. Dans-cette-thèse, etendre une approche formelle, basée sur les modèles du test de conformité, pour valider des propriétés de robustesse Le test de conformité introduit reprend les principes de génération de cas de test de l'outil TGV [JJ02] avec la relation de conformité ioco [Tre96]. Les modèles sous-jacents utilisés pour décrire les spécifications sont les systèmes de transitionsétiquetéesàtransitions´transitionsétiquetéestransitionsétiquetées`transitionsétiquetéesà entrées-sorties (IOLTS). Et, les modèles proposés pour décrire les propriétés (de robustesse) sont les automates de Rabin paramétrés. Pour réaliser la méthode formelle de génération de cas de test de robustesse

. Dans-notre-contexte, implantation n'est pas connu, et cela, nous interdit de tester directement les propriétés avec des techniques de model-checking. Nous proposons alors, (pour exécuter des tests) que les implantationsàimplantations`implantationsà tester soient du domaine des systèmes réactifs, et plus par-ticulì erement du domaine des systèmes de communications. Cette proposition, nous permet d'utiliser une méthode de test de type bo??tebo??te noire

. Le-graphe-de, spécification (déterministe, minimale et contenantéventuellement contenant´contenantéventuellement des blocages explicités avec l'action !?) et l'observateur. Le produit utilisé est un produit synchroné etendu permettant de garder, dans le graphe de test, tous les comportements de la spécification augmentés des comportements de la propriété (si ceux-ci ne sont pas déjà contenus dans les comportements de la spécification)

C. Pour-extraire-les-cas-de-test, sous-graphe contrôlable " de GT), nous effectuons une sélectionsélection`sélectionà partir de GT, cas de test contient au moins une séquence de L(GT), et par conséquent de L(O)

L. Clairement, L. Gt-),-une-séquence-distingué, . Gt, and . Réciproquement, aucune séquence de GT ne menant pasàpas`pasà une composante connexe avec unétatun´unétat de L GT ne peut apparteniràappartenir`appartenirà L(GT) Par conséquent, l'algorithme de sélection proposé, définit un graphe de test GT en utilisant le prédicat L2L (pour " leads to L " ) Le prédicat L2L dénote l'ensemble desétatsdes´desétats menantàmenant`menantà une composante fortement connexe comportant au moins unétatun´unétat de L. Puis, nous définissons un sous-ensemble de relation T GT , contrôlable, contenant au moins une séquence de L(O) Ce sous-ensemble contient, les transitions non contrôlables de T GT, et tout au plus une transition contrôlable (aléatoirement choisie) de T GT menantàmenant`menantà unétatun´unétat de L2L si plusieurs transitions existent

. [. Bibliographie, M. Van-aertryck, and M. Benveniste, CASTING : A formally based software test generation method, ICFEM'97, First IEEE International Conference on Formal Engineering Methods, 1997.

]. S. Abr87 and . Abramsky, Observational Equivalence as a Testing Equivalence, Theoretical Computer Science, vol.53, issue.3 22, 1987.

S. [. Austin, G. S. Breach, and . Sohi, Efficient Detection of All Pointer and Array Access Errors, SIGPLAN Conference on Programming Language Design and Implementation, pp.290-301, 1994.

]. L. Aer98 and . Van-aertryck, Une méthode et un outil pour l'aidè a la génération de jeux de tests de logiciels, Thèse de doctorat, 1998.

J. Arlat, J. Fabre, M. Rodríguez, and F. Salles, Dependability of COTS microkernel-based systems, IEEE Transactions on Computers, vol.51, issue.2, 2002.
DOI : 10.1109/12.980005

A. Arnould, B. Marre, and P. Legall, Génération automatique de testsàtests`testsà partir de spécifications de structures de données bornées, Technique et Science informatique, vol.19, issue.3 4, pp.297-321, 1999.

R. [. Aho, J. Sethi, and . Ullman, Compilers Principes, techniques and tools, 1986.

G. [. Budd and . Ajei, Program testing by specification mutation, Computer Languages, vol.10, issue.1, pp.63-73, 1985.
DOI : 10.1016/0096-0551(85)90011-6

]. S. Bak97 and . Baker, CORBA Distributed Objects -Using Orbix, 1997.

