Structural test coverage criteria for lustre programs

  • Authors:
  • Abdesselam Lakehal;Ioannis Parissis

  • Affiliations:
  • Laboratoire LSR-IMAG, Grenoble, France;Laboratoire LSR-IMAG, Grenoble, France

  • Venue:
  • Proceedings of the 10th international workshop on Formal methods for industrial critical systems
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present structural test coverage criteria for LUSTRE programs. LUSTRE is a synchronous data-flow declarative language widely used for safety-critical applications (avionics, energy, transport). Many coverage criteria are defined for sequential languages and are widely used in the software industry (for instance, statement or branch coverage). They are defined on the program control-flow graph and, hence, do not apply to LUSTRE programs, represented by data-flow diagrams. We have defined several criteria to measure the coverage achieved after the execution of a test set, based on symbolic computation of path activation conditions. The coverage assessment is non-intrusive (there is no code instrumentation). These criteria provide the user with meaningful automatically computed measures of the thoroughness of a given test set.