首页 > 最新文献

2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)最新文献

英文 中文
Arguing safety of an improved autonomous vehicle from safe operation before the change: new results 从改变之前的安全操作争论改进后的自动驾驶汽车的安全性:新结果
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00085
Robab Aghazadeh Chakherlou, K. Salako, L. Strigini
Autonomous vehicles (AVs) are gradually appearing on the roads. However, how to demonstrate their safety is still under debate. While operational testing seems essential for building confidence in AV safety, the amount of testing required can be prohibitively expensive. Additionally, current AV s evolve continuously and are used in a changing set of environmentsRepeating substantial operational testing for each new AV version, or new use of an AV, seems unaffordable. Therefore, the idea of applying operational experience from before such a change towards claims of safety after the change is attractive. We present new results, addressing the frequent case in which a new version of the AV can be proved to be safer than a previous one, bar major errors in design or analysis assumptions. Mathematically, our new solution applies to all those scenarios in which the new version or environment is, with high probability, no less safe than the old one “no matter how safe the old one was”. We call this scenario “unconditional improvement” (UI). Various previous papers addressed related scenarios in which there is some confidence that the change has improved, or at least not degraded, safety, but they solved the problem under weaker conditions: our new results substantially improve the safety claims that can be supported, especially for operation soon after the change.
自动驾驶汽车(AVs)正逐渐出现在道路上。然而,如何证明它们的安全性仍在争论中。虽然操作测试似乎对建立对自动驾驶安全的信心至关重要,但所需的测试数量可能过于昂贵。此外,目前的自动驾驶汽车不断发展,并在不断变化的环境中使用,对于每个新版本的自动驾驶汽车或自动驾驶汽车的新用途,重复大量的操作测试似乎是无法承受的。因此,将这种变化之前的操作经验应用于变化后的安全索赔的想法是有吸引力的。我们提出了新的结果,解决了在设计或分析假设中存在重大错误的情况下,新版本的AV可以被证明比以前的版本更安全的常见情况。从数学上讲,我们的新解决方案适用于新版本或环境的所有场景,在这些场景中,“无论旧版本或环境有多安全”,新版本或环境的安全性很可能不会低于旧版本或环境。我们称这种情况为“无条件改进”(UI)。以前的各种论文都讨论了相关的场景,在这些场景中,有一些信心认为这种变化提高了安全性,或者至少没有降低安全性,但它们在较弱的条件下解决了这个问题:我们的新结果大大提高了可以支持的安全性声明,特别是对于变化后不久的操作。
{"title":"Arguing safety of an improved autonomous vehicle from safe operation before the change: new results","authors":"Robab Aghazadeh Chakherlou, K. Salako, L. Strigini","doi":"10.1109/ISSREW55968.2022.00085","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00085","url":null,"abstract":"Autonomous vehicles (AVs) are gradually appearing on the roads. However, how to demonstrate their safety is still under debate. While operational testing seems essential for building confidence in AV safety, the amount of testing required can be prohibitively expensive. Additionally, current AV s evolve continuously and are used in a changing set of environmentsRepeating substantial operational testing for each new AV version, or new use of an AV, seems unaffordable. Therefore, the idea of applying operational experience from before such a change towards claims of safety after the change is attractive. We present new results, addressing the frequent case in which a new version of the AV can be proved to be safer than a previous one, bar major errors in design or analysis assumptions. Mathematically, our new solution applies to all those scenarios in which the new version or environment is, with high probability, no less safe than the old one “no matter how safe the old one was”. We call this scenario “unconditional improvement” (UI). Various previous papers addressed related scenarios in which there is some confidence that the change has improved, or at least not degraded, safety, but they solved the problem under weaker conditions: our new results substantially improve the safety claims that can be supported, especially for operation soon after the change.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125443363","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Programming Language Evaluation Criteria for Safety-Critical Software in the Air Domain 空域安全关键软件的编程语言评价标准
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00072
Rob Ashmore, Andrew Howe, Rhiannon Chilton, Shamal Faily
Safety-critical software in the air domain typically conforms to RTCA DO-178C. However, latent failures might arise based on assumptions underpinning the programming language used to write the software, whereas the lack of empirical data may constrain the selection of a promising but untested language. To overcome this difficulty, we propose evaluation criteria drawn from RTCA DO-178C, to help quickly review the potential applicability of programming languages in the air domain. We illustrate the constraints by using them to evaluate the suitability of the Rust programming language.
