检索结果-内蒙古大学图书馆

IEEE/ACM 20th International Conference on Mining Software Repositories (MSR)

作者： Saraiva, Diego da Costa, Daniel Alencar Kulesza, Uira Sizilio, Gustavo Gameleira Neto, Jose Coelho, Roberta Nagappan, Meiyappan Univ Fed Rio Grande do Norte Natal RN Brazil Univ Otago Dunedin New Zealand Univ Waterloo Waterloo ON Canada

ISBN: (纸本)9798350311846

Continuous integration (CI) is a software engineering practice that advocates the frequent integration of software through an automated build process. Existing research has explored the benefits of CI, such as detecting errors earlier in the software life-cycle. Although CI heavily focuses on automated tests, it is still unclear whether CI is associated with better code coverage, which could be a major benefit of using CI. To investigate whether CI is associated with an improvement in code coverage, our work compares 30 projects that adopted CI (CI projects) and 30 projects that have never adopted CI (NOCI projects). In total, we studied 1,440 versions from different projects to analyze trends in code coverage related to CI. While evaluating trends of code coverage within CI and NOCI projects, we observe more projects with rising trends of code coverage in CI projects (50%) than NOCI projects (10%). Moreover, the maintaining trends are different, as CI projects tend to stabilize at a higher code coverage rate than NOCI projects. Investigating the CI projects alone, the statistical evidences indicate that the adoption of CI is associated with the increase in code coverage. The findings of this study, therefore, reveal a positive association between CI and a higher code coverage rate.

关键词： software testing continuous integration code coverage empirical study

来源：评论

学校读者我要写书评

暂无评论

Fw-fuzz: A code coverage-guided fuzzing framework for network protocols on firmware

引用

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2022年第16期34卷 e5756-e5756页

作者： Gao, Zicong Dong, Weiyu Chang, Rui Wang, Yisen Cyberspace Secur Dept State Key Lab Math Engn & Adv Comp Zhengzhou Peoples R China Zhejiang Univ Coll Comp Sci & Technol Hangzhou Peoples R China 62 Sci Ave Zhengzhou Henan Peoples R China

Fuzzing is an effective approach to detect software vulnerabilities utilizing changeable generated inputs. However, fuzzing the network protocol on the firmware of IoT devices is limited by inefficiency of test case generation, cross-architecture instrumentation, and fault detection. In this article, we propose the Fw-fuzz, a coverage-guided and crossplatform framework for fuzzing network services running in the context of firmware on embedded architectures, which can generate more valuable test cases by introspecting program runtime information and using a genetic algorithm model. Specifically, we propose novel dynamic instrumentation in Fw-fuzz to collect the running state of the firmware program. Then Fw-fuzz adopts a genetic algorithm model to guide the generation of inputs with high code coverage. We fully implement the prototype system of Fw-fuzz and conduct evaluations on network service programs of various architectures in MIPS, ARM, and PPC. By comparing with the protocol fuzzers Boofuzz and Peach in metrics of edge coverage, our prototype system achieves an average growth of 33.7% and 38.4%, respectively. We further verify six known vulnerabilities and discover 5 0-day vulnerabilities with the Fw-fuzz, which prove the validity and utility of our framework. The overhead of our system expressed as an additional 5% of memory growth.

关键词： code coverage firmware fuzzing instrumentation security

来源：评论

学校读者我要写书评

暂无评论

code coverage Aware Test Generation Using Constraint Solver 1

引用

18th International Conference on Software Engineering and Formal Methods (SEFM)

作者： Sykora, Krystof Ahmed, Bestoun S. Bures, Miroslav Czech Tech Univ Fac Elect Engn Dept Comp Sci Prague Czech Republic Karlstad Univ Dept Math & Comp Sci Karlstad Sweden

ISBN: (数字)9783030672201

ISBN: (纸本)9783030672201;9783030672195

code coverage has been used in the software testing context mostly as a metric to assess a generated test suite's quality. Recently, code coverage analysis is used as a white-box testing technique for test optimization. Most of the research activities focus on using code coverage for test prioritization and selection within automated testing strategies. Less effort has been paid in the literature to use code coverage for test generation. This paper introduces a new code coverage-based Test Case Generation (CCTG) concept that changes the current practices by utilizing the code coverage analysis in the test generation process. CCTG uses the code coverage data to calculate the input parameters' impact for a constraint solver to automate the generation of effective test suites. We applied this approach to a few real-world case studies. The results showed that the new test generation approach could generate effective test cases and detect new faults.

关键词： Software testing code coverage Automated test generation Test case augmentation Constrained interaction testing

来源：评论

学校读者我要写书评

暂无评论

A Preliminary Study of the Impact of code coverage on Software Energy Consumption 36

A Preliminary Study of the Impact of Code Coverage on Softwa...

引用

36th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Noureddine, Adel Martinez, Matias Kanso, Houssam Univ Pau & Pays Adour E2S UPPA LIUPPA Anglet France Univ Polytech Hauts de France LAMIH UMR CNRS 8201 Valenciennes France

ISBN: (纸本)9781665435833

Software testing plays an important role in building quality software and improving maintainability. However, there are no research studies to analyze its impact on energy efficiency. In this paper, we our hypothesis and research questions on the impact of software tests (in particular through coverage metrics) on the energy consumption of software. We also present our experimental methodology and our initial results.

