会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明授权
    • Generating inputs for client-server programs for fault-detection and localization
    • 为客户机 - 服务器程序生成输入以进行故障检测和本地化
    • US08453125B2
    • 2013-05-28
    • US12966556
    • 2010-12-13
    • Shay ArtziJulian DolbyMarco PistoiaFrank Tip
    • Shay ArtziJulian DolbyMarco PistoiaFrank Tip
    • G06F9/44
    • G06F11/3684H04L69/40
    • The present invention provides a system, computer program product, and a computer implemented method for analyzing a set of two or more communicating applications. The method begins with receiving a first second application that communicates with each other during execution. Next, an initial input for executing the first application and the second application is received. The initial input is added to a set of inputs. An iterative execution loop is performed at least once. The loop begins with selecting inputs out of the set of inputs for execution. Next, using the selected inputs, the first and/or the second application is executed while information regarding the execution and information communicated to the other application are recorded. A set of one or more new application inputs for either applications is generated based the second application recorded information and the first application information. These new inputs are added to the set of inputs.
    • 本发明提供了一种系统,计算机程序产品和用于分析一组两个或多个通信应用的计算机实现的方法。 该方法开始于在执行期间接收彼此通信的第一个第二应用程序。 接下来,接收用于执行第一应用和第二应用的初始输入。 初始输入被添加到一组输入。 执行迭代执行循环至少一次。 循环从选择输入集合中的输入开始执行。 接下来,使用所选择的输入,执行第一和/或第二应用,同时记录关于执行的信息和传送给其他应用的信息。 基于第二应用记录信息和第一应用信息生成用于任一应用的一组或多个新的应用输入。 这些新的输入被添加到该组输入。
    • 3. 发明申请
    • FAULT LOCALIZATION USING DIRECTED TEST GENERATION
    • 使用指导性测试生成的故障本地化
    • US20120054552A1
    • 2012-03-01
    • US12873816
    • 2010-09-01
    • Shay ArtziJulian DolbyMarco PistoiaFrank Tip
    • Shay ArtziJulian DolbyMarco PistoiaFrank Tip
    • G06F11/36
    • G06F11/3684G06F11/3688
    • Disclosed is a novel computer implemented system, on demand service, computer program product and a method for fault-localization techniques that apply statistical analyses to execution data gathered from multiple tests. The present invention determines the fault-localization effectiveness of test suites generated according to several test-generation techniques based on combined concrete and symbolic (concolic) execution. These techniques are evaluated by applying the Ochiai fault-localization technique to generated test suites in order to localize 35 faults in four PHPWeb applications. The results show that the test-generation techniques under consideration produce test suites with similar high fault-localization effectiveness, when given a large time budget.
    • 公开了一种新颖的计算机实现系统,按需服务,计算机程序产品和用于故障定位技术的方法,其将统计分析应用于从多个测试收集的执行数据。 本发明确定了基于组合的具体和符号(concolic)执行的几种测试生成技术产生的测试套件的故障定位有效性。 通过将Ochiai故障定位技术应用于生成的测试套件来评估这些技术,以便在四个PHPWeb应用程序中定位35个故障。 结果表明,考虑到的测试生成技术产生具有类似高故障定位效果的测试套件,当给予大的时间预算时。
    • 5. 发明授权
    • Detecting and localizing security vulnerabilities in client-server application
    • 检测和本地化客户端 - 服务器应用程序中的安全漏洞
    • US08516449B2
    • 2013-08-20
    • US12902423
    • 2010-10-12
    • Shay ArtziJulian DolbyMarco PistoiaFrank TipOmer Tripp
    • Shay ArtziJulian DolbyMarco PistoiaFrank TipOmer Tripp
    • G06F9/44
    • G06F11/3604
    • The present invention provides a system, computer program product, and a computer implemented method for analyzing a set of two or more communicating applications. The method includes executing a first application, such as a client application, and executing a second application, such as a server application. The applications are communicating with each other. A correlation is recorded between the applications and an execution characteristic exhibited on execution. An oracle is used to determine an analysis of the first application that has been executed. The execution of the first application causes a change of state in the second application and/or a change control flow in the second application. Code fragment in the first application and/or the second application are prioritized based on an evaluation produced by the oracle, and based on the correlation between the code fragments that have been executed and the execution characteristic exhibited by the code fragments.
