SHF: Small: Collaborative Research: Fuzzing Cyber-Physical System Development Tool Chains with Deep Learning (DeepFuzz-CPS)

SHF：小型：协作研究：利用深度学习模糊网络物理系统开发工具链 (DeepFuzz-CPS)

• 批准号: 1911017
• 负责人: Christoph Csallner
• 金额: $ 24.99万
• 依托单位: University of Texas at Arlington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-10-01 至 2023-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1911017&HistoricalAwards=false
• 关键词: SHF; Small; Collaborative; Research; Fuzzing

Developing a modern technical product such as a car, plane, or a complex medical device includes designing the complex interplay between sensors (which measure physical product and environment state) and actuators (such as small electric motors that control the product). To design this interplay, engineers rely on complex design software tools. This project will address two problems these engineers face. (1) First, little systematic knowledge of the design tools or the resulting designs is available to guide engineers. For example, little is known about how basic design properties (such as various design size measures) relate to design quality attributes (such as design complexity and comprehensibility). This project will thus collect and analyze a large number of publicly available designs to build such knowledge. (2) Second, since the design tools are complex they can contain software bugs. These bugs may in turn silently introduce bugs into widely-deployed safety-critical systems, since product control software generated from designs is often deployed in safety-critical environments. Bugs in such systems often lead to costly product recalls and may have serious consequences. This project will thus develop techniques for automatically finding software bugs in such design tools. This project consists of the following three major components. (1) First, this project will build the largest curated corpus of publicly available cyber-physical system models and related artifacts. Preliminary results analyzing this corpus both confirms and contradicts earlier findings that are based on significantly fewer models, suggesting the utility of a large corpus for future research. (2) Second, to side-step the age-old problem of missing complete formal specifications of cyber-physical system tool chains, this project instead will design a novel scheme to infer the cyber-physical system language validity rules via deep learning from the project's model corpus. Sampling the deep learner will enable generating additional models for the researchers' existing differential cyber-physical system tool chain testing infrastructure. (3) Third, this project will supplement the deep learner's training set via the first systematic cyber-physical system-model mutation scheme based on equivalence modulo inputs. Initial experiments have found several bugs in a commercial cyber-physical system tool chain that have been confirmed by the vendor of the tool chain.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

开发现代技术产品，例如汽车，飞机或复杂的医疗设备，包括设计传感器（测量物理产品和环境状态）和执行器（例如控制产品的小电动机）之间的复杂相互作用。为了设计这种相互作用，工程师依靠复杂的设计软件工具。该项目将解决这些工程师面临的两个问题。 （1）首先，对设计工具或所得设计的系统知识很少，可以指导工程师。例如，关于基本设计属性（例如各种设计尺寸度量）与设计质量属性（例如设计复杂性和可理解性）的关系知之甚少。因此，该项目将收集和分析大量公开设计以建立此类知识。 （2）第二，由于设计工具很复杂，因此可以包含软件错误。这些错误反过来可能会默默地将错误引入广泛的安全性安全系统，因为设计从设计产生的产品控制软件通常在安全至关重要的环境中部署。这种系统中的错误通常会导致昂贵的产品召回，并可能产生严重的后果。因此，该项目将开发用于在此类设计工具中自动查找软件错误的技术。该项目由以下三个主要组成部分组成。 （1）首先，该项目将建立最大的公开可用网络物理系统模型和相关工件的策划语料库。初步结果分析了该语料库的确认和与早期发现相矛盾的结果，这些发现基于较少的模型，这表明大型语料库的实用性用于未来的研究。 （2）第二，为了端步骤，即缺少网络物理系统工具链的完全正式规格的古老问题，该项目将设计一种新的方案，通过从项目的模型语料库中深入学习来推断网络物理系统语言有效性规则。对深度学习者进行采样将为研究人员现有的差异网络物理系统链链测试基础架构生成其他模型。 （3）第三，该项目将通过基于等价模量输入的第一个系统的网络物理系统模型突变方案来补充深层学习者的训练集。最初的实验在商业网络物理系统工具链中发现了几个错误，这些错误已由该工具链的供应商确认。该奖项反映了NSF的法定任务，并被认为是通过基金会的知识分子优点和更广泛的影响来评估的评估值得支持的。

项目成果

PSDoodle: Fast App Screen Search via Partial Screen Doodle

• DOI: 10.1145/3524613.3527816
• 发表时间: 2022-04
• 期刊: 2022 IEEE/ACM 9th International Conference on Mobile Software Engineering and Systems (MobileSoft)
• 作者: Soumik Mohian;Christoph Csallner

SLNET: A Redistributable Corpus of 3rd-party Simulink Models

SLNET：第 3 方 Simulink 模型的可再发行语料库

• DOI: 10.5281/zenodo.5259648
• 发表时间: 2022
• 期刊: Zenodo
• 作者: Shrestha, Sohil Lal;Chowdhury, Shafiul Azam;Csallner, Christoph
• 通讯作者: Csallner, Christoph

Replicability Study: Corpora For Understanding Simulink Models & Projects (Analysis Data) And SLNET-Evol dataset

可复制性研究：用于理解 Simulink 模型的语料库

• DOI: 10.6084/m9.figshare.22064969.v2
• 发表时间: 2023
• 期刊: figshare
• 作者: Shrestha, Sohil;Chowdhury, Shafiul Azam;Csallner, Christoph
• 通讯作者: Csallner, Christoph

SLGPT: Using Transfer Learning to Directly Generate Simulink Model Files and Find Bugs in the Simulink Toolchain

• DOI: 10.1145/3463274.3463806
• 发表时间: 2021-05
• 期刊: Proceedings of the 25th International Conference on Evaluation and Assessment in Software Engineering
• 作者: S. L. Shrestha;Christoph Csallner

ScoutSL: An Open-Source Simulink Search Engine

ScoutSL：开源 Simulink 搜索引擎

• DOI: 10.1109/models-c59198.2023.00022
• 发表时间: 2023
• 期刊: IEEE
• 作者: Shrestha, Sohil Lal;Boll, Alexander;Kehrer, Timo;Csallner, Christoph
• 通讯作者: Csallner, Christoph