首页 > 最新文献

2009 ICSE Workshop on Automation of Software Test最新文献

英文 中文
The perceived value of authoring and automating acceptance tests using a model driven development toolset 使用模型驱动的开发工具集编写和自动化验收测试的感知价值
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069055
D. Talby
One approach to applying keyword driven testing in a model-driven development environment is by defining a domain specific language for test cases. The toolset then provides test editors, versioning, validation, reporting and hyperlinks across models - in addition to enabling automated test execution. This case study evaluates the effectiveness of such a solution as perceived by two teams of professional testers, who used it to test several products over a two year period. The results suggest that in addition to the expected benefits of automation, the solution reduces the time and effort required to write tests, maintain tests and plan the test authoring and execution efforts - at the expense of requiring longer training and a higher bar for recruiting testers.
在模型驱动的开发环境中应用关键字驱动测试的一种方法是为测试用例定义特定于领域的语言。工具集随后提供了测试编辑器、版本控制、验证、报告和跨模型的超链接——除了支持自动化测试执行之外。本案例研究评估了两组专业测试人员所感知到的这种解决方案的有效性,他们在两年的时间里使用它测试了几个产品。结果表明,除了预期的自动化好处之外,该解决方案还减少了编写测试、维护测试以及计划测试编写和执行工作所需的时间和精力——代价是需要更长的培训和更高的招聘测试人员的门槛。
{"title":"The perceived value of authoring and automating acceptance tests using a model driven development toolset","authors":"D. Talby","doi":"10.1109/IWAST.2009.5069055","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069055","url":null,"abstract":"One approach to applying keyword driven testing in a model-driven development environment is by defining a domain specific language for test cases. The toolset then provides test editors, versioning, validation, reporting and hyperlinks across models - in addition to enabling automated test execution. This case study evaluates the effectiveness of such a solution as perceived by two teams of professional testers, who used it to test several products over a two year period. The results suggest that in addition to the expected benefits of automation, the solution reduces the time and effort required to write tests, maintain tests and plan the test authoring and execution efforts - at the expense of requiring longer training and a higher bar for recruiting testers.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"12 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129963371","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Porantim: An approach to support the combination and selection of Model-based Testing techniques Porantim:一种支持组合和选择基于模型的测试技术的方法
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069035
A. C. Dias-Neto, G. Travassos
The technical literature regarding Model-based Testing (MBT) has several techniques with different characteristics and goals available to be applied in software projects. Besides the lack of information regarding these techniques, they could be applied together in a software project aiming at improving the testing coverage. However, this decision needs to be carefully analyzed to avoid loss of resources in a software project. Based on this scenario, this paper proposes an approach with the purpose of supporting the unique or combined selection of MBT techniques for a given software project considering two aspects: the adequacy level between MBT techniques and the software project characteristics and impact of more than one MBT technique in some testing process variables. At the end, preliminary results of an experimental evaluation are presented.
关于基于模型的测试(MBT)的技术文献中有几种具有不同特征和目标的技术可用于软件项目。除了缺乏关于这些技术的信息之外,它们可以在一个旨在提高测试覆盖率的软件项目中一起应用。然而,这个决定需要仔细分析,以避免软件项目中的资源损失。基于这种情况,本文提出了一种方法,其目的是为给定的软件项目支持MBT技术的独特或组合选择,考虑两个方面:MBT技术与软件项目特征之间的充分性水平,以及多个MBT技术在某些测试过程变量中的影响。最后,给出了初步的实验评价结果。
{"title":"Porantim: An approach to support the combination and selection of Model-based Testing techniques","authors":"A. C. Dias-Neto, G. Travassos","doi":"10.1109/IWAST.2009.5069035","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069035","url":null,"abstract":"The technical literature regarding Model-based Testing (MBT) has several techniques with different characteristics and goals available to be applied in software projects. Besides the lack of information regarding these techniques, they could be applied together in a software project aiming at improving the testing coverage. However, this decision needs to be carefully analyzed to avoid loss of resources in a software project. Based on this scenario, this paper proposes an approach with the purpose of supporting the unique or combined selection of MBT techniques for a given software project considering two aspects: the adequacy level between MBT techniques and the software project characteristics and impact of more than one MBT technique in some testing process variables. At the end, preliminary results of an experimental evaluation are presented.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"67 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122791875","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
Automated functional testing of search engine 搜索引擎的自动化功能测试
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069046
L. Jin
This paper describes the construction of an automated test framework for search engine and reports our current practice in establishing a process for test automation. The paper presents the technical solutions that overcome the difficulties in search engine testing, which involve large volume of data, complicated ranking rules and randomization in ordering search results. One reason that many test automation efforts failed in industry is because automated scripts are not developed and structured for future maintenance and evolution. The test framework enables effective and efficient reuse and maintenance of test scripts. The paper also discusses issues related to the process of test automation. They are equally as important as overcoming technical barriers. All of these discussed above have been applied to the automated functional testing of a commercial search engine.