    • 本发明提供了一种系统,计算机程序产品和用于分析一组两个或多个通信应用的计算机实现的方法。 该方法包括执行诸如客户端应用的第一应用,以及执行诸如服务器应用的第二应用。 应用程序正在彼此通信。 应用之间记录相关性,执行时执行特性。 使用oracle来确定已执行的第一个应用程序的分析。 第一应用的执行导致第二应用中的状态改变和/或第二应用中的改变控制流。 第一应用程序和/或第二应用程序中的代码片段基于由oracle生成的评估,并且基于已执行的代码片段与代码片段所呈现的执行特性之间的相关性进行优先级排序。
    • 6. 发明授权
    • Fault localization using directed test generation
    • 使用定向测试生成的故障定位
    • US08387018B2
    • 2013-02-26
    • US12873816
    • 2010-09-01
    • Shay ArtziJulian DolbyMarco PistoiaFrank Tip
    • Shay ArtziJulian DolbyMarco PistoiaFrank Tip
    • G06F9/44G06F11/00
    • G06F11/3684G06F11/3688
    • Disclosed is a novel computer implemented system, on demand service, computer program product and a method for fault-localization techniques that apply statistical analyses to execution data gathered from multiple tests. The present invention determines the fault-localization effectiveness of test suites generated according to several test-generation techniques based on combined concrete and symbolic (concolic) execution. These techniques are evaluated by applying the Ochiai fault-localization technique to generated test suites in order to localize 35 faults in four PHPWeb applications. The results show that the test-generation techniques under consideration produce test suites with similar high fault-localization effectiveness, when given a large time budget.
    • 公开了一种新颖的计算机实现系统,按需服务,计算机程序产品和用于故障定位技术的方法,其将统计分析应用于从多个测试收集的执行数据。 本发明确定了基于组合的具体和符号(concolic)执行的几种测试生成技术产生的测试套件的故障定位有效性。 通过将Ochiai故障定位技术应用于生成的测试套件来评估这些技术,以便在四个PHPWeb应用程序中定位35个故障。 结果表明,考虑到的测试生成技术产生具有类似高故障定位效果的测试套件,当给予大的时间预算时。
    • 7. 发明申请
    • FAULT LOCALIZATION USING CONDITION MODELING AND RETURN VALUE MODELING
    • 使用条件建模和返回值建模的故障定位
    • US20120054553A1
    • 2012-03-01
    • US12873843
    • 2010-09-01
    • Shay ARTZIJulian DolbyMarco PistoiaFrank Tip
    • Shay ARTZIJulian DolbyMarco PistoiaFrank Tip
    • G06F11/36
    • G06F11/3688G06F11/3692
    • Disclosed is a novel computer implemented system, on demand service, computer program product and a method that leverages combined concrete and symbolic execution and several fault-localization techniques to create a uniquely powerful tool that automatically detects failures and localizes faults in PHP Web applications. The fault-localization techniques evaluated combine variations on the Tarantula algorithm with a technique based on maintaining a mapping between executed statements and the fragments of output they produce, mapping of conditional results, and values returned from function calls. These techniques have been implemented in a tool called Apollo, and evaluated by localizing 75 randomly selected faults that were exposed by automatically generated tests in four PHP applications. Our findings indicate that, using our best technique, 87.7% of the faults under consideration are localized to within 1% of all executed statements, which constitutes an almost five-fold improvement over the Tarantula algorithm.
    • 公开了一种新颖的计算机实现系统,按需服务,计算机程序产品和利用组合的具体和符号执行以及多种故障定位技术的方法来创建一个独特强大的工具,可自动检测故障并定位PHP Web应用程序中的故障。 评估的故障定位技术将Tarantula算法的变化与基于维护执行语句之间的映射及其产生的输出片段,条件结果映射以及函数调用返回值的技术相结合。 这些技术已经在一个名为Apollo的工具中实现,并通过将四个PHP应用程序中自动生成的测试暴露的75个随机选择的故障进行本地化评估。 我们的研究结果表明,使用我们最好的技术,所考虑的故障的87.7%被定位在所有执行语句的1%内,这比Tarantula算法提高了近5倍。
    • 8. 发明申请
    • GENERATING INPUTS FOR CLIENT-SERVER PROGRAMS FOR FAULT DETECTION AND LOCALIZATION
    • 为客户服务器程序生成用于故障检测和本地化的程序
    • US20120151454A1
    • 2012-06-14
    • US12966556
    • 2010-12-13
    • Shay ARTZIJulian DolbyMarco PistoiaFrank Tip
    • Shay ARTZIJulian DolbyMarco PistoiaFrank Tip
    • G06F9/44
    • G06F11/3684H04L69/40
    • The present invention provides a system, computer program product, and a computer implemented method for analyzing a set of two or more communicating applications. The method begins with receiving a first second application that communicates with each other during execution. Next, an initial input for executing the first application and the second application is received. The initial input is added to a set of inputs. An iterative execution loop is performed at least once. The loop begins with selecting inputs out of the set of inputs for execution. Next, using the selected inputs, the first and/or the second application is executed while information regarding the execution and information communicated to the other application are recorded. A set of one or more new application inputs for either applications is generated based the second application recorded information and the first application information. These new inputs are added to the set of inputs.