E. [. Bolognesi and . Brinksma, Introduction to the ISO Specification Language LO- TOS, ISDN, vol.14, issue.1, pp.25-29, 1988.

P. [. Budkowski and . Dembinski, An introduction to Estelle: A specification language for distributed systems, Computer Networks and ISDN Systems, vol.14, issue.1, 1988.
DOI : 10.1016/0169-7552(87)90084-5

. Bdd-+-91-]-g, A. Von-bochmann, R. Das, M. Dssouli, A. Dubuc et al., Fault models in testing, IFIP TC6/WG6.1 Fourth International Workshop on Protocol Test Systems IV table of contents, pp.17-300, 1991.

]. A. Belinfante, J. Feenstra, R. G. De-vries, J. Tretmans, N. Goga et al., Formal Test Automation: A Simple Experiment, IWTCS, pp.179-196, 1999.
DOI : 10.1007/978-0-387-35567-2_12

M. Bozga, J. Fernandez, and L. Ghirvu, State Space Reduction based on Live Varibles Analysis, SAS, 1999.

. Bfg-+-99b-]-m, J. Bozga, L. Fernandez, S. Ghirvu, J. Graf et al., IF : An Intermediate Representation for SDL and its Applications, Proceedings of SDL FORUM'99, pp.423-440, 1999.

J. [. Bozga, L. Fernandez, and . Ghirvu, Using Static Analysis to Improve Automatic Test Generation, Tools and Algorithms for Construction and Analysis of Systems, pp.235-250, 2000.
URL : https://hal.archives-ouvertes.fr/hal-00369360

G. Bernot, M. C. Gaudel, and B. Marre, Software testing based on formal specifications: a theory and a tool, Software Engineering Journal, vol.6, issue.6, pp.387-405, 1991.
DOI : 10.1049/sej.1991.0040

M. Bozga, S. Graf, and L. Mounier, IF-2.0: A Validation Environment for Component-Based Real-Time Systems, Proceedings of CAV'02, pp.343-348, 2001.
DOI : 10.1007/3-540-45657-0_26

URL : https://hal.archives-ouvertes.fr/hal-00357518

M. Bozga, S. Graf, L. Mounier, and I. Ober, IF tutorial. Presented at the 9th SPIN'04 Workshop on Model-Checking of Software, 2004.

M. Bozga, S. Graf, L. Mounier, and J. Sifakis, The Intermediate Representation IF. (Internal document, 1998.

M. Bozga, S. Graf, I. Ober, and J. Sifakis, Tools and applications : the if toolset, Proceedings of the 4th International School on Formal Methods for the Design of Computer, Communication and Software Systems : Real Time, p.4, 2004.
URL : https://hal.archives-ouvertes.fr/hal-00361307

]. M. Boz99 and . Bozga, Vérification symbolique pour les protocoles de communication, 1999.

A. [. Bochmann and . Petrenko, Protocol testing, Proceedings of the 1994 international symposium on Software testing and analysis , ISSTA '94, pp.109-124, 1994.
DOI : 10.1145/186258.187153

]. E. Bri88 and . Brinksma, A theory for the derivation of tests, Protocol Specification, Testing and Verification VIII, IFIP, pp.63-74, 1988.

T. [. Blough and . Torii, Fault-injection-based testing of fault-tolerant algorithms in message-passing parallel computers, Proceedings of IEEE 27th International Symposium on Fault Tolerant Computing, 1997.
DOI : 10.1109/FTCS.1997.614098

. Ed, J. Brinksma, and . Tretmans, Testing transition systems : Annotated bibliography

F. In, . Cassez, . Jard, and . Rozoy, Modeling and Verification of Parallel Processes, LNCS, vol.2067, issue.2, pp.196-205, 2001.

]. T. Bibliographie-[-bud80 and . Budd, Mutation analysis of program test data, 1980.

