2006 17th International Symposium on Software Reliability Engineering最新文献

A State Exploration-Based Approach to Testing Java Monitors 基于状态探索的Java监视器测试方法

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.9

Yu Lei, R. Carver, D. Kung, Vidur Gupta, Monica Hernandez

引用次数: 6

Using Historical In-Process and Product Metrics for Early Estimation of Software Failures 使用历史过程和产品度量对软件故障进行早期估计

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.50

Nachiappan Nagappan, T. Ball, Brendan Murphy

引用次数: 77

CAA-DRIP: a framework for implementing Coordinated Atomic Actions CAA-DRIP:实现协调原子动作的框架

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.18

Alfredo Capozucca, N. Guelfi, Patrizio Pelliccione, A. Romanovsky, A. Zorzo

{"title":"CAA-DRIP: a framework for implementing Coordinated Atomic Actions","authors":"Alfredo Capozucca, N. Guelfi, Patrizio Pelliccione, A. Romanovsky, A. Zorzo","doi":"10.1109/ISSRE.2006.18","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.18","url":null,"abstract":"This paper presents an implementation framework, called CAA-DRIP, that has been defined to allow a straightforward implementation of dependable distributed applications designed using the coordinated atomic action (CAA) paradigm. CAAs provide a coherent set of concepts adapted to the design of fault tolerant distributed systems that includes: structured transactions, distribution, cooperation, competition, and forward and backward error recovery mechanisms triggered by exceptions. DRIP (dependable remote interacting processes) is an efficient Java implementation framework, which provides support for implementing \"dependable multiparty interactions (DMI)\" which includes a general exception handling mechanism. As DMI has a softer exception handling semantics with respect to CAA semantics, a CAA design can be implemented by DRIP. The aim of the CAA-DRIP framework is to provide a set of Java classes that allows programmers to implement only the semantics of CAAs with the same terminology and concepts at the design and implementation levels. The new framework simplifies the implementation phase and at the same time reduces the size of the final system since it requires fewer number of instances for creating a CAA at runtime. Details of these improvements as well as a precise description of the CAAs behaviour in terms of state charts, which is used as a reference model to define the CAA-DRIP framework, are presented in this paper","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132837051","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 19

An Attack Simulator for Systematically Testing Program-based Security Mechanisms 用于系统测试基于程序的安全机制的攻击模拟器

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.12

B. Breech, Mike Tegtmeyer, L. Pollock

{"title":"An Attack Simulator for Systematically Testing Program-based Security Mechanisms","authors":"B. Breech, Mike Tegtmeyer, L. Pollock","doi":"10.1109/ISSRE.2006.12","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.12","url":null,"abstract":"The use of insecure programming practices has led to a large number of vulnerable programs that can be exploited for malicious purposes. These vulnerabilities are often difficult to find during traditional software testing. In response to these difficulties, various program-based security mechanisms have been proposed to help protect potentially vulnerable programs. Testing these security mechanisms, however, also can be difficult and is currently rather ad hoc. In this paper, we describe the design, implementation, and evaluation of an attack simulator that enables the systematic and semi-automatic testing and evaluation of the effectiveness of current and future security mechanisms by automatically providing numerous contexts for testing the reliability of the mechanisms. Capable of automatically creating attacks on running programs by dynamically adding code (but not modifying existing code), the attack simulator can run in different modes and simulate attacks at various program points systematically. Through a case study, we demonstrate how our tool can be used to test two well-known security mechanisms for stack smashing attacks in several different testing modes","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124046471","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 9

Monitoring the Security Health of Software Systems 监控软件系统的安全运行状况

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.32

A. Aggarwal, P. Jalote

{"title":"Monitoring the Security Health of Software Systems","authors":"A. Aggarwal, P. Jalote","doi":"10.1109/ISSRE.2006.32","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.32","url":null,"abstract":"Detecting security bugs during the development cycle of a software is extremely difficult as effective testing approaches for such bugs do not exist. Applications are often deployed without being tested for security vulnerabilities even though the application domain demands highly secure software. Hence there is a need to develop systems which can monitor such applications for security violations and take immediate actions if any violation occurs. In this paper we describe an approach for monitoring the security health of a software system. Our methodology involves an agent based approach which communicates with the health monitoring system running as an independent process. We make this agent a part of the application (binary) and modify the binary at appropriate locations to transfer the control to the agent attached. The agent sends critical information regarding the execution to the monitoring system. The monitoring system analyzes the data and takes suitable actions. Currently our system monitors the following security bugs uffer overflow, race conditions (time of check to time to use vulnerability), random number vulnerability and can be extended for other vulnerabilities also","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127972268","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 23

Metamodel-based Test Generation for Model Transformations: an Algorithm and a Tool 基于元模型的模型转换测试生成:一种算法和工具

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.27

E. Brottier, Franck Fleurey, Jim Steel, B. Baudry, Yves Le Traon

引用次数: 147

Web Application Testing with Customized Test Requirements - An Experimental Comparison Study 具有定制测试需求的Web应用程序测试-一项实验比较研究

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.51

S. Sampath, Sara Sprenkle, Emily Hill, L. Pollock

引用次数: 41

A Systematic Approach to Generate Inputs to Test UML Design Models 生成输入以测试UML设计模型的系统方法

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.10

T. Dinh-Trong, Sudipto Ghosh, R. France

引用次数: 59

Testing During Refactoring: Adding Aspects to Legacy Systems 重构期间的测试:向遗留系统添加方面

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.46

M. Mortensen, Sudipto Ghosh, J. Bieman

引用次数: 13

Using CLP to Automatically Generate Test Sequences for Synchronous Programs with Numeric Inputs and Outputs 使用CLP为具有数字输入和输出的同步程序自动生成测试序列

2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.49

Besnik Seljimi, I. Parissis

引用次数: 22