2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)最新文献_第3页

Profiling Android Vulnerabilities 分析Android漏洞

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.34

Matthieu Jimenez, Mike Papadakis, Tegawendé F. Bissyandé, Jacques Klein

引用次数: 23

Testing and Debugging in Continuous Integration with Budget Quotas on Test Executions 持续集成中的测试和调试与测试执行的预算配额

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.66

Bo Jiang, W. Chan

{"title":"Testing and Debugging in Continuous Integration with Budget Quotas on Test Executions","authors":"Bo Jiang, W. Chan","doi":"10.1109/QRS.2016.66","DOIUrl":"https://doi.org/10.1109/QRS.2016.66","url":null,"abstract":"In Continuous Integration, a software application is developed through a series of development sessions, each with limited time allocated to testing and debugging on each of its modules. Test Case Prioritization can help execute test cases with higher failure estimate earlier in each session. When the testing time is limited, executing such prioritized test cases may only produce partial and prioritized execution coverage data. To identify faulty code, existing Spectrum-Based Fault Localization techniques often use execution coverage data but without the assumption of execution coverage priority. Is it possible to decompose these two steps for optimization within individual steps? In this paper, we study to what extent the selection of test case prioritization techniques may reduce its influence on the effectiveness of spectrum-based fault localization, thereby showing the possibility to decompose the process of continuous integration for optimization in workflow steps. We present a controlled experiment using the Siemens suite as subjects, nine test case prioritization techniques and four spectrum-based fault localization techniques. The findings showed that the studied test cases prioritization and spectrum-based fault localization can be customized separately, and, interestingly, prioritization over a smaller test suite can enable spectrum-based fault localization to achieve higher accuracy by assigning faulty statements with higher ranks.","PeriodicalId":412973,"journal":{"name":"2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129917339","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

A Model to Estimate First-Order Mutation Coverage from Higher-Order Mutation Coverage 从高阶突变覆盖估计一阶突变覆盖的模型

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.48

Ali Parsai, Alessandro Murgia, S. Demeyer

引用次数: 11

Precondition Calculation for Loops Iterating over Data Structures 数据结构上循环迭代的前提条件计算

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.25

Juan Zhai, Bin Li, Zhenhao Tang, Jianhua Zhao, Xuandong Li

{"title":"Precondition Calculation for Loops Iterating over Data Structures","authors":"Juan Zhai, Bin Li, Zhenhao Tang, Jianhua Zhao, Xuandong Li","doi":"10.1109/QRS.2016.25","DOIUrl":"https://doi.org/10.1109/QRS.2016.25","url":null,"abstract":"Precondition calculation is a fundamental program verification technique. Many previous works tried to solve this problem, but ended with limited capability due to loop statements. We conducted a survey on loops manipulating commonly-used data structures occurring in several real-world open-source programs, and found that about 80% of such loops iterate over elements of a data structure, indicating that automatic calculation of preconditions with respect to post-conditions of these loops would cover a great number of real-world programs and greatly ease code verification tasks. In this paper, we specify the execution effect of a program statement using the memories modified by the statement and the new values stored in these memories after executing the statement. Thus, conditional statements and loop statements can be uniformly reduced to a sequence of assignments. Also we present an approach to calculate preconditions with respect to given post-conditions of various program statements including loops that iterate over elements of commonly-used data structures (e.g., acyclic singly-linked lists) based on execution effects of these statements. With execution effects, post-conditions and loop invariants can also be generated. Our approach handles various types of data including numeric, boolean, arrays and user-defined structures. We have implemented the approach and integrated it into the code verification tool, Accumulator. We also evaluated the approach with a variety of programs, and the results show that our approach is able to calculate preconditions for different kinds of post-conditions, including linear ones and universally quantified ones. Preconditions generated with our approach can ease the verification task by reducing the burden of providing loop invariants and preconditions of loop statements manually, which improves the automatic level and efficiency, and makes the verification less error-prone.","PeriodicalId":412973,"journal":{"name":"2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129956147","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Improving Protocol Passive Testing through "Gedanken" Experiments with Finite State Machines 利用有限状态机的“Gedanken”实验改进协议被动测试

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.43

N. Kushik, Jorge López, A. Cavalli, N. Yevtushenko

{"title":"Improving Protocol Passive Testing through \"Gedanken\" Experiments with Finite State Machines","authors":"N. Kushik, Jorge López, A. Cavalli, N. Yevtushenko","doi":"10.1109/QRS.2016.43","DOIUrl":"https://doi.org/10.1109/QRS.2016.43","url":null,"abstract":"This paper is devoted to study the use of 'gedanken' experiments with Finite State Machines (FSMs) for protocol passive testing optimization. We discuss how the knowledge obtained from the state identification of an implementation under test (IUT) can be utilized for effective IUT monitoring. Differently from active testing techniques, such identification is performed by only observing the IUT behavior. If the state identification is possible (at least partially), then this fact allows to reduce the number of properties (test purposes) to be checked at certain execution point(s). Correspondingly, this allows to simplify and/or accelerate, i.e. improve the monitoring process by verifying the system behavior only at critical states against the appropriate set of properties associated with a given state. The paper discusses which 'gedanken' experiments can be considered for this purpose and how they can be derived for various specifications of communication protocols. The results presented in the paper are followed by an illustrative protocol example that demonstrates the efficiency of the proposed approach.","PeriodicalId":412973,"journal":{"name":"2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)","volume":"61 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128290239","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 15

Facilitating Monkey Test by Detecting Operable Regions in Rendered GUI of Mobile Game Apps 通过检测手机游戏应用渲染GUI中的可操作区域，方便猴子测试

