R. Young Chul Kim

Test Case Generation from Cause-Effect Graph Based on Model Transformation

In software testing, cause-effect graph assures coverage criteria of 100% functional requirements with minimum test case. The existing test case generation from cause-effect graph implements the algorithmic approach. It has disadvantages to modify the entire program if the input model is different. In contrast, model transformation approach can flexibly implement with even a different input models. In the future, we need to study the method of automatic generation of test cases from UML Diagram. It is possible to generate the test case when mapping between cause-effect graph and UML diagram. In this paper, as a first research step, we propose the method to generate test cases from cause-effect graph based on model transformation. To implement the proposed method, we write the rules of model transformation with ATLAS Transformation Language (ATL), and execute the rules in development environment of Eclipse. The implemented tool of the proposed method can be easily extended by rewriting with the mapping rule between cause-effect graph and UML diagram. We just define the relationship between each models to generate the test case.

A Case Study on Improving SW Quality through Software Visualization

Today, it is very important issue to high quality of software issue on huge scale of code and time-to-market. In the industrial fields still developers focuses on Code based development. Therefore we try to consider two points of views 1) improving the general developer the bad development habit, and 2) maintenance without design, documentation and code visualization. To solve these problems, we need to make the code visualization of code. In this paper, we suggest how to visualize the inner structure of code, and also how to proceed improvement of quality with constructing the Tool-Chain for visualizing Java codes inner structure. For our practical case, we applied Object Code with NIPAs SW Visualization, and then reduced code complexity through quantitatively analyzing and visualizing code based on setting the basic module unit, the class of object oriented code.

Software Vulnerability Detection Methodology Combined with Static and Dynamic Analysis

Software vulnerability is the attack surface. Therefore, vulnerabilities innate in software should be detected for software security assurance. Vulnerability detection method can be divided into static vulnerability detection and dynamic vulnerability detection. Static vulnerability detection is more commonly used for vulnerability detection. This method has many benefits, but it also creates false positives. Therefore, this paper proposes a method to combine static and dynamic detection to reduce false positives created from static vulnerability detection. The proposed method verifies the vulnerability by implanting a fault, based on the information received from static code analysis.

A Practical Study on Code Static Analysis through Open Source based Tool Chains

In our domestic software industries, it is focused on such a high quality development/ testing process, maturity measurement, and so on. But the real industrial fields are still working on a code-centric development. Most of the existing legacy systems did not keep the design and highly increased the code complexity with more patching of the original codes. To solve this problem, we adopt a code visualization technique which is important to reduce the code complexity among modules. To do this, we suggest a tool chaining method based on the existing open source software tools, which extends NIPAs Software Visualization techniques applied to procedural languages. In addition, it should be refactored to fix bad couplings of the quality measurement indicators within the code visualization. As a result, we can apply reverse engineering to the legacy code, that is, from programming via model to architecture, and then make high quality software with this approach.

Automatic test case generation for validating the dynamic behaviors of the complete solar power monitoring system

Recently, a photovoltaic energy integrated monitoring system may happen a serious problem with a little error. After constructing the complete solar power monitoring system, this is, a kind of safety-critical system, it should consider how to completely validate it based on requirements of this system. For even code based test coverage in safety critical area, it must achieve 100% of Path and MC/DC coverage on dynamic analysis. To do this, we suggest to automatic test generation on Model Driven Approach to ensure 100% functional requirement coverage using minimal test cases. More important idea is to generate an image (of test case) with an image (of sequence diagram) based on automatic multimedia image translation processing, but not use an algorithmic method in the old fashion. Our approach is focusing on validating the dynamic behaviors of the safety system, which generate test cases based on sequence diagram, that is, use case scenario to design the dynamic behaviors of the solar power monitoring system. As a result, it can validate the safety critical system with minimal test cases.

Automatic transformation tools of UML design models from virtual prototypes of multi-jointed robots

Most of robotic companies develop a control programming of multi-jointed robots, which spend too much time to manually adjust the moving functions of the robots. To solve this problem, we adapt the virtual prototyping (VP) to develop the control program of the robotic behaviors. For software engineers, in order for them to easily program this robot, we also apply metamodel mechanism to convert UML models with virtual prototyping model. We propose the automatic model transformation from the virtual prototyping model to UML models, which will then develop coding based on UML models. To prove our mechanism’s efficiency, we implement Robot to UML Translator (RUT) as our transformation rules with ATLAS transformational language. Lastly, we show experimental validation about the consistency of our proposed technique with an example of multi-joined robot prototype models.

Extracting Test Cases with Message-Sequence Diagram for Validating the Photovoltaic Energy Integrated Monitoring System

Recently, in the photovoltaic energy integrated monitoring software system, it has more complex, and accordingly may be possible to occur more errors. In this industrial services, a small error can lead to a huge accident to make the power failures. To completely build this system, it should verify whether it is or not stability of software through measuring the full coverage with generating test cases in detail level based on a message sequence model. In this paper, we apply to verify a system stability of this monitoring system with our previous research such as the automatic test case generation based on UML 2.4.1 message-sequence diagram via cause-effect diagram. With this, we extract automatically test cases on coverage.

Automatic Test Case Generation with State Diagram for Validating the Solar Integrated System

For safe software development on the solar integrated monitoring system, it is very important how to identify safe behaviors of the system behaviors. Therefore, it needs to test the system behaviors after the software development. To solve this problem, the existing studies have proposed the use case based test coverage analysis at all software development stages [1]. With this method, we identify the test cases based on priority of the system behaviors. In this paper, we proposes automatic test case extraction method based on state diagram among the use case-based test coverage extraction methods. That is, we can use state diagram for a system behaviors with which generates test cases to validate the system. We show an applicative case on the system behaviors of a solar integrated system with this approach.

A Visualization of Secure Vulnerability in Code using Abstract Syntax Tree Metamodel

Recently, as information systems have been hacked and personal information leakage accidents have occurred frequently, the korea government enacted a secure coding guide and made it mandatory for informatization projects related to the electronic government. However, it is not easy for general developers to know and implement all software vulnerabilities in secure coding. Also, it is difficult to check for vulnerabilities in previously developed software. Therefore, there is a need for techniques to automatically analyze security vulnerabilities at the source code level and visualize the results. In this paper, we propose a method to analyze security vulnerability more easily by applying software visualization technology to secure coding.

MCCFG: an MOF-based multiple condition control flow graph for automatic test case generation

Requirement-based testing (RBT) is widely known for the efficient testing in the limited resources. However RBT is difficult to generate automatic test cases; thus it needs complex methods. This paper suggests our automatic test case generation for all coverage (statement, condition, decision, condition/decision, modified condition/decision, and multiple condition coverage) based on the model-based testing. To do this, we extend the original control flow graph with multiple conditions for all condition related coverage, which is called multiple conditions control flow graph, and adapt a model transformation using metamodel mechanism for test case generation. As a result, our proposed method successfully applies to the prior test requirement.