| 1. |
- Enoiu, Eduard, 1986-
(författare)
-
Model Checking-Based Software Testing for Function-Block Diagrams
- 2014
-
Licentiatavhandling (övrigt vetenskapligt/konstnärligt)abstract
- Software testing becomes more complex, more time-consuming, and more expensive. The risk that software errors remain undetected and cause critical failures increases. Consequently, in safety-critical development, testing software is standardized and it requires an engineer to show that tests fully exercise, or cover, the logic of the software. This method often requires a trained engineer to perform manual test generation, is prone to human error, and is expensive or impractical to use frequently in production. To overcome these issues, software testing needs to be performed earlier in the development process, more frequently, and aided by automated tools.We devised an automated test generation tool called COMPLETETEST that avoids many of those problems. The method implemented in the tool and described in this thesis, works with software written in Function Block Diagram language, and can provide tests in just a few seconds. In addition, it does not rely on the expertise of a researcherspecialized in automated test generation and model checking. Although COMPLETETEST itself uses a model checker, a complex technique requiring a high level of expertise to generate tests, it provides a straightforward tabular interface to the intended users. In this way, its users do not need to learn the intricacies of using this approach such as how coverage criteria can be formalized and used by a model checker to automatically generate tests. If the technique can be demonstrated to work in production, it could detect and aid in the detection of errors in safety-critical software development, where conventional testing is not always applicable and efficient.We conducted studies based on industrial use-case scenarios from Bombardier Transportation AB, showing how the approach can be applied to generate tests in software systems used in the safety-critical domain. To evaluate the approach, it was applied on real-world programs. The results indicate that it is efficient in terms of time required to generate tests and scales well for most of the software. There are still issues to resolve before the technique can be applied to more complex software, but we are already working on ways to overcome them. In particular, we need to understand how its usage in practice can vary depending on human and software process factors.
|
|
| 2. |
- Marksteiner, Stefan
(författare)
-
Model-Driven Security Test Case Generation Using Threat Modeling and Automata Learning
- 2024
-
Licentiatavhandling (övrigt vetenskapligt/konstnärligt)abstract
- Automotive systems are not only becoming more open through developments like advanced driving assistance functions, autonomous driving, vehicle-to-everything communication and software-defined vehicle functionality, but also more complex. At the same time, technology from standard IT systems become frequently adopted in this setting. These developments have two negative effects on correctness and security: the rising complexity adds potential flaws and vulnerabilities while the increased openness expands attack surfaces and entry points for adversaries. To provide more secure systems, the amount of verifying system security through testing has to be significantly increased, which is also a requirement by international regulation and standards. Due to long supply chains and non-disclosure policies, verification methods often have to operate in a black box setting. This thesis strives therefore towards finding more efficient methods of automating test case generation in both white and black box scenarios. The focus lies on communication protocols used in vehicular systems. The main approaches used are model-based methods. We provide a practical method to automatically obtain behavioral models in the form of state machines of communication protocol implementations in real-world settings using automata learning. We also provide a means to automatically check these implementation models for their compliance with a specification (e.g., from a standard). We furthermore present a technique to automatically derive test-cases to point out found deviations on the actual system.We also present a method to create abstract cybersecurity test case specifications from semi-formal threat models using attack trees.
|
|
