2012 IEEE 23rd International Symposium on Software Reliability Engineering最新文献_第3页

Compositional Verification of Sensor Software Using Uppall 基于upall的传感器软件组成验证

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.5

M. Hammad, J. Cook

引用次数: 6

Dynamic Analysis of Upgrades in C/C++ Software C/ c++软件升级的动态分析

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1007/978-3-319-10623-6_8

F. Pastore, L. Mariani, A. Goffi, M. Oriol, M. Wahler

引用次数: 18

An Assertions-Based Approach to Verifying the Absence Property Pattern 基于断言的缺席属性模式验证方法

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.11

M. Frappier, A. Mammar

引用次数: 5

On the Verification and Validation of Signature-Based, Network Intrusion Detection Systems 基于签名的网络入侵检测系统的验证与验证

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.16

Frédéric Massicotte, Y. Labiche

引用次数: 8

Recycling Test Cases to Detect Security Vulnerabilities 回收测试用例以检测安全漏洞

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.3

João Antunes, N. Neves

引用次数: 7

Static Analysis of Model Transformations for Effective Test Generation 有效测试生成模型转换的静态分析

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.7

Jean-Marie Mottu, S. Sen, M. Tisi, Jordi Cabot

{"title":"Static Analysis of Model Transformations for Effective Test Generation","authors":"Jean-Marie Mottu, S. Sen, M. Tisi, Jordi Cabot","doi":"10.1109/ISSRE.2012.7","DOIUrl":"https://doi.org/10.1109/ISSRE.2012.7","url":null,"abstract":"Model transformations are an integral part of several computing systems that manipulate interconnected graphs of objects called models in an input domain specified by a metamodel and a set of invariants. Test models are used to look for faults in a transformation. A test model contains a specific set of objects, their interconnections and values for their attributes. Can we automatically generate an effective set of test models using knowledge from the transformation? We present a white-box testing approach that uses static analysis to guide the automatic generation of test inputs for transformations. Our static analysis uncovers knowledge about how the input model elements are accessed by transformation operations. This information is called the input metamodel footprint due to the transformation. We transform footprint, input metamodel, its invariants, and transformation pre-conditions to a constraint satisfaction problem in Alloy. We solve the problem to generate sets of test models containing traces of the footprint. Are these test models effective? With the help of a case study transformation we evaluate the effectiveness of these test inputs. We use mutation analysis to show that the test models generated from footprints are more effective (97.62% avg. mutation score) in detecting faults than previously developed approaches based on input domain coverage criteria (89.9% avg.) and unguided generation (70.1% avg.).","PeriodicalId":172003,"journal":{"name":"2012 IEEE 23rd International Symposium on Software Reliability Engineering","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-11-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114883081","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 39

Oracle-Centric Test Case Prioritization 以oracle为中心的测试用例优先级

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.13

Matthew Staats, Pablo Loyola, G. Rothermel

{"title":"Oracle-Centric Test Case Prioritization","authors":"Matthew Staats, Pablo Loyola, G. Rothermel","doi":"10.1109/ISSRE.2012.13","DOIUrl":"https://doi.org/10.1109/ISSRE.2012.13","url":null,"abstract":"Recent work in testing has demonstrated the benefits of considering test oracles in the testing process. Unfortunately, this work has focused primarily on developing techniques for generating test oracles, in particular techniques based on mutation testing. While effective for test case generation, existing research has not considered the impact of test oracles in the context of regression testing tasks. Of interest here is the problem of test case prioritization, in which a set of test cases are ordered to attempt to detect faults earlier and to improve the effectiveness of testing when the entire set cannot be executed. In this work, we propose a technique for prioritizing test cases that explicitly takes into account the impact of test oracles on the effectiveness of testing. Our technique operates by first capturing the flow of information from variable assignments to test oracles for each test case, and then prioritizing to ``cover'' variables using the shortest paths possible to a test oracle. As a result, we favor test orderings in which many variables impact the test oracle's result early in test execution. Our results demonstrate improvements in rate of fault detection relative to both random and structural coverage based prioritization techniques when applied to faulty versions of three synchronous reactive systems.","PeriodicalId":172003,"journal":{"name":"2012 IEEE 23rd International Symposium on Software Reliability Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-11-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129741867","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 38

Using Multiclass Machine Learning Methods to Classify Malicious Behaviors Aimed at Web Systems 使用多类机器学习方法对针对Web系统的恶意行为进行分类

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.30

K. Goseva-Popstojanova, Goce Anastasovski, Risto Pantev

{"title":"Using Multiclass Machine Learning Methods to Classify Malicious Behaviors Aimed at Web Systems","authors":"K. Goseva-Popstojanova, Goce Anastasovski, Risto Pantev","doi":"10.1109/ISSRE.2012.30","DOIUrl":"https://doi.org/10.1109/ISSRE.2012.30","url":null,"abstract":"The number of vulnerabilities and attacks on Web systems show an increasing trend and tend to dominate on the Internet. Furthermore, due to their popularity and users ability to create content, Web 2.0 applications have become particularly attractive targets. These trends clearly illustrate the need for better understanding of malicious cyber activities based on both qualitative and quantitative analysis. This paper is focused on multiclass classification of malicious Web activities using three supervised machine learning methods: J48, PART, and Support Vector Machines (SVM). The empirical analysis is based on data collected in duration of nine months by a high interaction honey pot consisting of a three-tier Web system, which included Web 2.0 applications (i.e., a blog and wiki). Our results show that supervised learning methods can be used to efficiently distinguish among multiple vulnerability scan and attack classes, with high recall and precision values for all but several very small classes. For our dataset, decision tree based methods J48 and PART perform slightly better than SVM in terms of overall accuracy and weighted recall. Additionally, J48 and PART require less than half of the features (i.e., session attributes) used by SVM, as well as they execute much faster. Therefore, they seem to be clear methods of choice.","PeriodicalId":172003,"journal":{"name":"2012 IEEE 23rd International Symposium on Software Reliability Engineering","volume":"145 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2012-11-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129838550","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17

On the Use of Boundary Scan for Code Coverage of Critical Embedded Software 边界扫描在关键嵌入式软件代码覆盖中的应用研究

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.29

J. Cunha, R. Barbosa, Gilberto Rodrigues

引用次数: 3

AutoInSpec: Using Missing Test Coverage to Improve Specifications in GUIs AutoInSpec:使用缺失的测试覆盖来改进gui中的规格说明

2012 IEEE 23rd International Symposium on Software Reliability Engineering Pub Date : 2012-11-27 DOI: 10.1109/ISSRE.2012.33

Myra B. Cohen, Si Huang, A. Memon

引用次数: 15