本文描述了一个搜索引擎自动化测试框架的构建,并报告了我们目前在建立测试自动化过程中的实践。针对搜索引擎测试中存在的数据量大、排序规则复杂、搜索结果排序随机化等问题,提出了相应的技术解决方案。许多测试自动化工作在工业中失败的一个原因是,自动化脚本没有为将来的维护和发展而开发和构建。测试框架支持测试脚本的有效和高效的重用和维护。本文还讨论了与测试自动化过程有关的问题。它们与克服技术障碍同样重要。以上讨论的所有内容都已应用于商业搜索引擎的自动化功能测试。
{"title":"Automated functional testing of search engine","authors":"L. Jin","doi":"10.1109/IWAST.2009.5069046","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069046","url":null,"abstract":"This paper describes the construction of an automated test framework for search engine and reports our current practice in establishing a process for test automation. The paper presents the technical solutions that overcome the difficulties in search engine testing, which involve large volume of data, complicated ranking rules and randomization in ordering search results. One reason that many test automation efforts failed in industry is because automated scripts are not developed and structured for future maintenance and evolution. The test framework enables effective and efficient reuse and maintenance of test scripts. The paper also discusses issues related to the process of test automation. They are equally as important as overcoming technical barriers. All of these discussed above have been applied to the automated functional testing of a commercial search engine.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126768047","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Model based functional testing using pattern directed filmstrips 基于模型的功能测试方法
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069041
T. Clark
Model driven functional system testing generates test scenarios from behavioural and structural models. In order to autmatically generate tests, conditions such as invariants and pre-/post-conditions must be precisely defined. UML provides the Object Constraint Language (OCL) for this purpose; however OCL expressions can become very complex. This paper describes an approach that allows many commonly found OCL patterns to be expressed as snapshot patterns that correspond directly to the information model diagrams. Behaviour is constructed as chains of snapshots, or filmstrips. Snapshots and filmstrips are as expressive as UML behaviour models and OCL but it is argued that they are more accessible and more modular.
模型驱动的功能系统测试从行为和结构模型生成测试场景。为了自动生成测试,必须精确定义不变量和前置/后置条件等条件。UML为此目的提供了对象约束语言(OCL);但是OCL表达式会变得非常复杂。本文描述了一种方法,该方法允许将许多常见的OCL模式表示为直接对应于信息模型图的快照模式。行为是由一连串的快照或胶片构成的。快照和幻灯片与UML行为模型和OCL一样具有表现力,但有人认为它们更容易访问,也更模块化。
{"title":"Model based functional testing using pattern directed filmstrips","authors":"T. Clark","doi":"10.1109/IWAST.2009.5069041","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069041","url":null,"abstract":"Model driven functional system testing generates test scenarios from behavioural and structural models. In order to autmatically generate tests, conditions such as invariants and pre-/post-conditions must be precisely defined. UML provides the Object Constraint Language (OCL) for this purpose; however OCL expressions can become very complex. This paper describes an approach that allows many commonly found OCL patterns to be expressed as snapshot patterns that correspond directly to the information model diagrams. Behaviour is constructed as chains of snapshots, or filmstrips. Snapshots and filmstrips are as expressive as UML behaviour models and OCL but it is argued that they are more accessible and more modular.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128650003","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
Towards a practical and effective method for Web services test case generation 为Web服务测试用例的生成提供了一种实用有效的方法
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069048
Zhong Jie Li, Jun Zhu, Liang-Jie Zhang, Naomi M. Mitsumori
This paper proposes a method for Web services test case generation, which is centered on a practical test data generation framework that has higher probability to penetrate the service implementation logic. This presented framework leverages both the information contained in the WSDL/XSD files and the information provided by testers as well as enables testers to customize the fields to be tested, field constraints and data generation rules. The proposed method can generate test cases that are effective in detecting defects and efficient in reducing test time. This paper also presents preliminary empirical evidence to illustrate the value of the method.
