mCUTE: A Model-Level Concolic Unit Testing Engine for UML State Machines

Ahmadi, Reza; Jahed, Karim; Dingel, Juergen

doi:10.1109/ase.2019.00132

Cited by 7 publications

(5 citation statements)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The branch coverage by using this method has a notable boost. Many other concolic unit testing tools do exist, such as those in [30,31]. Compared to Hybrid CUTE, the difference is the path selection.…”

Section: Related Workmentioning

confidence: 99%

Scalable Path Search for Automated Test Case Generation

Wang

2022

Electronics

View full text Add to dashboard Cite

Test case generation is an important task during software testing. In this paper, we present a new test-case generation framework for C programs. This approach combines dataflow analysis and dynamic symbolic execution together, and more importantly, it efficiently searches the program path space for potential faults based on the tabu search strategy and the program fault statistics. Unlike the traditional symbolic execution, which explores the program space exhaustively and is difficult to apply to complicated programs effectively, our approach automatically explores the feasible paths of hidden faults with high probability. The scalable and efficient path search strategy facilitates bug finding with much fewer test cases generated. We implemented this approach, and the experimental results presented in this paper are attractive.

show abstract

Section: Related Workmentioning

confidence: 99%

Scalable Path Search for Automated Test Case Generation

Wang

2022

Electronics

View full text Add to dashboard Cite

show abstract

“…Operator (ID) Description ARB (31) Arithmetic operator replacement (binary, unary and shortcut) ARU (32) ARS (33) AIU (34) Arithmetic operator insertion (unary and short-cut) AIS (35) ADS (36) Arithmetic operator deletion (short-cut) ROR (37) Relational operator replacement COR (38) Conditional operators (replacement, insertion and deletion) COI (39) COD (40) LOR (41) Logical operator replacement ASR (42) Short-cut assignment operator replacement and discuss the results, with the purpose of answering the three research questions.…”

Section: T a B L E 1 Traditional Mutation Operators Included In Mucppmentioning

confidence: 99%

“…In addition, Manticore features a user-friendly interface that allows customising the analysis. Furthermore, there are a wide variety of tools dedicated to software testing via symbolic execution, such as DeepState [39] for C and C++ programs and mCute [40] for UML state machines.…”

Section: Software Testing Automationmentioning

confidence: 99%

Mutation‐inspired symbolic execution for software testing

et al. 2022

View full text Add to dashboard Cite

Software testing is a complex and costly stage during the software development lifecycle. Nowadays, there is a wide variety of solutions to reduce testing costs and improve test quality. Focussing on test case generation, Dynamic Symbolic Execution (DSE) is used to generate tests with good structural coverage. Regarding test suite evaluation, Mutation Testing (MT) assesses the detection capability of the test cases by introducing minor localised changes that resemble real faults. DSE is however known to produce tests that do not have good mutation detection capabilities: in this paper, the authors set out to solve this by combining DSE and MT into a new family of approaches that the authors call Mutation-Inspired Symbolic Execution (MISE). First, this known result on a set of open source programs is confirmed: DSE by itself is not good at killing mutants, detecting only 59.9% out of all mutants. The authors show that a direct combination of DSE and MT (naive MISE) can produce better results, detecting up to 16% more mutants depending on the programme, though at a high computational cost. To reduce these costs, the authors set out a roadmap for more efficient versions of MISE, gaining its advantages while avoiding a large part of its additional costs.

show abstract

“…In the context of the running example, the transitions ⟨ 4 , 5 ⟩ in the the capsule Philosopher are taken upon the reception of the message reply(true) and it changes the execution state from 3 to 4 . The notion of RTC allows us to represent these two micro-steps as one single step (i.e., rc-Step) without loss of information (i.e., 1 :…”

Section: Description Of Approach 31 Overviewmentioning

confidence: 99%

“…Therefore, an ideal replay-based debugger requires providing a deterministic replay of execution traces in an efficient way. In recent years, numerous Model-Driven Development (MDD) techniques and tools have been developed to mitigate the complexity of testing and debugging systems at model-level (e.g., MDebugger [4], PMExec [5,6], mCUTE [1]). However, they merely consider nondistributed systems which typically are executed by one processing unit.…”

Section: Introductionmentioning

confidence: 99%

MReplayer

Babaei

Bagherzadeh

Dingel

2020

Proceedings of the 23rd ACM/IEEE International Conference on Model Driven Engineering Languages and Systems: Companion Proceedi

Self Cite

View full text Add to dashboard Cite

In this paper, we present MReplayer that supports ordering and replaying of execution traces of distributed systems that are developed using communicated state machine models. Despite the existing solutions that require detailed traces annotated with timestamps (logical or physical), MReplayer only requires a minimum amount of traces without timestamps. Instead, it uses model analysis techniques to order and replay the traces. MReplayer is composed of a set of engines that support an end-to-end solution to trace ordering and replay of distributed systems in three steps: first, a model of a distributed system is instrumented using model transformations to generate execution traces and broadcasts the traces either using a TCP connection or a log file. Second, static analysis of state machine models is performed to extract run-to-completion steps from them. Third, using the information collected (execution traces and rc-steps) in the previous steps, a lightweight centralized version of the distributed system is created and presented to users in a webbased application. We have implemented our approach using UML for Real-time (UML-RT) which is a language specifically designed for real-time embedded systems with soft real-time constraints. Finally, we have evaluated MReplayer against several use cases with various complexities. The result shows that MReplayer can reduce the size of the trace information collected by more than half while incurring similar runtime overhead. A video that demonstrates the tool: https://youtu.be/WG5ggqPoJHg CCS CONCEPTS • Software and its engineering → Model-driven software engineering; Real-time systems software; Software testing and debugging;

show abstract

mCUTE: A Model-Level Concolic Unit Testing Engine for UML State Machines

Cited by 7 publications

References 19 publications

Scalable Path Search for Automated Test Case Generation

Scalable Path Search for Automated Test Case Generation

Mutation‐inspired symbolic execution for software testing

MReplayer

Contact Info

Product

Resources

About