Proofs from Tests

Beckman, Nels E. and Nori, Aditya V. and Rajamani, Sriram K. and Simmons, Robert J. and Tetali, SaiDeep and Thakur, Aditya V.
IEEE Transactions on Software Engineering (TSE), 2010

We present an algorithm DASH to check if a program P satisfies a safety property &phi. The unique feature of this algorithm is that it uses only test generation operations, and it refines and maintains a sound program abstraction as a consequence of failed test generation operations. Thus, each iteration of the algorithm is inexpensive, and can be implemented without any global may-alias information. In particular, we introduce a new refinement operator WP_αthat uses only the alias information obtained by symbolically executing a test to refine abstractions in a sound manner. We present a full exposition of the DASH algorithm and its theoretical properties. We have implemented DASH in a tool called Yogi that plugs into Microsoft’s Static Driver Verifier framework. We have used this framework to run YOGI on 69 Windows Vista drivers with 85 properties and find that YOGI scales much better than SLAM, the current engine driving Microsoft’s Static Driver Verifier.

PDF     IEEE©    

@article{beckman_etal_TSE10,
  author = {Beckman, Nels E. and Nori, Aditya V. and Rajamani, Sriram K. and Simmons, Robert J. and Tetali, SaiDeep and Thakur, Aditya V.},
  title = {Proofs from Tests},
  journal = {IEEE Transactions on Software Engineering (TSE)},
  year = {2010},
  volume = {36},
  number = {4},
  pages = {495--508},
  doi = {10.1109/TSE.2010.49},
  publisher = {IEEE}
}