Cryptographic verification of test coverage claims

IEEE Transactions on Software Engineering

Volumn 26, Issue 2, 2000, Pages 178-192

  Devanbu, Premkumar Thomas ^a   Stubblebine, Stuart G ^a  

^a University of California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER CONTROL SYSTEMS; CRYPTOGRAPHY; ELECTRONIC COMMERCE; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; NETWORK PROTOCOLS;

SAFETY CRITICAL SYSTEMS; SOFTWARE COMPONENTS; SOFTWARE TESTING; SOFTWARE VERIFICATION;

COMPUTER SOFTWARE SELECTION AND EVALUATION;

EID: 0033752342     PISSN: 00985589     EISSN: None     Source Type: Journal    
DOI: 10.1109/32.841116     Document Type: Article

References (39)

1. Source code for bin2chall. http://www. cs.ucdavis.edu/devanbu/bin2chall.-cpio.gz.
2. The Mondex Magazine, Mondex Int'l Limited, July 1997. (See also: http://www.mondex.com).
3. "Guideline for Automatic Data Processing and Risk Analysis FIPS 65," Nat'l Bureau of Standards, Gaithersburg, Md., Aug. 1979.
4. Delta Software Testing (accredited by Danish Accreditation Authority-DANAK). http://www.delta.dk/se/ats.htm.
5. H. Agrawal, Dominators, Super Blocks and Program Coverage," Proc., ACM Principles of Programming Language '94, 1986.
6. R. Atkinson, Security Architecture for the Internet Protocol. Request for Comments (Proposed Standard) rfc 1825," Aug. 1995.
7. T. Ball and J. Larus, Efficient Path Profiling," Micro '96, Proc., Dec. 1996.
8. C. Cifuentes, Partial Automation of an Integrated Reverse Engineering Environment for Binary Code," Proc. Third Working Conf. Reverse Eng., 1996.
9. C. Cifuentes and J. Gough, Decompilation of Binary Programs," Software Practice and Experience, July 1995.
10. P. Devanbu, Genoa-A Language and Front-End Independent Source Code Analyzer Generator," Proc. 14th Int'l Conf. Software Eng., 1992.
11. P. Devanbu, The GEN++ page," http://seclab.cs.ucdavis.edu-devanbu/genp, 1998.
12. P. Devanbu, P.W. Fong, and S. Stubblebine, Techniques for Trusted Software Engineering," Proc. 20th Int'l Conf. Software Eng., 1998.
13. J.W. Duran and S.C. Ntafos, An Evaluation of Random Testing," IEEE Trans. Software Eng., vol. 10, no. 4, July 1984.
14. "Trust in Cyberspace," F.B. Schneider, ed., Nat'l Academy Press (Computer Science and Telecomm. Board, Nat'l Research Council), 1998.
15. P.G. Frankl and O. lakounenko, Further Empirical Studies of Test Effectiveness," Proc. ACM SIGSOFT Sixth Int'l Symp. Foundations of Software Eng., Nov. 1998.
16. P.G. Frankl and S.N. Weiss, An Experimental Comparison of the Effectiveness of Branch Testing and Data Flow Testing," IEEE Trans. Software Eng., Aug. 1993.
17. P.G. Frankl and E.J. Weyuker, An Applicable Family of Data Flow Testing Criteria," IEEE Trans. Software Eng., Aug. 1988.
18. P.G. Frankl and E.J. Weyuker, A Formal Analysis of the Fault Detecting Ability of Testing Methods," IEEE Trans. Software Eng., Mar. 1993.
19. A. Freier, P. Karlton, and P. Kocher, The SSL Protocol," version 3.0 (internet draft), Mar. 1996.
20. J. Gannon, personal conversation, Apr. 1997.
21. M. Hutchins, H. Foster, T. Goradia, and T. Ostrand, Experiments on the Effectiveness of Dataflow- and Controlflow-Based Test Adequacy Criteria," Proc. 16th Int'l Conf. Software Eng., May 1994.
22. Plum Hall Inc. http://www.plumhall.com.
23. M.J. Kearns and U.V. Vazirani, An Introduction to Computational Learning Theory. MIT Press, 1994.
24. National Software Testing Labs, http://www.nstl.com.
25. Software Testing Labs, http://www. stlabs. com.
26. J. Larus and E. Schnarr, Eel: Machine-Independent Executable Editing," ACM SIGPLAN Programming Languages Design for Implementation, 1995.
27. J. Lidiard, Can COTS Software Be Trusted?" Interface: Newsletter FAA Software Eng. Process Group, Nov. 1996.
28. Y. Malaiya, N. Li, J. Bieman, R. Karcich, and B. Skibbe, Software Test Coverage and Reliability," technical report, Colorado State Univ., 1996.
29. D. Mcllroy, personal e-mail communication, 1996.
30. A.J. Menezes, P.C. Van Oorschot, S. Vanstone, and A. Vanstone, Handbook of Applied Cryptography. CRC Press 1996.
31. P. Newmann, Computer Related Risks. Addison Wesley, 1995.
32. Committee on Application of Digital Instrumentation, Control Systems to Nuclear Power Plant Operations, and Safety. Digital Instrumentation and Control Systems in Nuclear Power Plants-Safety and Reliability Issues-Final Report, Nat'1 Academy Press (Board on Energy and Environmental Systems, Nat'1 Research Council), 1997.
33. N. Ramsey and M. Fernandez, Specifying Representations of Machine Instructions," ACM Trans. Programming Languages and Systems, 1997.
34. J.A. Scott, G.G. Preckshot, and J.M. Gallagher, Using Commercial Off-the-Shelf (COTS) Software in High-Consequence Safety Systems," Technical Report UCRL-JC-122246, Lawrence Livermore Nat'l Laboratory, 1995.
35. A. Srivastava and A. Eustace, Atom: A Tool for Building Customized Program Analysis Tools," Technical Report 1994/2, DEC Western Research Labs, 1994.
36. Applied Testing and Technology Inc. http://www.aptest.com.
37. J.M. Voas, Certifying Off-the-Shelf Software Components," Computer, vol. 31, no. 6, 1998.
38. E.J. Weyuker, On Testing Non-Testable Programs," The Computer J., vol. 25, no. 4, pp. 465-470, 1982.
39. B. Yee and D. Tygar, Secure Coprocessors in Electronic Commerce Applications," Proc. First USENIX Workshop Electronic Commerce, July 1995.