Testing Real-Time Embedded Systems using Timed Automata based approaches

Real-Time Embedded Systems (RTESs) have an increasing role in controlling the IT that we use on a day-to-day basis. The behaviour of an RTES is not based solely on the interactions it might have with its surrounding environment, but also on the timing requirements it induces. As a result, ensuring that an RTES behaves correctly is non-trivial, especially after adding time as a new dimension to the complexity of the testing process. We previously introduced the 'priority-based' approach which tests the logical and timing behaviour of an RTES modelled formally as UPPAAL automata. The 'priority-based' approach was based on producing sets of timed test traces by achieving clock region coverage. In this paper, we empirically validate the 'priority-based' approach with comparison to well-known timed testing approaches based on a Timed Automata (TA) formalism using a complete test bed based on an industrial-strength case study (production cell). The validation assessment is based on both fault coverage and structural coverage by a minimal number of generated test traces; the former is achieved using the Mutation Analysis Technique (MAT) by introducing a set of timed and functional mutation operators. The latter is based on clock region coverage as a main timed structural coverage criterion. This study shows that 'priority-based' approach can combine a high fault coverage and clock region coverage with a relatively small number of test traces in comparison with other test approaches. A set of experiences and lessons learned are highlighted as result of the real-time test bed.

[1]  Richard J. Lipton,et al.  Hints on Test Data Selection: Help for the Practicing Programmer , 1978, Computer.

[2]  Samrat S. Batth,et al.  Timing Fault Models for Systems with Multiple Timers , 2005, TestCom.

[3]  W. Eric Wong,et al.  Mutation Testing Applied to Validate SDL Specifications , 2004, TestCom.

[4]  Sevin Sozer,et al.  Product planning in quality function deployment using a combined analytic network process and goal programming approach , 2003 .

[5]  J. Jackson Prioritising customers and other stakeholders using the AHP , 2001 .

[6]  C. A. R. Hoare,et al.  Communicating sequential processes , 1978, CACM.

[7]  John A. Clark,et al.  FORTEST: formal methods and testing , 2002, Proceedings 26th Annual International Computer Software and Applications.

[8]  Simone do Rocio Senger de Souza,et al.  Mutation testing applied to Estelle specifications , 2000, Proceedings of the 33rd Annual Hawaii International Conference on System Sciences.

[9]  Abdelwahab Hamou-Lhadj,et al.  A Boundary Checking Technique for Testing Real-Time Systems Modeled as Timed Input Output Automata (Short Paper) , 2008, 2008 The Eighth International Conference on Quality Software.

[10]  Nancy A. Lynch,et al.  Using mappings to prove timing properties , 1990, PODC '90.

[11]  Joseph Sifakis,et al.  Specification and verification of concurrent systems in CESAR , 1982, Symposium on Programming.

[12]  Barry W. Boehm,et al.  Software Engineering Economics , 1993, IEEE Transactions on Software Engineering.

[13]  M. Trakhtenbrot,et al.  New Mutations for Evaluation of Specification and Implementation Levels of Adequacy in Testing of Statecharts Models , 2007, Testing: Academic and Industrial Conference Practice and Research Techniques - MUTATION (TAICPART-MUTATION 2007).

[14]  Frits W. Vaandrager,et al.  Testing timed automata , 1997, Theor. Comput. Sci..

[15]  Wang Yi,et al.  Time-abstracted Bisimulation: Implicit Specifications and Decidability , 1997, Inf. Comput..

[16]  Robert E. Jensen,et al.  REPORTING OF MANAGEMENT FORECASTS: AN EIGENVECTOR MODEL FOR ELICITATION AND REVIEW OF FORECASTS , 1982 .

[17]  Márcio Eduardo Delamaro,et al.  Proteum/FSM: a tool to support finite state machine validation based on mutation testing , 1999, Proceedings. SCCC'99 XIX International Conference of the Chilean Computer Science Society.

[18]  Bernhard K. Aichernig,et al.  Mutation Testing in the Refinement Calculus , 2003, Formal Aspects of Computing.

[19]  M. Buss How to rank computer projects. , 1983, Harvard business review.

[20]  Antoine Rollet Testing Robustness of Real Time Embedded Systems , .

