一句话：用有限状态机模型对挪威国家电子健康门户的隐私与授权概念开展轻量级基于模型的测试。
本文对挪威国家电子健康门户（月访问量超百万）的隐私与授权概念进行轻量级基于模型的测试。作者用有限状态机为隐私级别与授权类别的创建和更新建模，覆盖正负行为；以边和边对覆盖为准则导出抽象用户场景，再人工细化为具体测试。共得到85个抽象测试、80个具体测试、550余次迭代；全自动执行约1小时，人工单个约5分钟，提速超40倍。MBT将工作重心移至模型设计，使场景导出系统化，并帮助理解新概念。
We present lightweight model-based testing (MBT) of privacy and authorization concepts of national portal for electronic health services in Norway (which has over a million of visits per month). We have developed test models for creating and updating privacy levels and authorization categories using finite state machine. Our models emphasize not only positive but also negative behavioral aspects of the system. Using edge and edge-pair coverage as an acceptance criteria we identify and systematically derive abstract tests (high level user scenario) from models. Abstract tests are further refined and transformed into concrete tests with detailed steps and data. Although derivation of abstract tests and their transformation into concrete ones are manual, execution of concrete tests and generation of test report are automated. In total, we extracted 85 abstract test cases which resulted in 80 concrete test cases with over 550 iterations. Automated execution of all tests takes about 1 hour, while manual execution of one takes about 5 minutes (over 40 times speedup). MBT contributed to shift the focus of our intellectual work effort into model design rather than test case design, thus making derivation of test scenarios systematic and straight forward. In addition, applying MBT augmented and extended our traditional quality assurance techniques by facilitating better comprehension of new privacy and authorization concepts. Graphical models served as a useful aid in learning these concepts for newcomers.
DOI 原文 ·
@inproceedings{paperbot5983,
title = {Lightweight MBT testing for national e-health portal in Norway},
author = {Davrondzhon Gafurov and Margrete Sunde Grovan and Arne Erik Hurum},
booktitle = {ASE},
year = {2020},
doi = {10.1145/3324884.3421843}
}