Wed 26 May 2021 23:20 - 23:40 at Blended Sessions Room 3 - 2.1.3. Model Checking
There have been numerous studies on mining temporal specifications from execution traces. These approaches learn finite-state automata (FSA) from execution traces when running tests. To learn accurate specifications of a software system, many tests are required. Existing approaches generalize from a limited number of traces or use simple test generation strategies. Unfortunately, these strategies may not exercise uncommon usage patterns of a software system. To address this problem, we propose a new approach, adversarial specification mining, and develop a prototype, DICE (Diversity through Counter-Examples). DICE has two components: DICE-Tester and DICE-Miner. After mining Linear Temporal Logic specifications from an input test suite, DICE-Tester adversarially guides test generation, searching for counterexamples to these specifications to invalidate spurious properties. These counterexamples represent gaps in the diversity of the input test suite. This process produces execution traces of usage patterns that were unrepresented in the input test suite. Next, we propose a new specification inference algorithm, DICE-Miner, to infer FSAs using the traces, guided by the temporal specifications. We find that the inferred specifications are of higher quality than those produced by existing state-of-the-art specification miners. Finally, we use the FSAs in a fuzzer for servers of stateful protocols, increasing its coverage.
Wed 26 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
11:20 - 12:20 | 2.1.3. Model CheckingTechnical Track / Journal-First Papers at Blended Sessions Room 3 +12h Chair(s): Oscar Dieste Universidad Politécnica de Madrid | ||
11:20 20mPaper | Adversarial Specification MiningJournal-First Journal-First Papers DOI Pre-print Media Attached | ||
11:40 20mPaper | Fast Parametric Model Checking through Model FragmentationTechnical Track Technical Track Xinwei Fang University of York, UK, Radu Calinescu University of York, UK, Simos Gerasimou University of York, UK, Faisal Alhwikem University of York, UK Pre-print Media Attached | ||
12:00 20mPaper | Trace-Checking CPS Properties: Bridging the Cyber-Physical GapTechnical Track Technical Track Claudio Menghi University of Luxembourg, Enrico Viganò University of Luxembourg, Domenico Bianculli University of Luxembourg, Lionel Briand University of Luxembourg and University of Ottawa Pre-print Media Attached |
23:20 - 00:20 | |||
23:20 20mPaper | Adversarial Specification MiningJournal-First Journal-First Papers DOI Pre-print Media Attached | ||
23:40 20mPaper | Fast Parametric Model Checking through Model FragmentationTechnical Track Technical Track Xinwei Fang University of York, UK, Radu Calinescu University of York, UK, Simos Gerasimou University of York, UK, Faisal Alhwikem University of York, UK Pre-print Media Attached | ||
00:00 20mPaper | Trace-Checking CPS Properties: Bridging the Cyber-Physical GapTechnical Track Technical Track Claudio Menghi University of Luxembourg, Enrico Viganò University of Luxembourg, Domenico Bianculli University of Luxembourg, Lionel Briand University of Luxembourg and University of Ottawa Pre-print Media Attached |