Find failures in the development process faster and reduce development costs

Bahnsteig mit digitaler Anzeige
© Philipp Plum / Fraunhofer FOKUS

Testing is one of the most important means for the system quality assurance. The early application of tailored techniques for test design and test execution helps in detecting failures early and in keeping engineering costs at a minimal level. The scientists at the business unit Quality Engineering (SQC) have more than 20 years of experience in the field of testing techniques. Their work focuses on model-based automation of test execution and test design as well as the improvement of the test management. They apply model-based activities for development and testing together with methods like, e.g., for product line engineering or for security testing for the common criteria certification.

The overall goal is the optimization of development processes and the improvement of the system quality. For trying and improving these techniques, the scientists at SQC develop advanced prototypes and test beds. They are also involved in several standardization committees. For instance, in the European Telecommunications Standards Institute (ETSI) they are involved in the development of the test design and implementation language TTCN-3 and the MBT standard. In order to increase the support for test modeling using the Unified Modeling Language (UML), they initiated and organized the standardization of the UML testing profile. For our clients and partners, the scientists at SQC offer support for the introduction of advanced testing techniques and their integration in existing development processes. Furthermore, they run trainings and workshops about the experiences with and development of testing techniques and tools.

The business unit Quality Engineering can also draw on wide ranging experience in system design, verification and in software and hardware architecture.

Offers

Security Testing

  • Performing security tests
  • Supporting the integration of security testing into your testing process
  • Security risk analysis as the basis for an efficient, risk-based security testing process
  • Supply chain security
  • Continuous security testing in CI/CD pipelines

Fuzzino

Tool for performing fuzzing with the following focus areas:

  • General security testing (including fuzzing heuristics)
  • Grammar-based (protocol) fuzzing
  • Vulnerability-oriented fuzzing 

 

Test automation

  • Introduction of test automation across the entire lifecycle, including test automation architectures and integration with related processes
  • Automated setup of test environments

Training

  • Training courses on security testing for traditional software systems and AI-based systems, taking European regulations into account

Common Criteria Certification

Support for Common Criteria certifications for software products in cooperation with the BSI. Common Criteria is an internationally recognised set of test criteria for evaluating IT security products, IT products and systems.

 

Robustness of AI Models

  • Scalable, quantitative assessment of the robustness of AI models
  • Use of established and modern methods: estimation using CLEVER score, analysis of adversarial subspaces and adversarial attacks
  • Model hardening

Data Quality for AI

  • Evaluation of data streams based on standardized quality characteristics
  • AI-supported identification of outliers and drift in data streams
  • Repair of data streams
  • Focus on resource-efficient techniques in near real-time edge computing

Standardization

Active participation in national and international standardization bodies in developing and advancing standards and shaping technical specifications. This includes contributing to and leading working groups in relevant SDOs and standardization initiatives such as ETSI, AIOTI, ECSO, DIN, and ISO/IEC.