本文提出了一种Web服务测试用例生成方法,该方法以一个具有较高概率穿透服务实现逻辑的实用测试数据生成框架为中心。所呈现的框架利用了WSDL/XSD文件中包含的信息和测试人员提供的信息,并使测试人员能够定制要测试的字段、字段约束和数据生成规则。该方法生成的测试用例能够有效地检测缺陷并有效地缩短测试时间。本文还提供了初步的经验证据来说明该方法的价值。
{"title":"Towards a practical and effective method for Web services test case generation","authors":"Zhong Jie Li, Jun Zhu, Liang-Jie Zhang, Naomi M. Mitsumori","doi":"10.1109/IWAST.2009.5069048","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069048","url":null,"abstract":"This paper proposes a method for Web services test case generation, which is centered on a practical test data generation framework that has higher probability to penetrate the service implementation logic. This presented framework leverages both the information contained in the WSDL/XSD files and the information provided by testers as well as enables testers to customize the fields to be tested, field constraints and data generation rules. The proposed method can generate test cases that are effective in detecting defects and efficient in reducing test time. This paper also presents preliminary empirical evidence to illustrate the value of the method.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"41 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127161958","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 26
The compliance testing of software tools with respect to the UML standards specification - The ArgoUML case study 关于UML标准规范的软件工具的遵从性测试——ArgoUML案例研究
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069052
P. Bunyakiati, A. Finkelstein
In ICSE'08 we demonstrated the Java UML Lightweight Enumerator (JULE) tool, which supports compliance test generation from modeling standards specifications. When employed in our framework for software tool certification, JULE provides a powerful technology to enumerate a set of test cases that exhaustively test a modeling tool. JULE avoids combinatorial explosion by generating test cases only up to non-isomorphism. In this paper, a case study presented is an experiment on the use of a test suite generated from JULE to assess the compliance of an open source software tool - ArgoUML. This case study illustrates how ArgoUML is tested and reveals some previously unknown non-compliance issues. The case study highlights how software modeling tools can be tested for standards compliance and how test results can be analyzed to diagnose the causes of non-compliance in a software tool.
在ICSE'08中,我们演示了Java UML轻量级枚举器(JULE)工具,它支持从建模标准规范生成遵从性测试。当在我们的软件工具认证框架中使用时,JULE提供了一种强大的技术来列举一组测试用例,以详尽地测试建模工具。JULE通过只生成非同构的测试用例来避免组合爆炸。在这篇论文中,一个案例研究是一个使用由JULE生成的测试套件来评估开源软件工具——ArgoUML的遵从性的实验。这个案例研究说明了如何测试ArgoUML,并揭示了一些以前未知的不合规问题。案例研究强调了如何测试软件建模工具是否符合标准,以及如何分析测试结果以诊断软件工具中不符合标准的原因。
{"title":"The compliance testing of software tools with respect to the UML standards specification - The ArgoUML case study","authors":"P. Bunyakiati, A. Finkelstein","doi":"10.1109/IWAST.2009.5069052","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069052","url":null,"abstract":"In ICSE'08 we demonstrated the Java UML Lightweight Enumerator (JULE) tool, which supports compliance test generation from modeling standards specifications. When employed in our framework for software tool certification, JULE provides a powerful technology to enumerate a set of test cases that exhaustively test a modeling tool. JULE avoids combinatorial explosion by generating test cases only up to non-isomorphism. In this paper, a case study presented is an experiment on the use of a test suite generated from JULE to assess the compliance of an open source software tool - ArgoUML. This case study illustrates how ArgoUML is tested and reveals some previously unknown non-compliance issues. The case study highlights how software modeling tools can be tested for standards compliance and how test results can be analyzed to diagnose the causes of non-compliance in a software tool.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114612314","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
Test generation strategies to measure worst-case execution time 测试生成策略以度量最坏情况下的执行时间
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069045
Nicky Williams, M. Roger
Under certain conditions, the worst-case execution time (WCET) of a function can be found by measuring the effective execution time for each feasible execution path. Automatic generation of test inputs can help make this approach more feasible. To reduce the number of tests, we define two partial orders on the execution paths of the program under test. Under further conditions, these partial orders represent the relation between the execution times of the paths. We explain how we modified the strategy of the PathCrawler structural test-case generation tool to generate as few tests as possible for paths which are not maximal in these partial orders, whilst ensuring that the WCET is exhibited by at least one case in the set. The techniques used could also serve in the implementation of other test generation strategies which have nothing to do with WCET.