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.41

Chenglong Sun, Zhenyu Zhang, Bo Jiang, William Chan

{"title":"Facilitating Monkey Test by Detecting Operable Regions in Rendered GUI of Mobile Game Apps","authors":"Chenglong Sun, Zhenyu Zhang, Bo Jiang, William Chan","doi":"10.1109/QRS.2016.41","DOIUrl":"https://doi.org/10.1109/QRS.2016.41","url":null,"abstract":"Graphical User Interface (GUI) is a component of many software applications. Many mobile game applications in particular have to provide excellent user experiences using graphical engines to render GUI screens. On a rendered GUI screen such as a treasury map, no GUI widget is embodied in it and the operable GUI regions, each of which is a region that triggers actions when certain events acting on these regions, may only be implicitly determinable. Traditional testing tools like monkey test do not effectively generate effective event sequences over such operable GUI regions. Our insight is that operable regions in a rendered GUI screen of many mobile game applications are given with visible hints to catch user attentions. In this paper, we propose Smart Monkey, which uses the fundamental features of a screen, including color, intensity, and texture, as visual signals to detect operable GUI region candidates, and iteratively identifies and confirms the real operable GUI regions by launching GUI events to the region. We have implemented Smart Monkey as a testing tool for Android apps and conducted case studies on real-world applications to compare it with a peer technique. The empirical results show that it effective in identifying such operable regions and thus able to generate functional event sequences more efficiently.","PeriodicalId":412973,"journal":{"name":"2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125135908","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

A Method for Pruning Infeasible Paths via Graph Transformations and Symbolic Execution 一种基于图变换和符号执行的不可行路径修剪方法

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.26

Romain Aïssat, M. Gaudel, Frédéric Voisin, B. Wolff

引用次数: 2

Quantitative Analysis of Variation-Aware Internet of Things Designs Using Statistical Model Checking 基于统计模型检验的变化感知物联网设计定量分析

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.39

Siyuan Xu, Weikai Miao, T. Kunz, Tongquan Wei, Mingsong Chen

{"title":"Quantitative Analysis of Variation-Aware Internet of Things Designs Using Statistical Model Checking","authors":"Siyuan Xu, Weikai Miao, T. Kunz, Tongquan Wei, Mingsong Chen","doi":"10.1109/QRS.2016.39","DOIUrl":"https://doi.org/10.1109/QRS.2016.39","url":null,"abstract":"Since Internet of Things (IoT) applications are deployed within open physical environments, their executions suffer from a wide spectrum of uncertain factors (e.g., network delay, sensor inputs). Although ThingML is a promising IoT modeling and specification language which enables the fast development of resource-constrained IoT applications, it lacks the capability to model such uncertainties and quantify their effects. Consequently, within uncertain environments the quality and performance of IoT applications generated from ThingML designs cannot be guaranteed. To explore the overall runtime performance variations caused by environmental uncertainties, this paper proposes a quantitative uncertainty evaluation framework for ThingML-based IoT designs. By adopting network of priced timed automata as the model of computation and statistical model checking as the evaluation engine, our approach can model uncertainties caused by external environments as well as support various kinds of performance queries on the extended ThingML designs. Experimental results of two comprehensive case studies demonstrate the efficacy of our approach.","PeriodicalId":412973,"journal":{"name":"2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132595234","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

D-Cube: Tool for Dynamic Design Discovery from Multi-threaded Applications Using PIN D-Cube:使用PIN的多线程应用程序动态设计发现工具

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.13

Srijoni Majumdar, Nachiketa Chatterjee, Shila Rani Sahoo, P. Das

引用次数: 6

Resource/Schedule/Content Test Planning Model 资源/进度/内容测试计划模型

2016 IEEE International Conference on Software Quality, Reliability and Security (QRS) Pub Date : 2016-08-01 DOI: 10.1109/QRS.2016.57

Pete Rotella

{"title":"Resource/Schedule/Content Test Planning Model","authors":"Pete Rotella","doi":"10.1109/QRS.2016.57","DOIUrl":"https://doi.org/10.1109/QRS.2016.57","url":null,"abstract":"It is necessary to balance the contributions from four primary software testing 'dimensions,' in the integration branch test cycle for waterfall and hybrid waterfall/agile projects, to achieve best-in-class customer experience: 1) Sufficient testing resources (engineers) are needed to ensure that adequate testing is accomplished, 2) sufficient bug fixing resources (engineers) are needed to ensure that the newly uncovered bugs are properly fixed, 3) adequate testing and bug fixing time/schedule are needed to ensure that there is sufficient time to run the test plans completely, to do enough regression testing, and to accommodate dead periods when test stoppers are encountered, and 4) new feature content must not be so high that the testing and fixing teams cannot complete their tasks and produce code that is sufficiently reliable. These four dimensions are key parameters in any testing planning exercise, and often, during the testing cycle itself, one or more of these parameters must be adjusted to satisfy the cost/schedule/reliability goals laid out at the project start. The work described in this paper attempts to construct a generalized model that quantifies the contributions from these dimensions, and enables the practitioner to construct what-if scenarios to dynamically estimate the customers' software reliability experience in their production networks. This Resource/Schedule/ Content Model (RSCM), addressing resources, schedule, and feature content, is based on another useful model, the Universal Release Criteria Model (URC), that gauges the effectiveness of integration-branch testing and fixing, and estimates the software reliability field results. The customer experience metric that is predicted by RSCM and URC is SWDPMH -- software incidents (bug encounters by all customers) per million hours of total fleet usage per month, Cisco's primary measure of reliability in the field.","PeriodicalId":412973,"journal":{"name":"2016 IEEE International Conference on Software Quality, Reliability and Security (QRS)","volume":"107 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2016-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123244351","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1