ISO-5055 Index

Extension ID

com.castsoftware.omg-ascqm-index

Description

ISO-5055 is a standard that is published by ISO: https://www.iso.org/standard/80623.html .

This extension will compute Quality Software Characteristic Measures as Business Criteria and Quality Measure Elements as Technical Criteria. All CAST rules that are tagged with a ISO-50555 related tag will contribute to the various Quality Measure Elements / Quality Software Characteristic Measures thereby allowing specific compliance ratios, grades and rule violations to be reported.

Compatibility

Product Release Supported
CAST Imaging Core ≥ 8.3.24 ✔️
CAST Engineering Dashboard ≥ 1.5 ✔️
CAST Health Dashboard ≥ 1.17 ✔️
CAST Security Dashboard ≥ 1.18 ✔️

ISO-5055 version

Version Supported
April 2021 ✔️

Download and installation instructions

The extension will not be automatically downloaded and installed in CAST Imaging Console. If you need to use it, should manually install the extension.

Configuration requirements

Generate a snapshot

A new snapshot must be generated (after the extension is installed) before results can be viewed. If you do not immediately see changes in the dashboard, please consider restarting Apache Tomcat/the web application and/or emptying your browser cache.

Optional Health Dashboard configuration options

It is possible to modify some of the default tiles provided out of the box and also add additional tiles in the CAST Health Dashboard for use with ISO-5055 data. See Manual configuration of Dashboard tiles using ISO-5055 data for more information.

These customizations can be used in the following Health Dashboard releases:

  • ≥ 1.27.0-funcrel
  • ≥ 2.1.0-funcrel

What results can you expect?

Once the analysis/snapshot generation has completed, you can view the results in the dashboards:

Assessment Model

Various Business and Technical Criteria will be added by the extension:

ISO-5055-Index

ID Name Type
1061000 ISO-5055-Index Business Criterion

Note that the ISO-5055-Index Business Criterion has all Technical Criteria listed below as contributors.

ISO-5055-Maintainability

ID Name
1061001 ISO-5055-Maintainability
1061046 CWE-407
1061056 CWE-478
1061057 CWE-480
1061058 CWE-484
1061061 CWE-561
1061065 CWE-570
1061066 CWE-571
1061088 CWE-783
1061105 CWE-1041
1061108 CWE-1045
1061110 CWE-1047
1061111 CWE-1048
1061114 CWE-1051
1061115 CWE-1052
1061116 CWE-1054
1061117 CWE-1055
1061121 CWE-1062
1061122 CWE-1064
1061128 CWE-1074
1061129 CWE-1075
1061131 CWE-1079
1061132 CWE-1080
1061135 CWE-1084
1061136 CWE-1085
1061137 CWE-1086
1061138 CWE-1087
1061141 CWE-1090
1061143 CWE-1093
1061145 CWE-1095

ISO-5055-Performance-Efficiency

ID Name
1061002 ISO-5055-Performance-Efficiency
1061044 CWE-401
1061045 CWE-404
1061049 CWE-424
1061085 CWE-772
1061086 CWE-775
1061106 CWE-1042
1061107 CWE-1043
1061109 CWE-1046
1061112 CWE-1049
1061113 CWE-1050
1061118 CWE-1057
1061120 CWE-1060
1061124 CWE-1067
1061126 CWE-1072
1061127 CWE-1073
1061140 CWE-1089
1061142 CWE-1091
1061144 CWE-1094

ISO-5055-Reliability

ID Name
1061003 ISO-5055-Reliability
1061021 CWE-119
1061022 CWE-120
1061023 CWE-123
1061024 CWE-125
1061026 CWE-130
1061027 CWE-131
1061029 CWE-170
1061030 CWE-194
1061031 CWE-195
1061032 CWE-196
1061033 CWE-197
1061034 CWE-248
1061035 CWE-252
1061038 CWE-366
1061039 CWE-369
1061040 CWE-390
1061041 CWE-391
1061042 CWE-392
1061043 CWE-394
1061044 CWE-401
1061045 CWE-404
1061047 CWE-415
1061048 CWE-416
1061049 CWE-424
1061051 CWE-456
1061053 CWE-459
1061054 CWE-476
1061057 CWE-480
1061058 CWE-484
1061060 CWE-543
1061062 CWE-562
1061064 CWE-567
1061067 CWE-595
1061068 CWE-597
1061074 CWE-662
1061076 CWE-667
1061077 CWE-672
1061078 CWE-681
1061079 CWE-682
1061080 CWE-703
1061081 CWE-704
1061083 CWE-758
1061084 CWE-764
1061085 CWE-772
1061086 CWE-775
1061089 CWE-786
1061090 CWE-787
1061091 CWE-788
1061094 CWE-805
1061095 CWE-820
1061096 CWE-821
1061097 CWE-822
1061098 CWE-823
1061099 CWE-824
1061100 CWE-825
1061101 CWE-833
1061102 CWE-835
1061103 CWE-908
1061108 CWE-1045
1061114 CWE-1051
1061119 CWE-1058
1061123 CWE-1066
1061125 CWE-1070
1061130 CWE-1077
1061131 CWE-1079
1061133 CWE-1082
1061134 CWE-1083
1061138 CWE-1087
1061139 CWE-1088
1061146 CWE-1096
1061147 CWE-1097
1061148 CWE-1098

