Automated Office Software Test Method

Web application is widely used in many enterprises, while providing convenience, the web application brings lots of the security risk. Password is the first line of defense in the web application, the weak password problem has always been a short board in web application security protection system. The existing weak password detection method based on dynamic intercept is of high complexity and low degree of automation, which cannot meet the needs of information security supervision. In this paper, a weak password detection method based on the static analysis of webpage is proposed, which automatically extract the key information of login process by identify and analyze the form of the login page. Based on this method, a system prototype which can automatically detect the weak password for Web application and supports captcha recognize of common digital and letter combinations is realized. The system has a high degree of automation, and has good practicability and application prospect.

Detailed documentation and software tests are key factors for the success of a web application programming interface (API). When designing an API, especially in a design first approach, it is relevant to define a formal contract, known as API specification. This document must contain all necessary information regarding the API behavior. Thereby, the specification can be used to dynamically generate API components like documentation, client and server code, and software tests, reducing development and maintenance costs. This chapter presents a study of OpenAPI specification and its application on designing a new RESTful API for E-goi. It also presents a set of solutions for generating documentation, client code libraries, and test cases.

This study examined the importance of flexible automation in a simulated submarine track management task, aiming at balancing performance under both normal and failed conditions with two experiments. Experiment 1 shows that more “balanced” degree of automation (DOA) outperformed manual control and yielded better situation awareness (SA) and takeover performance than high DOA. Experiment 2 demonstrates that adjusting from excessively high to balanced DOA improved SA and takeover performance, while adjusting from excessively low to balanced DOA enhanced performance and reduced mental workload under the normal condition without impairing takeover performance. In summary, extreme DOAs disrupted the performance balance across the normal and failed conditions, while timely shifts to a balanced DOA restore it and balance overall performance. These findings underscore the importance of flexible automation for balancing performance under normal and failed conditions.

In military and aerospace applications test systems are expected to have a service life of more than 20 years. Over the life of the test system individual test instruments may become obsolete or may require upgrading due to changes in TPS requirements. Any changes to these legacy test instruments may cause problems with the deployed Test Program Set (TPS). Most test systems are designed with an instrument wrapper layer to isolate the TPS developer from the instrument driver Application Programming Interface (API). This wrapper layer will minimize the changes to the TPS due to changes in individual test instruments. This paper discusses some of the issues that may be encountered when either replacing obsolete instrumentation or upgrading instrumentation in a test system. Some of the issues are easy to discover and understand such as minor differences in the instrument specifications between the legacy test instrument and the replacement instrument. Other issues may not become apparent until attempting to use the replacement instrument within a test program or when upgrading system checkers. For example a test program may fail with a replacement instrument due to signal settling time. This problem can occur when the replacement instrument performs measurements faster than the legacy instrument. The problem can be fixed by either adding a wait in the test program or by adding a trigger delay in the test program or wrapper. The main focus of this paper will be on the problems related to the replacement of analog instruments. This paper will not discuss issues related to differences in the instrument driver API since this can usually be handled in the instrument wrapper layer. The problem discussions will look at classes of problems and site some specific examples in each class. Guidelines will be presented for solving or avoiding the problem. Some of this information may also be useful in the design of future test systems and TPSs to avoid similar issues.

Testing can be conducted with either manually or automatically. It is very difficult to perform repetitive manual tests for functional correctness, especially in large-size business applications based on client-server architecture such as trading systems in stock exchanges and banking applications, because many different test scenarios are needed to test such systems. Conducting these test scenarios manually and on a human basis within a certain time is a time consuming, erroneous and tedious process. For this reason, end to end automation (test case generation, execution and error reporting) in repetitive manual tests will increase efficiency in software testing. In this context, an approach that generates automatically test scenarios for applications based on the client-server architecture communicating with each other using Application Programming Interface (API) messages is proposed in this study.In this paper, the message-driven test case generation framework is proposed for client-server architecture systems which are communicated with each other by using API messages. Basically proposed framework automatically generates test cases, which are extracted with reverse engineering mechanism from network packets between client-server communications over networks. The studying is motivated due to the fact that there is a lack of test automation framework in a specific domain: the system based on client-server architecture which uses API messages for the communication, such as financial applications, trading systems. Our approach will ensure the reuse of test scenarios, and will ensure 100% automation in the test process from the automatic generation of the test scenarios to the execution by future work.

ELECTROMAGNETIC COMPATIBILITY OF MARINE COMPUTER SYSTEMS

The still young RoboCT technology is based on two cooperating robots, each carrying one of the imaging X-ray components, the radiation source and detector. Their freedom of movement and flexibility make it possible to examine large and complex-shaped objects even in otherwise hard-to-reach areas using 2D radioscopic imaging and even 3D computed tomography (CT). Over the past few years, RoboCT has been developed as a laboratory testing system to product maturity. However, production integrated inspection poses further requirements for a testing system. In addition to robust and secure teach-in of the components to be tested, a high degree of automation is generally necessary for conducting test procedures, especially for the evaluation and assessment of image data, due to cycle time requirements. One of the most advanced software systems for automated defect detection (ADR) is ISAR, which has been used for over 20 years for 2D testing of wheels and structural cast components. A further development of RoboCT for integrated production quality testing is the seamless integration of ISAR into the RoboCT system solution, which even allows the execution of escalating test procedures, i.e., an automated execution of 3D CT scans when there is an unclear result at the corresponding position in the 2D transmission image that needs to be verified.

