检索结果-内蒙古大学图书馆

作者： Žiaková, Nikoleta Brno University of Technology

Tato práce se zabývá analýzou pokrytí kódu testovací sadou aplikačního serveru JBoss. Pro sběr informací o pokrytí kódu byly použity nástroje Emma a Cobertu... 详细信息

Tato práce se zabývá analýzou pokrytí kódu testovací sadou aplikačního serveru JBoss. Pro sběr informací o pokrytí kódu byly použity nástroje Emma a Cobertura. Bakalářská práce je rozdělená na dvě hlavní části. První z nich seznámí čtenáře s použitými technologiemi a připraví teoretický základ pro druhou část. Ta má praktický charakter, obsahuje postup pro získání informací o pokrytí kódu vybranými nástroji a jejich následnou analýzu. Výsledky poskytují pohled na vývoj pokrytí kódu v průběhu vývoje aplikačního serveru a také porovnání použitých nástrojů.

关键词： JBoss AS Emma Cobertura pokrytí kódu metriky testovací sada Java EE JBoss AS Emma Cobertura code coverage metrics testsuite Java EE Text

来源：评论

学校读者我要写书评

暂无评论

Developing and Evaluating Objective Termination Criteria for Random Testing

引用

ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY 2019年第3期28卷 17-17页

作者： Tramontana, Porfirio Amalfitano, Domenico Amatucci, Nicola Memon, Atif Fasolino, Anna Rita Univ Naples Federico II Dept Elect Engn & Informat Technol Naples Italy Univ Maryland Dept Comp Sci Via Claudio 21 College Pk MD 20742 USA

Random testing is a software testing technique through which programs are tested by generating and executing random inputs. Because of its unstructured nature, it is difficult to determine when to stop a random testing process. Faults may be missed if the process is stopped prematurely, and resources may be wasted if the process is run too long. In this article, we propose two promising termination criteria, "All Equivalent" (AEQ) and "All Included in One" (AIO), applicable to random testing. These criteria stop random testing once the process has reached a code-coverage-based saturation point after which additional testing effort is unlikely to provide additional effectiveness. We model and implement them in the context of a general random testing process composed of independent random testing sessions. Thirty-six experiments involving GUI testing and unit testing of Java applications have demonstrated that the AEQ criteria is generally able to stop the process when a code coverage equal or very near to the saturation level is reached, while AIO is able to stop the process earlier in cases it reaches the saturation level of coverage. In addition, the performance of the two criteria has been compared against other termination criteria adopted in the literature.

关键词： Random testing saturation effect code coverage

来源：评论

学校读者我要写书评

暂无评论

A systematic literature review on software security testing using metaheuristics

引用

AUTOMATED SOFTWARE ENGINEERING 2024年第2期31卷 44-44页

作者： Ahsan, Fatma Anwer, Faisal Aligarh Muslim Univ Dept Comp Sci Aligarh 202002 Uttar Pradesh India

The security of an application is critical for its success, as breaches cause loss for organizations and individuals. Search-based software security testing (SBSST) is the field that utilizes metaheuristics to generate test cases for the software testing for some pre-specified security test adequacy criteria This paper conducts a systematic literature review to compare metaheuristics and fitness functions used in software security testing, exploring their distinctive capabilities and impact on vulnerability detection and code coverage. The aim is to provide insights for fortifying software systems against emerging threats in the rapidly evolving technological landscape. This paper examines how search-based algorithms have been explored in the context of code coverage and software security testing. Moreover, the study highlights different metaheuristics and fitness functions for security testing and code coverage. This paper follows the standard guidelines from Kitchenham to conduct SLR and obtained 122 primary studies related to SBSST after a multi-stage selection process. The papers were from different sources journals, conference proceedings, workshops, summits, and researchers' webpages published between 2001 and 2022. The outcomes demonstrate that the main tackled vulnerabilities using metaheuristics are XSS, SQLI, program crash, and XMLI. The findings have suggested several areas for future research directions, including detecting server-side request forgery and security testing of third-party components. Moreover, new metaheuristics must also need to be explored to detect security vulnerabilities that are still unexplored or explored significantly less. Furthermore, metaheuristics can be combined with machine learning and reinforcement learning techniques for better results. Some metaheuristics can be designed by looking at the complexity of security testing and exploiting more fitness functions related to detecting different vulnerabilities.

关键词： SBSST Meta-heuristic Optimization algorithm Evolutionary algorithm Software security testing code coverage XSS SQLI XMLI Program crash

来源：评论

学校读者我要写书评

暂无评论

Bringing Modern Unit Testing Techniques to Sensornets

引用

ACM TRANSACTIONS ON SENSOR NETWORKS 2015年第2期11卷 25-25页

作者： Iwanicki, Konrad Horban, Przemyslaw Glazar, Piotr Strzelecki, Karol Univ Warsaw PL-02097 Warsaw Poland

Unit testing, an important facet of software quality assurance, is under appreciated by wireless sensor network (sensornet) developers. This is likely because our tools lag behind the rest of the computing field. As a remedy, we present a new framework that enables modern unit testing techniques in sensornets. Although the framework takes a holistic approach to unit testing, its novelty lies mainly in two aspects. First, to boost test development, it introduces embedded mock modules that automatically abstract out dependencies of tested code. Second, to automate test assessment, it provides embedded code coverage tools that identify untested control flow paths in the code. We demonstrate that in sensornets these features pose unique problems, solving which requires dedicated support from the compiler and operating system. However, the solutions have the potential to offer substantial benefits. In particular, they reduce the unit test development effort by a few factors compared to existing solutions. At the same time, they facilitate obtaining full code coverage, compared to merely 57-72% that can be achieved with integration tests. They also allow for intercepting and reporting many classes of runtime failures, thereby simplifying the diagnosis of software flaws. Finally, they enable fine-grained management of the quality of sensornet software.

