Madhav Institute of Technology and Science, Gwalior

Deemed to be University
(Declared under Distinct Category by Ministry of Education, Government of India)
NAAC ACCREDITED WITH A++ GRADE

Centre For Internet Of Things(IoT)

A
Lab Report
On
SOFTWARE ENGINEERING (2230423)
In fulfilment of the requirement for the award of the degree

SUBMITTED BY
Vaibhav Shivhare
(0901IO221074)
IV Semester, 2nd Year
Internet of Things (IoT)

SUBMITTED TO
Ms.SURBHI GUPTA
Dr Dhananjay Bisen

Session: 2023-24
 Experiment - 1
Introduction
Requirements identification is the first step of any software development project. Until
the requirements of a client have been clearly identified, and verified, no other task
(design, coding, testing) could begin. Usually business analysts having domain
knowledge on the subject matter discuss with clients and decide what features are to be
implemented.
In this experiment we will learn how to identify functional and non-functional
requirements from a given problem statement. Functional and non-functional
requirements are the primary components of a Software Requirements Specification
Objectives;

After completing this experiment you will be able to:

• Identify ambiguities, inconsistencies and incompleteness from a requirements
specification
• Identify and state functional requirements
• Identify and state non-functional requirements

Requirements
Sommerville defines "requirement" [1] as a specification of what should be implemented.
Requirements specify how the target system should behave. It specifies what to do, but
not how to do. Requirements engineering refers to the process of understanding what a
customer expects from the system to be developed, and to document them in a standard
and easily readable and understandable format. This documentation will serve as
reference for the subsequent design, implementation and verification of the system.
It is necessary and important that before we start planning, design and implementation of
the software system for our client, we are clear about it's requirements. If we don't have a
clear vision of what is to be developed and what all features are expected, there would be
serious problems, and customer dissatisfaction as well.
Characteristics of Requirements
Requirements gathered for any new system to be developed should exhibit the following
three properties:
• Unambiguity: There should not be any ambiguity what a system to be developed
should do. For example, consider you are developing a web application for your
client.
 • Consistency: To illustrate this, consider the automation of a nuclear plant.
Suppose one of the clients say that it the radiation level inside the plant exceeds
R1, all reactors should be shut down.
• Completeness: A particular requirement for a system should specify what the
system should do and also what it should not. For example, consider a software to
be developed for ATM. If a customer enters an amount greater than the maximum
permissible withdrawal amount, the ATM should display an error message, and it
should not dispense any cash.
• Modifiability
• Feasibility
• Testability
Categorization of Requirements
Based on the target audience or subject matter, requirements can be classified into
different types, as stated below:
• User requirements: They are written in natural language so that both customers
can verify their requirements have been correctly identified
• System requirements: They are written involving technical terms and/or
specifications, and are meant for the development or testing teams
Requirements can be classified into two groups based on what they describe:
• Functional requirements (FRs): These describe the functionality of a system --
how a system should react to a particular set of inputs and what should be the
corresponding output.
• Non-functional requirements (NFRs): They are not directly related what
functionalities are expected from the system. However, NFRs could typically
define how the system should behave under certain situations. For example, a
NFR could say that the system should work with 128MB RAM. Under such
condition, a NFR could be more critical than a FR.
Non-functional requirements could be further classified into different types like:
▪ Product requirements: For example, a specification that the web application
should use only plain HTML, and no frames
▪ Performance requirements: For example, the system should remain available
24x7
▪ Organizational requirements: The development process should comply to SEI
CMM level 4
Identifying Functional Requirements
Given a problem statement, the functional requirements could be identified by focusing
on the following points:
• Identify the high level functional requirements simply from the conceptual
understanding of the problem. For example, a Library Management System, apart
from anything else, should be able to issue and return books.
• Identify the cases where an end user gets some meaningful work done by using
the system. For example, in a digital library a user might use the "Search Book"
functionality to obtain information about the books of his interest.
• If we consider the system as a black box, there would be some inputs to it, and
some output in return. This black box defines the functionalities of the system.
For example, to search for a book, user gives title of the book as input and get the
book details and location as the output.
• Any high level requirement identified could have different sub-requirements. For
example, "Issue Book" module could behave differently for different class of
users, or for a particular user who has issued the book thrice consecutively.
Difference Between Functional Requirements and Non Functional Requirements:

Functional Requirements Non Functional Requirements

A functional requirement defines a system or A non-functional requirement defines the

its component. quality attribute of a software system.

Non-functional requirement is specified by

Functional requirement is specified by User. technical peoples e.g. Architect, Technical
leaders and software developers.

It is mandatory. It is not mandatory.

It is captured in use case. It is captured as a quality attribute.

Defined at a component level. Applied to a system as a whole.

 Experiment - 2
Introduction
After gathering the entire requirements specific to software project usually we need to
think about different solution strategy for the project. Expert business analysts are
analyzing their benefits and as well as their shortcomings by means of cost, time and
resources require to develop it.
In this experiment, we will learn how to estimate cost, effort and duration for a software
project, and then select one solution approach which will be found suitable to fulfill the
organizational goal.

Objectives
After completing this experiment you will be able to:
• Categorize projects using COCOMO, and estimate effort and development time
required for a project
• Estimate the program complexity and effort required to recreate it using
Halstead's metrics
Project Estimation Techniques
A software project is not just about writing a few hundred lines of source code to achieve
a particular objective. The scope of a software project is comparatively quite large, and
such a project could take several years to complete. However, the phrase "quite large"
could only give some (possibly vague) qualitative information. As in any other science
and engineering discipline, one would be interested to measure how complex a project is.
One of the major activities of the project planning phase, therefore, is to estimate various
project parameters in order to take proper decisions. Some important project parameters
that are estimated include:
• Project size: What would be the size of the code written say, in number of lines,
files, modules?
• Cost: How much would it cost to develop a software? A software may be just
pieces of code, but one has to pay to the managers, developers, and other project
personnel.
• Duration: How long would it be before the software is delivered to the clients?
• Effort: How much effort from the team members would be required to create the
software?
In this experiment we will focus on two methods for estimating project metrics:
COCOMO and Halstead's method.
COCOMO
COCOMO (Constructive Cost Model) was proposed by Boehm. According to him, there
could be three categories of software projects: organic, semidetached, and embedded. The
classification is done considering the characteristics of the software, the development
team and environment. These product classes typically correspond to application, utility
and system programs, respectively. Data processing programs could be considered as
application programs. Compilers, linkers, are examples of utility programs. Operating
systems, real-time system programs are examples of system programs. One could easily
apprehend that it would take much more time and effort to develop an OS than an
attendance management system.
The concept of organic, semidetached, and embedded systems are described below.
• Organic: A development project is said to be of organic type, if
• The project deals with developing a well understood application
• The development team is small
• The team members have prior experience in working with similar types of
projects
• Semidetached: A development project can be categorized as semidetached type,
if
• The team consists of some experienced as well as inexperienced staff
• Team members may have some experience on the type of system to be
developed
• Embedded: Embedded type of development project are those, which
• Aims to develop a software strongly related to machine hardware
• Team size is usually large
Boehm suggested that estimation of project parameters should be done through three
stages: Basic COCOMO, Intermediate COCOMO, and Complete COCOMO.
Basic COCOMO Model
The basic COCOMO model helps to obtain a rough estimate of the project parameters. It
estimates effort and time required for development in the following way:
Effort = a * (KDSI)b PMTdev = 2.5 * (Effort)c Monthswhere
• KDSI is the estimated size of the software expressed in Kilo Delivered
Source Instructions
• a, b, c are constants determined by the category of software project
 • Effort denotes the total effort required for the software development,
expressed in person months (PMs)
• Tdev denotes the estimated time required to develop the software
(expressed in months)
The value of the constants a, b, c are given below:

Software project a b c

Organic 2.4 1.05 0.38

Semi-detached 3.0 1.12 0.35

Embedded 3.6 1.20 0.32

Intermediate COCOMO Model

The basic COCOMO model considers that effort and development time depends only on
the size of the software. However, in real life there are many other project parameters that
influence the development process. The intermediate COCOMO take those other factors
into consideration by defining a set of 15 cost drivers (multipliers) as shown in the table
below [i]. Thus, any project that makes use of modern programming practices would have
lower estimates in terms of effort and cost. Each of the 15 such attributes can be rated on
a six-point scale ranging from "very low" to "extra high" in their relative order of
importance. Each attribute has an effort multiplier fixed as per the rating. The product of
effort multipliers of all the 15 attributes gives the Effort Adjustment Factor (EAF).