While the diversity in social media platforms is a primary motivation for people to participate in different social media services and utilize them in appropriately different manners, the heterogeneity in formats and platforms can also encumber information gathering and investigation, especially for a researcher who might have to resort to time consuming and rudimentary cut-and-paste tasks. In this demonstration we introduce the Social and Crowdsourced Activity Extraction System (SOCRATES), a tool developed to help researchers utilize a single, modularly architected, open-sourced, and standardized platform for collecting social media data from application programming interfaces (APIs), analyzing it with a variety of methodologies, and exploring it via multiple visualizations. SOCRATES has been developed as a highly usable social-computational platform that allows researchers from any background to track, capture, visualize, explore, and analyze large or small amounts of social media data and annotations.

Efficient and effective broadband wireless technologies are required to support the foreseeable need to process and exchange large amounts of data. In this Special Issue of the Springer Journal of Signal Processing Systems various disciplines of such efficiency and effectiveness in the context of Software-Defined Radio (SDR) technologies are discussed. At first, a selection of articles focuses on “spectral efficiency”. Since frequency spectrum is known to be scarce and limited, it becomes a resource of increasing value whose utilization must be handled with care. The rapidly growing demand for higher data throughputs in wireless communication does not allow inefficient use of spectrum anymore. Two promising approaches to tackle the “spectral efficiency” issue are Cognitive Radio (CR) and Dynamic Spectrum Access (DSA). A Cognitive Radio is capable of learning and adapting to its transmission environment. Taking e.g. spectrum sensing results into account, the decisions for accessing the scarce frequency spectrum in the most flexible and effective manner are made. CRs are typically based on SDR technology. Thus, the first set of articles puts emphasis on topics in the areas of Cognitive Radio, Cognitive Radio Networks, and Spectrum Sensing. The second selection of articles addresses the problems of “energy efficiency” and “implementation efficiency”. Especially in wireless communications these types of efficiencies are highly important to increase battery time of modern SDRbased platforms. The architectures of such SDRs are typically based on heterogeneous multi-processor hardware platforms hosting General Purpose Processors (GPP), Digital Signal Processors (DSP), Field Programmable Gate Arrays (FPGA) and sometimes even more specific processing elements. Each type of processor has a specific advantage in one or the other performance criterion like energy consumption, flexibility, processing time, throughput, waveform portability, components reusability etc. Whenever a new waveform shall be implemented on an SDR, the system designer has to take the decision for the best possible trade-off between all of these, partly conflicting, criteria under the given circumstances. For instance, the portability of waveform components can be improved by fulfilling the constraints of the Software Communications Architecture (SCA) specification and by using common Application Programming Interfaces (API). Thus, the second set of articles puts particular emphasis on topics in the areas of SDR and SCA Implementations.

Future wireless networks (LTE and beyond) will experience a continuous growth regarding the number of network elements with increasingly complex interrelations between the configuration of multiple network elements (NEs). A related trend is the seamless integration of multiple radio technologies into a single heterogeneous wireless network. Both developments increase network management complexity and require new management concepts with a very high degree of automation such as Self-Organizing Network (SON) concepts, which are currently discussed in the network operator (NGMN), research, and standardization (3GPP) communities. SON functions have to be coordinated and supervised in an automated way in order to enable a stable system operation with tight control over the system behavior by the network operator together with a high degree of automation. Based on a detailed analysis of the requirements for the coordination, a policy-based approach to realize the coordination-related decision making based on the network configuration and SON function context is presented. Results for two use cases (fully automatic hardware to site mapping and coverage & capacity optimization) are presented to show the applicability of the developed approach to diverse SON use cases.

Design and Verification of an Integrated Multi-task Testing Platform for FCV Powertrain System