在一定条件下,通过测量每个可行执行路径的有效执行时间,可以得到函数的最坏情况执行时间(WCET)。测试输入的自动生成可以帮助使这种方法更加可行。为了减少测试的数量,我们在被测程序的执行路径上定义了两个部分顺序。在进一步的条件下,这些部分顺序表示路径执行时间之间的关系。我们解释了如何修改PathCrawler结构测试用例生成工具的策略,以便为这些部分顺序中不是最大的路径生成尽可能少的测试,同时确保集合中至少有一个用例显示WCET。所使用的技术也可以用于实现与WCET无关的其他测试生成策略。
{"title":"Test generation strategies to measure worst-case execution time","authors":"Nicky Williams, M. Roger","doi":"10.1109/IWAST.2009.5069045","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069045","url":null,"abstract":"Under certain conditions, the worst-case execution time (WCET) of a function can be found by measuring the effective execution time for each feasible execution path. Automatic generation of test inputs can help make this approach more feasible. To reduce the number of tests, we define two partial orders on the execution paths of the program under test. Under further conditions, these partial orders represent the relation between the execution times of the paths. We explain how we modified the strategy of the PathCrawler structural test-case generation tool to generate as few tests as possible for paths which are not maximal in these partial orders, whilst ensuring that the WCET is exhibited by at least one case in the set. The techniques used could also serve in the implementation of other test generation strategies which have nothing to do with WCET.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"117118207","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 14
Automating structural testing of C programs: Experience with PathCrawler C程序的自动化结构测试:使用PathCrawler的经验
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069043
Bernard Botella, Mickaël Delahaye, S. Ha, N. Kosmatov, Patricia Mouy, M. Roger, Nicky Williams
Structural testing is widely used in industrial verification processes of critical software. This report presents PathCrawler, a structural test generation tool that may be used to automate this activity, and several evaluation criteria of automatic test generation tools for C programs. These criteria correspond to the issues identified during our ongoing experience in the development of PathCrawler and its application to industrial software. They include issues arising for some specific types of software. Some of them are still difficult open problems. Others are (partially) solved, and the solution adopted in PathCrawler is discussed. We believe that these criteria must be satisfied in order for the automation of structural testing to become an industrial reality.
结构测试广泛应用于关键软件的工业验证过程中。这篇报告介绍了PathCrawler,一个结构化的测试生成工具,可以用来自动化这个活动,以及C程序自动测试生成工具的几个评估标准。这些标准对应于我们在开发PathCrawler及其在工业软件中的应用过程中所发现的问题。它们包括某些特定类型的软件所产生的问题。其中一些仍然是难以解决的问题。其他问题(部分)得到了解决,并讨论了PathCrawler所采用的解决方案。我们认为,为了使结构测试自动化成为工业现实,必须满足这些标准。
{"title":"Automating structural testing of C programs: Experience with PathCrawler","authors":"Bernard Botella, Mickaël Delahaye, S. Ha, N. Kosmatov, Patricia Mouy, M. Roger, Nicky Williams","doi":"10.1109/IWAST.2009.5069043","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069043","url":null,"abstract":"Structural testing is widely used in industrial verification processes of critical software. This report presents PathCrawler, a structural test generation tool that may be used to automate this activity, and several evaluation criteria of automatic test generation tools for C programs. These criteria correspond to the issues identified during our ongoing experience in the development of PathCrawler and its application to industrial software. They include issues arising for some specific types of software. Some of them are still difficult open problems. Others are (partially) solved, and the solution adopted in PathCrawler is discussed. We believe that these criteria must be satisfied in order for the automation of structural testing to become an industrial reality.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122824218","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 49
Security test generation using threat trees 使用威胁树生成安全测试
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069042
Aaron Marback, Hyunsook Do, Ke He, Samuel Kondamarri, Dianxiang Xu
Software security issues have been a major concern to the cyberspace community, so a great deal of research on security testing has been performed, and various security testing techniques have been developed. Most of these techniques, however, have focused on testing software systems after their implementation is completed. To build secure and dependable software systems in a cost-effective way, however, it is necessary to put more effort upfront during the software development life cycle. In this paper, we provided a security testing approach that derives test cases from design-level artifacts. The security testing approach we consider consists of four activities: building threat trees from threat modeling; generating security tests from threat trees; generating test inputs including valid and invalid inputs; and assigning input values to parameters. We also conducted an empirical study to show feasibility of our approach.
