基于混合测试和动态分析的分段代码测试

doi:10.3969/j.issn.1000-3428.2015.02.013

计算机工程

基于混合测试和动态分析的分段代码测试

刘春宏,徐立华,颜　婷,杨宗源

(华东师范大学计算机科学技术系,上海200241)

收稿日期:2014-03-12 出版日期:2015-02-15 发布日期:2015-02-13
作者简介:刘春宏(1988 - ),女,硕士研究生,主研方向:软件测试;徐立华(通讯作者),副教授、博士;颜　婷,硕士研究生;杨宗源,教授、博士生导师。
基金项目:
上海市自然科学基金资助项目(13ZR1413000)。

Segmented Code Testing Based on Concolic Testing and Dynamic Analysis

LIU Chunhong,XU Lihua,YAN Ting,YANG Zongyuan

(Department of Computer Science and Technology,East China Normal University,Shanghai 200241,China)

Received:2014-03-12 Online:2015-02-15 Published:2015-02-13

摘要/Abstract

摘要： 传统混合执行测试方法无法对源代码不可见函数进行符号执行。针对该问题,将符号执行、分段式符号执行以及具体执行按需结合,提出一种分段式混合执行测试方法,将源代码不可见函数以分段式分析法截取为单独代码片段,结合动态执行和回归分析方法推导其相应的程序语义。为验证该方法的有效性,实现sCREST 原型系统,并对5 个应用广泛的开源系统进行测试。实验结果表明,该方法能够产生比传统方法覆盖更多分支数的测试数据。

关键词: 软件测试, 混合测试, 分段式符号分析, 动态分析, 测试数据生成, 分支覆盖

Abstract: Function calls with unavailable source codes can not be appropriately handled by symbolic execution in traditional concolic testing. To solve this problem, this paper proposes a segmented concolic testing method, which weaves,by demand,symbolic execution,segmented symbolic execution and concrete execution throughout the testing process. These function calls are treated as separate code segments,dynamically executed and analyzed to derive their corresponding program semantics. To demonstrate the effectiveness of the proposed method, this paper implements sCREST,a segmented concolic testing system based on CREST, and experiments with five open source systems. Experimental results show that segmente concolic testing is able to generate test data that covers more branches than that of the traditional approaches.

Key words: software testing, concolic testing, segmented symbolic analysis, dynamic analysis, test data generation, branch coverage

中图分类号:

TP311. 5

刘春宏,徐立华,颜婷,杨宗源. 基于混合测试和动态分析的分段代码测试[J]. 计算机工程, doi: 10.3969/j.issn.1000-3428.2015.02.013.

LIU Chunhong,XU Lihua,YAN Ting,YANG Zongyuan. Segmented Code Testing Based on Concolic Testing and Dynamic Analysis[J]. Computer Engineering, doi: 10.3969/j.issn.1000-3428.2015.02.013.