[21]  Kim G. Larsen,et al.  Testing real-time embedded software using UPPAAL-TRON: an industrial case study , 2005, EMSOFT.

[22]  Manoj Kumar Tiwari,et al.  Analyzing alternatives in reverse logistics for end-of-life computers: ANP and balanced scorecard approach , 2005, Comput. Ind. Eng..

[23]  Patricia Bouyer,et al.  From Qualitative to Quantitative Analysis of Timed Systems , 2009 .

[24]  Sérgio Vale Aguiar Campos,et al.  Symbolic Model Checking , 1993, CAV.

[25]  David Harel,et al.  Executable object modeling with statecharts , 1996, Proceedings of IEEE 18th International Conference on Software Engineering.

[26]  Mercedes G. Merayo,et al.  Formal testing from timed finite state machines , 2008, Comput. Networks.

[27]  Thomas L. Saaty,et al.  Prediction, projection and forecasting : applications of the analytic hierarchy process in economics, finance, politics, games and sports , 1991 .

[28]  M. R. Woodward,et al.  From weak to strong, dead or alive? an analysis of some mutation testing issues , 1988, [1988] Proceedings. Second Workshop on Software Testing, Verification, and Analysis.

[29]  Rachel Cardell-Oliver,et al.  A Practical and Complete Algorithm for Testing Real-Time Systems , 1998, FTRTFT.

[30]  Ralf Mitsching,et al.  Towards an Industrial Strength Process for Timed Testing , 2009, 2009 International Conference on Software Testing, Verification, and Validation Workshops.

[31]  Alain Abran,et al.  Metrology, measurement and metrics in software engineering , 2003, Proceedings. 5th International Workshop on Enterprise Networking and Computing in Healthcare Industry (IEEE Cat. No.03EX717).

[32]  Robert M. Hierons,et al.  Specification Mutation Analysis for Validating Timed Testing Approaches Based on Timed Automata , 2012, 2012 IEEE 36th Annual Computer Software and Applications Conference.

[33]  Timothy A. Budd,et al.  Program Testing by Specification Mutation , 1985, Comput. Lang..

[34]  Richard A DeMillo Mutation Analysis as a Tool for Software Quality Assurance. , 1980 .

[35]  Rocco De Nicola,et al.  Testing Equivalences for Processes , 1984, Theor. Comput. Sci..

[36]  A. Jefferson Offutt,et al.  Mutation Operators for Ada , 1996 .

[37]  Roger S. Pressman,et al.  Software Engineering: A Practitioner's Approach , 1982 .

[38]  Conrado Daws,et al.  Reducing the number of clock variables of timed automata , 1996, RTSS.

[39]  Min Xu,et al.  Optimization of wastewater treatment alternative selection by hierarchy grey relational analysis. , 2007, Journal of environmental management.

[40]  R. Yin Case Study Research: Design and Methods , 1984 .

[41]  T. Saaty How to Make a Decision: The Analytic Hierarchy Process , 1990 .

[42]  Insup Lee,et al.  Data flow testing as model checking , 2003, 25th International Conference on Software Engineering, 2003. Proceedings..

[43]  Vangalur S. Alagar,et al.  Automated generation of test suites from formal specifications of real-time reactive systems , 2008, J. Syst. Softw..

[44]  N. Denzin,et al.  Collecting and Interpreting Qualitative Materials , 2012 .

[45]  Frans,et al.  Strategic Decision Making , 2000, Transforming Financial Institutions.

[46]  Edmund M. Clarke,et al.  Symbolic Model Checking: 10^20 States and Beyond , 1990, Inf. Comput..

[47]  Alan Burns,et al.  Calculating controller area network (can) message response times , 1994 .

[48]  Bachar Alrouh,et al.  Towards secure web services : performance analysis, decision making and steganography approaches , 2011 .

[49]  César Viho,et al.  Formal Test Automation: The Conference Protocol with TGV/TORX , 2000, TestCom.

[50]  R. Hierons,et al.  Mutation Testing from Probabilistic Finite State Machines , 2007, Testing: Academic and Industrial Conference Practice and Research Techniques - MUTATION (TAICPART-MUTATION 2007).

[51]  Mark Harman,et al.  Testing conformance of a deterministic implementation against a non-deterministic stream X-machine , 2004, Theor. Comput. Sci..