J. [. Cavalli, M. Favreau, and . Phalippou, Formal Methods for Conformance Testing : Results and Perspectives, Protocol Test Systems, pp.3-17, 1993.

]. T. Cho78 and . Chow, Testing software design modeled by finite-state machines, IEEE Trans. Software Eng, vol.4, issue.3 1, pp.178-187, 1978.

D. Clarke, T. Jéron, V. Rusu, and E. Zinovieva, Stg : A Tool for Generating Symbolic test programs and oracles from operational specifications, Joint 8th European Software Engineering Conference (ESEC) and 9th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE-9), 2001.

D. Clarke, T. Jéron, V. Rusu, and E. Zinovieva, STG: A Symbolic Test Generation Tool, Lecture Notes in Computer Science, vol.2280, issue.24, pp.470-482, 2002.
DOI : 10.1007/3-540-46002-0_34

. Cor and . Corba, Conformance test suite, tip -the competence centre for testing, interoperability and performance

[. Pachon, Une approche pour la génération automatique de tests de robustesse, 1ere MAnifestation des JEunes Chercheurs du domaine des STIC, MAJECSTIC'03, 2003.

[. Pachon, Une approche pour la génération automatique de tests de robustesse. ISDM : InfoComm Sciences for Decision Making : Permanent online journal of Information and Communication Technologies, pp.167-175, 2004.

Y. [. Csallner and . Smaragdakis, JCrasher : an automatic robustness tester for Java. Software -Practice and Experiece, 2000.
DOI : 10.1002/spe.602

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.135.5357

C. Courcoubetis, M. Y. Vardi, P. Wolper, and M. Yannakakis, Memory-efficient algorithms for the verification of temporal properties, Formal Methods in System Design, vol.64, issue.12, pp.275-288, 1992.
DOI : 10.1007/BF00121128

L. Bousquet, F. Ouabdesselam, J. Richier, and N. Zuanon, Lutess, Proceedings of the 21st international conference on Software engineering, ICSE '99, pp.267-276, 1999.
DOI : 10.1145/302405.302634

. A. Dgk-+-88-]-r, D. S. Demillo, K. N. Guindi, W. M. King, A. J. Mccracken et al., An extended overview of the Mothra software testing environment, Proceedings of the Second Workshop on Testing, Analysis, and Verification, pp.142-151, 1988.

S. Dawson, F. Jahanian, T. Mitton, and T. Tung, Testing of fault-tolerant and real-time distributed systems via protocol fault injection, Proceedings of Annual Symposium on Fault Tolerant Computing, pp.404-414, 1996.
DOI : 10.1109/FTCS.1996.534626

R. Dssouli, K. Karoui, A. Petrenko, and O. Rafiq, Towards testable communication software, IWPTS'95, pp.239-244, 1995.
DOI : 10.1007/978-0-387-34988-6_15

M. Delamaro, J. Maldonado, and A. Mathur, Integration testing using interface mutation, Proceedings of ISSRE '96: 7th International Symposium on Software Reliability Engineering, pp.112-121, 1996.
DOI : 10.1109/ISSRE.1996.558719

S. [. Deussen and . Tobies, Formal Test Purposes and the Validity of Test Cases, 22nd International Conference on Formal Techniques for Networked and Distributed Systems, 2002.
DOI : 10.1007/3-540-36135-9_8

A. Evans, R. France, K. Lano, B. Rumpe-]-e, A. Farchi et al., The UML as a Formal Modeling Notation ALDEBARAN : Un systéme de Vérification par Réduction de Processus Communicants Using a model-based test generator to test for standard conformance Using On-The-Fly Verification Techniques for the Generation of Test Suites An Experiment in Automatic Generation of Conformance Test Suites for Protocols with Verification Vechnology The chaining approach for software test data generation Property oriented test case generation A model-based approach for robustness testing Toward a theory of test data selection, The Unified Modeling Language , UML'98 Computer Aided Verification Formal Approaches to Software Testing : Third International Workshop on Formal Approaches to Testing of Software : FATES 2003 Testing of Communicating Systems : 17th IFIP TC6/WG 6.1 International Conference. 6.1 [Gau95] M-C. Gaudel. Testing can be formal, too. In TAPSOFT, pp.336-34889, 1975.