航空领域的安全关键软件通常符合RTCA DO-178C标准。然而,潜在的失败可能会基于用于编写软件的编程语言的假设,而缺乏经验数据可能会限制对有前途但未经测试的语言的选择。为了克服这一困难,我们提出了来自RTCA DO-178C的评估标准,以帮助快速审查编程语言在空中领域的潜在适用性。我们通过使用它们来评估Rust编程语言的适用性来说明这些约束。
{"title":"Programming Language Evaluation Criteria for Safety-Critical Software in the Air Domain","authors":"Rob Ashmore, Andrew Howe, Rhiannon Chilton, Shamal Faily","doi":"10.1109/ISSREW55968.2022.00072","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00072","url":null,"abstract":"Safety-critical software in the air domain typically conforms to RTCA DO-178C. However, latent failures might arise based on assumptions underpinning the programming language used to write the software, whereas the lack of empirical data may constrain the selection of a promising but untested language. To overcome this difficulty, we propose evaluation criteria drawn from RTCA DO-178C, to help quickly review the potential applicability of programming languages in the air domain. We illustrate the constraints by using them to evaluate the suitability of the Rust programming language.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125515582","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
A Markov Regenerative Model of Software Rejuvenation Beyond the Enabling Restriction 超越赋能限制的软件再生马尔可夫模型
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00060
L. Carnevali, Marco Paolieri, R. Reali, Leonardo Scommegna, E. Vicario
Software rejuvenation is a proactive maintenance technique that counteracts software aging by restarting a system or some of its components. We present a non-Markovian model of software rejuvenation where the underlying stochastic process is a Markov Regenerative Process (MRGP) beyond the enabling restriction, i.e., beyond the restriction of having at most one general (GEN, i.e., non-exponential) timer enabled in each state. The use of multiple concurrent GEN timers allows more accurate fitting of duration distributions from observed statistics (e.g., mean and variance), as well as better model expressiveness, enabling the formulation of mixed rejuvenation strategies that combine time-triggered and event-triggered rejuvenation. We leverage the functions for regenerative analysis based on stochastic state classes of the ORIS tool (through its SIRIO library) to evaluate this class of models and to select the rejuvenation period achieving an optimal tradeoff between two steady-state metrics, availability and undetected failure probability. We also show that, when G EN timers are replaced by exponential timers with the same mean (to satisfy enabling restriction), transient and steady-state are affected, resulting in inaccurate rejuvenation policies.
软件再生是一种主动维护技术,通过重新启动系统或其某些组件来抵消软件老化。我们提出了一个软件再生的非马尔可夫模型,其中潜在的随机过程是一个马尔可夫再生过程(MRGP),超出了使能限制,即超出了在每个状态中最多启用一个通用(GEN,即非指数)定时器的限制。使用多个并发GEN计时器可以更准确地从观察到的统计数据(例如,均值和方差)中拟合持续时间分布,以及更好的模型表达性,从而能够制定混合年轻化策略,将时间触发和事件触发的年轻化结合起来。我们利用基于ORIS工具(通过其SIRIO库)的随机状态类的函数进行再生分析,以评估这类模型,并选择恢复周期,从而在两个稳态指标(可用性和未检测到的故障概率)之间实现最佳权衡。我们还发现,当G EN计时器被具有相同平均值的指数计时器取代(以满足使能限制)时,瞬态和稳态都会受到影响,从而导致不准确的恢复策略。
{"title":"A Markov Regenerative Model of Software Rejuvenation Beyond the Enabling Restriction","authors":"L. Carnevali, Marco Paolieri, R. Reali, Leonardo Scommegna, E. Vicario","doi":"10.1109/ISSREW55968.2022.00060","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00060","url":null,"abstract":"Software rejuvenation is a proactive maintenance technique that counteracts software aging by restarting a system or some of its components. We present a non-Markovian model of software rejuvenation where the underlying stochastic process is a Markov Regenerative Process (MRGP) beyond the enabling restriction, i.e., beyond the restriction of having at most one general (GEN, i.e., non-exponential) timer enabled in each state. The use of multiple concurrent GEN timers allows more accurate fitting of duration distributions from observed statistics (e.g., mean and variance), as well as better model expressiveness, enabling the formulation of mixed rejuvenation strategies that combine time-triggered and event-triggered rejuvenation. We leverage the functions for regenerative analysis based on stochastic state classes of the ORIS tool (through its SIRIO library) to evaluate this class of models and to select the rejuvenation period achieving an optimal tradeoff between two steady-state metrics, availability and undetected failure probability. We also show that, when G EN timers are replaced by exponential timers with the same mean (to satisfy enabling restriction), transient and steady-state are affected, resulting in inaccurate rejuvenation policies.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126841638","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
IWSF & SHIFT 2022 Workshop Committee: ISSREW 2022 IWSF & SHIFT 2022研讨会委员会:ISSREW 2022