参考文献

参考文献 [ 1 ]　Godefroid P, Klarlund N, Sen K. DART: Directed Automated Random Testing [ J ]. ACM SIGPLAN Notices,2005,40(6):213-223. [ 2 ]　Sen K,Marinov D, Agha G. CUTE: A Concolic Unit Testing Engine for C [ J ]. ACM SIGSOFT Software Engineering Notes,2005,30(5):263-272. [ 3 ]　Burnim J,Sen K. Heuristics for Scalable Dynamic Test Generation[C] / / Proceedings of ASE’ 08. L’ aquila, Italy:[s. n. ],2008:443-446. [ 4 ]　崔展齐,王林章,李宣东. 一种目标制导的混合执行测试方法[J]. 计算机学报,2011,34(6):953-964. [ 5 ]　刘　杰,王嘉捷,欧阳永基,等. 基于污点指针的二进制代码缺陷检测[J]. 计算机工程,2012,38 (24): 46-49. [ 6 ]　Qu Xiao,Robinson B. A Case Study of Concolic Testing Tools and Their Limitations[C] / / Proceedings of ESEM’11. Banff,Canada:IEEE Press,2011:117-126. [ 7 ]　Godefroid P. Higher-order Test Generation[C] / / Proceedings of PLDI’11. San Jose,USA:ACM Press,2011: 258-269. [ 8 ]　Godefroid P. Compositional Dynamic Test Generation[ C] / / Proceedings of POPL ’ 07. Nice, France: ACM Press,2007:47-54. [ 9 ]　林锦滨,张晓菲,刘晖. 符号执行技术研究[C] / / 全国计算机安全学术交流会论文集. 丽江:[出版者不详], 2009:404-408. [10]　Chipounov V,Kuznetsov V,Candea G. S2E:A Platform for In-vivo Multi-Path Analysis of Software Systems[J]. ACM Transactions on Computer Systems,2012,30(1):1- 49. (下转第80 页) (上接第69 页) [11]　Le W. Segmented Symbolic Analysis[C] / / Proceedings of ICSE’ 13. San Francisco, USA: IEEE Press,2013: 212-221. [12]　Kim M,Kim Y,Jang Y. Industrial Application of Concolic Testing on Embedded Software: Case Studies[C]/ / Proceedings of ICST’12. Montreal,Canada:IEEE Press, 2012:390-399. [13]　Kim Y,Kim M,Kim Y J,et al. Industrial Application of Concolic Testing Approach:A Case Study on Libexif by Using CREST-BV and KLEE [ C ] / / Proceedings of ICSE’12. Zurich, Switzerland: IEEE Press, 2012: 1143-1152. [14]　Jacob B. External Function Support [EB / OL]. (2010- 07-07). https:/ / groups. google. com / forum / #! topic / crest-users / UxRhhbSqNlk. [15]　Harrold J,Rothermel G. Siemens Programs,HR Variants [EB/ OL ]. [2014-02-16]. http:/ / www. cc. gatech. edu/ aristotle/ Tools/ subjects/ . 编辑　金胡考

[1]	谢佳筠,伏晓,骆斌. Android防护技术研究进展 [J]. 计算机工程, 2018, 44(2): 163-170,176.
[2]	谷家腾,辛阳. 基于动态分析的XSS漏洞检测模型[J]. 计算机工程, 2018, 44(10): 34-41.
[3]	孙贺,吴礼发,洪征,颜慧颖,张亚丰. 一种结合动态与静态分析的函数调用图提取方法[J]. 计算机工程, 2017, 43(3): 154-162.
[4]	张妍,傅秀芬. 基于三目标搜索的测试用例集约简方法[J]. 计算机工程, 2016, 42(3): 84-88.
[5]	汪文靖,冯瑞. 基于二分K-means的测试用例集约简方法[J]. 计算机工程, 2016, 42(12): 73-77,83.
[6]	邱洋,王轶骏,薛质. 基于符号执行的Python攻击脚本分析平台[J]. 计算机工程, 2016, 42(11): 139-146.
[7]	吴通,陈雨亭. 基于动态分析的JavaScript 代码推荐[J]. 计算机工程, 2014, 40(10): 66-70.
[8]	张平, 李清宝, 崔晨. 基于自动路径驱动的动态控制流恢复算法[J]. 计算机工程, 2013, 39(8): 77-82.
[9]	赵慧娟, 孙文辉. 基于退火遗传算法的单元测试方法[J]. 计算机工程, 2013, 39(1): 49-53.
[10]	孙家泽, 王曙燕. 基于改进DPSO的组合测试数据生成算法[J]. 计算机工程, 2012, 38(7): 40-41,45.
[11]	曾一, 邹明, 丁娜, 刘青香. 基于贡献度的两两组合测试用例生成算法[J]. 计算机工程, 2012, 38(7): 53-56.
[12]	王轶, 蒋同海, 董军, 周喜. 基于路径覆盖插桩的可执行代码测试工具实现[J]. 计算机工程, 2012, 38(5): 35-37,40.
[13]	杨春晖, 熊婧, 李冬. 分布式系统可靠性模型研究[J]. 计算机工程, 2012, 38(3): 51-53.
[14]	程晓菊, 李仁发. 基于函数切片的嵌入式软件回归测试研究[J]. 计算机工程, 2012, 38(2): 54-56.
[15]	蔡烁, 邝继顺, 刘铁桥. 一种多扫描链混合测试数据压缩方法[J]. 计算机工程, 2012, 38(18): 245-247.

基于混合测试和动态分析的分段代码测试

Segmented Code Testing Based on Concolic Testing and Dynamic Analysis

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

Metrics

本文评价

推荐阅读 10