检索结果-内蒙古大学图书馆

Machine learning-based dynamic analysis of Android apps with improved code coverage

EURASIP JOURNAL ON INFORMATION SECURITY 2019年第1期2019卷 1-24页

作者： Yerima, Suleiman Y. Alzaylaee, Mohammed K. Sezer, Sakir De Montfort Univ Leicester LE1 9BH Leics England Queens Univ Belfast CSIT Belfast BT7 1NN Antrim North Ireland

This paper investigates the impact of code coverage on machine learning-based dynamic analysis of Android malware. In order to maximize the code coverage, dynamic analysis on Android typically requires the generation of events to trigger the user interface and maximize the discovery of the run-time behavioral features. The commonly used event generation approach in most existing Android dynamic analysis systems is the random-based approach implemented with the Monkey tool that comes with the Android SDK. Monkey is utilized in popular dynamic analysis platforms like AASandbox, vetDroid, MobileSandbox, TraceDroid, Andrubis, ANANAS, DynaLog, and HADM. In this paper, we propose and investigate approaches based on stateful event generation and compare their code coverage capabilities with the state-of-the-practice random-based Monkey approach. The two proposed approaches are the state-based method (implemented with DroidBot) and a hybrid approach that combines the state-based and random-based methods. We compare the three different input generation methods on real devices, in terms of their ability to log dynamic behavior features and the impact on various machine learning algorithms that utilize the behavioral features for malware detection. Experiments performed using 17,444 applications show that overall, the proposed methods provide much better code coverage which in turn leads to more accurate machine learning-based malware detection compared to the state-of- the- art approach.

关键词： Android malware detection code coverage Monkey DroidBot Dynamic analysis Machine learning Event generation State-based input generation Model-based input generation Random input generation

来源：评论

学校读者我要写书评

暂无评论

Hybrid Way of code coverage Tracking in Fuzz 10

Hybrid Way of Code Coverage Tracking in Fuzz

引用

10th IEEE International Conference on Software Engineering and Service Science (ICSESS)

作者： Nie, Hanyi Zhou, Xu Zhang, Junnan Natl Univ Def Technol Changsha Hunan Peoples R China

ISBN: (纸本)9781728109459

In software testing, code coverage can be one of the major metrics for evaluating the effectiveness of a test. Among all existing software testing methods, coverage-guided fuzzing is widely used nowadays, but the way it uses to obtain path coverage is mostly based on code instrumentation or emulation. However, a tester cannot take targeted measures if have no information about where the progress of the test is stuck. This paper proposes a method to record precise code coverage in a hybrid way which combining static program analysis and dynamic tracing. This work is on the basis of previous work that leverages hardware mechanism (Intel Processor Trace) to collect branch information and implement a tool called CovFuzz. Our approach can achieve an accurate coverage track that can reversibly find the corresponding source code or assembly code to assist program analysis and break through the bottleneck when the progress of software testing gets stuck. Our experiments show that the code coverage can be improved with the help of accurate path information.

关键词： fuzz code coverage Intel PT software testing

来源：评论

学校读者我要写书评

暂无评论

Why Statically Estimate code coverage Is So Hard? A Report of Lessons Learned 29

Why Statically Estimate Code Coverage Is So Hard? A Report o...

引用

9th Brazilian Symposium on Software Components, Architectures and Reuse (SBCARS)

作者： Aniche, Mauricio F. Oliva, Gustavo A. Gerosa, Marco A. Univ Sao Paulo Dept Comp Sci BR-05508 Sao Paulo Brazil

ISBN: (纸本)9781467392723

The calculation of test coverage is often unfeasible for large-scale mining software repositories studies, as its computation requires building each project and executing their test suites. Because of that, we have been working on heuristics to calculate code coverage based on static code analysis. However, our results have been disappointing so far. In this paper, we present our approach to the problem and an evaluation involving 18 open source projects (around 2,700 classes) from the Apache Software Foundation. Results show that our approach provides acceptable results for only 50% of all classes. We believe researchers can learn from our mistakes and possibly derive a better approach. We advise researchers who need to use code coverage in their studies to select projects with a well-defined build system, such as Maven.