    • 本发明提供了一种系统,计算机程序产品和用于分析一组两个或多个通信应用的计算机实现的方法。 该方法开始于在执行期间接收彼此通信的第一个第二应用程序。 接下来,接收用于执行第一应用和第二应用的初始输入。 初始输入被添加到一组输入。 执行迭代执行循环至少一次。 循环从选择输入集合中的输入开始执行。 接下来,使用所选择的输入,执行第一和/或第二应用,同时记录关于执行的信息和传送给其他应用的信息。 基于第二应用记录信息和第一应用信息生成用于任一应用的一组或多个新的应用输入。 这些新的输入被添加到该组输入。
    • 9. 发明申请
    • DETECTING AND LOCALIZING SECURITY VULNERABILITIES IN CLIENT-SERVER APPLICATION
    • 检测和本地化客户端服务器应用程序中的安全漏洞
    • US20110030061A1
    • 2011-02-03
    • US12902423
    • 2010-10-12
    • SHAY ARTZIJulian DolbyMarco PistoiaFrank TipOmer Tripp
    • SHAY ARTZIJulian DolbyMarco PistoiaFrank TipOmer Tripp
    • G06F11/36G06F11/00G06F9/44
    • G06F11/3604
    • The present invention provides a system, computer program product, and a computer implemented method for analyzing a set of two or more communicating applications. The method includes executing a first application, such as a client application, and executing a second application, such as a server application. The applications are communicating with each other. A correlation is recorded between the applications and an execution characteristic exhibited on execution. An oracle is used to determine an analysis of the first application that has been executed. The execution of the first application causes a change of state in the second application and/or a change control flow in the second application. Code fragment in the first application and/or the second application are prioritized based on an evaluation produced by the oracle, and based on the correlation between the code fragments that have been executed and the execution characteristic exhibited by the code fragments.
    • 本发明提供了一种系统,计算机程序产品和用于分析一组两个或多个通信应用的计算机实现的方法。 该方法包括执行诸如客户端应用的第一应用,以及执行诸如服务器应用的第二应用。 应用程序正在彼此通信。 应用之间记录相关性,执行时执行特性。 使用oracle来确定已执行的第一个应用程序的分析。 第一应用的执行导致第二应用中的状态改变和/或第二应用中的改变控制流。 第一应用程序和/或第二应用程序中的代码片段基于由oracle生成的评估,并且基于已执行的代码片段与代码片段所呈现的执行特性之间的相关性进行优先级排序。
    • 10. 发明申请
    • GENERATING ADDITIONAL USER INPUTS FOR FAULT DETECTION AND LOCALIZATION IN DYNAMIC SOFTWARE APPLICATIONS
    • 在动态软件应用程序中生成用于故障检测和本地化的附加用户输入
    • US20110016456A1
    • 2011-01-20
    • US12502545
    • 2009-07-14
    • SHAY ARTZIJulian DolbyFrank Tip
    • SHAY ARTZIJulian DolbyFrank Tip
    • G06F9/44
    • G06F11/3692G06F11/3684
    • The present invention provides a system, computer program product and a computer implemented method for prioritizing code fragments based on the use of a software oracle and on a correlation between the executed code fragments and the output they produce. Also described is a computer-implemented method generates additional user inputs based on execution information associated with path constraints and based on information from the oracle. Advantageously, the embodiment is useful in a test generation tool that generated many similar inputs when a failure-inducing input is found, in order to enhance fault localization. Further, described is a computer-implemented flow for extending the existing idea of concolic testing to applications that interact with persistent state.
    • 本发明提供了一种系统,计算机程序产品和计算机实现的方法,用于基于使用软件oracle以及所执行的代码片段与其产生的输出之间的相关性对代码片段进行优先级排序。 还描述了一种基于计算机实现的方法,其基于与路径约束相关联的执行信息并且基于来自oracle的信息生成额外的用户输入。 有利地,该实施例对于在发现故障诱导输入时产生许多相似输入的测试生成工具中是有用的,以便增强故障定位。 此外,描述了一种计算机实现的流程,用于将现有的concolic测试思想扩展到与持久状态交互的应用程序。