Run-Time Assertion Checking of Data- and Protocol-Oriented Properties of Java Programs: An Industrial Case Study

Boer, Frank S. de; Gouw, Stijn de; Johnsen, Einar Broch; Köhn, Andreas; Wong, Peter Y. H.

doi:10.1007/978-3-642-55099-7_1

Cited by 9 publications

(11 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• Similar to the logging mechanism is the checking of assertions [15] at different points of the specification. If the specification is executed for simulation, assertions can help to improve its robustness.…”

Section: Separation Of Concernsmentioning

confidence: 99%

Towards a comprehensive extension of abstract state machines for aspect-oriented specification

Dausend

Raschke

2016

Science of Computer Programming

View full text Add to dashboard Cite

Please cite this article in press as: M. Dausend, A. Raschke, Towards a Comprehensive Extension of Abstract State Machines for Aspect-Oriented Specification, Sci. Comput. Program. (2016), http://dx. AbstractWith the paradigm of aspect-orientation, a developer is able to separate the code of so-called cross-cutting concerns from the rest of the program's logic. This possibility is useful for formal specifications, too. For example, security aspects can be separated from the rest of the specification. Those aspect-oriented specifications often can be more easily reused than extensions that are implemented directly into an existing specification. Another use case is the extension of a specification with new functionality or features. Although this would be possible with refinement too, with aspect-orientation it is not necessary to augment the original specification with "extension points" that can be used for refinement. This paper describes the implementation of the aspect-oriented approach in Abstract State Machines. We introduce an aspect language with its syntax and formal semantics. It allows for specifying pointcuts where an original specification is augmented according to an aspect specification. Besides the general overview of this language extension, some ASM specific features of the realization are depicted in detail. The applicability of aspect-oriented specification in the context of ASM is demonstrated by means of examples, e. g. implementing a fading aspect into the light control system specification of a former ASM case study. Finally, the paper gives a brief overview about the developed tool that supports the writing of aspect-oriented ASMs.

show abstract

Section: Separation Of Concernsmentioning

confidence: 99%

Towards a comprehensive extension of abstract state machines for aspect-oriented specification

Dausend

Raschke

2016

Science of Computer Programming

View full text Add to dashboard Cite

show abstract

“…There are several examples of how these can be brought to bear on testing. In terms of Java, we mention the work by Cheon and Perumandla [39] on protocol testing with finite state machines and run-time monitoring, and more recently de Boer et al [40], where attribute grammars are used to specify the protocols and translate them into JML assertions. In the real-time setting, the work by Haddad et al [41] addresses extensions to JML to specify scheduling constraints for applications, but their work is not aimed at testing in particular.…”

Section: Global Propertiesmentioning

confidence: 99%

Conformance test development with the Java modeling language

Søndergaard

Korsholm

Ravn

2017

Concurrency and Computation

View full text Add to dashboard Cite

In order to claim conformance with a Java Specification Request, a Java implementation has to pass all tests in an associated Technology Compatibility Kit. This paper presents a model-based development of a Technology Compatibility Kit test suite and a test execution tool for the draft safety-critical Java profile specification. The Java Modeling Language is used to model conformance constraints for the profile. Java Modeling Language annotations define contracts for classes and interfaces. The annotations are translated by a tool into runtime assertion checks. Hereby, the design and elaboration of the concrete test cases are simplified, because the expected results are derived from contracts and thus do not need to be provided explicitly. Bottom-up testing is applied for testing methods of the safety-critical Java classes, whereas topdown testing is applied for testing global properties, such as protocols, memory management, and real-time properties, including scheduling. The tests are executed using a simplified version of JUnit, which makes the test suite executable on resource-constrained platforms. Furthermore, Section 2 gives an overview of SCJ and its three conformance levels and concludes with a short overview of Java Modeling Language (JML).It is probably impossible to develop a test suite without familiarity with the language being tested. In our case, we have followed the development of the SCJ specification closely, commented on intermediate draft specifications and, over the years, acquired considerable insight in the details of the specification, as we have developed several prototype implementations [4][5][6]; the most recent one includes all three SCJ levels [7,8].This implementation is developed for resource-constrained embedded platforms, specifically the hardware-near virtual machine (HVM) [9]. Other prototype implementations are [6, 10,11].The draft specification work has nearly finished now (September 2016), although it has been delayed by a combined effort to revise the Real-Time Specification for Java (RTSJ) [12] to version 2.0. Because SCJ builds on RTSJ, this has led to many last minute changes to the SCJ specification. Yet, in order to complete the JSR process for SCJ, we began working on the TCK component in early 2013 [13] and reported on our progress in [14]. This paper consolidates the work of these papers and reports on the most recent progress with building the TCK. Furthermore, the approach is related to model-based testing in general, so it should be of interest for other developers of suites for conformance testing.A TCK is first of all a suite of tests checking whether an implementation of the SCJ technology conforms to the SCJ specification. Of course, the test suite must be based on the SCJ specification only and not be tailored for a particular implementation of the SCJ technology. The specification is written in natural language (English), where the detailed behavior of Java constructs such as classes and methods is documented in the Javadoc standard format.Writing test cod...

show abstract

“…Among the state-of-the-art runtime verification tools, a few support specification of temporal specifications [5,7,8]. [7] presents a generic monitor that can be parametrised on the logic.…”

Section: Related and Future Workmentioning

confidence: 99%

“…[7] presents a generic monitor that can be parametrised on the logic. [5] combines temporal properties and control flow specifications in a single formalism specified per object class. Our recovery mechanism resembles the aspect-oriented approaches used in those verifiers, but the combination of control flow checking and temporal properties in the same global specification is an unique characteristic of our work.…”

Section: Related and Future Workmentioning

confidence: 99%

Timed Runtime Monitoring for Multiparty Conversations

Neykova

Bocchi

Yoshida

2014

Electron. Proc. Theor. Comput. Sci.

View full text Add to dashboard Cite

We propose a dynamic verification framework for protocols in real-time distributed systems. The framework is based on Scribble, a tool-chain for design and verification of choreographies based on multiparty session types, developed with our industrial partners. Drawing from recent work on multiparty session types for real-time interactions, we extend Scribble with clocks, resets, and clock predicates constraining the times in which interactions should occur. We present a timed API for Python to program distributed implementations of Scribble specifications. A dynamic verification framework ensures the safe execution of applications written with our timed API: we have implemented dedicated runtime monitors that check that each interaction occurs at a correct timing with respect to the corresponding Scribble specification. The performance of our implementation and its practicability are analysed via benchmarking.Comment: In Proceedings BEAT 2014, arXiv:1408.556

show abstract

Run-Time Assertion Checking of Data- and Protocol-Oriented Properties of Java Programs: An Industrial Case Study

Cited by 9 publications

References 22 publications

Towards a comprehensive extension of abstract state machines for aspect-oriented specification

Towards a comprehensive extension of abstract state machines for aspect-oriented specification

Conformance test development with the Java modeling language

Timed Runtime Monitoring for Multiparty Conversations

Contact Info

Product

Resources

About