ISO-5055-Security

ID Name
1061004 ISO-5055-Security
1061010 CWE-22
1061011 CWE-23
1061012 CWE-36
1061013 CWE-77
1061014 CWE-78
1061015 CWE-79
1061016 CWE-88
1061017 CWE-89
1061018 CWE-90
1061019 CWE-91
1061020 CWE-99
1061021 CWE-119
1061022 CWE-120
1061023 CWE-123
1061024 CWE-125
1061025 CWE-129
1061026 CWE-130
1061027 CWE-131
1061028 CWE-134
1061030 CWE-194
1061031 CWE-195
1061032 CWE-196
1061033 CWE-197
1061035 CWE-252
1061036 CWE-259
1061037 CWE-321
1061038 CWE-366
1061039 CWE-369
1061044 CWE-401
1061045 CWE-404
1061049 CWE-424
1061050 CWE-434
1061051 CWE-456
1061052 CWE-457
1061055 CWE-477
1061057 CWE-480
1061059 CWE-502
1061060 CWE-543
1061063 CWE-564
1061064 CWE-567
1061065 CWE-570
1061066 CWE-571
1061069 CWE-606
1061070 CWE-611
1061071 CWE-624
1061072 CWE-643
1061073 CWE-652
1061074 CWE-662
1061075 CWE-665
1061076 CWE-667
1061077 CWE-672
1061078 CWE-681
1061079 CWE-682
1061082 CWE-732
1061085 CWE-772
1061086 CWE-775
1061087 CWE-778
1061088 CWE-783
1061089 CWE-786
1061090 CWE-787
1061091 CWE-788
1061092 CWE-789
1061093 CWE-798
1061094 CWE-805
1061095 CWE-820
1061096 CWE-821
1061097 CWE-822
1061098 CWE-823
1061099 CWE-824
1061100 CWE-825
1061102 CWE-835
1061104 CWE-917

Health Dashboard

v. ≥ 1.27 / ≥ 2.1.0

A dedicated ISO-5055 view is available allowing you to swap between tiles showing ISO-5055 data and tiles showing standard data. The ISO-5055 view is accessed using the drop down available at single or multi-application level as shown in the screenshots below. By default, the tiles in this view use the root ISO-5055 Business Criterion (ISO-5055), and show either of the following data by default:

Release Data displayed by default Description
≥ 2.5.x Compliance ratio
2.1.x - 2.4.x and ≥ 1.27.x Grades

The tiles can be modified as follows (see Manual configuration of Dashboard tiles using ISO-5055 data ) for more information::

  • to use any of the ISO-5055 business/technical criterion for the “qualityIndicator” parameter:
    • ISO-5055
    • ISO-5055-SECURITY
    • ISO-5055-RELIABILITY
    • ISO-5055-PERFORMANCE-EFFICIENCY
    • ISO-5055-MAINTAINABILITY
  • the “mode” can be changed manually to show any of the following, instead of the default:
    • Grade
    • Compliance ratio
    • Number of violations

v. 1.26 / 2.0 only

Five ISO-5055 specific tiles will be available at both single and multi-application level - one for the Business Criteria ISO-5055 Index and the rest for the four Technical Criteria. In these releases, grade information is displayed by default.

v. ≤ 1.25

No tiles will be provided to display data for this extension, however it is possible to create tiles manually to display Grade, Compliance, and Violation data directly from this extension using the Industry Standard/s tile plugin available in v. ≥ 1.17. Clicking on any of these tiles will display a list of the rules that have been tagged with the specified standard as provided by the extension. Compliance percentage is also displayed in a “bubble”.

Examples for cmp.json and app.json:

cmp.json

Configuration to create a “gauge” tile at portfolio level (multi-app level) to show a ISO-5055-Index Business Criterion tile:

{
  "id": 1234,
  "plugin": "IndustryStandards",
  "color": "black",
  "parameters": {
    "type": "ISO-5055",
    "title": "ISO-5055-Index",
    "widget": "gauge",
    "industryStandard": {
        "id": "1061000",
        "mode": "grade",
        "format": "0.00",
        "description": "ISO-5055-Index in grade format"
    }
  }
}
app.json

Configuration to create a “number of violations” tile at application level (single app level) to show a ISO-5055-Maintainability Business Criterion tile:

{
  "id": 1236,
  "plugin": "IndustryStandard",
  "color": "orange",
  "parameters": {
    "type": "ISO-5055",    
    "title": "ISO-5055-Maintainability",
    "industryStandard": {
        "id": "1061001",
        "mode": "violations",
        "format": "0,000",
        "description": "ISO-5055-Maintainability in number of violations format" 
    }
  }
}

Engineering/Security Dashboard

v. ≥ 1.26

An ISO-5055 tile is displayed by default taking data from the Business Criterion ISO-5055 Index for the Engineering Dashboard and the Technical Criterion ISO-5055 Security for the Security Dashboard. The number of violations is shown in both cases:

Drilling down through this tile will take you to the Risk Investigation view, where the focus will be set to the ISO-5055 Assessment Model (1) showing only the ISO-5055 metrics (2):

v. ≤ 1.25

Out of the box, no tiles will be provided to display data for this extension, however it is possible to create tiles manually to display Violation data directly from this extension using the Industry Standard/s tile plugin in v. ≥ 1.18 of the Engineering Dashboard. See Engineering Dashboard tile management  for more information. Clicking on the tile navigates to Risk investigation view and the specified Industry Standard will be selected in the Health Factor table.

In addition, as above, the ISO-5055 Assessment Model will be made available in the Risk Investigation view.

RestAPI

The RestAPI can be used to query both the Dashboard (AED) and Measurement (AAD) schemas for results, for example: