2006 17th International Symposium on Software Reliability Engineering最新文献

筛选
英文 中文
Studying the Characteristics of a "Good" GUI Test Suite 研究“好的”GUI测试套件的特征
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.45
Qing Xie, A. Memon
{"title":"Studying the Characteristics of a \"Good\" GUI Test Suite","authors":"Qing Xie, A. Memon","doi":"10.1109/ISSRE.2006.45","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.45","url":null,"abstract":"The widespread deployment of graphical-user interfaces (GUIs) has increased the overall complexity of testing. A GUI test designer needs to perform the daunting task of adequately testing the GUI, which typically has very large input interaction spaces, while considering tradeoffs between GUI test suite characteristics such as the number of test cases (each modeled as a sequence of events), their lengths, and the event composition of each test case. There are no published empirical studies on GUI testing that a GUI test designer may reference to make decisions about these characteristics. Consequently, in practice, very few GUI testers know how to design their test suites. This paper takes the first step towards assisting in GUI test design by presenting an empirical study that evaluates the effect of these characteristics on testing cost and fault detection effectiveness. The results show that two factors significantly effect the fault-detection effectiveness of a test suite: (1) the diversity of states in which an event executes and (2) the event coverage of the suite. Test designers need to improve the diversity of states in which each event executes by developing a large number of short test cases to detect the majority of \"shallow\" faults, which are artifacts of modern GUI design. Additional resources should be used to develop a small number of long test cases to detect a small number of \"deep\" faults","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"43 12","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114129947","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 53
Mining Interface Specifications for Generating Checkable Robustness Properties 用于生成可检查的健壮性属性的挖掘接口规范
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.29
Mithun P. Acharya, Tao Xie, Jun Xu
{"title":"Mining Interface Specifications for Generating Checkable Robustness Properties","authors":"Mithun P. Acharya, Tao Xie, Jun Xu","doi":"10.1109/ISSRE.2006.29","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.29","url":null,"abstract":"A software system interacts with its environment through interfaces. Improper handling of exceptional returns from system interfaces can cause robustness problems. Robustness of software systems are governed by various temporal properties related to interfaces. Static verification has been shown to be effective in checking these temporal properties. But manually specifying these properties is cumbersome and requires the knowledge of interface specifications, which are often either unavailable or undocumented. In this paper, we propose a novel framework to automatically infer system-specific interface specifications from program source code. We use a model checker to generate traces related to the interfaces. From these model checking traces, we infer interface specification details such as return value on success or failure. Based on these inferred specifications, we translate generically specified interface robustness rules to concrete robustness properties verifiable by static checking. Hence the generic rules can be specified at an abstract level that needs no knowledge of the source code, system, or interfaces. We implement our framework for an existing static analyzer that employs push down model checking and apply the analyzer to the well known POSIX-API system interfaces. We found 28 robustness violations in 10 open source packages using our framework","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129240814","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 35
Softgoal Traceability Patterns 软目标跟踪模式
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.42
Jesse Fletcher, J. Cleland-Huang
{"title":"Softgoal Traceability Patterns","authors":"Jesse Fletcher, J. Cleland-Huang","doi":"10.1109/ISSRE.2006.42","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.42","url":null,"abstract":"Goal oriented methods help software engineers to model high-level systemic goals, propose and evaluate architectural solutions, and detect and resolve conflicts that occur. This paper describes a new technique, known as softgoal traceability patterns, for enabling reusable class mechanisms such as design patterns to be applied within a goal-oriented framework. Softgoal traceability patterns increase the reliability of a design in respect to its goals through the automated generation of design elements and the establishment of bidirectional traces between goals and design. These traces are used to monitor the integrity of the design in respect to architectural quality goals, and to support impact analysis when design changes are proposed. Softgoal traceability patterns are described using the well-known Observer pattern and then expanded with a more complex pattern that incorporates authentication","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116001171","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 18
Combining Replication with Transaction Processing for Enhanced Reliability in J2EE 结合复制和事务处理以增强J2EE中的可靠性
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.20
Lin Zuo, Shaohua Liu, Jun Wei
{"title":"Combining Replication with Transaction Processing for Enhanced Reliability in J2EE","authors":"Lin Zuo, Shaohua Liu, Jun Wei","doi":"10.1109/ISSRE.2006.20","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.20","url":null,"abstract":"The multi-tier architecture of J2EE provides good modularity and scalability by partitioning an application into several tiers, and becomes the mainstream for distributed applications development on Internet/Intranet. Current reliability solutions in this architecture are typically dependent on either replication, which provides at-least-once guarantee, or transaction processing, which guarantees at-most-once semantics. In practice, the end-to-end reliability guarantee of exactly-once semantics is necessary, especially for some complex transaction scenarios, such as client transaction or nested transaction. In this paper, we describe a fault-tolerant algorithm that can provide this enhanced reliability support through combining replication and transaction processing. We use passive replication to protect business processing at middle-tier application server. A client stub transparently intercepts client request and automatically resubmits it in the case of failure. In addition, transaction coordinator is passively replicated to prevent the blocking problem of distributed transaction. Also, different application scenarios are discussed to illustrate the effectiveness of this algorithm, and a performance study based on our implementation in J2EE application server, OnceAS, shows the overhead of it is acceptable","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"43 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128375356","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Tool-Supported Verification of Contingency Software Design in Evolving, Autonomous Systems 演化自治系统中偶然性软件设计的工具支持验证
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.48
R. Lutz, A. Patterson-Hine, A. Bajwa
{"title":"Tool-Supported Verification of Contingency Software Design in Evolving, Autonomous Systems","authors":"R. Lutz, A. Patterson-Hine, A. Bajwa","doi":"10.1109/ISSRE.2006.48","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.48","url":null,"abstract":"Advances in software autonomy can support system robustness to a broader range of operational anomalies, called contingencies, than ever before. Contingency management includes, but goes beyond, traditional fault protection. Increased autonomy to achieve contingency management brings with it the challenge of how to verify that the software can detect and diagnose contingencies when they occur. The approach used in this work to investigate the verification was two-fold: (1) to integrate in a single model the representation of the contingencies and of the data signals and software monitors required to identify those contingencies, and (2) to use tool-supported verification of the diagnostics design to identify gaps in coverage of the contingencies. Results presented here indicate that tool-supported verification of the adequacy and correct behavior of such diagnostic software for contingency management can improve on-going contingency analysis, thereby reducing the risk that change has introduced gaps in the contingency software","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"9 4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131108833","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Evaluating the Reliability of Credential Hardening through Keystroke Dynamics 通过击键动力学评估凭证加固的可靠性
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.25
Nick Bartlow, B. Cukic
{"title":"Evaluating the Reliability of Credential Hardening through Keystroke Dynamics","authors":"Nick Bartlow, B. Cukic","doi":"10.1109/ISSRE.2006.25","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.25","url":null,"abstract":"Most computer systems rely on usernames and passwords as a mechanism for authentication and access control. These credential sets offer weak protection to a broad scope of applications with differing levels of sensitivity. Traditional physiological biometric systems such as fingerprint, face, and iris recognition are not readily deployable in remote authentication schemes. Keystroke dynamics provide the ability to combine the ease of use of username/password schemes with the increased trustworthiness associated with biometrics. Our research extends previous work on keystroke dynamics by incorporating shift-key patterns. The system is capable of operating at various points on a traditional ROC curve depending on application specific security needs. A 1% false accept rate is attainable at a 14% false reject rate. An equal error rate of 5% is suitable for systems requiring a relatively low security. As a username password authentication scheme, our approach decreases the system penetration rate associated with compromised passwords by 95%-99%. Said performance measures can be further improved through optimization of the classification algorithm on a user specific basis","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"23 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134012109","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 81
A Candidate Fault Model for AspectJ Pointcuts AspectJ切入点的候选故障模型
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-07 DOI: 10.1109/ISSRE.2006.6
Jon S. Bækken, R. Alexander
