Digital Library[ Search Result ]
OS-in-the-Loop Concolic Testing for Multitask Embedded Software
http://doi.org/10.5626/JOK.2023.50.2.140
Verification of multitask embedded software still depends on manual effort because of its hardware-dependent structure and complicated multitasking works. We present the OSin-the-loop(OiL) concolic test, the new approach for automatic and efficient verification of multitask embedded software. Given the OS model, hardware stubs that replace platform-dependent code, and annotated application code with explicit context switch control logic, it provides a hardwareindependent environment and automatically checks properties with the concolic test. In the application of our approach on a representative multitask embedded software, Object-Follower and concolic testing tool CROWN 2.0, when there is an OS model, our method achieves fewer false alarms from 91.67% to 5.13% than without OS.
Smart Contract Weakness Analyzer Based on Concolic Testing
http://doi.org/10.5626/JOK.2021.48.6.668
Ethereum is a blockchain-based cryptocurrency platform that provides a Turing complete language, Solidity, which can be used to develop smart contracts for various applications. This paper present an analyzer that finds security weaknesses in smart contracts using the concolic testing framework. Concolic testing, which combines symbolic execution and testing, is more efficient than symbolic execution while retaining no false positiveness which is absent in static analysis. Also, the analyzer reflects actual execution context to the maximum extent possible using the Ethereum execution environment, the Geth testnet. The analyzer detects integer overflow and unhandled exception weakness. Also, this paper presents performance test results in comparison with a well known smart contract symbolic execution framework, Manticore.
Bounded Search Strategies of Concolic Testing for Effective and Efficient Structural Coverage Achievement
http://doi.org/10.5626/JOK.2021.48.2.201
This paper proposes a loop-bounded search strategy for effective and efficient coverage achievement in concolic testing. In selecting a new path to explore, a loop-bounded search strategy limits the number of iterations in a loop to a certain loop-bound, so that the concolic testing is guided to explore various program behaviors within a limited range. In addition, to extend the range of path exploration gradually, this search strategy increments the loop-bound over test executions based on their coverage achievement rates. We implemented three versions of loop-bounded search strategies based on three existing concolic search strategies of CREST. The experiments with 4 real-world target programs (Vim, Grep, Busybox Awk, and Busybox Sed) showed that CREST achieves a higher branch coverage more quickly when the loop-bounded search strategies are applied.
A Study on Improvement of Scoring in Programming Practice Questions Using Concolic Testing Technique
Kangbok Seo, Sunghee Lee, Deokyeop Kim, Woojin Lee
http://doi.org/10.5626/JOK.2019.46.11.1133
Recently, as programming education has attracted increasing interest, studies on effective programming education have been actively investigated. Various automatic scoring systems have been developed and are currently used in programming education, but in these systems, there are some contents that the instructor must write, such as test cases for scoring. The test cases used for scoring should not simply use the correct input, but should also be written in consideration of the various parts that students might add to the source code. If the instructor writes such a test case, the author"s mistake may lead to insufficient test cases or incorrect test cases, ultimately resulting in incorrect scoring. In order to solve these problems, this paper proposed a tool to improve the test cases used in existing scoring by applying the concolic testing technique to the source code submitted by the students. In addition, using the proposed tool, we found a case in which the scoring was incorrect, so we added an improved test case to perform the scoring again.
Automatic Test Case Generation through Concolic Testing to Improve SW Quality of Defense Weapon System
Kunwoo Park, Joohyun Lee, Hyunggon Song, Kyu Tae Cho, Yunho Kim, Moonzoo Kim
http://doi.org/10.5626/JOK.2019.46.9.926
To improve SW quality of defense weapon system, automatic and systematic generation of test cases is necessary; however, that is not the case in the traditional practice of labor-intensive and manual SW testing. The paper applies concolic testing to the defense weapon system SW, effectively generates test cases that achieve high coverage, and discovers defects which contributes to the improvement in SW quality. Also, two methods are proposed using 4 search strategies in concolic testing and using LIA logic, to increase the efficiency of concolic testing for a program with high complexity. In addition, a symbolic modeling method is proposed as an example to extend concolic testing for practitioners.
Improving Applicability and Usability of a Concolic Testing Tool CROWN
Hyunwoo Kim, Yunho Kim, Moonzoo Kim
http://doi.org/10.5626/JOK.2018.45.10.1071
The paper presents an extension of the Concolic testing tool CROWN(Concolic testing for Real-wOrld softWare aNalysis) for improving the applicability and usability of Concolic testing. The existing CROWN tool is limited to Linux platforms and the Concolic testing results generated from CROWN are hard for users to understand. We extend CROWN to run on Windows OS to increase the running platforms and improve user interface with CROWN and its applicability to help users analyze Concolic testing results in an easier way.
Search
Journal of KIISE
- ISSN : 2383-630X(Print)
- ISSN : 2383-6296(Electronic)
- KCI Accredited Journal
Editorial Office
- Tel. +82-2-588-9240
- Fax. +82-2-521-1352
- E-mail. chwoo@kiise.or.kr