Generation and analysis of test oracles for a highly configurable train control system: A case study

For test automation, in particular for model-based testing, one critical part of the testing process is the construction of test oracles from requirements. For highly configurable, safety-critical systems under test, one often faces the following problems: (i) A single, general test oracle for all possible configurations is usually too complex and error-prone, while constructing one test oracle for each configuration requires enormous effort. (ii) The test oracle shall be validatable against the system's requirements. (iii) The verification of the oracle against safety requirements should be possible. In this case study, we solve this problem for a train control system that can be configured with infinitely many track layouts.