{"title":"A Candidate Fault Model for AspectJ Pointcuts","authors":"Jon S. Bækken, R. Alexander","doi":"10.1109/ISSRE.2006.6","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.6","url":null,"abstract":"We present a candidate fault model for pointcuts in AspectJ programs. The fault model identifies faults that we believe are likely to occur when writing pointcuts in the AspectJ language. Categories of fault types are identified, and each individual fault type is described as categorized. We argue that a fault model that focuses on the unique constructs of the AspectJ language is needed for the systematic and effective testing of AspectJ programs. Our pointcut fault model is a first step towards such a model","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"16 1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116391693","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 44
Modeling the Performance of Border Inspections with Electronic Travel Documents 基于电子旅行证件的边境检查绩效建模
2006 17th International Symposium on Software Reliability Engineering Pub Date : 2006-11-01 DOI: 10.1109/ISSRE.2006.31
Paola Bracchi, B. Cukic, V. Cortellessa
{"title":"Modeling the Performance of Border Inspections with Electronic Travel Documents","authors":"Paola Bracchi, B. Cukic, V. Cortellessa","doi":"10.1109/ISSRE.2006.31","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.31","url":null,"abstract":"Increased security risk in international travel has resulted in the creation of new programs to determine the admissibility of foreign travelers at official ports of entry within a country. Primary program goals are improving border security and, at the same time, facilitating the flow of legitimate travelers. Major program requirements include the adoption of machine readable travel documents (i.e., passports, visas, etc.), the use of biometric identifiers, and the interoperability among multiple information systems for travelersy identity verification and background checks. Performance analysis of a border inspection system early in its development life-cycle is essential to predict its ability to meet established performance goals, to identify key performance drivers and potential bottlenecks and to suggest possible design improvements. This paper presents our experience with performance evaluation of a hypothetical inspection system. We adopt an analytical modeling technique based on layered queuing networks. Compared with similar studies which use extensive simulations, we observe that our methodology achieves comparably accurate results while being simpler and less costly","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"14 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-11-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122193714","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
The Relevance of Software Modeling to the Software Industry 软件建模与软件工业的相关性
2006 17th International Symposium on Software Reliability Engineering Pub Date : 1900-01-01 DOI: 10.1109/issre.2006.47
{"title":"The Relevance of Software Modeling to the Software Industry","authors":"","doi":"10.1109/issre.2006.47","DOIUrl":"https://doi.org/10.1109/issre.2006.47","url":null,"abstract":"A good percentage of papers submitted to software development related conferences are related to the subject of modeling. To many researchers, model-driven development is the answer to most software reliability/development problems. They argue that models help the architects to reason about the problem and solution domains, and can potentially be used to formally prove that any solution meets its specification (again another area of considerable research interest). But in the midst of this massive interest in modeling from the research fraternity, industry appears to take a more ambivalent attitude, often viewing modeling as a useful methodology but having limitations. Additionally some in industry are moving away from formal methodologies, in applying techniques such as XP or agile methods.","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124138157","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Software Security: Building Security In 软件安全:构建安全
2006 17th International Symposium on Software Reliability Engineering Pub Date : 1900-01-01 DOI: 10.1109/ISSRE.2006.43
G. McGraw
{"title":"Software Security: Building Security In","authors":"G. McGraw","doi":"10.1109/ISSRE.2006.43","DOIUrl":"https://doi.org/10.1109/ISSRE.2006.43","url":null,"abstract":"Summary form only given. Software security has come a long way in the last few years, but we've really only just begun. I will present a detailed approach to getting past theory and putting software security into practice. The three pillars of software security are applied risk management, software security best practices (which I call touchpoints), and knowledge. By describing a manageably small set of touchpoints based around the software artifacts that you already produce, I avoid religious warfare over process and get on with the business of software security. That means you can adopt the touchpoints without radically changing the way you work. The touchpoints I will describe include: code review using static analysis tools; architectural risk analysis; penetration testing; security testing; abuse case development; and security requirements. Like the yin and the yang, software security requires a careful balance-attack and defense, exploiting and designing, breaking and building-bound into a coherent package. Create your own Security Development Lifecycle by enhancing your existing software development lifecycle with the touchpoints","PeriodicalId":373353,"journal":{"name":"2006 17th International Symposium on Software Reliability Engineering","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"1900-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"120859037","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 73
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书