Pub Date : 2022-10-01 DOI: 10.1109/issrew55968.2022.00022
{"title":"IWSF & SHIFT 2022 Workshop Committee: ISSREW 2022","authors":"","doi":"10.1109/issrew55968.2022.00022","DOIUrl":"https://doi.org/10.1109/issrew55968.2022.00022","url":null,"abstract":"","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"40 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133538681","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A Survey on Autonomous Driving System Simulators 自动驾驶系统模拟器研究综述
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00084
Jixiang Zhou, Yi Zhang, Shengjian Guo, Yan Guo
Comprehensive and rigorous testing plays a critical role in ensuring the safety and reliability of automated driving systems (ADS), nonetheless, testing on the road is unsafe and costly. Simulation testing can solve the high cost and insecurity, but the performance of simulation testing is heavily dependent on, as well as limited by, the simulation platforms. This paper carries out an extensive comparison study on the commonly used simu-lation platforms in ADS testing. Advantages and disadvantages of the commonly used simulators such as CarSim, CarMaker and AirSim are compared from aspects like virtual environment generation, critical scenarios creation, types of supported sensor, as well as control of traffic participants.
全面、严格的测试对于确保自动驾驶系统(ADS)的安全性和可靠性起着至关重要的作用,然而,在道路上进行测试既不安全又昂贵。仿真测试可以解决高成本和不安全的问题,但仿真测试的性能严重依赖于仿真平台,也受到仿真平台的限制。本文对ADS测试中常用的仿真平台进行了广泛的对比研究。从虚拟环境生成、关键场景创建、支持的传感器类型、交通参与者控制等方面比较了CarSim、maker、AirSim等常用模拟器的优缺点。
{"title":"A Survey on Autonomous Driving System Simulators","authors":"Jixiang Zhou, Yi Zhang, Shengjian Guo, Yan Guo","doi":"10.1109/ISSREW55968.2022.00084","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00084","url":null,"abstract":"Comprehensive and rigorous testing plays a critical role in ensuring the safety and reliability of automated driving systems (ADS), nonetheless, testing on the road is unsafe and costly. Simulation testing can solve the high cost and insecurity, but the performance of simulation testing is heavily dependent on, as well as limited by, the simulation platforms. This paper carries out an extensive comparison study on the commonly used simu-lation platforms in ADS testing. Advantages and disadvantages of the commonly used simulators such as CarSim, CarMaker and AirSim are compared from aspects like virtual environment generation, critical scenarios creation, types of supported sensor, as well as control of traffic participants.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115353380","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
A systematic approach to develop an autopilot sensor monitoring system for autonomous delivery vehicles based on the STPA method 一种基于STPA方法的自动驾驶汽车传感器监控系统的系统开发方法
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00087
Guangshuang Ge, Liangliang Sun, Yanfu Li
Autonomous delivery vehicles (ADVs) are derivatives of autonomous driving technology. With the rapid development of autonomous driving technology and the rapid rise in demand for terminal logistics and distribution, ADVs have gradually entered commercial operation in many cities, thus it brings higher requirements to the reliability of ADVs. Because of bill of material (BOM) cost pressure, most autopilot sensors and domain controllers of ADVs are not strictly follow passenger vehicle standards and regulations, the ADVs' reliability is very critical. The traditional methods of process hazard analysis (PHA) e.g. HAZOPs, FMEAs, FT A, etc., use a system divide approach. The to be analyzed system is breaking down into component level, and the risks or hazard of each component are analyzed separately. The two important assumptions of the traditional methods are: 1. the system's properties are not changed when it is broken down into component level; 2. the accidents are caused by component failures. However, in an ADV, the system becomes complex since the system effects may be missed, and this assumption is questionable; further, an ADV accidents can happen even there is no component failure. The system level hazard analysis cannot be fully determined only at the component level, but out of interactions of systems. Systems Theoretic Process Analysis (STP A) is a structured system level approach to analyze hazard. Based on the premise that accidents happen when the control is inadequate or lost, STPA approach decodes hazards related not only to component failures, but also to design errors, flawed controller requirements, interaction failures, human errors, and other errors. In this paper, the STPA method is used to analyze various risks and hazards of ADVs, and finally construct an abnormality monitoring system for autonomous driving sensors. Engineering practice shows that this method can effectively monitor the abnormality of sensor data links.
