexity, for predicting defects has been given a lot of attention over the years and has proven very useful. However, the few studies looking at software architecture and vulnerabilities are limited in scope and findings. We explore the relationship between software vulnerabilities and component metrics (like code churn and cyclomatic complexity) as well as architecture coupling metrics (direct, indirect, and cyclic coupling). Our case is based on the Google Chromium project, an open-source project that has not yet been studied for this topic. Our findings show a strong relationship between vulnerabilities and both component level metrics and architecture coupling metrics. Unfortunately, the effects of different types of coupling are somewhat hard to distinguish.

Paper Information

Full Working Paper Text
Working Paper Publication Date: February 2017
HBS Working Paper Number: HBS Working Paper #17-078
Faculty Unit(s): Finance; Technology and Operations Management

Trending

- 28 Jan 2019
- Research & Ideas
Forget Cash. Here Are Better Ways to Motivate Employees
- 11 Jun 2019
- Book
These Aren't Beach Books, but Managers Should Read Them Anyway
- 22 Nov 2010
- Research & Ideas
Seven Strategy Questions: A Simple Approach for Better Execution
- 22 May 2019
- Research & Ideas
Forgiving Student Loan Debt Leads to Better Jobs, Stronger Consumers
- 25 Jan 2016
- Research & Ideas
When Negotiating a Price, Never Bid with a Round Number

Carliss Y. Baldwin

Carliss Y. Baldwin

William L. White Professor of Business Administration, Emerita

Contact

→ More Articles

Alan D. MacCormack

Alan D. MacCormack

MBA Class of 1949 Adjunct Professor of Business Administration

Contact

→ More Articles

Find Related Articles

Sign up for our weekly newsletter

Interested in improving your business? Learn about fresh research and ideas from Harvard Business School faculty.