For location based services (LBS), especially when it comes to safety-critical applications, a both accurate and high-integrity position solution is essential. As part of the Ghosthunter project, in which wrong-way drivers are to be detected reliably on German highways, the accuracy of the positioning solution must be better than one lane width, i.e. less than 3 m, but the integrity of the position must also be guaranteed in order to avoid false alarms. So far, only Android smartphones have been examined in terms of the two performance parameters (accuracy and integrity) as part of this project. Since Android dominates the market for mobile devices with a share of just under 70% and iOS with a share of just under 30%, and since new application areas for precise and reliable positioning such as augmented reality (AR) or virtual reality (VR) and other safety critical applications are constantly growing, this work will examine the internal positioning solutions of both operating systems. Different iOS devices (iPhones, iPads) and some Android smartphones (including Xiaomi Mi 8) are available as test platforms. In direct comparison, the Android Location application programming interface (API) has also offered the option of directly acquiring the GNSS raw data and implementing one’s own positioning algorithms accordingly since 2016 (Banville and Diggelen, 2016), but the focus here will be on the various internal positioning modes to compare them with the internal positioning modes of iOS. Currently iOS does not offer the option of accessing the global navigation satellite system (GNSS) raw data. The Core Location API only provides positions and estimated accuracy. For iOS applications that require an exact knowledge of the position performance, this data must be used. To what extent the positions from the Core Location API fulfill integrity requirements for various applications has not been investigated yet in depth. For automotive applications, a measurement vehicle with geodetic GNSS equipment, namely Trimble NetR9 GNSS receiver with Trimble Zephyr geodetic GNSS antenna is available, which provides highly precise reference trajectories even in challenging environments. This will be used as ground-truth (GT) to analyze the positioning performance of the two operating systems under investigation. By comparing the trajectories in the kinematic case or the positions in the static case with the respective reference solution, the positioning performances (deviations, gaps, etc.) can be examined. By comparing the internally estimated accuracy and the true deviation from the reference solutions, statements can be made about the integrity of the positioning solution. On the one hand, a general statement shall be made, and on the other hand, different scenarios (shading by vegetation, urban environment, perfect open sky conditions) shall be considered separately.

Web Application Programming Interfaces (APIs) allow systems to interact with each other over the network. Modern Web APIs often adhere to the REST architectural style, being referred to as RESTful Web APIs. RESTful Web APIs are decomposed into multiple resources (e.g., a video in the YouTube API) that clients can manipulate through HTTP interactions. Testing Web APIs is critical but challenging due to the difficulty to assess the correctness of API responses, i.e., the oracle problem. Metamorphic testing alleviates the oracle problem by exploiting relations (so-called metamorphic relations) among multiple executions of the program under test. In this paper, we present a metamorphic testing approach for the detection of faults in RESTful Web APIs. We first propose six abstract relations that capture the shape of many of the metamorphic relations found in RESTful Web APIs, we call these Metamorphic Relation Output Patterns (MROPs). Each MROP can then be instantiated into one or more concrete metamorphic relations. The approach was evaluated using both automatically seeded and real faults in six subject Web APIs. Among other results, we identified 60 metamorphic relations (instances of the proposed MROPs) in the Web APIs of Spotify and YouTube. Each metamorphic relation was implemented using both random and manual test data, running over 4.7K automated tests. As a result, 11 issues were detected (3 in Spotify and 8 in YouTube), 10 of them confirmed by the API developers or reproduced by other users, supporting the effectiveness of the approach.

Abstract. Understanding the flow of water in natural watercourses has become increasingly important as climate change increases the incidence of extreme rainfall events which cause flooding. Vegetation in rivers and streams reduce water conveyance and natural vegetation plays a critical role in flood events which needs to be understood more fully. A funded project at Loughborough University is therefore examining the influence of vegetation upon water flow, requiring measurement of both the 3-D water surface and flow velocities. Experimental work therefore requires the measurement of water surface morphology and velocity (i.e. speed and direction) in a controlled laboratory environment using a flume but also needs to be adaptable to work in a real river. Measuring the 3D topographic characteristics and velocity field of a flowing water surface is difficult and the purpose of this paper is to describe recent experimental work to achieve this. After reviewing past work in this area, the use of close range digital photogrammetry for capturing both the 3D water surface and surface velocity is described. The selected approach uses either two or three synchronised digital SLR cameras in combination with PhotoModeler for data processing, a commercial close range photogrammetric package. One critical aspect is the selection and distribution of appropriate floating marker points, which are critical if automated and appropriate measurement methods are to be used. Two distinct targeting approaches are available: either large and distinct specific floating markers or some fine material capable of providing appropriate texture. Initial work described in this paper uses specific marker points, which also provide the potential measuring surface velocity. The paper demonstrates that a high degree of measurement and marking automation is possible in a flume environment, where lighting influences can be highly controlled. When applied to a real river it is apparent that only lower degrees of automation are practicable. The study has demonstrated that although some automation is possible for point measurement, point matching needs to be manually guided in a natural environment where lighting cannot be controlled.

The manufacturing and test of avionics products for military and commercial aircraft presents a unique set of requirements and challenges. Historically, the development and deployment of production test systems for avionics products such as aircraft data acquisition and recording systems, navigation and communication products, and aircraft network systems have been addressed on a product specific basis - resulting in a variety of test platforms and solutions with little test system commonality and technology. Additionally, this lack of test system commonality and the requirement to maintain legacy products with long product life cycles results in increased maintenance and logistics costs for manufacturing and support test. Consequently, the adoption of a common test platform can offer producers of avionics products lower test costs, improved test resource utilization, and the flexibility to support both new and legacy products. This paper reviews the requirements and the implementation of a common test platform and environment that offers a high level of efficiency, supports the implementation of routine test processes, offers reusability, and allows the consolidation of test resources to facilitate the collection of reliability data and test results.