自动送货车辆(ADVs)是自动驾驶技术的衍生产品。随着自动驾驶技术的快速发展和终端物流配送需求的快速增长,自动驾驶汽车在许多城市逐渐进入商业运营,这对自动驾驶汽车的可靠性提出了更高的要求。由于物料清单(BOM)成本的压力,大多数自动驾驶汽车的传感器和域控制器并未严格遵循乘用车标准和法规,因此自动驾驶汽车的可靠性至关重要。传统的过程危害分析(PHA)方法,如HAZOPs, fmea, FT - A等,使用系统划分方法。将待分析系统分解为组件级,对每个组件的风险或危害分别进行分析。传统方法的两个重要假设是:1。将系统分解为组件级时,系统的属性不会改变;2. 这些事故是由部件故障引起的。然而,在ADV中,系统变得复杂,因为系统效应可能会被忽略,这种假设是值得怀疑的;此外,即使没有组件故障,ADV事故也可能发生。系统级危害分析不能仅在部件级上完全确定,而是在系统的相互作用下确定。系统理论过程分析(STP A)是一种结构化的系统级危险源分析方法。基于当控制不足或失去控制时发生事故的前提,STPA方法不仅解码与组件故障有关的危险,还解码与设计错误、有缺陷的控制器要求、交互故障、人为错误和其他错误有关的危险。本文采用STPA方法对自动驾驶汽车的各种风险和危害进行分析,最终构建自动驾驶传感器异常监测系统。工程实践表明,该方法能有效监测传感器数据链的异常情况。
{"title":"A systematic approach to develop an autopilot sensor monitoring system for autonomous delivery vehicles based on the STPA method","authors":"Guangshuang Ge, Liangliang Sun, Yanfu Li","doi":"10.1109/ISSREW55968.2022.00087","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00087","url":null,"abstract":"Autonomous delivery vehicles (ADVs) are derivatives of autonomous driving technology. With the rapid development of autonomous driving technology and the rapid rise in demand for terminal logistics and distribution, ADVs have gradually entered commercial operation in many cities, thus it brings higher requirements to the reliability of ADVs. Because of bill of material (BOM) cost pressure, most autopilot sensors and domain controllers of ADVs are not strictly follow passenger vehicle standards and regulations, the ADVs' reliability is very critical. The traditional methods of process hazard analysis (PHA) e.g. HAZOPs, FMEAs, FT A, etc., use a system divide approach. The to be analyzed system is breaking down into component level, and the risks or hazard of each component are analyzed separately. The two important assumptions of the traditional methods are: 1. the system's properties are not changed when it is broken down into component level; 2. the accidents are caused by component failures. However, in an ADV, the system becomes complex since the system effects may be missed, and this assumption is questionable; further, an ADV accidents can happen even there is no component failure. The system level hazard analysis cannot be fully determined only at the component level, but out of interactions of systems. Systems Theoretic Process Analysis (STP A) is a structured system level approach to analyze hazard. Based on the premise that accidents happen when the control is inadequate or lost, STPA approach decodes hazards related not only to component failures, but also to design errors, flawed controller requirements, interaction failures, human errors, and other errors. In this paper, the STPA method is used to analyze various risks and hazards of ADVs, and finally construct an abnormality monitoring system for autonomous driving sensors. Engineering practice shows that this method can effectively monitor the abnormality of sensor data links.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"123 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117322444","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Prevalence of continuous integration failures in industrial systems with hardware-in-the-loop testing 工业系统中硬件在环测试中持续集成故障的普遍性
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00040
H. Fu, Sigrid Eldh, Kristian Wiklund, Andreas Ermedahl, Cyrille Artho
Faults in the automated continuous integration (CI) process can seriously impact the development of industrial code. To reduce manual intervention in automated CI processes, we want to understand better the CI systems' failure distribution to improve efficiency, reliability, and maintainability. This paper investigates failures in CI in four large industrial projects. We gather 11 731 builds over six months, identifying 1 414 failing builds. We also identify the distribution of different types of build failures in each of the four CI projects. Our results show that compilation is the most significant individual cause of failure with 47 %, followed by testing at 36 %. The checkout step with associated checks also incurs a non-negligible portion of failures with 12 %. Furthermore, we identify 14 distinct types of failures in the testing step. We conclude that configuration problems are a significant issue, as pipeline scripting and dependency errors make up a large number of failures.
