Lecture Notes in Computer Science 3472

408 Axel Belinfante, Lars Frantzen, and Christian Schallhart
ables might be subject to some of the constraints which are collected during the
symbolic execution.
These variables can be instantiated randomly or based on a limit analysis.
After instantiation, the test sequences can be used for actual testing.
Summary
AutoFocus allows to model a system as a collection of communicating components
which can be decomposed hierarchically into further subnetworks of
synchronously communicating components. The testing environment of Auto-
Focus provides the possibility to translate its models into a CLP language and
to symbolically execute these transformed models. The model can be associated
with functional, structural, and stochastic test specifications to generate test
sequences based on the symbolic execution within the CLP environment. In addition
AutoFocus is able to generate test cases that conform to a given coverage
criteria to the model itself, or on a functional test specification. The generated
test sequences can be employed to drive a SUT which implements or refines the
model which underlies the generated test sequences.
14.2.5 Conformance Kit
Introduction
At KPN Research [KPN] the Conformance Kit was developed in the early
nineties to support automatic testing of protocol implementations. It is not publicly
available. (E)FSMs serve as specifications. Beside the typical EFSM concepts
like variables and conditions (predicates) on transitions, some additional
notions like gates are introduced to facilitate the mapping to the SUT. The gate
concept allows to split a specification into several EFSMs which communicate
through such gates.
The first fundamental tool of the Kit is a converter which transforms an
EFSM into an equivalent FSM (i.e. same input/output behavior) via enumeration
of the (necessarily finite domain) variables. In a next step the resulting
FSM is minimized. A basic syntax check is embedded into these steps which is
capable of detecting nondeterministic transitions and input-incomplete specifications.
Furthermore, EFSMs can be simulated and a composer allows to assemble
communicating EFSMs into a single one with equal behavior.
Test Generation Process
The test suite generation tool offers several FSM techniques to derive test cases.
A transition tour is possible if the FSM is strongly connected. The disadvantage
of this method is that only the input/output behavior is tested, the
correctness of the end-states of the transitions is not checked. To overcome this
disadvantage a tour including unique input/output (UIO) sequences is offered
which does check the end-states. It is called partition tour because it does not