Concolic testing integrates concrete execution (e.g., random testing) and symbolic execution for test case generation. It is shown to be more cost-effective than random testing or symbolic execution sometimes. A concolic testing strategy is a function which decides when to apply random testing or symbolic execution, and if it is the latter case, which program path to symbolically execute. Many heuristics-based strategies have been proposed. It is still an open problem what is the optimal concolic testing strategy. In this work, we make two contributions towards solving this problem. First, we show the optimal strategy can be defined based on the probability of program paths and the cost of constraint solving. The problem of identifying the optimal strategy is then reduced to a model checking problem of Markov Decision Processes with Costs. Secondly, in view of the complexity in identifying the optimal strategy, we design a greedy algorithm for approximating the optimal strategy. We conduct two sets of experiments. One is based on randomly generated models and the other is based on a set of C programs. The results show that existing heuristics have much room to improve and our greedy algorithm often outperforms existing heuristics.
Wed 30 MayDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
16:00 - 17:30 | |||
16:00 20mTalk | Augusto: Exploiting Popular Functionalities for the Generation of Semantic GUI Tests with Oracles Technical Papers Leonardo Mariani University of Milano Bicocca, Mauro Pezzè University of Milano-Bicocca, Italy, Daniele Zuddas Pre-print | ||
16:20 20mTalk | Towards Optimal Concolic Testing Technical Papers Xinyu Wang Zhejiang University, Jun Sun Singapore University of Technology and Design, Zhenbang Chen College of Computer, National University of Defense Technology, Peixin Zhang , Jingyi Wang Singapore University of Technology and Design, Yun Lin Pre-print | ||
16:40 20mTalk | DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars Technical Papers | ||
17:00 20mTalk | Precise Concolic Unit Testing of C Programs with Alarm Filtering Using Symbolic Calling Contexts Technical Papers | ||
17:20 10mTalk | Q&A in groups Technical Papers |