The objective of this paper is to give a comprehensive introduction to applied cryptography with an engineer or computer scientist in mind. The emphasis is on the knowledge needed to create practical systems which supports integrity, confidentiality, or authenticity. Topics covered includes an introduction to the concepts in cryptography, attacks against cryptographic systems, key use and handling, random bit generation, encryption modes, and message authentication codes. Recommendations on algorithms and further reading is given in the end of the paper. This paper should make the reader able to build, understand and evaluate system descriptions and designs based on the cryptographic components described in the paper.

[서평]「Applied Cryptography」

Extensively class tested, this text takes an innovative approach to explaining the process of software testing: it defines testing as the process of applying a few well-defined, general-purpose test criteria to a structure or model of the software. The structure of the text directly reflects the pedagogical approach and incorporates the latest innovations in testing, including techniques to test modern types of software such as OO, web applications, and embedded software.

Introduction to Software Testing: List of Figures

Microsoft has promoted ASP.NET’s new web services more than almost any other part of the.NET Framework. But despite their efforts, confusion is still widespread about what a web service is and, more importantly, what it’s meant to accomplish. This chapter introduces web services and explains their role in Microsoft’s vision of the programmable web. Along the way, you’ll learn about the open standards plumbing that allows web services to work and removes some of the confusion surrounding technical terms like WSDL (Web Service Description Language), SOAP, and UDDI (universal description, discovery, and integration).

Web Services Architecture

A Protocol Test Generation Procedure.

Formal methods and testing are two important approaches that assist in the development of high-quality software. While traditionally these approaches have been seen as rivals, in recent years a new consensus has developed in which they are seen as complementary. This article reviews the state of the art regarding ways in which the presence of a formal specification can be used to assist testing.

/pdf/using-formal-specifications-to-support-testing-28e8wig7se.pdf

Using formal specifications to support testing

Real-time systems interact with their environment using time constrained input/output signals. Examples of real-time systems include patient monitoring systems, air traffic control systems, and telecommunication systems. For such systems, a functional misbehavior or a deviation from the specified time constraints may have catastrophic consequences. Therefore, ensuring the correctness of real-time systems becomes necessary. Two different techniques are usually used to cope with the correctness of a software system prior to its deployment, namely, verification and testing. In this paper, we address the issue of testing real-time software systems specified as a timed input output automaton (TIOA). TIOA is a variant of timed automaton. We introduce the syntax and semantics of TIOA. We present the potential faults that can be encountered in a timed system implementation. We study these different faults based on TIOA model and look at their effects on the execution of the system using the region graph. We present a method for generating timed test cases. This method is based on a state characterization technique and consists of the following three steps: First, we sample the region graph using a suitable granularity, in order to construct a subautomaton easily testable, called grid automaton. Then, we transform the grid automaton into a nondeterministic timed finite state machine (NTFSM). Finally, we adapt the generalized Wp-method to generate timed test cases from NTFSM. We assess the fault coverage of our test cases generation method and prove its ability to detect all the possible faults. Throughout the paper, we use examples to illustrate the various concepts and techniques used in our approach.

/pdf/timed-wp-method-testing-real-time-systems-1nz5z90qvc.pdf

Timed Wp-method: testing real-time systems

Real time reactive systems interact with their environment, using inputs and outputs, within specified time constraints. For such systems, a functional misbehavior or a deviation from the specified time constraints may have catastrophic consequences. Therefore, ensuring the correctness of real time systems becomes very important. We introduce the potential faults which can be encountered in a timed system implementation. We adapt an existing test cases generation technique, based on state characterization set, to generate timed test cases from a timed system specification. We model a timed system with a Timed Input Output Automaton (TIOA), which is a variant of the Alur and Dill model (R. Alur and D. Dill, 1994). In order to generate the timed test suite, the TIOA is first transformed into a Nondeterministic Timed Finite State Machine (NTFSM) with a given granularity. We illustrate our method with an example.

Timed test cases generation based on state characterization technique

https://www.cis.upenn.edu/~lee/01cis642/papers/DSA99.pdf

Test development for communication protocols: towards automation

Real-time systems are those systems whose behaviors are time dependent. Reliability is one of the characteristics of such systems and testing is one of the techniques that can be used to ensure reliable real-time systems. This paper presents a method for testing real-time systems specified by Timed Input Output Automata (TIOA). Our method is based on the concept of test purposes. The use of test purposes helps reduce the number of test cases generated since an exhaustive testing of a TIOA causes the well-known state explosion problem. The approach we present in this paper consists of three main steps. First, a synchronous product of the specification and test purpose is computed. Then, a subautomaton (called Grid Automata) representing a subset of the state space of this product is derived. Finally, test cases are generated from the resulting grid automata. The test cases generated by our method are executable and can easily be represented in TTCN (Tabular Tree Combined Notation).

/pdf/a-guided-method-for-testing-timed-input-output-automata-2mitwytsac.pdf

A guided method for testing timed input output automata

Real-time systems interact with their environment, through time constrained input/output events. The misbehavior of real-time systems is generally caused by the violation of the specified time constraints. Validation of real-time system software is an important quality control activity in the software lifecycle. Among the validation processes, testing aims at assessing the conformance of an implementation against the reference specification. One of the important aspects in testing real-time software systems is the fault coverage measurement, which consists of studying the potential faults that can be detected by a test suite generated by a given test generation method. This paper addresses the fault coverage of the Tinted Wp-method we have introduced in (En-Nouaary et al., 1998). We present a timed fault model based on the TIOA model for real-time systems specification. We study the fault coverage of the timed Wp-method with respect to our fault model.

Abdeslam En-Nouaary

Papers

Timed Wp-method: testing real-time systems

Timed test cases generation based on state characterization technique

Test development for communication protocols: towards automation

A guided method for testing timed input output automata

Fault coverage in testing real-time systems