{"title":"Model Checking Security Pattern Compositions","authors":"Jing Dong, Tu Peng, Yajing Zhao","doi":"10.1109/QSIC.2007.37","DOIUrl":"https://doi.org/10.1109/QSIC.2007.37","url":null,"abstract":"Security patterns capture best practice on secure software design and development. They document typical solutions to security problems. To ensure security, large software system design may apply many security patterns to solve different problems. Although each security pattern describes a good design guideline, the compositions of these security patterns may not be consistent and encounter problems and flaws. In this paper, we present an approach to model checking the compositions of security patterns. In this way, the properties of the security patterns can be checked by a model checker when they are composed. Composition errors and problems can be discovered early in the design stage. We also use a case study to illustrate our approach and show the detection of several errors.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"321 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115348475","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The Oracle Problem for Testing against Quantified Properties","authors":"Patricia D. L. Machado, W. Andrade","doi":"10.1109/QSIC.2007.63","DOIUrl":"https://doi.org/10.1109/QSIC.2007.63","url":null,"abstract":"The oracle problem for testing from quantified properties is discussed and illustrated by proposed solutions for first-order logic and computation tree logic (CTL) properties. Unless constraints are placed, it is not always possible to generate feasible test suites from which accurate conclusions on their execution results can be reached regarding conformity with the intended property.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116189243","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"On the Collaborative Development of Para-Consistent Conceptual Models","authors":"E. Bagheri, A. Ghorbani","doi":"10.1109/QSIC.2007.39","DOIUrl":"https://doi.org/10.1109/QSIC.2007.39","url":null,"abstract":"There have been various proposals for the formalization of appropriate viewpoint-based frameworks. Each of these approaches have been devised with a specific motive and to address an important concern. The model that we propose in this paper attempts to provide a basis for conceptual model integration particularly with the existence of partial ignorance and uncertainty. The model attempts to formalize the degree of uncertainty present in experts' expressions, and proposes tools for conceptual model integration and formal consensus building between the involved viewpoints. Metrics for measuring integration effectiveness have also been proposed in this paper. The model proposed in this paper has been employed in a case study to collaboratively develop a conceptual model for the Pet Store application.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117052345","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"OPTIMA: An Ontology-Based PlaTform-specIfic software Migration Approach","authors":"Hong Zhou, Jian Kang, Feng Chen, Hongji Yang","doi":"10.1109/QSIC.2007.40","DOIUrl":"https://doi.org/10.1109/QSIC.2007.40","url":null,"abstract":"Software migration is an inherently knowledge intensive activity, which requires a great amount of expertise and experience from different sources. Knowledge-based approach to software migration has a great potential for improving traditional approaches. In this paper, an Ontology-based PlaTform-specific software Migration Approach (OPTIMA) is proposed. Firstly, the background and the related work are introduced, and the ontology design for platform- specific software migration is discussed. Secondly, the architecture and workflow of OPTIMA are illustrated with a prototype tool. Thirdly, the case study is used for experiments with the approach and the prototype tool, and finally, the conclusion is drawn and further research directions are speculated.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"139 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127664651","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
K. Maly, S. Zeil, M. Zubair, A. Amrou, A. Aazhar, N. Ratkal
{"title":"A Scriptable, Statistical Oracle for a Metadata Extraction System","authors":"K. Maly, S. Zeil, M. Zubair, A. Amrou, A. Aazhar, N. Ratkal","doi":"10.1109/QSIC.2007.9","DOIUrl":"https://doi.org/10.1109/QSIC.2007.9","url":null,"abstract":"An oracle is described for dynamic validation of an application (metadata extraction from scanned documents) where a moderate failure rate is acceptable provided that instances of failures during operation can be identified. The oracle combines a variety of deterministic tests and statistical tests based upon characteristics of the document collection on which the system operates. Because this system must adapt to a variety of document collections with different characteristics, a scripting language is developed that binds combinations of tests to the metadata fields expected in a given document collection. The suitability of the oracle is demonstrated by an experiment measuring its ability to mimic human judgments as to which of several alternate outputs for the same document would be preferred.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"92 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124419775","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Statistical Metamorphic Testing Testing Programs with Random Output by Means of Statistical Hypothesis Tests and Metamorphic Testing","authors":"Ralph Guderlei, Johannes Mayer","doi":"10.1109/QSIC.2007.54","DOIUrl":"https://doi.org/10.1109/QSIC.2007.54","url":null,"abstract":"Testing software with random output is a challenging task as the output corresponding to a given input differs from execution to execution. Therefore, the usual approaches to software testing are not applicable to randomized software. Instead, statistical hypothesis tests have been proposed for testing those applications. To apply these statistical hypothesis tests, either knowledge about the theoretical values of statistical characteristics of the program output (e. g. the mean) or a reference implementation (e. g. a legacy system) are required to apply statistical hypothesis tests. But often, both are not available. In the present paper, it is discussed how a testing method called Metamorphic Testing can be used to construct statistical hypothesis tests without knowing exact theoretical characteristics or having a reference implementation. For that purpose, two or more independent output sequences are generated by the implementation under test (IUT). Then, these sequences are compared according to the metamorphic relation using statistical hypothesis tests.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133190517","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"An Approach to Integration Testing of Object-Oriented Programs","authors":"Zhe Li, T. Maibaum","doi":"10.1109/QSIC.2007.13","DOIUrl":"https://doi.org/10.1109/QSIC.2007.13","url":null,"abstract":"Object-oriented programming has some unique features which facilitate software reuse and component-based development. However, testing object-oriented programs using only traditional techniques is unlikely to find the faults caused by these features. The problem is that few integration testing techniques have been systematically studied or defined. We present a novel approach to generate and execute test cases for object-oriented programs from UML diagrams. We have designed an approach to implement test cases using the concept of coordination contract. A coordination contract, related to the idea of the active association class in UML, defines connections among a group of objects without interfering with their implementations. By using the contract, test case generation and execution can be completed automatically. A prototype tool has been developed to automatically derive the contracts based on the mechanism of test case generation mentioned above.","PeriodicalId":136227,"journal":{"name":"Seventh International Conference on Quality Software (QSIC 2007)","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130953603","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}