自动化持续集成(CI)过程中的错误会严重影响工业代码的开发。为了减少自动化CI过程中的人工干预,我们希望更好地理解CI系统的故障分布,以提高效率、可靠性和可维护性。本文调查了四个大型工业项目中持续集成的失败。我们在六个月内收集了11 731个构建,确定了1 414个失败的构建。我们还确定了四个CI项目中不同类型的构建失败的分布。我们的结果显示,编译是导致失败的最重要的单个原因,占47%,其次是测试,占36%。带有相关检查的签出步骤也会导致不可忽略的12%的失败。此外,我们在测试步骤中确定了14种不同类型的故障。我们得出结论,配置问题是一个重要的问题,因为管道脚本和依赖错误构成了大量的失败。
{"title":"Prevalence of continuous integration failures in industrial systems with hardware-in-the-loop testing","authors":"H. Fu, Sigrid Eldh, Kristian Wiklund, Andreas Ermedahl, Cyrille Artho","doi":"10.1109/ISSREW55968.2022.00040","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00040","url":null,"abstract":"Faults in the automated continuous integration (CI) process can seriously impact the development of industrial code. To reduce manual intervention in automated CI processes, we want to understand better the CI systems' failure distribution to improve efficiency, reliability, and maintainability. This paper investigates failures in CI in four large industrial projects. We gather 11 731 builds over six months, identifying 1 414 failing builds. We also identify the distribution of different types of build failures in each of the four CI projects. Our results show that compilation is the most significant individual cause of failure with 47 %, followed by testing at 36 %. The checkout step with associated checks also incurs a non-negligible portion of failures with 12 %. Furthermore, we identify 14 distinct types of failures in the testing step. We conclude that configuration problems are a significant issue, as pipeline scripting and dependency errors make up a large number of failures.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122083195","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
VulDeBERT: A Vulnerability Detection System Using BERT VulDeBERT:利用BERT的漏洞检测系统
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00042
Soolin Kim, Jusop Choi, Muhammad Ejaz Ahmed, Surya Nepal, Hyoungshick Kim
Deep learning technologies recently received much attention to detect vulnerable code patterns accurately. This paper proposes a new deep learning-based vulnerability detection tool dubbed VulDeBERT by fine-tuning a pre-trained language model, Bidirectional Encoder Representations from Transformers (BERT), on the vulnerable code dataset. To support VulDeBERT, we develop a new code analysis tool to extract well-represented abstract code fragments from C and C++ source code. The experimental results show that VulDeBERT outperforms the state-of-the-art tool, VulDeePecker [1] for two security vul- nerability types (CWE-119 and CWE-399). For the CWE-119 dataset, VulDeBERT achieved an Fl score of 94.6 %, which is significantly better than VulDeePecker, achieving an Fl score of 86.6 % in the same settings. Again, for the CWE-399 dataset, VulDeBERT achieved an Fl score of 97.9 %, which is also better than VulDeePecker, achieving an Fl score of 95 % in the same settings.