软件安全问题一直是网络空间社区关注的焦点,因此对安全测试进行了大量的研究,开发了各种安全测试技术。然而,这些技术中的大多数都集中在软件系统实现完成后的测试上。然而,为了以经济有效的方式构建安全可靠的软件系统,有必要在软件开发生命周期的前期投入更多的努力。在本文中,我们提供了一种从设计级工件派生测试用例的安全性测试方法。我们考虑的安全测试方法包括四个活动:通过威胁建模构建威胁树;从威胁树生成安全测试;生成测试输入,包括有效和无效输入;将输入值赋给参数。我们还进行了实证研究,以证明我们的方法的可行性。
{"title":"Security test generation using threat trees","authors":"Aaron Marback, Hyunsook Do, Ke He, Samuel Kondamarri, Dianxiang Xu","doi":"10.1109/IWAST.2009.5069042","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069042","url":null,"abstract":"Software security issues have been a major concern to the cyberspace community, so a great deal of research on security testing has been performed, and various security testing techniques have been developed. Most of these techniques, however, have focused on testing software systems after their implementation is completed. To build secure and dependable software systems in a cost-effective way, however, it is necessary to put more effort upfront during the software development life cycle. In this paper, we provided a security testing approach that derives test cases from design-level artifacts. The security testing approach we consider consists of four activities: building threat trees from threat modeling; generating security tests from threat trees; generating test inputs including valid and invalid inputs; and assigning input values to parameters. We also conducted an empirical study to show feasibility of our approach.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"107 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121820562","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 40
An empirical study of testing file-system-dependent software with mock objects 用模拟对象测试依赖文件系统的软件的实证研究
Pub Date : 2009-05-18 DOI: 10.1109/IWAST.2009.5069054
Madhuri R. Marri, Tao Xie, N. Tillmann, J. D. Halleux, Wolfram Schulte
Unit testing is a technique of testing a single unit of a program in isolation. The testability of the unit under test can be reduced when the unit interacts with its environment. The construction of high-covering unit tests and their execution require appropriate interactions with the environment such as a file system or database. To help set up the required environment, developers can use mock objects to simulate the behavior of the environment. In this paper, we present an empirical study to analyze the use of mock objects to test file-system-dependent software. We use a mock object of the FileSystem API provided with the Pex automatic testing tool in our study. We share our insights gained on the benefits of using mock objects in unit testing and discuss the faced challenges.
单元测试是一种对程序的单个单元进行隔离测试的技术。当被测单元与其环境相互作用时,被测单元的可测试性会降低。高覆盖率单元测试的构建及其执行需要与环境(如文件系统或数据库)进行适当的交互。为了帮助设置所需的环境,开发人员可以使用mock对象来模拟环境的行为。在本文中,我们提出了一项实证研究来分析使用模拟对象来测试依赖于文件系统的软件。在我们的研究中,我们使用Pex自动测试工具提供的文件系统API的模拟对象。我们分享了在单元测试中使用模拟对象的好处,并讨论了面临的挑战。
{"title":"An empirical study of testing file-system-dependent software with mock objects","authors":"Madhuri R. Marri, Tao Xie, N. Tillmann, J. D. Halleux, Wolfram Schulte","doi":"10.1109/IWAST.2009.5069054","DOIUrl":"https://doi.org/10.1109/IWAST.2009.5069054","url":null,"abstract":"Unit testing is a technique of testing a single unit of a program in isolation. The testability of the unit under test can be reduced when the unit interacts with its environment. The construction of high-covering unit tests and their execution require appropriate interactions with the environment such as a file system or database. To help set up the required environment, developers can use mock objects to simulate the behavior of the environment. In this paper, we present an empirical study to analyze the use of mock objects to test file-system-dependent software. We use a mock object of the FileSystem API provided with the Pex automatic testing tool in our study. We share our insights gained on the benefits of using mock objects in unit testing and discuss the faced challenges.","PeriodicalId":401585,"journal":{"name":"2009 ICSE Workshop on Automation of Software Test","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130636193","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 41
期刊
2009 ICSE Workshop on Automation of Software Test
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1