Cost drivers for INtermediate COCOMO

(Source: http://en.wikipedia.org/wiki/COCOMO)

Ratings

Very Very Extra

Cost Drivers Low Low Nominal High High High

Product attributes

Required software
0.75 0.88 1.00 1.15 1.40
reliability

Size of application
0.94 1.00 1.08 1.16
database
Cost drivers for INtermediate COCOMO
(Source: http://en.wikipedia.org/wiki/COCOMO)

Ratings

Very Very Extra

Cost Drivers Low Low Nominal High High High

Complexity of the product 0.70 0.85 1.00 1.15 1.30 1.65

Hardware attributes

Run-time performance
1.00 1.11 1.30 1.66
constraints

Memory constraints 1.00 1.06 1.21 1.56

Volatility of the virtual

0.87 1.00 1.15 1.30
machine environment

Required turnabout time 0.87 1.00 1.07 1.15

Personnel attributes

Analyst capability 1.46 1.19 1.00 0.86 0.71

Applications experience 1.29 1.13 1.00 0.91 0.82

Software engineer
1.42 1.17 1.00 0.86 0.70
capability

Virtual machine
1.21 1.10 1.00 0.90
experience

Programming language
1.14 1.07 1.00 0.95
experience

Project attributes

Application of software
1.24 1.10 1.00 0.91 0.82
engineering methods

Use of software tools 1.24 1.10 1.00 0.91 0.83

Required development
1.23 1.08 1.00 1.04 1.10
schedule
EAF is used to refine the estimates obtained by basic COCOMO as
follows:Effort|corrected = Effort * EAFTdev|corrected = 2.5 * (Effort| corrected) c

Complete COCOMO Model

Both the basic and intermediate COCOMO models consider a software to be a single
homogeneous entity -- an assumption, which is rarely true. In fact, many real life
applications are made up of several smaller sub-systems. (One might not even develop all
the sub-systems -- just use the available services). The complete COCOMO model takes
these factors into account to provide a far more accurate estimate of project metrics.
To illustrate this, consider a very popular distributed application: the ticket booking
system of the Indian Railways. There are computerized ticket counters in most of the
railway stations of our country. Tickets can be booked / cancelled from any such counter.
Reservations for future tickets, cancellation of reserved tickets could also be performed.
On a high level, the ticket booking system has three main components:
• Database
• Graphical User Interface (GUI)
• Networking facilities
Among these, development of the GUI is considered as an organic project type; the
database module could be considered as a semi-detached software. The networking
module can be considered as an embedded software. To obtain a realistic cost, one should
estimate the costs for each component separately, and then add it up.
Advantages of COCOMO
COCOMO is a simple model, and should help one to understand the concept of project
metrics estimation.
Drawbacks of COCOMO
COCOMO uses KDSI, which is not a proper measure of a program's size. Indeed,
estimating the size of a software is a difficult task, and any slight miscalculation could
cause a large deviation in subsequent project estimates. Moreover, COCOMO was
proposed in 1981 keeping the waterfall model of project life cycle in mind [2]. It fails to
address other popular approaches like prototype, incremental, spiral, agile models.
Moreover, in present day a software project may not necessarily consist of coding of
every bit of functionality. Rather, existing software components are often used and glued
together towards the development of a new software. COCOMO is not suitable in such
cases.
COCOMO II was proposed later in 2000 to many of address these issues.
Halstead's Complexity Metrics
Halstead took a linguistic approach to determine the complexity of a program. According
to him, a computer program consists of a collection of different operands and operators.
The definition of operands and operators could, however, vary from one person to
another and one programming language to other. Operands are usually the
implementation variables or constants -- something upon which an operation could be
performed. Operators are those symbols that affects the value of operands. Halstead's
metrics are computed based on the operators and operands used in a computer program.
Any given program has the following four parameters:
• n1: Number of unique operators used in the program
• n2: Number of unique operands used in the program
• N1: Total number of operators used in the program
• N2: Total number of operands used in the program
Using the above parameters one compute the following metrics:
• Program Length: N = N1 + N2
• Program Vocabulary: n = n1 + n2
• Volume: V = N * lg n
• Difficulty: D = (n1 * N2) / (2 * n2)
• Effort: E = D * V
• Time to Implement: T = E / 18 (in seconds) [vi]
The program volume V is the minimum number of bits needed to encode the program. It
represents the size of the program while taking into account the programming language.
The difficulty metric indicates how difficult a program is to write or understand.
Effort denotes the "mental effort" required to develop the software, or to recreate the
same in another programming language [iv].
 Experiment - 3
Objectives
After completing this experiment you will be able to:
• How to identify different actors and use cases from a given problem statement
• How to associate use cases with different types of relationships
• How to draw a use-case diagram

Use case diagrams

Use case diagrams belong to the category of behavioural diagram of UML diagrams. Use case
diagrams aim to present a graphical overview of the functionality provided by the system. It
consists of a set of actions (referred to as use cases) that the concerned system can perform, one
or more actors, and dependencies among them.
Actor
An actor can be defined as [1] an object or set of objects, external to the system, which interacts
with the system to get some meaningful work done. Actors could be human, devices, or even
other systems.
For example, consider the case where a customer withdraws cash from an ATM. Here, customer
is a human actor.
Actors can be classified as below [2], [i] :
Primary actor: They are principal users of the system, who fulfill their goal by availing some
service from the system. For example, a customer uses an ATM to withdraw cash when he needs
it. A customer is the primary actor here.
Supporting actor: They render some kind of service to the system. "Bank representatives", who
replenishes the stock of cash, is such an example. It may be noted that replenishing stock of cash
in an ATM is not the prime functionality of an ATM.
In a use case diagram primary actors are usually drawn on the top left side of the diagram.
Use Case
A use case is simply [1] a functionality provided by a system.
Continuing with the example of the ATM, withdraw cash is a functionality that the ATM provides.
Therefore, this is a use case. Other possible use cases includes, check balance, change PIN, and
so on.
Use cases include both successful and unsuccessful scenarios of user interactions with the system.
For example, authentication of a customer by the ATM would fail if he enters wrong PIN. In such
case, an error message is displayed on the screen of the ATM.
Subject
Subject is simply [iii] the system under consideration. Use cases apply to a subject. For example,
an ATM is a subject, having multiple use cases, and multiple actors interact with it. However, one
should be careful of external systems interacting with the subject as actors.
Graphical Representation
An actor is represented by a stick figure and name of the actor is written below it. A use case is
depicted by an ellipse and name of the use case is written inside it. The subject is shown by
drawing a rectangle. Label for the system could be put inside it. Use cases are drawn inside the
rectangle, and actors are drawn outside the rectangle, as shown in figure - 01

