A Strategy for Effective Integration of Verification and Testing Techniques

摘要

This paper presents an approach to integrating four techniques for testing, analysis and verification into one overall strategy for incrementally raising confidence in software in a cost effective way. The paper summarizes the strengths, weaknesses, and operational characteristics of dynamic testing, static analysis, symbolic execution and formal verification. It uses a detailed example as an illustration. Next the integrated strategy is presented. Finally, there is a discussion of how this strategy can be used to raise confidence in software requirements and design specifications as well as in code, thereby making it applicable throughout the entire software lifecycle. (Author)