关键词： Reliability Measurement Design Unit testing mock objects code coverage software quality assurance wireless sensor networks embedded systems

来源：评论

学校读者我要写书评

暂无评论

An optimization approach for automated unit test generation tools using multi-objective evolutionary algorithms

引用

Future Computing and Informatics Journal 2018年第2期3卷 178-190页

作者： Samar Ali Abdallah Ramadan Moawad Esaam Eldeen Fawzy Arab Academy for Science Technology & Maritime Transport Cairo Egypt Future University in Egypt Cairo Egypt

High code coverage is measured by the process of software testing typically using automatic test case generation tools. This standard approach is usually used for unit testing to improve software reliability. Most automated test case generation tools focused just on code coverage without considering its cost and redundancy between generated test cases. To obtain optimized high code coverage and to ensure minimum cost and redundancy a Multi-Objectives Evolutionary Algorithm approach (MOEA) is set in motion. An efficient approach is proposed and applied to different algorithms from MOEA Frame from the separate library with three fitness functions for coverage, Cost, and Redundancy. Four MEOA algorithms have been proven reliable to reach above the 90 percent code coverage: NSGAII, Random, SMSEMOA,v and ε-MOEA. These four algorithms are the key factors behind the MOEA approach.

关键词： Unit test Automated test case generation MOEA code coverage

来源：评论

学校读者我要写书评

暂无评论

ATSM: A coverage-based framework and a tool for test suite minimization

引用

JOURNAL OF SOFTWARE-EVOLUTION AND PROCESS 2023年第6期36卷

作者： Alekseev, Yaroslav Onischuck, Mikhail Zorin, Arseniy Chernyi, Vitaliy Iliyn, Evgeniy Itsykson, Vladimir Peter Great St Petersburg Polytech Univ Polytech Skaya 29 St Petersburg 195251 Russia ITMO Univ St Petersburg Russia

Software projects grow larger every year, which, in turn, makes the testing process harder. One of the most useful methods for testing large projects is unit-test generation. However, some tests can repeatedly cover the same parts of the code, making it difficult to maintain a growing test codebase. In software testing, test suite minimization plays a crucial role in reducing the cost of testing and improving the efficiency of the testing process. In this paper, we provide an extensible minimization engine that detects redundant tests using one of the supported minimization algorithms without changing the coverage metrics. We also performed a comprehensive analysis of existing approaches and techniques, developed an engine structure, and implemented multiple algorithms of different kinds. Finally, we evaluated our tool on various open-source projects to demonstrate its effectiveness and efficiency.

关键词： automation code coverage Java REST API test suite minimization

来源：评论

学校读者我要写书评

暂无评论

Targeted and Depth-first Exploration for Systematic Testing of Android Apps

引用

ACM SIGPLAN NOTICES 2013年第10期48卷 641-660页

作者： Azim, Tanzirul Neamtiu, Iulian Univ Calif Riverside Riverside CA 92521 USA

Systematic exploration of Android apps is an enabler for a variety of app analysis and testing tasks. Performing the exploration while apps run on actual phones is essential for exploring the full range of app capabilities. However, exploring real-world apps on real phones is challenging due to non-determinism, non-standard control flow, scalability and overhead constraints. Relying on end-users to conduct the exploration might not be very effective: we performed a 7-user study on popular Android apps, and found that the combined 7-user coverage was 30.08% of the app screens and 6.46% of the app methods. Prior approaches for automated exploration of Android apps have run apps in an emulator or focused on small apps whose source code was available. To address these problems, we present A(3)E, an approach and tool that allows substantial Android apps to be explored systematically while running on actual phones, yet without requiring access to the app's source code. The key insight of our approach is to use a static, taint-style, dataflow analysis on the app bytecode in a novel way, to construct a high-level control flow graph that captures legal transitions among activities (app screens). We then use this graph to develop an exploration strategy named Targeted Exploration that permits fast, direct exploration of activities, including activities that would be difficult to reach during normal use. We also developed a strategy named Depth-first Exploration that mimics user actions for exploring activities and their constituents in a slower, but more systematic way. To measure the effectiveness of our techniques, we use two metrics: activity coverage (number of screens explored) and method coverage. Experiments with using our approach on 25 popular Android apps including BBC News, Gas Buddy, Amazon Mobile, YouTube, Shazam Encore, and CNN, show that our exploration techniques achieve 59.39-64.11% activity coverage and 29.53-36.46% method coverage.