关键词： Software Energy Software Testing Power Consumption code coverage

来源：评论

学校读者我要写书评

暂无评论

NQC²: A Non-Intrusive QEMU code coverage Plugin 24

NQC²: A Non-Intrusive QEMU Code Coverage Plugin

引用

Proceedings of the 16th Workshop on Rapid Simulation and Performance Evaluation for Design

作者： Nils Bosbach Alwalid Salama Lukas Jünger Mark Burton Niko Zurstraßen Rebecca Pelke Rainer Leupers Institute for Communication Technologies and Embedded Systems RWTH Aachen University Germany RWTH Aachen University Germany MachineWare GmbH Germany Qualcomm Technologies Inc. France

ISBN: (纸本)9798400717918

code coverage analysis has become a standard approach in software development, facilitating the assessment of test suite effectiveness, the identification of under-tested code segments, and the discovery of performance bottlenecks. When code coverage of software for embedded systems needs to be measured, conventional approaches quickly meet their limits. A commonly used approach involves instrumenting the source files with added code that collects and dumps coverage information during runtime. This inserted code usually relies on the existence of an operating and a file system to dump the collected data. These features are not available for bare-metal programs that are executed on embedded systems. To overcome this issue, we present NQC², a plugin for QEMU. NQC² extracts coverage information from QEMU during runtime and stores them into a file on the host machine. This approach is even compatible with modified QEMU versions and does not require target-software instrumentation. NQC² outperforms a comparable approach from Xilinx by up to 8.5 x.

关键词： code coverage Performance Optimization QEMU TCG Plugin

来源：评论

学校读者我要写书评

暂无评论

Fault Localization with code coverage Representation Learning 21

Fault Localization with Code Coverage Representation Learnin...

引用

43rd IEEE/ACM International Conference on Software Engineering - Software Engineering in Practice (ICSE-SEIP) / 43rd ACM/IEEE International Conference on Software Engineering - New Ideas and Emerging Results (ICSE-NIER)

作者： Li, Yi Wang, Shaohua Nguyen, Tien N. New Jersey Inst Technol Dept Informat Newark NJ 07102 USA Univ Texas Dallas Comp Sci Dept Richardson TX 75083 USA

ISBN: (纸本)9780738113197

In this paper, we propose DEEPRL4FL, a deep learning fault localization (FL) approach that locates the buggy code at the statement and method levels by treating FL as an image pattern recognition problem. DEEPRL4FL does so via novel code coverage representation learning (RL) and data dependencies RL for program statements. Those two types of RL on the dynamic information in a code coverage matrix are also combined with the code representation learning on the static information of the usual suspicious source code. This combination is inspired by crime scene investigation in which investigators analyze the crime scene (failed test cases and statements) and related persons (statements with dependencies), and at the same time, examine the usual suspects who have committed a similar crime in the past (similar buggy code in the training data). For the code coverage information, DEEPRL4FL first orders the test cases and marks error-exhibiting code statements, expecting that a model can recognize the patterns discriminating between faulty and non-faulty statements/methods. For dependencies among statements, the suspiciousness of a statement is seen taking into account the data dependencies to other statements in execution and data flows, in addition to the statement by itself. Finally, the vector representations for code coverage matrix, data dependencies among statements, and source code are combined and used as the input of a classifier built from a Convolution Neural Network to detect buggy statements/methods. Our empirical evaluation shows that DEEPRL4FL improves the top-1 results over the state-of-the-art statement-level FL baselines from 173.1% to 491.7%. It also improves the top-1 results over the existing method-level FL baselines from 15.0% to 206.3%.

关键词： fault localization code coverage representation learning machine learning deep learning

来源：评论

学校读者我要写书评

暂无评论

COSMO: code coverage Made Easier for Android 14

COSMO: Code Coverage Made Easier for Android

引用

14th IEEE Conference on Software Testing, Verification and Validation (ICST)

作者： Romdhana, Andrea Ceccato, Mariano Georgiu, Gabriel Claudiu Merlo, Alessio Tonella, Paolo Univ Genoa DIBRIS Genoa Italy FBK ICT Secur & Trust Unit Trento Italy Univ Verona Verona Italy Consorzio Nazl Informat CINI Rome Italy Univ Svizzera Italiana Software Inst Lugano Switzerland

ISBN: (纸本)9781728168364

The degree of code coverage reached by a test suite is an important indicator of the thoroughness of testing. Most coverage tools for Android apps work at the bytecode level and provide no information to developers about which source code lines have not yet been exercised by any test case. In this paper, we present COSMO, the first fully automated Android app instrumenter publicly available that operates at the source code level in a completely transparent way, making it fully compatible with existing system level testing technologies and Android test generators. The experiments that we have conducted on a large benchmark of Android apps show that COSMO can successfully instrument most apps without altering their execution traces, introducing a small, acceptable runtime overhead.

