Combining environment generation and slicing for modular software model checking

Authors:
Oksana Tkachuk;Sreeranga P. Rajan
Affiliations:
Fujitsu Laboratories of America, Sunnyvale, CA;Fujitsu Laboratories of America, Sunnyvale, CA
Venue:
Proceedings of the twenty-second IEEE/ACM international conference on Automated software engineering
Year:
2007

Citing 4
Cited 3

Slicing Software for Model Construction

Higher-Order and Symbolic Computation
Automatic predicate abstraction of C programs

Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation
Model-Checking Multi-threaded Distributed Java Programs

Proceedings of the 7th International SPIN Workshop on SPIN Model Checking and Software Verification
Application of automated environment generation to commercial software

Proceedings of the 2006 international symposium on Software testing and analysis

Checking software component behavior using behavior protocols and spin

Proceedings of the 2007 ACM symposium on Applied computing
A flexible framework for the estimation of coverage metrics in explicit state software model checking

CASSIS'04 Proceedings of the 2004 international conference on Construction and Analysis of Safe, Secure, and Interoperable Smart Devices
BALLERINA: automatic generation and clustering of efficient random unit tests for multithreaded code

Proceedings of the 34th International Conference on Software Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

To be effective, software model checking needs powerful reduction techniques. In this paper, we present an experimental study that demonstrates effectiveness of environment generation combined with slicing as a model generation and reduction technique. Automatic environments were obtained using the Bandera Environment Generator (BEG) and slicing was performed using the Indus Java slicer. The results show that environment generation implemented in BEG is an aggressive reduction technique. However, it may miss behaviors in the environment and consequently in the module under analysis, making it unsafe. As such, this technique can be effective for detection of errors but not sufficient to prove their absence.Slicing, while a safe technique, may be too approximate and not scalable. Also, slicing implemented in Indus requires a closed system and cannot be safely applied to a module without its environment. In this paper, we show how environment generation and slicing can be combined to detect errors and prove their absence. We applied the combined approach to verify parts of Fujitsu's enterprise software called Interstage Business Process Management (I-BPM)