J. Grabowski, D. Hogrefe, I. Nussbaumer, and A. Spichiger, Test Case Specifications Based on mscs and ASN.1 SDL'95 with MSC in CASE Partial Order Simulation of SDL Specifications, Proceeding of 7th. SDL Forum SDL'95 with MSC in CASE, 1995.

D. [. Grabowski, D. Hogrefe, R. Toggweiler, and . Scheurer, Dealing with the Complexity of State Space Exploration Algorithms, Proceedings of the 6th. GI/ITG technical meeting on 'Formal Description Techniques for Distributed Systems, 1996.

]. A. Gil62 and . Gill, Introduction to the Theory of Finite State Machine, 1962.

]. V. Gou97 and . Gouranton, Dérivation d'analyseurs dynamiques et statiquesàstatiques`statiquesà partir de spécifications opérationnelles, 1997.

]. J. Gra94 and . Grabowski, Test Case Generation and Test Case Specification with Message Sequence Charts, Institue for Informatics and Applies Mathematics, 1994.

M. [. Ghosh, V. Schmid, and . Shah, Testing the robustness of Windows NT software, Proceedings Ninth International Symposium on Software Reliability Engineering (Cat. No.98TB100257), pp.231-235, 1998.
DOI : 10.1109/ISSRE.1998.730886

]. N. Hal98 and . Halbwachs, Synchronous programming of reactive systems, a tutorial and commented bibliography, Tenth International Conference on Computer-Aided Verification, CAV'98 jun 1998

N. Halbwachs, P. Caspi, P. Raymond, and D. Pilaud, The synchronous dataflow programming language LUSTRE, Proc. of IEEE, pp.1305-1320, 1991.

D. [. Helmy, S. K. Estrin, and . Gupta, Fault-Oriented Test Generation for Multicast Routing Protocol Design, Proceedings of the FIP TC6 WG6.1 Joint International Conference on Formal Description Techniques for Distributed Systems and Communication Protocols (FORTE XI) and Protocol Specification, Testing and Verification (PSTV XVIII), pp.93-109, 1998.
DOI : 10.1007/978-0-387-35394-4_6

]. Hel97 and . Helmy, Systematic Testing of Multicast Protocol Robustness, 1997.

]. G. Hol91 and . Holzmann, Design and Validation of Computer Protocols, 1991.

[. He and K. J. Turner, Protocol-Insptred Hardware Testing, Proc. Testing Communicating System XII, pp.131-147, 1999.
DOI : 10.1007/978-0-387-35567-2_9

URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.17.6509

J. [. Hopcroft and . Ullman, Introduction to Automata Theory, Languages, and Computation The classic text book on the formal theory of computation. 3, 1979.

[. Ieee, Standard Glossary of Software Engineering Terminology

[. Iso, Lotos ? A Formal Description Technique Based on the Temporal Ordering of Observational Behaviour. Draft International Standard 8807, International Organization for Standardization ? Information Processing Systems ? Open Systems Interconnection, 1987.

[. Iec, Estelle ? A Formal Description Technique based on an Extended State Transition Model, International Organization for Standardization ? Information Processing Systems ? Open Systems Interconnection, 1989.

[. Itu-t, Message Sequence Chart (MSC), ITU-T Recommendation Z.120, International Telecommunication Standards Sector SG 10, 1992.

]. E. Jah04 and . Jahier, The lurette v2 user guide, 2003.

[. J. H99-]-a, J. Pataricza, E. Hlavicka, and . Maehle, MAFALDA : Microkernel Assessment by Fault Injection and Design Aid, Lecture Notes in Computer Science, vol.1667

. Prague, République Tchèque) 15-17, pp.143-160, 1999.