关键词： data mining program diagnostics program testing public domain software Apache software foundation Maven code coverage large-scale mining software repositories open source projects static code analysis test suites Complexity theory Data mining Java Manuals Measurement Production Software Static code analysis data mining open source software analysis programme program testing Complexity theory computer software Java Java programming language open source

来源：评论

学校读者我要写书评

暂无评论

An Empirical Study on code coverage of Performance Testing 24

An Empirical Study on Code Coverage of Performance Testing

引用

28th International Conference on Evaluation and Assessment in Software Engineering (EASE)

作者： Imran, Muhammad Cortellessa, Vittorio Di Ruscio, Davide Rubei, Riccardo Traini, Luca Univ LAquila Laquila Italy

ISBN: (纸本)9798400717017

Performance testing aims to ensure the operational efficiency of software systems. However, many factors influencing the efficacy and adoption of performance tests in practice are not yet fully understood. For instance, while code coverage is widely regarded as a key quality metric for evaluating the efficacy of functional testing suites, there is limited knowledge about the types and levels of coverage that performance tests specifically achieve. Another important factor, often perceived as a barrier to the broader adoption of performance tests yet remaining relatively unexplored, is their extended execution time. In this paper, we analyze the performance testing suites of 28 open-source systems to study (i) the magnitude of their code coverage, and (ii) their execution time. Our analysis shows that performance tests achieve significantly lower code coverage than functional tests, as expected, and it highlights a significant trade-off between coverage and execution time. Our results also suggest, in perspective, that automated test generation methods might not ensure affordable performance testing due to the associated time cost. This finding poses new challenges in the field of performance test generation.

关键词： Performance Testing code coverage JMH Microbenchmarking

来源：评论

学校读者我要写书评

暂无评论

An Empirical Study on Effects of code Visibility on code coverage of Software Testing 10

An Empirical Study on Effects of Code Visibility on Code Cov...

引用

International 10th Workshop on Automation of Software Test

作者： Ma, Lei Zhang, Cheng Yu, Bing Sato, Hiroyuki Univ Tokyo Tokyo 1138654 Japan Univ Waterloo Waterloo ON N2L 3G1 Canada Waseda Univ Tokyo Japan Chiba Univ Chiba Japan

ISBN: (纸本)9781467370226

Software testability is the degree of difficulty to test a program. code visibility is important to support design principles, such as information hiding. It is widely believed that code visibility has effects on testability. However, little empirical evidence has been shown to clarify whether and how software testability is influenced by code visibility. We have performed an empirical study to shed light on this problem. Our study focuses on test code coverage, in particular that of automatic testing tools. code coverage is commonly used for various purposes, such as evaluating test adequacy, assessing test quality, and analyzing testability. Our study uses code coverage as the concrete measurement of testability. By analyzing code coverage of two state-of-the-art tools, in comparison with that of developer-written tests, we have discovered that code visibility does not necessarily have effects on its code coverage, but significantly affects automatic testing tools. Low code visibility often leads to low code coverage for automatic tools. In addition, different treatments on code visibility can result in significant differences in overall code coverage for automatic tools. Using a tool enhancement specific to code visibility, we demonstrate the great potential to improve existing tools.

关键词： Software testability automatic testing code coverage code visibility code accessibility

来源：评论

学校读者我要写书评

暂无评论

Automatic Self-Validation for code coverage Profilers 34

Automatic Self-Validation for Code Coverage Profilers

引用

34th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Yang, Yibiao Jiang, Yanyan Zuo, Zhiqiang Wang, Yang Sun, Hao Lu, Hongmin Zhou, Yuming Xu, Baowen Nanjing Univ State Key Lab Novel Software Technol Nanjing Peoples R China Huazhong Univ Sci & Technol Sch Cyber Sci & Engn Wuhan Peoples R China

ISBN: (纸本)9781728125084

code coverage as the primitive dynamic program behavior information, is widely adopted to facilitate a rich spectrum of software engineering tasks, such as testing, fuzzing, debugging, fault detection, reverse engineering, and program understanding. Thanks to the widespread applications, it is crucial to ensure the reliability of the code coverage profilers. Unfortunately, due to the lack of research attention and the existence of testing oracle problem, coverage profilers are far away from being tested sufficiently. Bugs are still regularly seen in the widely deployed profilers, like gcov and llvm-cov, along with gcc and llvm, respectively. This paper proposes Cod, an automated self-validator for effectively uncovering bugs in the coverage profilers. Starting from a test program (either from a compiler's test suite or generated randomly), Cod detects profiler bugs with zero false positive using a metamorphic relation in which the coverage statistics of that program and a mutated variant are bridged. We evaluated Cod over two of the most well-known code coverage profilers, namely gcov and llvm-cov. Within a four-month testing period, a total of 196 potential bugs (123 for gcov, 73 for llvm-cov) are found, among which 23 are confirmed by the developers.

关键词： code coverage Metamorphic testing coverage profilers Bug detection

来源：评论

学校读者我要写书评

暂无评论

Toolset and Program Repository for code coverage-Based Test Suite Analysis and Manipulation 14

Toolset and Program Repository for Code Coverage-Based Test ...