关键词： Languages Reliability Verification Google Android GUI testing Systematic exploration Test case generation code coverage Greybox testing Dynamic analysis Taint analysis

来源：评论

学校读者我要写书评

暂无评论

A priority based path searching method for improving hybrid fuzzing

引用

COMPUTERS & SECURITY 2021年 105卷 102242-102242页

作者： Lin, Pei-hong Hong, Zheng Li, Yi-hao Wu, Li-fa Army Engn Univ PLA Nanjing Peoples R China Nanjing Univ Posts & Telecommun Nanjing Peoples R China

Hybrid fuzzing which combines classical fuzzing with concolic execution to produce effective test suites is an advanced software vulnerability detection technique. Because fuzzing and concolic execution are complementary in nature, some researchers propose "optimal strategy" and "discriminative dispatch strategy" to improve the performance of hybrid fuzzing. Although the ideas are interesting and useful, they have some limitations, such as high time overhead and difficulties in implementation. In this paper, we propose a Priority Based Path Searching method (PBPS) to utilize the capability of concolic execution better. PBPS evaluates each path's solving cost and solving demand, and prioritizes them based on two path characteristics, which are path lengths and sample-hits for concolic execution. The rationale is to keep the pipeline full by readily feeding the concolic engine with paths whose constraints are simpler to solve and are less likely to be explored by fuzz testing. We implement PBPS in Driller, which is a popular hybrid fuzzer and we evaluate our system "QuickFuzz" with the CQE dataset. Experimental results show that compared with DigFuzz and the original Driller, "QuickFuzz" discovers more vulnerabilities and achieves higher code coverage on the CQE dataset. (c) 2021 Elsevier Ltd. All rights reserved.

关键词： Fuzz testing Concolic execution Hybrid fuzzing code coverage Vulnerability detection

来源：评论

学校读者我要写书评

暂无评论

Can this fault be detected: A study on fault detection via automated test generation

引用

JOURNAL OF SYSTEMS AND SOFTWARE 2020年 170卷 110769-110769页

作者： Ma, Ping Cheng, Hangyuan Zhang, Jingxuan Xuan, Jifeng Wuhan Univ Sch Comp Sci Wuhan 430072 Peoples R China Nanjing Univ Aeronaut & Astronaut Coll Comp Sci & Technol Nanjing 211106 Peoples R China

Automated test generation can reduce the manual effort in improving software quality. A test generation method employs code coverage, such as the widely-used branch coverage, to guide the inference of tests. These tests can be used to detect hidden faults. An automatic tool takes a specific type of code coverage as a configurable parameter. Given an automated tool of test generation, a fault may be detected by one type of code coverage, but omitted by another. In frequently released software projects, the time budget of testing is limited. Configuring code coverage for a testing tool can effectively improve the quality of projects. In this paper, we conduct a study on whether a fault can be detected by specific code coverage in automated test generation. We build predictive models with 60 metrics of faulty source code to identify detectable faults under eight types of code coverage. In the experiment, an off-the-shelf tool, EvoSuite is used to generate test data. Experimental results based on four research questions show that different types of code coverage result in the detection of different faults;a code coverage can be used as a supplement to increase the number of detected faults if another coverage is applied first;for each coverage, the number of detected faults increases with its cutoff time in test generation. Our result shows that the choice of code coverage can be learned via multi-objective optimization from sampled faults and directly applied to new faults. This study can be viewed as a preliminary result to support the configuration of code coverage in the application of automated test generation. (C) 2020 Elsevier Inc. All rights reserved.

关键词： Test generation code metrics code coverage Predictive models

来源：评论

学校读者我要写书评

暂无评论

Impact of Using Tools in an Undergraduate Software Testing Course Supported by WReSTT

引用

ACM TRANSACTIONS ON COMPUTING EDUCATION 2017年第4期17卷 18-18页

作者： Clarke, Peter J. Davis, Debra L. Chang-Lau, Raymond King, Tariq M. Florida Int Univ Sch Comp & Informat Sci 11200 SW 8th St Miami FL 33199 USA Ultimate Software Grp Inc 2000 Ultimate Way Weston FL 33326 USA

Software continues to affect a major part of our daily lives, including the way we use our phones, home appliances, medical devices, and cars. The pervasiveness of software has led to a growing demand for software developers over the next decade. To ensure the high quality of software developed in industry, students being trained in software engineering also need to be trained on how to use testing techniques and supporting tools effectively at all levels of development. In this article, we investigate how testing tools are used in the software project of an undergraduate testing course. We also investigate how a cyberlearning environment-the Web-Based Repository of Software Testing Tutorials (WReSTT)-is used to supplement the learning materials presented in class, particularly the tutorials on different software testing tools. The results of a study spanning three semesters of the undergraduate course suggest that (1) the use of code coverage tools motivates students to improve their test suites;(2) the number of bugs found when using coverage tools slightly increased, which is similar to the results found in the research literature;and (3) students find WReSTT to be a useful resource for learning about software testing techniques and the use of code coverage tools.

关键词： Testing tools code coverage cyberlearning

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：