近年来,深度学习技术在准确检测漏洞代码模式方面受到了广泛关注。本文提出了一种新的基于深度学习的漏洞检测工具,称为VulDeBERT,该工具通过对脆弱代码数据集上的预训练语言模型“变形金刚的双向编码器表示”(BERT)进行微调。为了支持VulDeBERT,我们开发了一个新的代码分析工具来从C和c++源代码中提取表现良好的抽象代码片段。实验结果表明,对于两种安全漏洞类型(CWE-119和CWE-399), VulDeBERT优于最先进的工具VulDeePecker[1]。对于cwe119数据集,VulDeBERT的Fl得分为94.6%,明显优于VulDeePecker,在相同的设置下,VulDeBERT的Fl得分为86.6%。同样,对于cwee -399数据集,VulDeBERT达到了97.9%的Fl分数,这也优于VulDeePecker,在相同的设置下达到了95%的Fl分数。
{"title":"VulDeBERT: A Vulnerability Detection System Using BERT","authors":"Soolin Kim, Jusop Choi, Muhammad Ejaz Ahmed, Surya Nepal, Hyoungshick Kim","doi":"10.1109/ISSREW55968.2022.00042","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00042","url":null,"abstract":"Deep learning technologies recently received much attention to detect vulnerable code patterns accurately. This paper proposes a new deep learning-based vulnerability detection tool dubbed VulDeBERT by fine-tuning a pre-trained language model, Bidirectional Encoder Representations from Transformers (BERT), on the vulnerable code dataset. To support VulDeBERT, we develop a new code analysis tool to extract well-represented abstract code fragments from C and C++ source code. The experimental results show that VulDeBERT outperforms the state-of-the-art tool, VulDeePecker [1] for two security vul- nerability types (CWE-119 and CWE-399). For the CWE-119 dataset, VulDeBERT achieved an Fl score of 94.6 %, which is significantly better than VulDeePecker, achieving an Fl score of 86.6 % in the same settings. Again, for the CWE-399 dataset, VulDeBERT achieved an Fl score of 97.9 %, which is also better than VulDeePecker, achieving an Fl score of 95 % in the same settings.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122638535","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
RSDA 2022 Workshop Committee: ISSREW 2022 RSDA 2022研讨会委员会:ISSREW 2022
Pub Date : 2022-10-01 DOI: 10.1109/issrew55968.2022.00019
{"title":"RSDA 2022 Workshop Committee: ISSREW 2022","authors":"","doi":"10.1109/issrew55968.2022.00019","DOIUrl":"https://doi.org/10.1109/issrew55968.2022.00019","url":null,"abstract":"","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128428426","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Combinatorial Coverage for Assured Autonomy 保证自治的组合覆盖
Pub Date : 2022-10-01 DOI: 10.1109/ISSREW55968.2022.00092
D. Kuhn, M. Raunak, R. Kacker
With the advancement of Artificial Intelligence and Ma-chine Learning (AI/ML), we are observing a rapid increase of autonomous systems in safety-critical domains, such as smart medical equipment, self-driving vehicles, and unmanned aircraft. These systems are required to be made ultra reliable using state of the art verification and validation methodologies. Existing verification, validation, and assurance efforts, such as DO-178C guidance for avionics software, depend on structural coverage based testing, such as MC/DC coverage. Such structural coverage criteria require that test cases are chosen to ensure that a specified level of statements, decisions, and paths are systematically exercised. Neural network and other machine learning based systems, however, are not well suited to be tested with such structural coverage dependent criteria [1], [2]. This is because the performance of machine learning functions such as neural networks depends on the data used to train and test the model, rather than in specifically coded behavior. Behaviors of such systems will change depending on inputs used in the training.
随着人工智能和机器学习(AI/ML)的进步,我们看到在安全关键领域(如智能医疗设备、自动驾驶汽车和无人驾驶飞机)的自主系统迅速增加。这些系统需要使用最先进的验证和验证方法来实现超可靠。现有的验证、确认和保证工作,例如航空电子软件的DO-178C指导,依赖于基于测试的结构覆盖,例如MC/DC覆盖。这种结构覆盖标准要求选择测试用例,以确保系统地执行指定级别的语句、决策和路径。然而,神经网络和其他基于机器学习的系统并不适合用这种结构覆盖依赖标准进行测试[1],[2]。这是因为神经网络等机器学习功能的性能取决于用于训练和测试模型的数据,而不是特定编码的行为。这种系统的行为将根据训练中使用的输入而改变。
{"title":"Combinatorial Coverage for Assured Autonomy","authors":"D. Kuhn, M. Raunak, R. Kacker","doi":"10.1109/ISSREW55968.2022.00092","DOIUrl":"https://doi.org/10.1109/ISSREW55968.2022.00092","url":null,"abstract":"With the advancement of Artificial Intelligence and Ma-chine Learning (AI/ML), we are observing a rapid increase of autonomous systems in safety-critical domains, such as smart medical equipment, self-driving vehicles, and unmanned aircraft. These systems are required to be made ultra reliable using state of the art verification and validation methodologies. Existing verification, validation, and assurance efforts, such as DO-178C guidance for avionics software, depend on structural coverage based testing, such as MC/DC coverage. Such structural coverage criteria require that test cases are chosen to ensure that a specified level of statements, decisions, and paths are systematically exercised. Neural network and other machine learning based systems, however, are not well suited to be tested with such structural coverage dependent criteria [1], [2]. This is because the performance of machine learning functions such as neural networks depends on the data used to train and test the model, rather than in specifically coded behavior. Behaviors of such systems will change depending on inputs used in the training.","PeriodicalId":178302,"journal":{"name":"2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)","volume":"287 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121646372","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
2022 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW)
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1