T. [. Jard and . Jéron, TGV: theory, principles and algorithms, The Sixth World Conference on Integrated Design & Process Technology (IDPT'02), p.12, 2001.
DOI : 10.1007/s10009-004-0153-x

P. [. Jeron and . Morel, Test Generation Derived from Model-Checking, Computer Aided Verification'99, pp.108-122, 1999.
DOI : 10.1007/3-540-48683-6_12

. J. Jsd-+-97-]-p, J. Koopman-jr, C. P. Sung, D. P. Dingman, T. Siewiorek et al., Comparing operating systems using robustness benchmarks, Symposium on Reliable Distributed Systems, pp.72-79, 1997.

]. T. Jér91 and . Jéron, ContributionàContribution`Contributionà la validation des protocoles : test d'infinitude et vérification vérification`vérificationà la volée, .3, 7.2.3 [Jér02] T. Jéron. TGV : théorie, principes et algorithmes. Techniques et Sciences Informatiques , numéro spécial Test de Logiciels, 1991.

]. T. Jér04 and . Jéron, ContributionàContribution`Contributionà la génération automatique de tests pour les systèmes réactifs

. Habilitationàhabilitation, Habilitationà diriger les recherches, Université de Rennes 1, 2004.

J. [. Koopman and . Devale, Comparing the robustness of POSIX operating systems, Digest of Papers. Twenty-Ninth Annual International Symposium on Fault-Tolerant Computing (Cat. No.99CB36352), pp.30-37, 1999.
DOI : 10.1109/FTCS.1999.781031

P. [. Kropp, D. P. Koopman-jr, and . Siewiorek, Automated robustness testing of off-the-shelf software components, Digest of Papers. Twenty-Eighth Annual International Symposium on Fault-Tolerant Computing (Cat. No.98CB36224), pp.230-239, 1998.
DOI : 10.1109/FTCS.1998.689474

]. Z. Koh79 and . Kohavi, Switching and Finite Automata Theory, 1979.

]. B. Kor90 and . Korel, Automated Software Test Data Generation, IEEE Transactions on Software Engineering, vol.16, issue.8, pp.870-879, 1990.

A. [. Koufareva, N. Petrenko, and . Yevtushenko, Test Generation Driven by User-Defined Fault Models, 1999.
DOI : 10.1007/978-0-387-35567-2_14

[. Laprie, J. Arlat, A. Costes, A. Costes, Y. Crouzet et al., Guide de la sûreté de fonctionnement, 1996.

W. [. Lai and . Leung, Industrial and academic protocol testing: the gap and the means of convergence, Computer Networks and ISDN Systems, vol.27, issue.4, pp.537-547, 1995.
DOI : 10.1016/0169-7552(93)E0110-Z

M. [. Lee and . Yannakakis, Testing finite-state machines: state identification and verification, IEEE Transactions on Computers, vol.43, issue.3, pp.306-320, 1994.
DOI : 10.1109/12.272431

]. N. Lyn88 and . Lynch, A Model for Discrete Event Systems, Proc. of 22nd Conf. on Information Sciences and Systems, pp.29-38, 1988.

A. [. Marre and . Arnould, Test sequences generation from LUSTRE descriptions: GATEL, Proceedings ASE 2000. Fifteenth IEEE International Conference on Automated Software Engineering, pp.229-237, 2000.
DOI : 10.1109/ASE.2000.873667

. Mounier, Verification and test generation for the SSCOP protocol, Science of Computer Programming special issue on Formal Methods in Industry, vol.36, issue.1, pp.27-52, 2000.

]. C. Meu98 and . Meudec, Automatic Generation of Software Test Cases From Formal Specifications, 1998.

L. [. Miller, B. Fredriksen, and . So, An empirical study of the reliability of UNIX utilities, Communications of the ACM, vol.33, issue.12, pp.32-44, 1990.
DOI : 10.1145/96267.96279

]. B. Mkl-+-95, D. Miller, C. Koski, V. Pheow-lee, R. Maganty et al., Fuzz Revisited : A re-examination of the Reliability of UNIX Utilities and Services, 1995.

]. E. Moo56 and . Moore, Gedanken-experiments on sequential machines, Automata Studies, issue.1, pp.129-153, 1956.

]. P. Mor00 and . Morel, Une algorithmique efficace pour la génération automatique de tests de conformité, 2000.

