guest ::
TY - THES AU - Simon, Hendrik TI - Automatic test Case generation for PLC software VL - 2023,05 PB - RWTH Aachen University VL - Dissertation CY - Aachen M1 - RWTH-2023-08196 T2 - Aachener Informatik-Berichte (AIB) SP - 1 Online-Ressource : Illustrationen PY - 2023 N1 - Veröffentlicht auf dem Publikationsserver der RWTH Aachen University 2024. - Weitere Reihe: Technical report / Department of Computer Science N1 - Dissertation, RWTH Aachen University, 2023 AB - Automatic test case generation for the purpose of bug finding or achieving coverage goals has recently evolved to a scalable technique that is nowadays used to find highly critical security bugs, e.g. by Microsoft. However, in the domain of Programmable Logic Controllers (PLCs), applications of this technique are rare and usually rely on tools and mechanisms that were not initially designed for this domain. In fact, a discussion on how to design such techniques with the peculiarities of PLC software in mind, is missing. At the same time, PLC software is typically used in safety critical environments where software errors pose significant threats to the environment or humans and may additionally result in significant financial losses. Mature automatic testing techniques for the PLC domain would, thus, be highly beneficial to further support software quality in this area. PLC software typically follows a cyclic execution scheme that involves a repeated process of reading input values, executing a (often state machine based) control program that relies on local variables and writing computed values to outputs. Although the cyclic execution resembles only a small change in the execution semantics, the impact on automatic testing techniques is significant. This dissertation provides insights and mechanisms to transfer automatic test case generation into the domain of PLC software. We conduct an in-depth discussion on related approaches and point out strengths and weaknesses in order to provide baseline knowledge that can be utilised in future developments in this field of research. Further, we introduce our own automatic test case generation approaches and exemplify their effectiveness on PLC software. We are able to show that the generation of branch coverage tests can be achieved significantly faster than with existing techniques, rendering our approaches more applicable for larger software. The focus of our techniques lies in the exploitation of state-machine based execution behaviour and the preservation of structural information in Sequential Function Chart. For the latter, our presented algorithm can achieve full coverage in a few seconds for programs that could only partly be covered within an hour by related approaches. LB - PUB:(DE-HGF)11 ; PUB:(DE-HGF)3 DO - DOI:10.18154/RWTH-2023-08196 UR - https://publications.rwth-aachen.de/record/964231 ER -