{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T13:13:55Z","timestamp":1775740435980,"version":"3.50.1"},"reference-count":42,"publisher":"Association for Computing Machinery (ACM)","issue":"5","funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62472062"],"award-info":[{"award-number":["62472062"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Applied Basic Research Project of Liaoning Province","award":["2025JH2\/101330109"],"award-info":[{"award-number":["2025JH2\/101330109"]}]},{"name":"Dalian Science and technology Innovation Fund project","award":["2024JJ12GX022"],"award-info":[{"award-number":["2024JJ12GX022"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Des. Autom. Electron. Syst."],"published-print":{"date-parts":[[2026,9,30]]},"abstract":"<jats:p>Simulink is MathWorks\u2019 commercial cyber-physical systems development tool, which enables engineers to do rapid prototyping of their systems through simulation and embedded code generation. When a Simulink model meets requirements, engineers can utilize embedded coder to convert it into embedded code (e.g., C source code) and deploy it in safety-critical applications such as automotive, aerospace, and healthcare. However, bugs or incorrect implementations in code generation may lead to unexpected behaviors in target applications, posing security risks. Therefore, it is crucial to eliminate such bugs in embedded code generation. To address this issue, we propose DESCO, a differential testing approach to test embedded code generation in Simulink. DESCO considers the functional correlation between Simulink blocks for partitioning, aiming to generate diverse and complex bug-triggering Simulink models to thoroughly exercise the embedded code generation. DESCO then detects bugs by analyzing the outputs of these Simulink models by differential testing. The experiments demonstrate that DESCO significantly outperforms existing approaches. In three months, DESCO reported 16 issues, including 12 confirmed as bugs by MathWorks Support.<\/jats:p>","DOI":"10.1145\/3797030","type":"journal-article","created":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T21:06:21Z","timestamp":1770757581000},"page":"1-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Commercial Cyber-Physical System Development Tool Chain Bug Detecting via Diversity-Guided Fuzzing Test"],"prefix":"10.1145","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-5693-9693","authenticated-orcid":false,"given":"Huijiang","family":"Liu","sequence":"first","affiliation":[{"name":"Dalian Maritime University","place":["Dalian, China"]},{"name":"Dalian University of Technology","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8554-6365","authenticated-orcid":false,"given":"Shikai","family":"Guo","sequence":"additional","affiliation":[{"name":"Dalian Maritime University","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-8098-096X","authenticated-orcid":false,"given":"Jiaxue","family":"Liu","sequence":"additional","affiliation":[{"name":"Dalian Maritime University","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-8346-2758","authenticated-orcid":false,"given":"Yifan","family":"Wang","sequence":"additional","affiliation":[{"name":"Dalian Maritime University","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6109-2321","authenticated-orcid":false,"given":"Hongyi","family":"Cheng","sequence":"additional","affiliation":[{"name":"Dalian Maritime University","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5068-1938","authenticated-orcid":false,"given":"Xiaochen","family":"Li","sequence":"additional","affiliation":[{"name":"Dalian University of Technology","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8674-4948","authenticated-orcid":false,"given":"He","family":"Jiang","sequence":"additional","affiliation":[{"name":"Dalian University of Technology","place":["Dalian, China"]}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,4,9]]},"reference":[{"key":"e_1_3_2_2_2","first-page":"363","volume-title":"Proceedings of the 2008 11th IEEE international Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC)","author":"Lee Edward A","year":"2008","unstructured":"Edward A Lee. 2008. Cyber physical systems: Design challenges. In Proceedings of the 2008 11th IEEE international Symposium on Object and Component-Oriented Real-Time Distributed Computing (ISORC). IEEE, 363\u2013369."},{"key":"e_1_3_2_3_2","first-page":"737","volume-title":"Proceedings of the 47th Design Automation Conference","author":"Lee Edward A","year":"2010","unstructured":"Edward A Lee. 2010. CPS foundations. In Proceedings of the 47th Design Automation Conference. 737\u2013742."},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.5555\/3153572"},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/7333.918276"},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-017-0450-9"},{"key":"e_1_3_2_7_2","unstructured":"MathWorks. 2025. Retrieved from http:\/\/www.mathworks.com\/products\/. (2025)."