.
Figure - 01: A use case diagram for a book store
Association between Actors and Use Cases
A use case is triggered by an actor. Actors and use cases are connected through binary
associations indicating that the two communicates through message passing.
An actor must be associated with at least one use case. Similarly, a given use case must be
associated with at least one actor. Association among the actors are usually not shown. However,
one can depict the class hierarchy among actors.
Use Case Relationships
Three types of relationships exist among use cases:
• Include relationship
• Extend relationship
• Use case generalization
Include Relationship
Include relationships are used to depict common behaviour that are shared by multiple use cases.
This could be considered analogous to writing functions in a program in order to avoid repetition
of writing the same code. Such a function would be called from different points within the
program.
Example
For example, consider an email application. A user can send a new mail, reply to an email he has
received, or forward an email. However, in each of these three cases, the user must be logged in
to perform those actions. Thus, we could have a login use case, which is included by compose
mail, reply, and forward email use cases. The relationship is shown in figure - 02.
 Figure - 02: Include relationship between use cases
Notation
Include relationship is depicted by a dashed arrow with a «include» stereotype from the including
use case to the included use case.
Extend Relationship
Use case extensions are used used to depict any variation to an existing use case. They are used to
the specify the changes required when any assumption made by the existing use case becomes
false [iv, v].
Example
Let's consider an online bookstore. The system allows an authenticated user to buy selected
book(s). While the order is being placed, the system also allows to specify any special shipping
instructions [vii], for example, call the customer before delivery. This Shipping Instructions step
is optional, and not a part of the main Place Order use case. Figure - 03 depicts such relationship.

Figure - 03: Extend relationship between use cases

Notation
Extend relationship is depicted by a dashed arrow with a «extend» stereotype from the extending
use case to the extended use case.
Generalization Relationship
Generalization relationship are used to represent the inheritance between use cases. A derived use
case specializes some functionality it has already inherited from the base use case.
Example
To illustrate this, consider a graphical application that allows users to draw polygons. We could
have a use case draw polygon. Now, rectangle is a particular instance of polygon having four
sides at right angles to each other. So, the use case draw rectangle inherits the properties of the
use case draw polygon and overrides it's drawing method. This is an example of generalization
relationship. Similarly, a generalization relationship exists between draw rectangle and draw
square use cases. The relationship has been illustrated in figure - 04.

Figure - 04: Generalization relationship among use cases

Notation
Generalization relationship is depicted by a solid arrow from the specialized (derived) use case to
the more generalized (base) use case.
Identifying Actors
Given a problem statement, the actors could be identified by asking the following questions [2]:
• Who gets most of the benefits from the system? (The answer would lead to the
identification of the primary actor)
• Who keeps the system working? (This will help to identify a list of potential users)
• What other software / hardware does the system interact with?
• Any interface (interaction) between the concerned system and any other system?
Identifying Use cases
Once the primary and secondary actors have been identified, we have to find out their goals i.e.
what are the functionality they can obtain from the system. Any use case name should start with a
verb like, "Check balance".
Guidelines for drawing Use Case diagrams
Following general guidelines could be kept in mind while trying to draw a use case diagram [1]:
• Determine the system boundary
• Ensure that individual actors have well-defined purpose
• Use cases identified should let some meaningful work done by the actors
• Associate the actors and use cases -- there shouldn't be any actor or use case floating
without any connection
• Use include relationship to encapsulate common behaviour among use cases , if any

EXERCISE 1
Draw a use case diagram for the following problem
Consider a library, where a member can perform two operations: issue book and return it. A book
is issued to a member only after verifying his credentials. Draw a use case diagram for the
problem.
Learning Objectives:
• Identify the actors and use cases
• Associate the use cases with the actors by drawing a simple use case diagram
Limitations: While extending a use case, extension points could not be defined through this
interface
 .

Results & Discussions

The "Issue Book" use case includes the step of verifying the member's credentials before issuing
the book. This verification process ensures that only authorized members can borrow books from
the library.
The "Return Book" use case allows a member to return a book they previously borrowed. This
action helps maintain the inventory of books in the library and ensures that books are available
for other members to borrow.
Overall, this use case diagram provides a clear overview of the interactions between the actors
and the system for the library management scenario. It identifies the essential actions that the
member can perform within the library system and helps in understanding the flow of activities in
the library management process.

EXERCISE 2
Draw a use case diagram for the following problem
Consider your neighbouring travel agent from whom you can purchase flight tickets. To book a
ticket you need to provide details about your journey i.e. on which date and at what time you
would like to travel. You also need to provide your address. The agency has recently been
modernized. So you can pay either by cash or by card. You can also cancel a booked ticket later if
you decide to change your plan. In that case you need to book a new ticket again. Your agent also
allows you to book a hotel along with flight ticket. While canceling a flight ticket you can also
cancel hotel booking. Appropriate refund as per policy is made in case of cancellation.
Learning Objectives:
• Identify the use cases from a given non-trivial problem statement
• Identify the primary and secondary actors for a system
• Use to generalization of use cases and «include» stereotypes to prevent redundancy in the
coding phase
Limitations: While extending a use case, extension points could not be defined through this
interface.
Results & Discussions
While booking a flight or hotel customer has to provide his permanent address. So, the two use
concerned cases includes the use case 'Get address'.
Payment could be made either by cash or card. So, each of those use cases extends the 'Make
payment' use case. Customer makes the payment while travel agent receives it. Therefore both
customer and travel agent are associated with the use case 'Make payment'.
 Experiment 4

E-R modeling from the problem statements.

Entity Relationship Model

Entity-Relationship model is used to represent a logical design of a database to be created. In ER
model, real world objects (or concepts) are abstracted as entities, and different possible
associations among them are modeled as relationships.
For example, student and school -- they are two entities. Students study in school. So, these two
entities are associated with a relationship "Studies in".
As another example, consider a system where some job runs every night, which updates the
database. Here, job and database could be two entities. They are associated with the relationship
"Updates".

Entity Set and Relationship Set

An entity set is a collection of all similar entities. For example, "Student" is an entity set that
abstracts all students. Ram, John are specific entities belonging to this set. Similarly, a
"Relationship" set is a set of similar relationships.

Attributes of Entity
Attributes are the characteristics describing any entity belonging to an entity set. Any entity in a
set can be described by zero or more attributes.
For example, any student has got a name, age, an address. At any given time a student can study
only at one school. In the school he would have a roll number, and of course a grade in which he
studies. These data are the attributes of the entity set Student.
Keys
One or more attribute(s) of an entity set can be used to define the following keys:

Super key: One or more attributes, which when taken together, helps to uniquely identify an
entity in an entity set.
For example, a school can have any number of students. However, if we know grade and roll
number, then we can uniquely identify a student in that school.

Candidate key: It is a minimal subset of a super key. In other words, a super key might contain
extraneous attributes, which do not help in identifying an object uniquely. When such attributes
are removed, the key formed so is called a candidate key.

Primary key: A database might have more than one candidate key. Any candidate key chosen for
a particular implementation of the database is called a primary key.

Prime attribute: Any attribute taking part in a super key.

Weak Entity: An entity set is said to be weak if it is dependent upon another entity set. A weak
entity can't be uniquely identified only by it's attributes. In other words, it doesn't have a super
key.
For example, consider a company that allows employees to have travel allowance for their
immediate family.
So, here we have two entity sets: employee and family, related by "Can claim for". However,
family doesn't have a super key. Existence of a family is entirely dependent on the concerned
employee. So, it is meaningful only with reference to employee.

Entity Generalization and Specialization

Once we have identified the entity sets, we might find some similarities among them. For
example, multiple person interacts with a banking system. Most of them are customers, and rest
employees or other service providers. Here, customers, employees are persons, but with certain
specializations. Or in other way, person is the generalized form of customer and employee entity
sets.
ER model uses the "ISA" hierarchy to depict specialization (and thus, generalization).