[52]  Adilson Luiz Bonifácio,et al.  A new method for testing timed systems , 2013, Softw. Test. Verification Reliab..

[53]  I. Lee,et al.  Automatic generation of tests for timing constraints from requirements , 1997, Proceedings Third International Workshop on Object-Oriented Real-Time Dependable Systems.

[54]  Luis G. Vargas,et al.  Prediction, Projection And Forecasting , 1990 .

[55]  Elaine J. Weyuker,et al.  Selecting Software Test Data Using Data Flow Information , 1985, IEEE Transactions on Software Engineering.

[56]  Thomas L. Saaty,et al.  The legitimacy of rank reversal , 1984 .

[57]  Joe D. Warren,et al.  The program dependence graph and its use in optimization , 1984, TOPL.

[58]  Patrice Godefroid,et al.  Model checking for programming languages using VeriSoft , 1997, POPL '97.

[59]  Eric Wong,et al.  Testing for security vulnerabilities in software , 2012, ICSE 2012.

[60]  K. Larsen,et al.  Online Testing of Real-time Systems Using Uppaal , 2004, FATES.

[61]  Stavros Tripakis,et al.  An Expressive and Implementable Formal Framework for Testing Real-Time Systems , 2005, TestCom.

[62]  Kim Guldstrand Larsen,et al.  Formal Methods for the Design of Real-Time Systems , 2004, Lecture Notes in Computer Science.

[63]  Zakkula Govindarajulu,et al.  Decision Analysis for Management Judgement. , 1993 .

[64]  Muhammad Mustafa Kamal,et al.  Investigating enterprise application integration (EAI) adoption in the local government authorities (LGAs) , 2008 .

[65]  Ronald L. Rivest,et al.  Inference of finite automata using homing sequences , 1989, STOC '89.

[66]  Ferhat Khendek,et al.  Timed Wp-Method: Testing Real-Time Systems , 2002, IEEE Trans. Software Eng..

[67]  Bart Broekman,et al.  Testing Embedded Software , 2002 .

[68]  Amir Pnueli,et al.  The temporal logic of programs , 1977, 18th Annual Symposium on Foundations of Computer Science (sfcs 1977).

[69]  A.P. Mathur Performance, effectiveness, and reliability issues in software testing , 1991, [1991] Proceedings The Fifteenth Annual International Computer Software & Applications Conference.

[70]  E. Allen Emerson,et al.  Temporal and Modal Logic , 1991, Handbook of Theoretical Computer Science, Volume B: Formal Models and Sematics.

[71]  Stavros Tripakis,et al.  Conformance testing for real-time systems , 2009, Formal Methods Syst. Des..

[72]  Robert M. Hierons,et al.  Testing a system specified using Statecharts and Z , 2001, Inf. Softw. Technol..

[73]  Boris Beizer,et al.  Software Testing Techniques , 1983 .

[74]  Tsun S. Chow,et al.  Testing Software Design Modeled by Finite-State Machines , 1978, IEEE Transactions on Software Engineering.

[75]  A. Jefferson Offutt,et al.  Introduction to Software Testing , 2008 .

[76]  J. Ashayeri,et al.  GLOBAL BUSINESS PROCESS RE-ENGINEERING: A SYSTEM DYNAMICS BASED APPROACH , 1998, Proceeding of Flexible Automation and Intelligent Manufacturing, 1997.

[77]  Paul Pettersson,et al.  Model-Based Testing of a WAP Gateway: An Industrial Case-Study , 2006, FMICS/PDMC.

[78]  Wolfgang Grieskamp,et al.  Model‐based quality assurance of protocol documentation: tools and methodology , 2011, Softw. Test. Verification Reliab..

[79]  Laura Brandán Briones,et al.  Test Derivation from Timed Automata , 2004, Model-Based Testing of Reactive Systems.

[80]  Paul Pettersson,et al.  Cover - A Real-Time Test Case Generation Tool , 2007 .

[81]  Abdeslam En-Nouaary,et al.  A Guided Method for Testing Timed Input Output Automata , 2003, TestCom.

[82]  Shin Nakajima,et al.  The SPIN Model Checker : Primer and Reference Manual , 2004 .

[83]  Stavros Tripakis,et al.  Modeling, Verification and Testing using Timed and Hybrid Automata , 2009 .

