Modeling, Validation, and Verification of PCEP Using the IF Language

Hwang, In-Sun; Lallali, Mounir; Cavalli, Ana; Verchere, Dominique

doi:10.1007/978-3-642-02138-1_8

Cited by 10 publications

(2 citation statements)

References 12 publications

(15 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Consequently, over the last decades, several research have been carried out with the aim of ensuring the suitable interactions between Web services and ensuring safety of Web services. [Hwang et al, 2009] [Morales et al, 2010] contributed to the verification of Web services. These verification techniques often use formal methods.…”

Section: Research On Web Servicesmentioning

confidence: 99%

“…It uses the IF simulator libraries which provides some functionalities for on-the-fly state-space traversal. TestGen-IF implements a timed test case generation algorithm [Hwang et al, 2009]. An IF specification document (.if file) and timed test purposes documents (i.e., inputs directory), and the jump depth value (i.e., maxdepth parameter), are given as inputs to TestGen-IF.…”

Section: Testgen-if Toolmentioning

confidence: 99%

See 1 more Smart Citation

Attack Tolerance for Services-Based Applications in the Cloud

Ouffoué

Zaïdi

Cavalli

2019

Testing Software and Systems

View full text Add to dashboard Cite

Web services allow the communication of heterogeneous systems on the Web. These facilities make them particularly suitable for deploying in the cloud. Although research on formalization and verification has improved trust in Web services, issues such as high availability and security are not fully addressed since the solutions proposed are sometimes attack-specific. In addition, Web services deployed in cloud infrastructures inherit their vulnerabilities. For example when different tenants in a cloud platform consume the same instance of the service, attacks such as side-channel can be performed by malicious tenants. Because of this limitation, they may be unable to perform their tasks perfectly. In this thesis, we claim that a good tolerance requires attack detection and continuous monitoring on the one hand; and reliable reaction mechanisms on the other hand. We therefore proposed a new formal monitoring methodology that takes into account the risks that our services may face. To implement this methodology, we first developed an approach of attack tolerance that leverages model-level diversity. We define a model of the system and derive more robust functionally equivalent variants that can replace the first one in case of attack. To avoid manually deriving the variants and to increase the level of diversity, we proposed a second complementary approach. The latter still consists in having different variants of our services; but unlike the first, we have a single model and the implementations differ at the language, source code and binaries levels. Moreover, to ensure detection of insider attacks, we investigated a new detection and reaction mechanism based on software reflection. While the program is running, we analyze the methods to detect malicious executions. When these malicious activities are detected, using reflection again, new efficient implementations are generated as a countermeasure. Finally, we leveraged a formal Web service testing framework by incorporating these complementary mechanisms in order to take advantage of the benefits of each of them. iii Résumé Les services Web permettent la communication de systèmes hétérogènes sur le Web. Ces facilités font que ces services sont particulièrement adaptés au déploiement dans le cloud. Les efforts de formalisation et de vérification permettent d'améliorer la confiance dans les services Web, néanmoins des problèmes tels que la haute disponibilité et la sécurité ne sont pas entièrement pris en compte. Par ailleurs, les services Web déployés dans une infrastructure cloud héritent des vulnérabilités de cette dernière. En raison de cette limitation, ils peuvent être incapables d'exécuter parfaitement leurs tâches. Dans cette thèse, nous pensons qu'une bonne tolérance nécessite un monitoring constant et des mécanismes de réaction fiables. Nous avons donc proposé une nouvelle méthodologie de monitoring tenant compte des risques auxquels peuvent être confrontés nos services. Pour mettre en oeuvre cette méthodologie, nous avons d'abord développé une méthode de ...

show abstract

Section: Research On Web Servicesmentioning

confidence: 99%

Section: Testgen-if Toolmentioning

confidence: 99%

Attack Tolerance for Services-Based Applications in the Cloud

Ouffoué

Zaïdi

Cavalli

2019

Testing Software and Systems

View full text Add to dashboard Cite

show abstract

Challenges of a Validation Process Based on Models: An Industrial Case Study

Vieira¹,

Vieira

Gallois

2012

Bell Labs Tech. J.

View full text Add to dashboard Cite

To those familiar with network modeling and its advantages across different phases of system development, the thought of generating test cases based on informal specifications would sound unreal. However, manual test generation is still a current practice in industry. Given that the use of models provides many distinct advantages, why is it not more widespread in the validation phase? This paper presents a case study of a network protocol validation. We present a process for formalizing system specifications and applying a model‐based approach for test generation, and consider how AGATHA, a tool developed by an academic community, can encourage industrial interest in efficient practices such as model‐based testing (MBT). The drawbacks and advantages observed during our experiments are discussed. © 2012 Alcatel‐Lucent.

show abstract

Applying formal methods to PCEP: an industrial case study from modeling to test generation

Hwang

Cavalli

Lallali

et al. 2011

Software Testing Verif & Rel

Self Cite

View full text Add to dashboard Cite

This paper presents the experimental results in applying formal methods to an industrial protocol for constraint-based path computation, called Path Computation Element Communication Protocol (PCEP). The experiments include a number of major activities in model-based testing from modeling to test generation. From the PCEP specification defined by IETF (Internet Engineering Task Force), the functionalities of PCEP are divided into two parts: application and protocol. The protocol part of PCEP is then described in the IF (Intermediate Format) language which is based on communicating timed automata. A number of basic requirements are identified from the PCEP specification and then described as properties in IF. Based on these properties, the validation and verification of the formal specification are carried out using the IF toolset. Test cases are generated using an automatic test generation tool, called TestGen-IF, which uses partial state space exploration guided by test purposes. As a result, some errors and ambiguities have been found in the PCEP standard specification. I. HWANG ET AL. itself, which also means that the requirements are checked for consistency and completeness. Model-based testing usually implies that test cases should be generated automatically from the model, which reduces the cost of test generation. Also, the effectiveness of the tests can be increased for systems that are changed frequently as test cases can be regenerated rapidly by updating the model [5]. Additionally, a number of inconsistencies and ambiguities could be found in the requirements and models when the test cases are generated allowing them to be improved before the software is implemented [6].Recently, there have been a number of industrial case studies on model-based testing. Bozga et al. [7] presented the verification and test generation for the SSCOP protocol and Jia and Graf [8] performed the verification experiments on the MASCARA protocol using IF (Intermediate Format) [9]. Hessel and Pettersson [10] provides model-based testing of a WAP gateway using UPPAAL [11]. The CARRIOCAS project [12] aims at providing a distributed pilot network for industrial applications with high complexity, scope, and scale. A number of hardware and software components are developed in the project in order to provide the connectivity services for such large-scale distributed, data, and computing intensive applications. One of the important activities of the CARRIOCAS project is the validation experiments on the proposed pilot network. As a part of the validation activities, a communication protocol for constraint-based path computation which is called Path Computation Element Communication Protocol (PCEP) [13] has been chosen for validation and verification.This paper presents the experimental results in applying formal methods to PCEP, which is carried out in the CARRIOCAS project. The experiments include a number of major activities in model-based testing from building a model to test generation. From the PCEP specification defined by ...

show abstract

Modeling, Validation, and Verification of PCEP Using the IF Language

Cited by 10 publications

References 12 publications

Attack Tolerance for Services-Based Applications in the Cloud

Attack Tolerance for Services-Based Applications in the Cloud

Challenges of a Validation Process Based on Models: An Industrial Case Study

Applying formal methods to PCEP: an industrial case study from modeling to test generation

Contact Info

Product

Resources

About