Mapping Cardinalities
One of the main tasks of ER modeling is to associate different entity sets. Let's consider two
entity sets E1 and E2 associated by a relationship set R. Based on the number of entities in E1 and
E2 are associated with, we can have the following four type of mappings:

One to one: An entity in E1 is related to at most a single entity in E2, and vice versa.

One to many: An entity in E1 could be related to zero or more entities in E2. Any entity in E2
could be related to at most a single entity in E1.

Many to one: Zero or more number of entities in E1 could be associated to a single entity in E2.
However, an entity in E2 could be related to at most one entity in E1.

Many to many: Any number of entities could be related to any number of entities in E2,
including zero, and vice versa.

ER Diagram
From a given problem statement we identify the possible entity sets, their attributes, and
relationships among different entity sets. Once we have these information, we represent them
pictorially, called an entity-relationship (ER) diagram.
Graphical Notations for ER Diagram

Importance of ER modelling

Given a problem statement, the first step is to identify the entities, attributes and relationships. We
represent them using an ER diagram. Using this ER diagram, table structures are created, along
with required constraints. Finally, these tables are normalized in order to remove redundancy and
maintain data integrity. Thus, to have data stored efficiently, the ER diagram is to be drawn as
much detailed and accurate as possible.
EXERCISE 1
From the following problem statement identify the possible entity sets, their attributes, and
relationships.

SE VLabs Inc. is a young company with a few departments spread across the country. As of now,
the company has a strength of 200+ employees.

Each employee works in a department. While joining, a person has to provide a lot of personal
and professional details including name, address, phone #, mail address, date of birth, and so on.
Once all these information are furnished, a unique ID is generated for each employee. He is then
assigned a department in which he will work.

There are around ten departments in the company. Unfortunately, two departments were given
same names. However, departments too have ID's, which are unique.

Note: Try to use the features of the interface provided to capture as much details as possible.

Results & Discussions

Entity Set: Employee , Attributes: Name, Address, Phone number, Email address, Date of
birth, Employee ID (generated)
Relationships: Works in Department, Entity Set: Department
Attributes: Name, Department ID (unique), Relationships:, Employees work in
Department
Relationship: Works in Department
Description: Associates an employee with the department they work in.
Cardinality: Many-to-One (Many employees can work in one department, but one
employee can only work in one department)
With this breakdown, we capture the essential entity sets, their attributes, and the
relationship between them as described in the problem statement. These details provide a
foundation for designing a database schema or entity-relationship diagram to represent
the data model for SE VLabs Inc.
EXERCISE 2
Draw an ER diagram for the following problem:
The latest cab services agency in the city has approached you to develop a Cab Management
System for them. They would be using this software to efficiently manage and track different cabs
that are operated by them.
Cabs are solely owned by the agency. They hire people in contracts to drive the cabs. A cab can
be uniquely identified by, like any other vehicle in the country, its license plate. A few different
categories of cars are available from different manufacturers. And a few of them are AC cars.
Cab drivers are given a identification card while joining. The ID card contains his name,
permanent address, phone number, date of joining, duration of contract. Also, an unique
alphanumeric code is assigned to each number.
The agency provides service from 8 AM to 8 PM. Whenever any passenger books a cab, an
available cab is allocated for him. The booking receipt given to the passenger contains the car #,
source and destination places. Once he reaches the destination, he signs on a duplicate copy of the
receipt and gives back to the driver. Driver must submit this duplicate copy signed by the
passenger at the agency for confirmation.
To evaluate their quality of service, the agency also wants a (optional) customer satisfaction
survey, where passengers can provide feedback about their journey through the agency's website.
Note: This exercise is adapted from [ii]
Results & Discussions
his ER diagram effectively captures the entities involved in the Cab Management System
and their relationships. It provides a clear visualization of how cabs, drivers, passengers,
bookings, and feedback are interconnected within the system.The relationships defined in
the diagram reflect the interactions and dependencies between the entities.Additionally,
the optional entity for customer satisfaction survey allows the agency to gather feedback
from passengers.
Overall, this ER diagram serves as a valuable blueprint for designing and implementing
the Cab Management System, facilitating efficient management and tracking of cabs
operated by the agency.
 Experiment 5

Modeling UML Class diagrams and Sequence diagrams

Objectives
⚫ After completing this experiment you will be able to:
⚫ Graphically represent a class, and associations among different classes
⚫ Identify the logical sequence of activities undergoing in a system, and represent them
pictorially

Structural and Behavioral Aspects:

UML diagrams can be broadly categorized into structural and behavioral diagrams.
Structural diagrams focus on the static aspects of a system, depicting its elements and
how they relate to each other. Behavioral diagrams, on the other hand, illustrate the
dynamic aspects, such as interactions and behaviors among the system's components.
Class Diagram:

Elements in Class Diagram:

Class: Represents a blueprint for creating objects. It includes attributes (properties) and
methods (behaviors).
Relationships: Describes how classes are related to each other. This includes
associations, generalization (inheritance), realization, dependencies, and
aggregation/composition.
Sequence Diagram
A sequence diagram is a behavioral diagram that illustrates the interactions between
objects over time. It depicts the flow of messages between objects in chronological order,
showing how objects collaborate to achieve a specific behavior.
Elements in Sequence Diagram:
Object: Represents an instance of a class participating in the interaction. Each
object has its own lifeline.
Lifeline Bar: Represents the lifespan of an object during the interaction. It shows
when the object is active and when it is not.

Messages: Represent the communication between objects. Messages can be

synchronous (denoted by solid arrows), asynchronous (dashed arrows), or other
types like create, destroy, reply, etc.
Object
1. In a sequence diagram, an object represents an instance of a class or entity that
participates in the interaction.
2. Objects are depicted as rectangles placed along the top of the diagram, each labeled
with the name of the instance they represent.
3. Each object has its own lifeline, which is represented by a vertical dashed line
extending downward from the object.
Lifeline Bar
1. A lifeline bar represents the lifespan of an object during the interaction.
2. It is a vertical dashed line that extends from the top of the diagram down to the bottom,
aligned with the object it represents.
3. The lifeline bar shows the time duration during which the object is active and involved
in the interaction.
4. It visually depicts when the object is processing messages and when it is idle.

Messages:
1. Messages represent communication or interactions between objects in the sequence
diagram.
2. Messages are depicted as arrows between lifeline bars, indicating the flow of
communication.
3. There are different types of messages, including:
1. Synchronous Message: Denoted by a solid arrow, indicating that the sender
waits for a response from the receiver before proceeding.
 2. Asynchronous Message: Denoted by a dashed arrow, indicating that the sender
does not wait for a response and continues its execution immediately.
3. Return Message: Represents the response to a previous message, indicating the
flow of control back to the sender.
4. Create Message: Represents the creation of a new object.
5. Destroy Message: Represents the destruction of an object.

EXERCISE 1

A web browser is a software that helps us access a resource (web page) available on the
World Wide Web and identified by a URL. A web browser consists of different sub-
components, which can be primarily categorized into browser rendering engine,
and browser control.

The rendering engine is responsible for displaying a requested page in the web browser.
The rendering engine itself is quite a complex piece of software, which knows how to
display a web page based on the HTML elements present in the page, and CSS rules
defined (if any). Today browsers are not only limited to displaying text and images, but
can provide access to audio and video components also.

The web browser control, too, consists of several sub-components

including navigation, window control, event handlers, page display. The navigation
control aids users to request for web pages (resources) by specifying a URL, navigate to
other resources through internal and external hyperlinks, move across pages visited
earlier. Event handlers are responsible to identify the kind of activity that user is trying to
do, and perform it. For example, when a user clicks on a hyperlink, event handlers
identify the URL of the target resource, and delegates loading of the resource to other
components. A resource that has been retrieved by the web browser is then displayed in
its page display area. Window control, in association with the rendering engine, helps in
controlling various aspects of page display like changing font-size, resolution, and so on,
apart from resizing or closing the window.

