EAGER: Bio-inspired Assurance and Regression Testing to Secure Organic Programs

EAGER：采用仿生保证和回归测试来确保有机项目的安全

• 批准号: 1745775
• 负责人: Myra Cohen
• 金额: $ 29.94万
• 依托单位: University of Nebraska-Lincoln
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-09-01 至 2019-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1745775&HistoricalAwards=false
• 关键词: EAGER; Bio; inspired; Assurance; Regression

Software Engineering needs to address an increasingly significant class of programs that are self-adaptive and self-healing. These programs sense changes to their environment and react by modifying configurations, libraries or program code. Furthermore, automated approaches for program repair and program transplantation change a program?s source code directly to fix, optimize or add new functionality. Together, self-modification provides continual availability in the presence of change and can harden a system against intruders. While this organic nature of self-modification is a powerful paradigm, the overall dependability and security of such programs is at risk. Prior test results or assurance cases developed to reason about their functionality, safety and security are invalid as soon as any adaptation occurs. Yet the time needed to run a full regression testing cycle, or to develop new evidence and arguments for an assurance case can take hours, days or weeks.This proposal explores the feasibility of reasoning dynamically and efficiently about the changes made to organic programs and their associated test suites and assurance cases during adaptation. Given that these programs mimic living systems, and many adaptations are already implemented with evolutionary algorithms, the proposed work draws inspiration from nature and uses bio-inspired techniques to achieve its goals. Both traditional functional faults as well as security vulnerabilities are targeted in this proposal, given the criticality of vulnerabilities in an online, unmonitored system. More specifically the proposal will first explore techniques to identify the evolution timeline for assurance, finding intervals at which re-validation must occur. Second, it will model interactions and test coverage in organic programs. Finally, it will use biologically inspired algorithms to select, order and generate tests for regression testing.The results of the research performed in this proposal will form the foundations for being able to validate the correctness and safety of organic programs over time. The broader impacts include co-mentoring undergraduate, inter-disciplinary teams to compete in the International Genetically Engineered Machine (iGEM) competition, and to build assurance cases for reasoning about the safety of their projects.

软件工程需要解决一类日益重要的自适应和自我修复程序。这些程序感知环境的变化，并通过修改配置、库或程序代码做出反应。此外，程序修复和程序移植的自动化方法直接更改程序的源代码以修复、优化或添加新功能。总之，自我修改可以在发生变化时提供持续可用性，并可以强化系统以抵御入侵者。虽然自我修改的这种有机性质是一个强大的范例，但此类程序的整体可靠性和安全性面临风险。一旦发生任何调整，之前为推断其功能、安全性而开发的测试结果或保证案例就无效。然而，运行完整的回归测试周期或为保证案例开发新的证据和论据所需的时间可能需要数小时、数天或数周。该提案探讨了动态且有效地推理对有机计划及其变更进行的可行性。适应期间的相关测试套件和保证案例。鉴于这些程序模仿生命系统，并且许多适应已经通过进化算法实现，因此拟议的工作从大自然中汲取灵感，并使用仿生技术来实现其目标。考虑到在线、不受监控的系统中漏洞的严重性，传统的功能故障和安全漏洞都是该提案的目标。更具体地说，该提案将首先探索确定保证演变时间表的技术，找到必须进行重新验证的时间间隔。其次，它将对有机程序中的交互和测试覆盖率进行建模。最后，它将使用受生物学启发的算法来选择、排序和生成用于回归测试的测试。该提案中进行的研究结果将为能够随着时间的推移验证有机程序的正确性和安全性奠定基础。 更广泛的影响包括共同指导本科生、跨学科团队参加国际基因工程机器（iGEM）竞赛，并建立保证案例来推理其项目的安全性。

项目成果

An evolutionary approach for analyzing Alloy specifications

分析合金规格的进化方法

• DOI: 10.1145/3238147.3240468
• 发表时间: 2018
• 期刊: Proceedings of the 2018 33rd ACM/IEEE International Conference on Automated Software Engineering (ASE ’18
• 作者: Wang, Jianghao;Bagheri, Hamid;Cohen, Myra B.
• 通讯作者: Cohen, Myra B.

Modeling and testing a family of surgical robots: an experience report

• DOI: 10.1145/3236024.3275534
• 发表时间: 2018-10
• 期刊: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
• 作者: Niloofar Mansoor;Jonathan A. Saddler;Bruno Vieira Resende e Silva;H. Bagheri;Myra B. Cohen;S. Farritor

Configurations in Android testing: they matter

• DOI: 10.1145/3243218.3243219
• 发表时间: 2018-09
• 期刊: Proceedings of the 1st International Workshop on Advances in Mobile App Analysis
• 作者: Emily Kowalczyk;Myra B. Cohen;A. Memon

The Assurance Recipe: Facilitating Assurance Patterns

保证秘诀：促进保证模式

• DOI: 10.1007/978-3-319-99229-7_3
• 发表时间: 2018
• 期刊: ASSURE Worksop
• 作者: Firestone, Justin;Cohen, Myra B.
• 通讯作者: Cohen, Myra B.

EvoIsolator: Evolving Program Slices for Hardware Isolation Based Security

EvoIsolator：不断发展的程序切片以实现基于硬件隔离的安全性

• DOI: 10.1007/978-3-319-99241-9_24
• 发表时间: 2018
• 期刊: International Symposium on Search Based Software Engineering SSBSE 2018
• 作者: Mengmei Ye, Myra B.