EAGER: Bio-inspired Assurance and Regression Testing to Secure Organic Programs

EAGER：采用仿生保证和回归测试来确保有机项目的安全

• 批准号: 1745775
• 负责人: Myra Cohen
• 金额: $ 29.94万
• 依托单位: University of Nebraska-Lincoln
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-09-01 至 2019-01-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1745775&HistoricalAwards=false
• 关键词: EAGER; Bio; inspired; Assurance; Regression

Software Engineering needs to address an increasingly significant class of programs that are self-adaptive and self-healing. These programs sense changes to their environment and react by modifying configurations, libraries or program code. Furthermore, automated approaches for program repair and program transplantation change a program?s source code directly to fix, optimize or add new functionality. Together, self-modification provides continual availability in the presence of change and can harden a system against intruders. While this organic nature of self-modification is a powerful paradigm, the overall dependability and security of such programs is at risk. Prior test results or assurance cases developed to reason about their functionality, safety and security are invalid as soon as any adaptation occurs. Yet the time needed to run a full regression testing cycle, or to develop new evidence and arguments for an assurance case can take hours, days or weeks.This proposal explores the feasibility of reasoning dynamically and efficiently about the changes made to organic programs and their associated test suites and assurance cases during adaptation. Given that these programs mimic living systems, and many adaptations are already implemented with evolutionary algorithms, the proposed work draws inspiration from nature and uses bio-inspired techniques to achieve its goals. Both traditional functional faults as well as security vulnerabilities are targeted in this proposal, given the criticality of vulnerabilities in an online, unmonitored system. More specifically the proposal will first explore techniques to identify the evolution timeline for assurance, finding intervals at which re-validation must occur. Second, it will model interactions and test coverage in organic programs. Finally, it will use biologically inspired algorithms to select, order and generate tests for regression testing.The results of the research performed in this proposal will form the foundations for being able to validate the correctness and safety of organic programs over time. The broader impacts include co-mentoring undergraduate, inter-disciplinary teams to compete in the International Genetically Engineered Machine (iGEM) competition, and to build assurance cases for reasoning about the safety of their projects.

软件工程需要解决自适应和自我修复的越来越重要的程序类别。这些程序感知其环境的变化，并通过修改配置，库或程序代码做出反应。此外，用于程序维修和程序移植的自动化方法会直接更改程序代码以修复，优化或添加新功能。一起，自我修饰在存在变化的情况下提供了持续的可用性，并可以使针对入侵者的系统加强。虽然这种自我修饰的有机性质是一种强大的范式，但此类程序的总体可靠性和安全性面临风险。一旦发生任何适应，就会开发出用于推理其功能，安全性和安全性的案件的事先测试结果或保证案例。然而，运行完整的回归测试周期或为保证案件开发新的证据和论点所需的时间可能需要数小时，天数或一周。该提案探讨了在适应过程中动态有效地进行推理的可行性，并有效地推理了对有机计划及其相关的测试套件的更改。鉴于这些程序模仿了生活系统，并且已经通过进化算法实施了许多适应，因此拟议的工作从自然中汲取了灵感，并利用生物启发的技术来实现其目标。鉴于在线，不受监督的系统中漏洞的关键性，该提案的关键性在此提案中均针对传统的功能故障以及安全漏洞。更具体地说，该提案将首先探索技术以确定保证的演变时间表，找到必须进行重新验证的间隔。其次，它将建模有机程序中的互动和测试覆盖范围。最后，它将使用以生物学启发的算法来选择，订购和生成回归测试的测试。该提案中执行的研究结果将构成能够验证有机程序随时间推移的正确性和安全性的基础。 更广泛的影响包括大学跨学科团队参加国际基因工程机器（IGEM）竞赛，并建立保证案件以推理其项目安全性。

项目成果

An evolutionary approach for analyzing Alloy specifications

分析合金规格的进化方法

• DOI: 10.1145/3238147.3240468
• 发表时间: 2018
• 期刊: Proceedings of the 2018 33rd ACM/IEEE International Conference on Automated Software Engineering (ASE ’18
• 作者: Wang, Jianghao;Bagheri, Hamid;Cohen, Myra B.
• 通讯作者: Cohen, Myra B.

Modeling and testing a family of surgical robots: an experience report

• DOI: 10.1145/3236024.3275534
• 发表时间: 2018-10
• 期刊: Proceedings of the 2018 26th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
• 作者: Niloofar Mansoor;Jonathan A. Saddler;Bruno Vieira Resende e Silva;H. Bagheri;Myra B. Cohen;S. Farritor

Configurations in Android testing: they matter

• DOI: 10.1145/3243218.3243219
• 发表时间: 2018-09
• 期刊: Proceedings of the 1st International Workshop on Advances in Mobile App Analysis
• 作者: Emily Kowalczyk;Myra B. Cohen;A. Memon

Navigating the Maze: The Impact of Configurability in Bioinformatics Software

• DOI: 10.1145/3238147.3240466
• 发表时间: 2018-01-01
• 期刊: PROCEEDINGS OF THE 2018 33RD IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMTED SOFTWARE ENGINEERING (ASE' 18)
• 作者: Cashman, Mikaela;Cohen, Myra B.;Cottingham, Robert W.
• 通讯作者: Cottingham, Robert W.

The Assurance Recipe: Facilitating Assurance Patterns

保证秘诀：促进保证模式

• DOI: 10.1007/978-3-319-99229-7_3
• 发表时间: 2018
• 期刊: ASSURE Worksop
• 作者: Firestone, Justin;Cohen, Myra B.
• 通讯作者: Cohen, Myra B.