Represent the above problem with a class diagram. In particular

• Represent the individual classes

• Represent how browser rendering engine, and browser control are related to web
browser class
• Add methods that let a web browser retrieve a resource from the web server, and
convince yourself

Learning Objectives:

1. Problem formulation in an object-oriented manner by identifying relevant classes

 2. Modeling behaviour of classes
3. Associating different classes in the system to get meaningful work done

Limitations: All possible features of a class diagram could not be implemented here.
Also, auto-generation of code from the class diagram is not possible here.

Results & Discussions

The existence of a "RenderingEngine" is not dependent on the "WebBrowser". In fact,

several web browsers could use the same rendering engine. However, browser control
operations are specific for a web browser.
EXERCISE 2

How would you represent the three-way handshaking mechanism of TCP with a sequence
diagram?

Learning Objectives:

• Identify objects playing a role in the concerned events

• Arrange events in tme sequence of their execution
• Use of synchronous message and response

Limitations: Only simple sequence diagrams could be represented in this experiment.

One can't depict alternate flows or loops. Lifeline activation / deactivation / destroy
couldn't be represented here.

Results & Discussions

Note that in real life there will be a time delay between a message sent at one end and
received at the other end. Such time delay couldn't be represented here.

EXERCISE 3

The Web traditionally worked in a client-server model, where a web browser would send
a HTTP request to the web server, and the server would send back a HTTP response to
the browser. The HTTP request actually encapsulates the contents of the requested
resource in some format. In cases where access to a resource is restricted or say, it
requires a user authentication, the HTTP request encapsulates the login credentials and
sends to the server. The server then checks with the database server if the credentials are
correct. The status of verification is then send back to the browser.

In the recent years there has been a shift from the traditional way of how HTTP works. A
new technique has been proposed, popularly know as AJAX, that lets asynchronous
communication between a browser and web server. In traditional model, the browser used
to send a HTTP request, and then wait for a HTTP response. The next HTTP request was
usually sent after getting response from the server.

AJAX, however, lets a web browser to send multiple HTTP requests one after another,
without waiting until a response is received. This approach is found to be very helpful in
cases when contents of only a portion of the web page has to be updated, rather than
refreshing the entire page. Web 2.0 uses AJAX in many different cases for better user
experience.

From the above problem statement

1. How would you represent the traditional Web with a sequence diagram (in both
cases when user verification is required or not)
2. What changes would appear in your sequence diagram if you are trying model a
scenario where AJAX is being used?

Learning Objectives:

• Arranging activities in a logical sequence of their execution

• Use of asynchronous messages

Limitations: Only simple sequence diagrams could be represented in this experiment.

One can't depict alternate flows or loops. Lifeline activation / deactivation / destroy
couldn't be represented here.
Results & Discussions

The figure above shows how "traditional" Web typically works. "Reource1" and
"Resource2" represent two resources, which could be accessed only after an user has
authenticated himself. As seen in the picture, the "Web Browser" sends a synchronous
"HTTP Request" to the server for transferring any information from the web browser to
the web server. The "Web Server" in turn sends back any information by encapsulating it
in a "HTTP Response" object. The point to note here is that the message sent by web
browser is synchronous. The web browser has to wait for a response, and update it's
display when it arrives. Only after then the web browser could send out a request for any
other resource.

The scenario changes when AJAX is being used. The corresponding sequence diagram is
shown in the figure below. (The user login sequence has not been shown here.)

Figure: Web with AJAX

Here, the "Web Browser" sends out asynchronous "XmlHttpRequest" to the "Web
Server". As such, it doesn't have to wait for a response to arrive from the web server.
Instead say, as a result of the user clicking on two buttons, the web browser can simply
send out two "XmlHttpRequests". It updates the display as and when a response arrives
from the web server.
 Experiment 6

Modeling Data Flow diagrams

Data Flow Diagram

DFD provides the functional overview of a system. The graphical representation easily
overcomes any gap between ’user and system analyst’ and ‘analyst and system designer’
in understanding a system. Starting from an overview of the system it explores detailed
design of a system through a hierarchy. DFD shows the external entities from which data
flows into the process and also the other flows of data within a system. It also includes
the transformations of data flow by the process and the data stores to read or write a data.

Graphical notations for Data Flow Diagram

Explanation of Symbols used in DFD

Process: Processes are represented by circle. The name of the process is written into the
circle. The name of the process is usually given in such a way that represents the
functionality of the process. More detailed functionalities can be shown in the next Level
if it is required. Usually it is better to keep the number of processes less than 7 [i]. If we
see that the number of processes becomes more than 7 then we should combine some the
processes to a single one to reduce the number of processes and further decompose it to
the next level [2] .
External entity: External entities are only appear in context diagram[2]. External entities
are represented by a rectangle and the name of the external entity is written into the
shape. These send data to be processed and again receive the processed data.
Data store: Data stares are represented by a left-right open rectangle. Name of the data
store is written in between two horizontal lines of the open rectangle. Data stores are used
as repositories from which data can be flown in or flown out to or from a process.
Data flow: Data flows are shown as a directed edge between two components of a Data
Flow Diagram. Data can flow from external entity to process, data store to process, in
between two processes and vice-versa.
Context diagram and leveling DFD
We start with a broad overview of a system represented in level 0 diagram. It is known as
context diagram of the system. The entire system is shown as single process and also the
interactions of external entities with the system are represented in context diagram.
Further we split the process in next levels into several numbers of processes to represent
the detailed functionalities performed by the system. Data stores may appear in higher
level DFDs.
Numbering of processes : If process ‘p’ in context diagram is split into 3 processes ‘p1’,
‘p2’and ‘p3’ in next level then these are labeled as 0.1, 0.2 and 0.3 in level 1 respectively.
Let the process ‘p3’ is again split into three processes ‘p31’, ‘p32’ and ‘p33’ in level 2, so,
these are labeled as 0.3.1, 0.3.2 and 0.3.3 respectively and so on.
Balancing DFD: The data that flow into the process and the data that flow out to the
process need to be match when the process is split into in the next level[2]. This is known
as balancing a DFD.
See simulation[ii] and case study[iii] of the experiment to understand data flow diagram
in more real context.
Note :
1.External entities only appear in context diagram[2] i.e, only at level 0.
2.Keep number of processes at each level less than 7[i].
3.Data flow is not possible in between two external entities and in between two
data stores[i].
4.Data cannot flow from an External entity to a data store and vice-versa[i].