K. [. Murnane and . Reed, On the effectiveness of mutation analysis as a black box testing technique, Proceedings 2001 Australian Software Engineering Conference, pp.12-20, 2001.
DOI : 10.1109/ASWEC.2001.948492

A. P. Mathur, M. L. Soffa, and N. Gupta, UNA Based Iterative Test Data Generation and its Evaluation, Proc of 14th IEEE International Conferanse on Automated Software Engineering (ASE'99), 1999.

A. P. Mathur, M. L. Soffa, and N. Gupta, Generating Test Data For Branch Coverage, Proc of 15th IEEE International Conferanse on Automated Software Engineering (ASE'00), 2000.

P. [. Mcmanis and . Varaiya, Suspension automata: A decidable class of hybrid automata, Proc. 6th International Computer Aided Verification Conference, pp.105-117, 1994.
DOI : 10.1007/3-540-58179-0_47

J. [. Mcgraw and . Viega, Why COTS software increases security risks, Proceedings of the First International Workshop on Testing Distribu ted ComponentBased Systems, 1999.

]. R. Nah94 and . Nahm, Confornace Testing Based on Formal Description Techniques and Message Sequence Charts, Institue for Informatics and Applies Mathematics, 1994.

[. Nicola and M. Henessy, Testing equivalences for processes, Theoretical Computer Science, vol.34, issue.1-2, pp.83-133, 1984.
DOI : 10.1016/0304-3975(84)90113-0

M. [. Naito and . Tsunoyama, Fault Detection for Sequential Machines by Transition Tours, Proceedings of the 11th IEEE Fault Tolerant Computing symposium, pp.238-243, 1981.

]. S. Nta98 and . Ntafos, On random and partition testing, International Symposium on Software Testing and Analysis archive Proceedings of the 1998 ACM SIGSOFT international symposium on Software testing and analysis table of contents Clearwater Beach, Florida , United States, pp.42-48, 1998.

I. C. Phillipspv01-]-i, J. Parissis, ]. Vassypy92, N. Petrenko, and . Yevtushenko, Experimental results from an automatic test case generator Fault Model-Driven Test Derivation from Finite State Models :Annotated Bibliography Modeling and Verification of Parallel Processes Refusal Testing Autofocus on constraint logic programming Testing concurrent reactive systems with constraint logic programming Model based testing with constraint logic programming : First results and challenges PROTOS. The Protos Project 1999 -2001 -PROTOS -Security Testing of Protocol Implementations Test des proprietes de sûreté Test suite generation for a given type of implementation errors Automata on infinite objects and church's problem, BIBLIOGRAPHIE [Org93] I. Organization. Open Systems Interconnection -OSI Conformance Testing Methodology and Framework, International Standards Organization. Open Systems Interconnection -OSI Conformance Testing Methodology and Framework, part 3 : TTCN Extensions,ISO/IEC JTC 1 DAM-1TOSEM) archive. 2.3 [Pet01] A. Petrenko 6.5.1 [Pha94] M. Phalippou. Relations d'Implantation et Hypothèses de Test sur les AutomatesàAutomates`Automatesà Entrées et Sorties Proc of (Constraint) Logic Programming and software Engineering Proc of 2nd workshop on Rule-Base Constraint Reasoning and Programming, Singapore, 2000. 2.3 [PL01] A. Pretschner and H. Lötzbeyer Proc. 2nd ICSE Intl. Workshop on Automated Program Analysis, Testing and Verification (WAPATV'01) Actes du colloque Modelisation de Systemes Reactifs (MSR'01) Proceedings of IFIP XII Int'l Conf. Protocol Specification, Testing, and Verification, 1992. 6.5.1 [PYH03] A. Petrenko, N. Yevtushenko, and J. L. Huo. Testing Transition Systems with Input and Output Testers Proceedings of the IFIP TC6/WG6.1 XV International Conference on Testing of Communicating Systems Proc. Regional AMS Conf. Series in Mathemamtics, pp.109-127, 1969.