[84]  Marie-Claude Gaudel,et al.  Testing Can Be Formal, Too , 1995, TAPSOFT.

[85]  Thomas L. Saaty,et al.  Multicriteria Decision Making: The Analytic Hierarchy Process: Planning, Priority Setting, Resource Allocation , 1990 .

[86]  Richard J. Lipton,et al.  The design of a prototype mutation system for program testing , 1899, AFIPS National Computer Conference.

[87]  Jan Tretmans,et al.  Test Generation with Inputs, Outputs, and Quiescence , 1996, TACAS.

[88]  Kim G. Larsen,et al.  Time-Optimal Real-Time Test Case Generation Using Uppaal , 2003, FATES.

[89]  George D. Magoulas,et al.  Multicriteria decision making for enhanced perception-based multimedia communication , 2005, IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans.

[90]  Douglas Baldwin,et al.  Heuristics for Determining Equivalence of Program Mutations. , 1979 .

[91]  Paul Pettersson,et al.  Model-Based Testing of a WAP Gateway: , 2006 .

[92]  Thomas L. Saaty,et al.  A new macroeconomic forecasting and policy evaluation method using the analytic hierarchy process , 1987 .

[93]  M. Lu,et al.  Integrating QFD, AHP and Benchmarking in Strategic Marketing , 1994 .

[94]  Ferhat Khendek,et al.  Fault coverage in testing real-time systems , 1999, Proceedings Sixth International Conference on Real-Time Computing Systems and Applications. RTCSA'99 (Cat. No.PR00306).

[95]  Shi-Ming Huang,et al.  Assessing risk in ERP projects: identify and prioritize the factors , 2004, Ind. Manag. Data Syst..

[96]  Paul Goodwin,et al.  Decision Analysis for Management Judgment , 1998 .

[97]  Sandro Morasca,et al.  Generating test cases for real-time systems from logic specifications , 1995, TOCS.

[98]  Bernhard K. Aichernig,et al.  Qualitative Action Systems , 2009, ICFEM.

[99]  Nathalie Bertrand,et al.  Off-Line Test Selection with Test Purposes for Non-deterministic Timed Automata , 2011, TACAS.

[100]  Robin Milner,et al.  Communication and concurrency , 1989, PHI Series in computer science.

[101]  Thomas L. Saaty,et al.  Decision Making for Leaders: The Analytical Hierarchy Process for Decisions in a Complex World , 1982 .

[102]  Yu Wang,et al.  Multiple Fault Models for Timed FSMs , 2006, 2006 IEEE Instrumentation and Measurement Technology Conference Proceedings.

[103]  Brian Nielsen,et al.  Automated test generation from timed automata , 2001, International Journal on Software Tools for Technology Transfer.

[104]  Colin Stirling,et al.  Modal Logics and mu-Calculi: An Introduction , 2001, Handbook of Process Algebra.

[105]  Brian Nielsen,et al.  Test generation for time critical systems: Tool and case study , 2001, Proceedings 13th Euromicro Conference on Real-Time Systems.

[106]  Rocco De Nicola,et al.  Testing Equivalence for Processes , 1983, ICALP.

[107]  Heng Li,et al.  Construction Partnering Process and Associated Critical Success Factors: Quantitative Investigation , 2002 .

[108]  J G Dolan,et al.  Medical Decision Making Using the Analytic Hierarchy Process , 1989, Medical decision making : an international journal of the Society for Medical Decision Making.

[109]  Y. Yesha,et al.  Specification mutation for test generation and analysis , 2004 .

[110]  Robert M. Hierons,et al.  Testing from a nondeterministic finite state machine using adaptive state counting , 2004, IEEE Transactions on Computers.

[111]  Masood A. Badri,et al.  A comprehensive 0-1 goal programming model for project selection , 2001 .

[112]  Bogdan Korel,et al.  Requirement-based automated black-box test generation , 2001, 25th Annual International Computer Software and Applications Conference. COMPSAC 2001.

[113]  Pierre Wolper Temporal Logic Can Be More Expressive , 1983, Inf. Control..

[114]  Jose L. Salmeron,et al.  An AHP-based methodology to rank critical success factors of executive information systems , 2005, Comput. Stand. Interfaces.