EXERCISE 1

Draw a context-level DFD to depict the typical user authentication process used by any
system. An user gives two inputs -- user name and password.
Results & Discussions

The context-level DFD (Data Flow Diagram) for the user authentication process depicts
the high-level overview of how a system typically handles user authentication using a
username and password input. Here's the breakdown of the diagram:
External Entity: Represents the user who interacts with the system by providing their
username and password for authentication.
Process: Represents the system's authentication process, which verifies the user's
credentials against stored data.
Data Flow:
Username Input: Represents the flow of the username input provided by the user.
Password Input: Represents the flow of the password input provided by the user.
Authentication Result: Represents the outcome of the authentication process, indicating
whether the user's credentials are valid or invalid.
Overall, the context-level DFD effectively captures the essence of the user authentication
process, providing a foundational understanding of how systems authenticate users based
on their provided username and password inputs.
EXERCISE 2

DFD for a Social Networking site

The Absolute Beginners Inc. is planning to launch a revolutionary social networking site,
EyeCopy. You have been entrusted with designing a DFD for the proposed application.
In particular, you have been asked to show the following scenarios:

• User registration
• User login
• Profile update

Draw a Level 1 DFD to depict the above data flow and the corresponding processes.
Should there be any data store in the DFD?
Results & Discussions

The Level 1 DFD effectively illustrates the main processes and data flows involved in user
registration, user login, and profile update scenarios for the EyeCopy social networking
site. It provides a high-level overview of how users interact with the system to perform
these essential functions.
User-Centric Focus: The DFD emphasizes the user's actions (registration, login, profile
update) as primary processes, highlighting the user's interaction with the system.
Data Flow Clarity: Each process is clearly defined with corresponding data flows,
indicating the exchange of information between the user and the system.
Data Store Usage: The inclusion of the User Profile Data Store ensures that user profile
information is securely stored and accessible for both registration and profile update
processes.
Scalability: The DFD can be further expanded to include additional processes and data
flows as needed, providing scalability in depicting the functionality of the social
networking site.
Overall, the Level 1 DFD serves as a valuable tool for understanding the core
functionality of the EyeCopy social networking site, facilitating communication and
collaboration during the development process.
 Experiment 7

Create flow chart for an algorithm using Raptor

Raptor has 6 types of symbols, each of which represents a unique kind of instruction.
They are – Assignment, Call, Input, Output, Selection and Loop symbols.
The following image shows these symbols-

A Raptor program consists of connected symbols that represent actions to be executed.

The arrows that connect the symbols determine the order in which the actions are
performed.
The execution of a RAPTOR program begins at the Start symbol and goes along the
arrows to execute the program. The program stops executing when the End symbol is
reached.
 Experiment – 7
Create flow chart for an algorithm using Raptor

Introduction
RAPTOR (Rapid Algorithmic Prototyping Tool for Ordered Reasoning) is a free graphical
authoring tool created by Martin C. Carlisle, Terry Wilson, Jeff Humphries and Jason Moore,
designed specifically to help students visualize their algorithms and avoid syntactic baggage.
Students can create flow-chart for a particular program and raptor tool will generate code for
it in various programming languages, such as C, C++, Java and so on.

Symbols in RAPTOR
Raptor has 6 types of symbols, each of which represents a unique kind of instruction. They are
– Assignment, Call, Input, Output, Selection and Loop symbols. The following image shows
these symbols-

Assignment Symbol (Rectangle):

This symbol is used to perform assignments or computations within the algorithm.
It represents operations such as assigning values to variables or performing mathematical
calculations.

Call Symbol:
In RAPTOR, there isn't a specific symbol called "Call". Instead, functions or procedures can
be represented using rectangular symbols with the name of the function or procedure inside.
When you have modularized your code into functions or procedures, you can use these symbols
to call those functions or procedures.

Input Symbol (Parallelogram):

This symbol is used to indicate input operations.
It represents the point in the algorithm where the user is prompted to enter data.

Output Symbol (Parallelogram):

This symbol is used to indicate output operations.
It represents the point in the algorithm where the program displays or outputs results.

Selection Symbol (Diamond):

This symbol is used to represent decision-making or branching points in the algorithm.
It typically contains a condition that evaluates to either true or false, determining the path the
algorithm will follow next.

Loop Symbol:
In RAPTOR, loops are represented using rectangular symbols labeled with loop keywords
(e.g., "Repeat" or "While").
These symbols indicate a sequence of operations that are repeated until a certain condition is
met.
 Experiment – 8
Estimation of Test coverage metrics and structural complexity

Control Flow Graph

A control flow graph (CFG) is a directed graph where the nodes represent different instructions
of a program, and the edges define the sequence of execution of such instructions. Figure 1
shows a small snippet of code (compute the square of an integer) along with it's CFG. For
simplicity, each node in the CFG has been labeled with the line numbers of the program
containing the instructions. A directed edge from node #1 to node #2 in figure 1 implies that
after execution of the first statement, the control of execution is transferred to the second
instruction.
int x = 10, x_2 = 0;
x_2 = x * x;
return x_2;

A program, however, doesn't always consist of only sequential statements. There could be
branching and looping involved in it as well. Figure 2 shows how a CFG would look like if
there are sequential, selection and iteration kind of statements in order.

A real life application seldom could be written in a few lines. In fact, it might consist of
thousand of lines. A CFG for such a program is likely to become very large, and it would
contain mostly straight-line connections. To simplify such a graph different sequential
statements could be grouped together to form a basic block. A basic block is a maximal
sequence of program instructions I1, I2, ..., In such that for any two adjacent instructions Ik and
Ik+1, the following holds true:
• Ik is executed immediately before Ik+1
• Ik+1 is executed immediately after Ik
The size of a CFG could be reduced by representing each basic block with a node. To illustrate
this, let's consider the following example.
sum = 0;
i = 1;
while (i ≤ n) {
sum += i;
++i;
}
printf("%d", sum);
if (sum > 0) {
printf("Positive");
}
The CFG with basic blocks is shown for the above code in figure 3.

The first statement of a basic block is termed as leader. Any node x in a CFG is said to
dominate another node y (written as x dom y) if all possible execution paths that goes through
node y must pass through node x. The node x is said to be a dominator. In the above example,
line #s 1, 3, 4, 6, 7, 9, 10 are leaders. The node containing lines 7, 8 dominate the node
containing line # 10. The block containing line #s 1, 2 is said to be the entry block; the block
containing line # 10 is said to be the exit block.
If any block (or sub-graph) in a CFG is not connected with the sub-graph containing the entry
block, that signifies the concerned block contains code, which is unreachable while the program
is executed. Such unreachable code can be safely removed from the program. To illustrate this,
let's consider a modified version of our previous code:
sum = 0;
i = 1;
while (i ≤ n) {
sum += i;
++i;
}
return sum;
if (sum < 0) {
return 0;
}
The sub-graph containing line #s 8, 9, 10 is disconnected from the graph containing the entry
block. The code in the disconnected sub-graph would never get executed, and, therefore, could
be discarded.

Path
A path in a CFG is a sequence of nodes and edges that starts from the initial node (or entry
block) and ends at the terminal node. The CFG of a program could have more than one terminal
nodes.

Linearly-Independent-Path
A linearly independent path is any path in the CFG of a program such that it includes at least
one new edge not present in any other linearly independent path. A set of linearly independent
paths give a clear picture of all possible paths that a program can take during it's execution.
Therefore, path-coverage testing of a program would suffice by considering only the linearly
independent-paths.
we can find four linearly independent paths:
1 - 3 - 6 - (7, 8) - 10
1 - 3 - 6 - (7, 8) - 9 - 10
 1 - 3 - (4, 5) - 6 - (7, 8) - 10
1 - 3 - (4, 5) - 6 - (7, 8) - 9 - 10
Note that 1 - 3 - (4, 5) - 3 - (4, 5) - 6 - (7, 8) - 10, for instance, won't qualify as a linearly
independent path because there is no new edge not already present in any of the above four
linearly independent paths.
McCabe's Cyclomatic Complexity
McCabe had applied graph-theoretic analysis to determine the complexity of a program
module. Cyclomatic complexity metric, as proposed by McCabe, provides an upper bound for
the number of linearly independent paths that could exist through a given program module.
Complexity of a module increases as the number of such paths in the module increase. Thus,
if Cyclomatic complexity of any program module is 7, there could be up to seven linearly
independent paths in the module. For a complete testing, each of those possible paths should
be tested.

