Bachelor Thesis BCLR-2023-69

BibliographyFu, Yang: The application of fuzzing in testing different versions and variants of cars.
University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology, Bachelor Thesis No. 69 (2023).
65 pages, english.
Abstract

The automotive industry is currently undergoing a rapid transformation, necessitating a more flexible and efficient approach for software development. Software Product Line Engineering (SPLE) has emerged as a potent strategy in this context, offering unparalleled advantages in terms of feature reusability. This research addresses the critical need for safety and security in multi-product line systems, proposing the integration of fuzz testing as a robust quality assurance mechanism to identify and mitigate potential vulnerabilities. Given the dynamic nature of product lines, with frequent modifications to features, fuzz testing presents challenges in terms of time and resource consumption. To address this, we apply an approach that incorporates Continuous Integration and Continuous Deployment (CI/CD) systems, focusing testing resources on the most recently altered code segments. This optimization not only expedites the development process but also ensures that the integrity and quality of the system remain uncompromised. We have integrated two projects as SPL with fuzz tests and CI system and used pull requests to mimic the feature modification process to evaluate if our method has employed testing exclusively on these recent updates. Additionally, we leverage coverage reports generated during fuzz testing to establish a comprehensive mapping between test cases and features, enhancing the transparency of the testing progress and facilitating more effective testing across the entire software product line system. In conclusion, our adoption of a CI system has optimized the fuzzing process in SPL system, saved the time on running redundant tests for unchanged code and detected the bugs like memory leaks and undefined behavior. Additionally, using coverage reports to provide a measurement for feature testing coverage.

Department(s)University of Stuttgart, Institute of Software Technology, Empirical Software Engineering
Superviser(s)Wagner, Prof. Stefan; Agh, Dr. Halimeh
Entry dateFebruary 23, 2024
New Report   New Article   New Monograph   Computer Science