[115]  Bernhard K. Aichernig,et al.  Model-Based Mutation Testing of Hybrid Systems , 2009, FMCO.

[116]  Füsun Ülengin,et al.  Forecasting foreign exchange rates: A comparative evaluation of AHP , 1994 .

[117]  A. Jefferson Offutt,et al.  Detecting equivalent mutants and the feasible path problem , 1996, Proceedings of 11th Annual Conference on Computer Assurance. COMPASS '96.

[118]  Wang Yi,et al.  Time Abstracted Bisimiulation: Implicit Specifications and Decidability , 1993, MFPS.

[119]  Abdul Salam Kalaji Search-based software engineering : a search-based approach for testing from extended finite state machine (EFSM) models , 2010 .

[120]  W. Eric Wong,et al.  Mutation Testing Applied to Validate Specifications Based on Petri Nets , 1995, FORTE.

[121]  C. Kepner,et al.  The New Rational Manager , 1981 .

[122]  Joseph Sifakis,et al.  Compiling Real-Time Specifications into Extended Automata , 1992, IEEE Trans. Software Eng..

[123]  Fausto Giunchiglia,et al.  NUSMV: A New Symbolic Model Verifier , 1999, CAV.

[124]  Steve Counsell,et al.  Fault Coverage Measurement of a Timed Test Case Generation Approach , 2010, 2010 17th IEEE International Conference and Workshops on Engineering of Computer Based Systems.

[125]  Wang Yi,et al.  Timed Automata: Semantics, Algorithms and Tools , 2003, Lectures on Concurrency and Petri Nets.

[126]  J. A. Acree On mutation , 1980 .

[127]  Rachel Cardell-Oliver Conformance Tests for Real-Time Systems with Timed Automata Specifications , 2000, Formal Aspects of Computing.

[128]  Guney Gonenc,et al.  A Method for the Design of Fault Detection Experiments , 1970, IEEE Transactions on Computers.

[129]  Samrat S. Batth,et al.  Fault masking by multiple timing faults in timed EFSM models , 2009, Comput. Networks.

[130]  Chen-Fu Chien,et al.  An AHP-based approach to ERP system selection , 2005 .

[131]  Richard A. Kemmerer,et al.  Testing Formal Specifications to Detect Design Errors , 1985, IEEE Transactions on Software Engineering.

[132]  Yong Rae Kwon,et al.  MuJava: an automated class mutation system: Research Articles , 2005 .

[133]  Bengt Jonsson,et al.  Specifying and Generating Test Cases Using Observer Automata , 2004, FATES.

[134]  Kim G. Larsen,et al.  Testing Real-Time Systems Using UPPAAL , 2008, Formal Methods and Testing.

[135]  Jean-Raymond Abrial,et al.  The B-book - assigning programs to meanings , 1996 .

[136]  Ferhat Khendek,et al.  Timed test cases generation based on state characterization technique , 1998, Proceedings 19th IEEE Real-Time Systems Symposium (Cat. No.98CB36279).

[137]  Radhika Santhanam,et al.  A DECISION MODEL FOR INTERDEPENDENT INFORMATION SYSTEM PROJECT SELECTION , 1996 .

[138]  Bo Yang,et al.  A test sequence selection method for protocol testing , 1991, IEEE Trans. Commun..

[139]  A. Jefferson Offutt,et al.  Mutation analysis using mutant schemata , 1993, ISSTA '93.

[140]  Julien Schmaltz,et al.  An Experience Report on an Industrial Case-Study about Timed Model-Based Testing with UPPAAL-TRON , 2011, 2011 IEEE Fourth International Conference on Software Testing, Verification and Validation Workshops.

[141]  R. Ramanathan,et al.  Using AHP for resource allocation problems , 1995 .

[142]  M. R. Woodward OBJTEST: an experimental testing tool for algebraic specifications , 1992 .

[143]  Gyula Csopaki,et al.  Applying Mutation Analysis to SDL Specifications , 2003, SDL Forum.

[144]  Alfred V. Aho,et al.  An optimization technique for protocol conformance test generation based on UIO sequences and rural Chinese postman tours , 1991, IEEE Trans. Commun..

[145]  Amir Pnueli,et al.  On the Development of Reactive Systems , 1989, Logics and Models of Concurrent Systems.