Computing Cyclomatic Complexity

Let G be a a given CFG. Let E denote the number of edges, and N denote the number of nodes.
Let V(G) denote the Cyclomatic complexity for the CFG. V(G) can be obtained in either of the
following three ways:
• Method #1:V(G) = E - N + 2
• Method #2: V(G) could be directly computed by a visual inspection of the CFG:V(G)
= Total number of bounded areas + 1It may be noted here that structured programming
would always lead to a planar CFG.
• Method #3: If LN be the total number of loops and decision statements in a program,
thenV(G) = LN + 1

In case of object-oriented programming, the above equations apply to methods of a class [viii].
Also, the value of V(G) so obtained is incremented by 1 considering the entry point of the
method. A quick summary of how different types of statements affect V(G) could be found in .
Once the complexities of individual modules of a program are known, complexity of the
program (or class) could be determined by: V(G) = SUM( V(Gi) ) - COUNT( V(Gi) ) +
1where COUNT( V(Gi) ) gives the total number of procedures (methods) in the program (class).

Optimum Value of Cyclomatic Complexity

A set of threshold values for Cyclomatic complexity has been presented in [vii], which we
reproduce below.
V(G) Module Category Risk
1-10 Simple Low
11-20 More complex Moderate
21-50 Complex High
> 50 Unstable Very high
It has been suggested that the Cyclomatic complexity of any module should not exceed 10.
Doing so would make a module difficult to understand for humans. If any module is found to
have Cyclomatic complexity greater than 10, the module should be considered for redesign.
Note that, a high value of V(G) is possible for a given module if it contains multiple cases in
C like switch-case statements. McCabe had exempted such modules from the limit of V(G) as
10.

Merits
McCabe's Cyclomatic complexity has certain advantages:
• Independent of programming language
• Helps in risk analysis during development or maintenance phase
• Gives an idea about the maximum number of test cases to be executed (hence, the
required effort) for a given module

Demerits
Cyclomatic complexity doesn't reflect on cohesion and coupling of modules.
McCabe's Cyclomatic complexity was originally proposed for procedural languages. One may
look in to get an idea of how the complexity calculation could be modified for object-oriented
languages. In fact, one may also wish to make use of Chidamber-Kemerer metrics (or any other
similar metric), which has been designed for object-oriented programming.
Exercise-1:

Identification of basic blocks from a program and determining it's cyclomatic

complexity

Consider the following simple C program.

// Sum of first n natural numbers (not in the best possible way though)

#include <stdio.h>

int main(int argc, char **argv)

{
int i;
int sum;
int n = 10;
sum = 0;
for (i = 1; i <= n; i++)
sum += i;
printf("Sum of first %d natural numbers is: %d\n", n, sum);
return 0;
}

Any sequence of instructions in a program could be represented in terms of basic blocks, and
a CFG could be drawn using those basic blocks. For the given C program:

Identify the basic blocks and verify whether your representation matches with the output
produced after compiling your program. Draw a Control Flow Graph (CFG) using these basic
blocks. Again, verify how the CFG generated after compilation relates to the basic blocks
identified by the compiler. Calculate McCabe's complexity from the CFG so obtained. Note
that gcc translates the high-level program into an intermediate representation using GIMPLE.
So, the CFG generated from your code would not show the actual instructions.

Learning Objectives:
Identify the basic basic blocks for a given program
Draw a CFG using the basic blocks
Determination of McCabe's complexity from a CFG
Limitations: The current workspace can generate CFGs only for the main function. In other
words, this would not work with user-defined functions. However, in real life a program would
contain several modules. All such modules have to be taken into account while determining the
complexity.
Function main (main)
Merging blocks 5 and 6
main (int argc, char * * argv)
{
int n;
int sum;
int i;
int D.1710;
const char * restrict D.1709;
<bb 2>:
n = 10;
sum = 0;
i = 1;
goto <bb 4>;
<bb 3>:
sum = sum + i;
i = i + 1;
<bb 4>:
if (i ≤ n)
goto <bb 3>;
else
goto <bb 5>;
<bb 5>:
D.1709 = (const char * restrict) "Sum of first %d natural numbers is: %d\n";
printf (D.1709, n, sum);
D.1710 = 0;
return D.1710;
}
Exercise-2:

Finding linearly independent paths from a given program

Consider the following simple C program.

// Initialize elements of a 2D array to 0

#include <stdio.h>
int main(int argc, char **argv)
{
int a[5][10];
int i;
int j;
int nr;
int nc;
nr = 5;
nc = 10;
for (i = 0; i <= nr; i++) {
for (j = 0; j <= nc; j++) {
a[i][j] = 0;
}
}
return 0;
}

Tasks:
Compile the above program to generate it's CFG. Verify whetther the CFG corresponds to the
basic blocks. Identify the linearly independent paths from the CFG. The paths would be
indicated by the basic block numbers (instead of line numbers of the actual program)

Learning Objectives:
Identify the linearly independent paths from a CFG

Limitations: The current workspace can generate CFGs only for the main function. In other
words, this would not work with user-defined functions. However, in real life a program
would contain several modules. All such modules have to be taken into account while
determining the complexity.
The linearly independent paths for the above shown CFG are:

• 2-7-8-9
• 2-7-3-5-6-7-8-9
• 2-7-3-5-4-5-6-7-8–9
Excercise-3:

Cyclomatic complexity of binary search

The following C program implements the binary search technique performed over an array of
integers. This is an example of a non-trivial program that we often encounter in our lives.

#include <stdio.h>
int main(int argc, char **argv)
{
int a[] = {2, 4, 6, 8, 10, 12, 14, 16};
int key = atoi(argv[1]);
int n = 8;
int low = 0;
int high = n - 1;
int middle;
int flag = 0;
while (low <= high) {
middle = (low + high) / 2;
if (key == a[middle]) {
printf("Found key %d at position %d\n", key, middle);
flag = 1;
}
else if (key < a[middle]) {
high = middle - 1;
}
else {
low = middle + 1;
}
if (flag)
break;
}
if (! flag)
printf("Key %d was not found!\n", key);
return 0;
}

Determine the cyclomatic complexity of this program. How would you classify this program
in terms of its complexity (simple, complex, unstable)?

Limitations: The current workspace can generate CFGs only for the main function. In other
words, this would not work with user-defined functions. However, in real life a program would
contain several modules. All such modules have to be taken into account while determining the
complexity.
 Experiment-9
Designing Test Suites

Software Testing
Testing software is an important part of the development life cycle of a software. It is an
expensive activity. Hence, appropriate testing methods are necessary for ensuring the reliability
of a program. According to the ANSI/IEEE 1059 standard, the definition of testing is the
process of analyzing a software item, to detect the differences between existing and required
conditions i.e. defects/errors/bugs and to evaluate the features of the software item.

The purpose of testing is to verify and validate a software and to find the defects present in a
software. The purpose of finding those problems is to get them fixed.

• Verification is the checking or we can say the testing of software for consistency and
conformance by evaluating the results against pre-specified requirements.
• Validation looks at the systems correctness, i.e. the process of checking that what has
been specified is what the user actually wanted.
• Defect is a variance between the expected and actual result. The defect’s ultimate source
may be traced to a fault introduced in the specification, design, or development (coding)
phases.

Standards for Software Test Documentation

IEEE 829-1998 is known as the 829 Standard for Software Test Documentation. It is an IEEE
standard that specifies the form of a set of documents for use in software testing [i]. There are
other different standards discussed below.

