Presentation
Live Region Mutation Testing for Commercial Cyber-Physical System Development Tool Chain
DescriptionMathWorks Simulink, a commercial CPS development tool chain, is widely used as an industry standard for designing and analyzing system behavior and generating embedded code for deployment. However, bugs in Simulink can cause unexpected behaviors during model compilation, making their elimination critical. Existing methods face two key challenges: generating equivalent models with varied data flows (data flow equivalence) and creating diverse block types to comprehensively test the compiler (mutation diversity). To address these, we propose \textbf{LION}, a differential testing approach. LION ensures data flow equivalence by inserting "store-revert" block pairs between existing blocks and tackles mutation diversity by employing Markov Chain Monte Carlo (MCMC) sampling to generate diverse new blocks. Differential testing is then used to identify bugs. Experiments show LION outperforms state-of-the-art approaches like SLforge, SLEMI, and COMBAT, detecting 6-10 additional compiler bugs in two weeks. Over two months, LION uncovered and reported 16 valid bugs in the widely used stable version of Simulink.
Event Type
Research Manuscript
TimeTuesday, June 242:30pm - 2:45pm PDT
Location3008, Level 3
SYS2: Design of Cyber-Physical Systems and IoT
Similar Presentations