[146]  Gregor von Bochmann,et al.  Synchronization and Specification Issues in Protocol Testing , 1984, IEEE Trans. Commun..

[147]  Mark Harman,et al.  An Analysis and Survey of the Development of Mutation Testing , 2011, IEEE Transactions on Software Engineering.

[148]  Amnon Naamad,et al.  The STATEMATE semantics of statecharts , 1996, TSEM.

[149]  Henrik C. Bohnenkamp,et al.  Timed Testing with TorX , 2005, FM.

[150]  Paulo César Masiero,et al.  Mutation testing applied to validate specifications based on statecharts , 1999, Proceedings 10th International Symposium on Software Reliability Engineering (Cat. No.PR00443).

[151]  Geoff Walsham,et al.  Interpretive case studies in IS research: nature and method , 1995 .

[152]  Insup Lee,et al.  A Temporal Logic Based Theory of Test Coverage and Generation , 2002, TACAS.

[153]  M. R. Woodward,et al.  Errors in algebraic specifications and an experimental mutation testing tool , 1993, Softw. Eng. J..

[154]  Stavros Tripakis,et al.  Real-Time Testing with Timed Automata Testers and Coverage Criteria , 2004, FORMATS/FTRTFT.

[155]  Richard J. Lipton,et al.  Social processes and proofs of theorems and programs , 1979, CACM.

[156]  Boris Beizer,et al.  Software testing techniques (2. ed.) , 1990 .

[157]  Thomas L. Saaty,et al.  Decision making for leaders , 1985, IEEE Transactions on Systems, Man, and Cybernetics.

[158]  Bernhard K. Aichernig,et al.  Automated Conformance Verification of Hybrid Systems , 2010, 2010 10th International Conference on Quality Software.

[159]  Robert M. Hierons,et al.  GeTeX: A Tool for Testing Real-Time Embedded Systems Using CAN Applications , 2011, 2011 18th IEEE International Conference and Workshops on Engineering of Computer-Based Systems.

[160]  David Lee,et al.  Principles and methods of testing finite state machines-a survey , 1996, Proc. IEEE.

[161]  T. F. Burgess,et al.  Prioritising information systems projects in higher education , 2003 .

[162]  A. Jefferson Offutt,et al.  Inter-class mutation operators for Java , 2002, 13th International Symposium on Software Reliability Engineering, 2002. Proceedings..

[163]  Laura Brandán Briones,et al.  Theories for Model-based Testing: Real-time and Coverage , 2007 .

[164]  Abdeslam En-Nouaary A scalable method for testing real-time systems , 2007, Software Quality Journal.

[165]  Kim G. Larsen,et al.  A Tutorial on Uppaal , 2004, SFM.

[166]  K. N. King,et al.  A Fortran 77 interpreter for mutation analysis , 1987, PLDI 1987.

[167]  Márcio Eduardo Delamaro,et al.  Mutation analysis testing for finite state machines , 1994, Proceedings of 1994 IEEE International Symposium on Software Reliability Engineering.

[168]  Fabrice Bouquet,et al.  Reification of Executable Test Scripts in Formal Specicifation-Based Test Generation: The Java Card Transaction Mechanism Case Study , 2003, FME.

[169]  Paul Ammann,et al.  Using model checking to generate tests from specifications , 1998, Proceedings Second International Conference on Formal Engineering Methods (Cat.No.98EX241).

[170]  Ahmed Khoumsi,et al.  A Method for Testing the Conformance of Real Time Systems , 2002, FTRTFT.

[171]  Robert M. Hierons,et al.  A Multi-criteria Decision Making Framework for Real Time Model-Based Testing , 2010, TAIC PART.

[172]  J. Michael Spivey,et al.  The Z notation - a reference manual , 1992, Prentice Hall International Series in Computer Science.

[173]  Philip Bromiley,et al.  Strategic decision making , 2012 .

[174]  Teruo Higashino,et al.  Generating Test Cases for a Timed I/O Automaton Model , 1999, IWTCS.

[175]  Edmund M. Clarke,et al.  Using Branching Time Temporal Logic to Synthesize Synchronization Skeletons , 1982, Sci. Comput. Program..

[176]  Ahmed Khoumsi,et al.  SetExp: a method of transformation of timed automata into finite state automata , 2010, Real-Time Systems.