• IEEE 1008, a standard for unit testing

• IEEE 1012, a standard for Software Verification and Validation
• IEEE 1028, a standard for software inspections
• IEEE 1044, a standard for the classification of software anomalies
• IEEE 1044-1, a guide to the classification of software anomalies
• IEEE 830, a guide for developing system requirements specifications
• IEEE 730, a standard for software quality assurance plans
• IEEE 1061, a standard for software quality metrics and methodology
• IEEE 12207, a standard for software life cycle processes and life cycle data
• BS 7925-1, a vocabulary of terms used in software testing
• BS 7925-2, a standard for software component testing

Testing Frameworks
Following are the different testing frameworks:

• jUnit - for Java unit test [ii]

• Selenium - is a suite of tools for automating web applications for software testing
purposes, plugin for Firefox [iii]
 • HP QC - is the HP Web-based test management tool. It familiarizes with the process of
defining releases, specifying requirements, planning tests, executing tests, tracking
defects, alerting on changes, and analyzing results. It also shows how to customize
project [iv]
• IBM Rational - Rational software has a solution to support business sector for
designing, implementing and testing software [v]

Need for Software Testing

There are many reasons for why we should test software, such as:
• Software testing identifies the software faults. The removal of faults helps reduce the
number of system failures. Reducing failures improves the reliability and the quality of
the systems.
• Software testing can also improves the other system qualities such as maintainability,
usability, and testability.
• In order to meet the condition that the last few years of the 20th century systems had to
be shown to be free from the ‘millennium bug’.
• In order to meet the different legal requirements.
• In order to meet industry specific standards such as the Aerospace, Missile and Railway
Signaling standards.

Test Cases and Test Suite

A test case describes an input descriptions and an expected output descriptions. Input are of
two types: preconditions (circumstances that hold prior to test case execution) and the actual
inputs that are identified by some testing methods. The set of test cases is called a test suite.
We may have a test suite of all possible test cases.

Types of Software Testing

Testing is done in every stage of software development life cycle, but the testing done at each
level of software development is different in nature and has different objectives. There are
different types of testing, such as stress testing, volume testing, configuration testing,
compatibility testing, recovery testing, maintenance testing, documentation testing, and
usability testing. Software testing are mainly of following types-
• Unit Testing
• Integration Testing
• System Testing

Unit Testing
Unit testing is done at the lowest level. It tests the basic unit of software, that is the smallest
testable piece of software. The individual component or unit of a program are tested in unit
testing. Unit testing are of two types.
• Black box testing: This is also known as functional testing , where the test cases are
designed based on input output values only. There are many types of Black Box Testing
but following are the prominent ones.

- Equivalence class partitioning: In this approach, the domain of input values to a program is
divided into a set of equivalence classes. e.g. Consider a software program that computes
whether an integer number is even or not that is in the range of 0 to 10. Determine the
equivalence class test suite. There are three equivalence classes for this program. - The set of
negative integer - The integers in the range 0 to 10 - The integer larger than 10

- Boundary value analysis : In this approach, while designing the test cases, the values at
boundaries of different equivalence classes are taken into consideration. e.g. In the above given
example as in equivalence class partitioning, a boundary values based test suite is { 0, -1, 10,
11 }

• White box testing: It is also known as structural testing. In this testing, test cases are
designed on the basis of examination of the code.This testing is performed based on the
knowledge of how the system is implemented. It includes analyzing data flow, control
flow, information flow, coding practices, exception and error handling within the
system, to test the intended and unintended software behavior. White box testing can
be performed to validate whether code implementation follows intended design, to
validate implemented security functionality, and to uncover exploitable
vulnerabilities.This testing requires access to the source code. Though white box testing
can be performed any time in the life cycle after the code is developed, but it is a good
practice to perform white box testing during the unit testing phase.

Integration Testing
Integration testing is performed when two or more tested units are combined into a larger
structure. The main objective of this testing is to check whether the different modules of a
program interface with each other properly or not. This testing is mainly of two types:
• Top-down approach
• Bottom-up approach

In bottom-up approach, each subsystem is tested separately and then the full system is tested.
But the top-down integration testing starts with the main routine and one or two subordinate
routines in the system. After the top-level ‘skeleton’ has been tested, the immediately
subroutines of the ‘skeleton’ are combined with it and tested.

System Testing
System testing tends to affirm the end-to-end quality of the entire system. System testing is
often based on the functional / requirement specification of the system. Non-functional quality
attributes, such as reliability, security, and maintainability are also checked. There are three
types of system testing

• Alpha testing is done by the developers who develop the software. This testing is also
done by the client or an outsider with the presence of developer or we can say tester.
• Beta testing is done by very few number of end users before the delivery, where the
change requests are fixed, if the user gives any feedback or reports any type of defect.
• User Acceptance testing is also another level of the system testing process where the
system is tested for acceptability. This test evaluates the system's compliance with the
client requirements and assess whether it is acceptable for software delivery
 • An error correction may introduce new errors. Therefore, after every round of error-
fixing, another testing is carried out, i.e. called regression testing. Regression testing
does not belong to either unit testing, integration testing, or system testing, instead, it
is a separate dimension to these three forms of testing.

Regression Testing
The purpose of regression testing is to ensure that bug fixes and new functionality introduced
in a software do not adversely affect the unmodified parts of the program [2]. Regression testing
is an important activity at both testing and maintenance phases. When a piece of software is
modified, it is necessary to ensure that the quality of the software is preserved. To this end,
regression testing is to retest the software using the test cases selected from the original test
suite.

Example
Write a program to calculate the square of a number in the range 1-100

#include <stdio.h>
int main()
{
int n, res;
printf("Enter a number: ");
scanf("%d", &n);
if (n >= 1 && n <= 100)
{
res = n * n;
printf("\n Square of %d is %d\n", n, res);
}
else if (n<= 0 || n > 100)
printf("Beyond the range");
return 0;
}

Output

Inputs Outputs
I1 : -2 O1 : Beyond the range
I2 : 0 O2 : Beyond the range
I3 : 1 O3 : Square of 1 is 1
I4 : 100 O4 : Square of 100 is 10000
I5 : 101 O5 : Beyond the range
I6 : 4 O6 : Square of 4 is 16
I7 : 62 O7 : Square of 62 is 3844
Test Cases

T1 : {I1 ,O1}
T2 : {I2 ,O2}
T3 : {I3, O3}
T4 : {I4, O4}
T5 : {I5, O5}
T6 : {I6, O6}
T7 : {I7, O7}

Exercise:

Design a test suite for the following problem

The Absolute Beginners Inc. seems to have been fascinated by your work. Recently they have
entrusted you with a task of writing a web-based mathematical software (using JavaScript). As
part of this software, your team mate has written a small module, which computes area of
simple geometric shapes. A portion of the module is shown below.

function square(side) { return side * side }

function rectangle(side1, side2) { return side1 * side1; }
function circle(radius) { return Math.PI * radius * radius; }
function right_triangle(base, height) { return 1 / 2 * base * height; }

Prepare a test suite that will- Verify each of the above mentioned individual function is working
correctly. Your task essentially is to verify whether each of the above function is returning
correct values for given inputs. For example, a rectangle with length 10 unit and breadth 5 unit
will have an area of 50 sq. unit. This can be verified from the output of the function call

rectangle(10, 5);
However, testing also attempts to point out possible bugs in the software. How would the above
code behave for a call

rectangle(10, -5);
Modify the code to address this defect.

In each function, return -1 if any given dimension is negative

Modify the test suite such that it reflects desired performance for both correct and incorrect
input(s)
The code has another bug -- how would you identify it from testing results? Fix the bug and
test it again.
Learning Objectives:
Get familiarized with unit testing
Verify implementation of functional requirements by writing test cases
Analyze results of testing to ascertain the current state of a project

Limitations: This workspace attempts to provide a very simple version of a testing framework.
Real life testing frameworks are much more extensive and provide a lot of options like creating
test cases from user requirements, automatic reporting of bug when a test case fails, and so on.
Nevertheless, this workspace is expected to make a student familiar to testing and some of it's
templates and reports.