关键词： code coverage instrumentation android testing

来源：评论

学校读者我要写书评

暂无评论

Automatically Assessing and Extending code coverage for NPM Packages 2

Automatically Assessing and Extending Code Coverage for NPM ...

引用

2nd IEEE/ACM International Conference on Automation of Software Test (AST)

作者： Sun, Haiyang Rosa, Andrea Bonetta, Daniele Binder, Walter Univ Svizzera Italiana Fac Informat Lugano Switzerland Oracle Labs Utrecht Netherlands

ISBN: (纸本)9781665435673

Typical *** applications extensively rely on packages hosted in the npm registry. As such packages may be used by thousands of other packages or applications, it is important to assess their code coverage. Moreover, increasing code coverage may help detect previously unknown issues. In this paper, we introduce TESA, a new tool that automatically assembles a test suite for any package in the npm registry. The test suite includes 1) tests written for the target package and usually hosted in its development repository, and 2) tests selected from dependent packages. The former tests allow assessing the code coverage of the target package, while the latter ones can increase code coverage by exploiting third-party tests that also exercise code in the target package. We use TESA to assess the code coverage of 500 popular npm packages. Then, we demonstrate that TESA can significantly increase code coverage by including tests from dependent packages. Finally, we show that the test suites assembled by TESA increase the effectiveness of existing dynamic program analyses to identify performance issues that are not detectable when only executing the developer's tests.

关键词： npm javascript test automation code coverage

来源：评论

学校读者我要写书评

暂无评论

Fine-grained code coverage Measurement in Automated Black-box Android Testing

引用

ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY 2020年第4期29卷 1–35页

作者： Pilgun, Aleksandr Gadyatskaya, Olga Zhauniarovich, Yury Dashevskyi, Stanislav Kushniarou, Artsiom Mauw, Sjouke Univ Luxembourg FSTC 6 Ave Fonte L-4362 Esch Sur Alzette Luxembourg Leiden Univ LIACS 1 Nielsbohrweg NL-2335 CA Leiden Netherlands 5 Molodezhnaya Str Uzda 223411 BELARUS Forescout Technol BV John F Kennedylaan 2 NL-5612 AB Eindhoven Netherlands iTechArt Inc 10 Tolstoy Str Minsk 220007 BELARUS

Today, there are millions of third-party Android applications. Some of them are buggy or even malicious. To identify such applications, novel frameworks for automated black-box testing and dynamic analysis are being developed by the Android community. code coverage is one of the most common metrics for evaluating effectiveness of these frameworks. Furthermore, code coverage is used as a fitness function for guiding evolutionary and fuzzy testing techniques. However, there are no reliable tools for measuring fine-grained code coverage in black-box Android app testing. We present the Android code coverage Tool, ACVTool for short, that instruments Android apps and measures code coverage in the black-box setting at class, method and instruction granularity. ACVTool has successfully instrumented 96.9% of apps in our experiments. It introduces a negligible instrumentation time overhead, and its runtime overhead is acceptable for automated testing tools. We demonstrate practical value of ACV-Tool in a large-scale experiment with Sapienz, a state-of-the-art automated testing tool. Using ACVTool on the same cohort of apps, we have compared different coverage granularities applied by Sapienz in terms of the found amount of crashes. Our results showthat none of the applied coverage granularities clearly outperforms others in this aspect.

关键词： Android automated software testing code coverage instrumentation

来源：评论

学校读者我要写书评

暂无评论

code coverage differences of Java bytecode and source code instrumentation tools

引用

SOFTWARE QUALITY JOURNAL 2019年第1期27卷 79-123页

作者： Horvath, Ferenc Gergely, Tamas Beszedes, Arpad Tengeri, David Balogh, Gergo Gyimothy, Tibor Univ Szeged Dept Software Engn Szeged Hungary Univ Szeged MTA SZTE Res Grp Artificial Intelligence Szeged Hungary

Many software testing fields, like white-box testing, test case generation, test prioritization, and fault localization, depend on code coverage measurement. If used as an overall completeness measure, the minor inaccuracies of coverage data reported by a tool do not matter that much;however, in certain situations, they can lead to serious confusion. For example, a code element that is falsely reported as covered can introduce false confidence in the test. This work investigates code coverage measurement issues for the Java programming language. For Java, the prevalent approach to code coverage measurement is using bytecode instrumentation due to its various benefits over source code instrumentation. As we have experienced, bytecode instrumentation-based code coverage tools produce different results than source code instrumentation-based ones in terms of the reported items as covered. We report on an empirical study to compare the code coverage results provided by tools using the different instrumentation types for Java coverage measurement on the method level. In particular, we want to find out how much a bytecode instrumentation approach is inaccurate compared to a source code instrumentation method. The differences are systematically investigated both in quantitative (how much the outputs differ) and in qualitative terms (what the causes for the differences are). In addition, the impact on test prioritization and test suite reduction-a possible application of coverage measurement-is investigated in more detail as well.

关键词： code coverage White-box testing Java bytecode instrumentation Source code instrumentation coverage tools Empirical study

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：