Abstract:The control logic models built by Simulink or Ptolemy have been widely used in industry scenes. It is an urgent need to ensure the safety and security of the control logic models. Test case generation technologies are widely used to ensure the safety and security. State-of-the-art model testing tools employ model checking techniques or search-based methods to generate test cases. Traditional search based techniques based on Simulink simulation are plagued by problems such as low speed and high overhead. Traditional model checking techniques such as symbolic execution have limited performance when dealing with nonlinear elements and complex loops. Recently, coverage guided fuzzing technologies are known to be effective for test case generation, due to their high efficiency and impressive effects over complex branches of loops. In this paper, we apply fuzzing methods to improve model testing and demonstrate the effectiveness. The fuzzing methods aim to cover more program branches by mutating valuable seeds. Inspired by this feature, we propose a novel integration technology SPsCGF, which leverages bounded model checking for symbolic execution to generate test cases as initial seeds and then conduct fuzzing based upon these worthy seeds. In this manner, our work combines the advantages of the model checking methods and fuzzing techniques in a novel way. Since the control logic models always receive signal inputs, we specifically design novel mutation operators for signals to improve the existing fuzzing method in model testing. Over the evaluated benchmarks which consist of industrial cases, SPsCGF could achieve 8% to 38% higher model coverage and 3x-10x time efficiency compared with the state-of-the-art works.

An Improved Global Analysis for Program Bug Checking

Detecting DBMS Bugs with Context-Sensitive Instantiation and Multi-Plan Execution

An Improved Formalization Analysis Approach to Determine Schedulability of Global Multiprocessor Scheduling Based on Symbolic Safety Analysis and Statistical Model Checking in Smartphone Systems

More anti-chain based refinement checking

Improved Model Checking Technology for Program Temporal Safety Properties

Scalable and Extensible Static Memory Safety Analysis with Summary over Access Path

Improve Model Checking Efficiency Using Specific Knowledge about the System

General and Practical Property-based Testing for Android Apps

Testing high performance numerical simulation programs: experience, lessons learned, and open issues

Bug Inducing Analysis to Prevent Fault Prone Bug Fixes.

ClearBug An improved automatic tool for bug analysis

Detecting Integer Bugs Based on Static and Dynamic Program Analysis

Necessity and Capability of Flow, Context, Field and Quasi Path Sensitive Points-to Analysis

Incremental Algorithms for Inter-procedural Analysis of Safety Properties

QChecker: Detecting Bugs in Quantum Programs via Static Analysis

A novel collaborative scheme of simulation and model checking for property verification

Temporal Coverage Analysis for Dynamic Verification.

Shaping Program Repair Space with Existing Patches and Similar Code

Improve Model Testing by Integrating Bounded Model Checking and Coverage Guided Fuzzing

Towards Extending the Range of Bugs That Automated Program Repair Can Handle

Automatic Approach of Generating Summaries for Common Loops and Its Application