CDN (Diego) Damasceno

selected publications

1. Quality Guidelines for Research Artifacts in Model-Driven Engineering

   Damasceno, Carlos Diego Nascimento, and Strüber, Daniel

   In MoDELS'21: ACM/IEEE 24th International Conference on Model Driven Engineering Languages and Systems, Virtual Event, Japan, 10-15 October, 2021 2021

   arXiv PDF Supp Slides Website
2. Learning by sampling: learning behavioral family models from software product lines

   Damasceno, Carlos Diego Nascimento, Mousavi, Mohammad Reza, and Simao, Adenilso da Silva

   Empirical Software Engineering 2021

   DOI Abs Bib PDF Slides Website

   Family-based behavioral analysis operates on a single specification artifact, referred to as family model, annotated with feature constraints to express behavioral variability in terms of conditional states and transitions. Family-based behavioral modeling paves the way for efficient model-based analysis of software product lines. Family-based behavioral model learning incorporates feature model analysis and model learning principles to efficiently unify product models into a family model and integrate the behavior of various products into a behavioral family model. Albeit reasonably effective, the exhaustive analysis of product lines is often infeasible due to the potentially exponential number of valid configurations. In this paper, we first present a family-based behavioral model learning techniques, called FFSMDiff. Subsequently, we report on our experience on learning family models by employing product sampling. Using 105 products of six product lines expressed in terms of Mealy machines, we evaluate the precision of family models learned from products selected from different settings of the T-wise product sampling criterion. We show that product sampling can lead to models as precise as those learned by exhaustive analysis and hence, reduce the costs for family model learning.

   @article{damasceno_learning_2021,
     selected = true,
     title = {Learning by sampling: learning behavioral family models from software product lines},
     volume = {26},
     issn = {1573-7616},
     url = {https://doi.org/10.1007/s10664-020-09912-w},
     doi = {10.1007/s10664-020-09912-w},
     language = {en},
     number = {1},
     urldate = {2021-01-15},
     journal = {Empirical Software Engineering},
     author = {Damasceno, Carlos Diego Nascimento and Mousavi, Mohammad Reza and Simao, Adenilso da Silva},
     month = jan,
     year = {2021},
     pages = {4},
     pdf = {damascenoetal2020_emse.pdf},
     slides = {EMSE2021_slides.pptx},
     website = {https://github.com/damascenodiego/learningFFSM/tree/master/experiments/emse2020},
     bibtex_show = true
   }

3. Evaluating Test Characteristics and Effectiveness of FSM-Based Testing Methods on RBAC Systems

   Damasceno, Carlos Diego Nascimento, Masiero, Paulo Cesar, and Simao, Adenilso

   In Proceedings of the 30th Brazilian Symposium on Software Engineering 2016

   DOI Abs Bib PDF Slides Website

   Access control mechanisms demand rigorous software testing approaches, otherwise they can end up with security flaws. Finite state machines (FSM) have been used for testing Role-Based Access Control (RBAC) mechanisms and complete, but significantly large, test suites can be obtained. Experimental studies have shown that recent FSM testing methods can reduce the overall test suite length for random FSMs. However, since the similarity between random FSMs and these specifying RBAC mechanisms is unclear, these outcomes cannot be necessarily generalized to RBAC. In this paper, we compare the characteristics and effectiveness of test suites generated by traditional and recent FSM testing methods for RBAC policies specified as FSM models. The methods W, HSI and SPY were applied on RBAC policies specified as FSMs and the test suites obtained were evaluated considering test characteristics (number of resets, average test case length, and test suite length) and effectiveness on the RBAC fault domain. Our results corroborate some outcomes of previous investigations in which test suites presented different characteristics. On average, the SPY method generated test suites with 32% less resets, average test case length 78% greater than W and HSI, and overall length 46% lower. There were no differences among FSM testing methods for RBAC regarding effectiveness. However, the SPY method significantly reduced the overall test suite length and the number of resets.

   @inproceedings{10.1145/2973839.2973849,
     selected = true,
     author = {Damasceno, Carlos Diego Nascimento and Masiero, Paulo Cesar and Simao, Adenilso},
     title = {Evaluating Test Characteristics and Effectiveness of FSM-Based Testing Methods on RBAC Systems},
     year = {2016},
     isbn = {9781450342018},
     publisher = {Association for Computing Machinery},
     address = {New York, NY, USA},
     url = {https://doi.org/10.1145/2973839.2973849},
     doi = {10.1145/2973839.2973849},
     booktitle = {Proceedings of the 30th Brazilian Symposium on Software Engineering},
     pages = {83–92},
     numpages = {10},
     keywords = {Finite state machine, Experiments, Role-Based Access Control (RBAC), Conformance Testing},
     location = {Maring\'{a}, Brazil},
     series = {SBES '16},
     pdf = {damascenoetal_sbes2016.pdf},
     slides = {damascenoetal_sbes2016_slide.pdf},
     website = {https://github.com/damascenodiego/rbac-bt},
     bibtex_show = true
   }