S. Reid, Software fault injection : Inoculating programs against errors, by jeffrey voas and gary mcgraw, Software Testing, Verification & Reliability (STVR), 1998.
DOI : 10.1002/(sici)1099-1689(199903)9:1<75::aid-stvr174>3.0.co;2-t

T. [. Groz, A. Jéron, and . Kerbrat, Automated Test Generation from SDL specifications

I. R. Dssouli, G. Von-bochmann, and Y. Lahav, SDL'99 The Next Millenium, 9th SDL Forum, pp.135-152, 1999.

H. Vlad-rusu, T. Marchand, and . Jéron, Automatic verification and conformance testing for validating safety properties of reactive systems, Formal Methods 2005 (FM05), 2005.

V. Rusu, H. Marchand, V. Tschaen, T. Jéron, and B. Jeannet, From Safety Verification to Safety Testing, The 16th IFIP International Conference on Testing of Communicating Systems, 2004.
DOI : 10.1007/3-540-48320-9_6

URL : https://hal.archives-ouvertes.fr/inria-00517304

P. Raymond, D. Weber, X. Nicollin, and N. Halbwachs, Automatic testing of reactive systems, Proceedings 19th IEEE Real-Time Systems Symposium (Cat. No.98CB36279)
DOI : 10.1109/REAL.1998.739746

F. [. Salva and . Hacène, La qualité du test de conformité des systèmes temps-réel, 3ì eme Conférence Francophone de MOdélisation et SImulation -Conception, Analyse et Gestion des Systèmes industriels MOSIM'01, 2001.

. Sl-]-l, M. Schieferdecker, and . Li, Conformance testing of TINA ? in response to TINA - CAT RFP on TINA conformance testing framework

M. [. Schieferdecker, A. Li, and . Hoffmann, Conformance testing of TINA service components - The TTCN/CORBA gateway, Proccedings 5th International Conference Int. Service in Netwok, pp.393-404, 1998.
DOI : 10.1007/BFb0056984

]. J. Spi88 and . Spivey, The fuzz Manual, 1988.

]. R. Tar72 and . Tarjan, Depth-first search and linear graph algorithms, SIAM J. Computation, vol.2, issue.1, 1972.

A. [. Tretmans and . Belinfante, Automatic testing with formal methods, Proceedings of the 7th European International Conference on Software Testing Analysis and Review EuroSTAR'99, 1999.

E. [. Tretmans and . Brinksma, Côte de Resyste Automated Model Based, 2002.

. [. Thevenod-fosse, Unit and integration testing of lustre programs : a case study from the nuclear industry, 9th European Workshop on Dependable Computing (EWDC- 9), pp.121-124, 1998.

K. Timothy, M. Tsai, H. Hsueh, Z. Zhao, R. K. Kalbarczyk et al., Stress-Based and Path-Based Fault Injection, IEEE Trans. Computers, issue.11 4, pp.481183-1201, 1999.

]. F. Tip95 and . Tip, A survey of program slicing techniques, Journal of programming languages, vol.3, issue.83, pp.121-189, 1995.

]. J. Tre92 and . Tretmans, A Formal Approach to Conformance Testing, 1992.

]. M. Wei79 and . Weiser, Program slices : formal, psychological, and practical investigations of an automatic program abstraction method, 1979.

]. C. Wei95 and . Weissman, Security Penetration Testing Guidelines -chapitre 10, Handbook for the Computer Security Certification of Trusted Systems, 1995.

]. E. Wey79 and . Weyuker, Translatability and decidability questions for restricted classes of program schemas, SIAM Journal on Computing ISSN, vol.8, issue.4 23, pp.97-5397, 1979.

I. Sg and I. Iec, Information Retrievial, Transfer and Management for OSI ; Framework : Formal Methods in Conformance Testing Commitee Draft CD 13245-1, IUT-T proposed recommendation Z 500, 1996.

H. Zhu, P. A. Hall, and J. H. May, Software unit test coverage and adequacy, ACM Computing Surveys, vol.29, issue.4, pp.366-427, 1997.
DOI : 10.1145/267580.267590