引用

14th IEEE International Working Conference on Source code Analysis and Manipulation (SCAM)

作者： Tengeri, David Beszedes, Arpad Havas, David Gyimothy, Tibor Univ Szeged Dept Software Engn Szeged Hungary

ISBN: (纸本)9780769553047

code coverage is often used in academic and industrial practice of white-box software testing. Various test optimization methods, e.g. test selection and prioritization, rely on code coverage information, but other related fields benefit from it as well, such as fault localization. These methods require access to the fine details of coverage information and efficient ways of processing this data. The purpose of the (free) SoDA library and toolset is to provide an efficient set of data structures and algorithms which can be used to prepare, store and analyze in various ways data related to code coverage. The focus of SoDA is not on the calculation of coverage data (such as instrumentation and test execution) but on the analysis and manipulation of test suites based on such information. An important design goal of the library was to be usable on industrial-size programs and test suites. Furthermore, there is no limitation on programming language, analysis granularity and coverage criteria. In this paper, we demonstrate the purpose and benefits of the library, the associated toolset, which also includes a graphical user interface, as well as possible usage scenarios. SoDA also includes a repository of prepared programs, which are from small to large sizes and can be used for experimentation and as a benchmark for code coverage related research.

关键词： Regression testing test suite analysis test suite optimization code coverage program repository

来源：评论

学校读者我要写书评

暂无评论

A Novel Assertions-Based code coverage Automatic CAD Tool 17

A Novel Assertions-Based Code Coverage Automatic CAD Tool

引用

IEEE EUROCON -17th International Conference on Smart Technologies

作者： El-Kharashy, Hatem Khamis, Mostafa Salah, Amr Korany, Mohammed Alexandria Univ Fac Engn Alexandria Egypt Mentor Graph Corp Cairo Egypt

ISBN: (纸本)9781509038435

Justified and complete verification for hardware designs is a critical step as industrial hardware designs becomes more and more complex. Moreover, one of the most important aspects of verification is coverage which monitors during simulation which design specification, features and also RTL code area is being covered. Following how important coverage is, most hardware verification tools provide different metrics for measuring coverage. code coverage one of the most used metrics in hardware and even software simulation is responsible for checking which blocks of code is being exercised. However, as tools becoming more and more complex and provide large amount of features sometimes it becomes harder for quality assurance in tool testing to monitor and track the code coverage unit functionality in their tool. Also, some tools may not provide a mean to measure code coverage at all. This paper presents a novel method based on SystemVerilog assertions (SVA) to measure code coverage for hardware designs, justified and tested with a novel tool that can help QA engineers in debugging their code coverage units. Additionally, this tool can act as a standalone tool for measuring code coverage if the simulator does not naturally support it.

关键词： Assertion Based verification code coverage Concurrent assertions Immediate assertions Unit testing PERL

来源：评论

学校读者我要写书评

暂无评论

Creating and manipulating control flow graphs with multilevel grouping and code coverage

Creating and manipulating control flow graphs with multileve...

引用

8th International Conference on Enterprise Information Systems (ICEIS 2006)

作者： Sofokleous, Anastasis A. Andreou, Andreas S. Iaokim, Gianna Brunel Univ Uxbridge UB8 3PH Middx England Univ Cyprus Nicosia Cyprus

ISBN: (纸本)9728865414

Various researchers and practitioners have proposed the use of control flow graphs for investigating software engineering aspects, such as testing, slicing, program analysis and debugging. However, the relevant software applications support only low level languages (e.g. C, C++) and most, if not all, of the research papers do not provide information or any facts showing the tool implementation for the control flow graph, leaving it to the reader to imagine either that the author is using third party software for creating the graph, or that the graph is constructed manually (by band). In this paper, we extend our previous work on a dedicated program analysis architecture and we describe a tool for automatic production of the control flow graph that offers advanced capabilities, such as vertices grouping, code coverage and enhanced user interaction.

关键词： control flow graph node grouping code coverage

来源：评论

学校读者我要写书评

暂无评论

A Preliminary Study of the Impact of code coverage on Software Energy Consumption 36

A Preliminary Study of the Impact of Code Coverage on Softwa...

引用

36th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Noureddine, Adel Martinez, Matias Kanso, Houssam Univ Pau & Pays Adour E2S UPPA LIUPPA Anglet France Univ Polytech Hauts de France LAMIH UMR CNRS 8201 Valenciennes France

ISBN: (纸本)9781665435833

Software testing plays an important role in building quality software and improving maintainability. However, there are no research studies to analyze its impact on energy efficiency. In this paper, we our hypothesis and research questions on the impact of software tests (in particular through coverage metrics) on the energy consumption of software. We also present our experimental methodology and our initial results.

关键词： Software Energy Software Testing Power Consumption code coverage

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：