[177]  Sébastien Salva,et al.  An User-Oriented Testing of Real Time Systems , 2001 .

[178]  T. Glover,et al.  A modular tool for test generation for real-time systems , 1999 .

[179]  Ahmed Khoumsi A new method for testing real time systems , 2000, Proceedings Seventh International Conference on Real-Time Computing Systems and Applications.

[180]  Rance Cleaveland,et al.  Using formal specifications to support testing , 2009, CSUR.

[181]  Insup Lee,et al.  Automatic Test Generation From Statecharts Using Model Checking , 2001 .

[182]  Thomas L. Saaty,et al.  DECISION MAKING WITH THE ANALYTIC HIERARCHY PROCESS , 2008 .

[183]  Frits W. Vaandrager,et al.  Minimizable Timed Automata , 1996, FTRTFT.

[184]  Soung Hie Kim,et al.  Using analytic network process and goal programming for interdependent information system project selection , 2000, Comput. Oper. Res..

[185]  Abdeslam En-Nouaary,et al.  Test development for communication protocols: towards automation , 1999, Comput. Networks.

[186]  Bo K. Wong,et al.  Software selection: a case study of the application of the analytical hierarchical process to the selection of a multimedia authoring system , 1999, Inf. Manag..

[187]  Robert M. Hierons,et al.  Mutation testing from probabilistic and stochastic finite state machines , 2009, J. Syst. Softw..

[188]  Brian Nielsen,et al.  Automated Test Generation from Timed Automata , 2001, TACAS.

[189]  David J. Weiss,et al.  SMARTS and SMARTER: Improved Simple Methods for Multiattribute Utility Measurement , 2008 .

[190]  Mark Harman,et al.  The relationship between program dependence and mutation analysis , 2001 .

[191]  Rajeev Alur,et al.  A Theory of Timed Automata , 1994, Theor. Comput. Sci..

[192]  B. Dasarathy,et al.  Timing Constraints of Real-Time Systems: Constructs for Expressing Them, Methods of Validating Them , 1989, IEEE Transactions on Software Engineering.

[193]  Kwai-Sang Chin,et al.  An evaluation of success factors using the AHP to implement ISO 14001‐based EMS , 1999 .

[194]  Anders P. Ravn,et al.  Formal Techniques in Real-Time and Fault-Tolerant Systems , 1994, Lecture Notes in Computer Science.

[195]  Manuel Núñez,et al.  Conformance Testing Relations for Timed Systems , 2005, FATES.

[196]  T. L. Saaty A Scaling Method for Priorities in Hierarchical Structures , 1977 .

[197]  Robert E. Jensen,et al.  Matrix scaling of subjective probabilities of economic forecasts , 1986 .

[198]  Duncan Clarke,et al.  Automatic test generation for the analysis of a real-time system: Case study , 1997, Proceedings Third IEEE Real-Time Technology and Applications Symposium.

[199]  Byoungju Choi,et al.  Mutation-based inter-class testing , 1998, Proceedings 1998 Asia Pacific Software Engineering Conference (Cat. No.98EX240).

[200]  Ferhat Khendek,et al.  Test Selection Based on Finite State Models , 1991, IEEE Trans. Software Eng..

[201]  Ana R. Cavalli,et al.  Two Complementary Tools for the Formal Testing of Distributed Systems with Time Constraints , 2008, 2008 12th IEEE/ACM International Symposium on Distributed Simulation and Real-Time Applications.

[202]  Lionel C. Briand,et al.  Is mutation an appropriate tool for testing experiments? , 2005, ICSE.

[203]  Thomas L. Saaty,et al.  Models, Methods, Concepts & Applications of the Analytic Hierarchy Process , 2012 .

[204]  Thomas A. Henzinger,et al.  Event-Clock Automata: A Determinizable Class of Timed Automata , 1999, Theor. Comput. Sci..

[205]  Edmund M. Clarke,et al.  Model Checking , 1999, Handbook of Automated Reasoning.

[206]  Ousmane Koné,et al.  On the fly test generation for real time protocols , 1998, Proceedings 7th International Conference on Computer Communications and Networks (Cat. No.98EX226).

[207]  J. Taylor,et al.  Switching and finite automata theory, 2nd ed. , 1980, Proceedings of the IEEE.