},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.49"},{"key":"e_1_3_2_9_2","first-page":"1","article-title":"Automated model generation for machinery fault diagnosis based on reinforcement learning and neural architecture search","volume":"71","author":"Zhou Jian","year":"2022","unstructured":"Jian Zhou, Lianyu Zheng, Yiwei Wang, Cheng Wang, and Robert X Gao. 2022. Automated model generation for machinery fault diagnosis based on reinforcement learning and neural architecture search. IEEE Transactions on Instrumentation and Measurement 71 (2022), 1\u201312.","journal-title":"IEEE Transactions on Instrumentation and Measurement"},{"key":"e_1_3_2_10_2","first-page":"1","article-title":"Track defect detection for high-speed maglev trains via deep learning","volume":"71","author":"He Yongxiang","year":"2022","unstructured":"Yongxiang He, Jun Wu, Yaojia Zheng, Yuxin Zhang, and Xiaobo Hong. 2022. Track defect detection for high-speed maglev trains via deep learning. IEEE Transactions on Instrumentation and Measurement 71 (2022), 1\u20138.","journal-title":"IEEE Transactions on Instrumentation and Measurement"},{"key":"e_1_3_2_11_2","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1007\/978-3-319-51738-4_4","volume-title":"Proceedings of the Cyber Physical Systems. Design, Modeling, and Evaluation: 6th International Workshop, CyPhy 2016, Pittsburgh, PA, USA, October 6, 2016, Revised Selected Papers 6","author":"Chowdhury Shafiul Azam","year":"2017","unstructured":"Shafiul Azam Chowdhury, Taylor T Johnson, and Christoph Csallner. 2017. CyFuzz: A differential testing framework for cyber-physical systems development environments. In Proceedings of the Cyber Physical Systems. Design, Modeling, and Evaluation: 6th International Workshop, CyPhy 2016, Pittsburgh, PA, USA, October 6, 2016, Revised Selected Papers 6. Springer, 46\u201360."},{"key":"e_1_3_2_12_2","doi-asserted-by":"crossref","first-page":"349","DOI":"10.1145\/1858996.1859070","volume-title":"Proceedings of the 25th IEEE\/ACM International Conference on Automated Software Engineering","author":"Rajeev AC","year":"2010","unstructured":"AC Rajeev, Prahladavaradan Sampath, KC Shashidhar, and S Ramesh. 2010. CoGenTe: A tool for code generator testing. In Proceedings of the 25th IEEE\/ACM International Conference on Automated Software Engineering. 349\u2013350."},{"issue":"9","key":"e_1_3_2_13_2","doi-asserted-by":"crossref","first-page":"622","DOI":"10.1109\/TSE.2007.70708","article-title":"Systematic testing of model-based code generators","volume":"33","author":"St\u00fcrmer Ingo","year":"2007","unstructured":"Ingo St\u00fcrmer, Mirko Conrad, Heiko Doerr, and Peter Pepper. 2007. Systematic testing of model-based code generators. IEEE Transactions on Software Engineering 33, 9 (2007), 622\u2013634.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_3_2_14_2","first-page":"1","volume-title":"Proceedings of the 2014 IEEE 27th Canadian Conference on Electrical and Computer Engineering (CCECE)","author":"Krizan J","year":"2014","unstructured":"J Krizan, L Ertl, M Bradac, M Jasansky, and A Andreev. 2014. Automatic code generation from MATLAB\/Simulink for critical applications. In Proceedings of the 2014 IEEE 27th Canadian Conference on Electrical and Computer Engineering (CCECE). IEEE, 1\u20136."},{"key":"e_1_3_2_15_2","first-page":"1","volume-title":"Proceedings of the 2009 44th International Universities Power Engineering Conference (UPEC)","author":"Roscoe AJ","year":"2009","unstructured":"AJ Roscoe, SM Blair, and Graeme M Burt. 2009. Benchmarking and optimisation of Simulink code using Real-Time Workshop and Embedded Coder for inverter and microgrid control applications. In Proceedings of the 2009 44th International Universities Power Engineering Conference (UPEC). IEEE, 1\u20135."},{"issue":"3","key":"e_1_3_2_16_2","doi-asserted-by":"crossref","first-page":"138","DOI":"10.1109\/LES.2020.3035560","article-title":"SMT-based verification of safety-critical embedded control software","volume":"13","author":"Adhikary Sunandan","year":"2020","unstructured":"Sunandan Adhikary, Amit Gurung, Jay Thakkar, Antonio Bruto Da Costa, Soumyajit Dey, Aritra Hazra, and Pallab Dasgupta. 2020. SMT-based verification of safety-critical embedded control software. IEEE Embedded Systems Letters 13, 3 (2020), 138\u2013141.","journal-title":"IEEE Embedded Systems Letters"},{"key":"e_1_3_2_17_2","first-page":"208","volume-title":"Proceedings of the International Symposium on Formal Methods for Components and Objects","author":"Brillout Angelo","year":"2009","unstructured":"Angelo Brillout, Nannan He, Michele Mazzucchi, Daniel Kroening, Mitra Purandare, Philipp R\u00fcmmer, and Georg Weissenbacher. 2009. Mutation-based test case generation for simulink models. In Proceedings of the International Symposium on Formal Methods for Components and Objects. Springer, 208\u2013227."},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1145\/2884781.2884878"},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/2666356.2594334"},{"key":"e_1_3_2_20_2","doi-asserted-by":"publisher","DOI":"10.1145\/1993498.1993532"},{"key":"e_1_3_2_21_2","first-page":"1","article-title":"A practical root cause diagnosis framework for quality-related faults in manufacturing processes with irregular sampling measurements","volume":"71","author":"Ma Liang","year":"2022","unstructured":"Liang Ma, Jie Dong, and Kaixiang Peng. 2022. A practical root cause diagnosis framework for quality-related faults in manufacturing processes with irregular sampling measurements. IEEE Transactions on Instrumentation and Measurement 71 (2022), 1\u20139.","journal-title":"IEEE Transactions on Instrumentation and Measurement"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/TIM.2022.3169535"},{"key":"e_1_3_2_23_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/TIM.2022.3165254","article-title":"Tactile-based fabric defect detection using convolutional neural network with attention mechanism","volume":"71","author":"Fang Bin","year":"2022","unstructured":"Bin Fang, Xingming Long, Fuchun Sun, Huaping Liu, Shixin Zhang, and Cheng Fang. 2022. Tactile-based fabric defect detection using convolutional neural network with attention mechanism. IEEE Transactions on Instrumentation and Measurement 71 (2022), 1\u20139.","journal-title":"IEEE Transactions on Instrumentation and Measurement"},{"key":"e_1_3_2_24_2","unstructured":"MathWorks. 2025. Retrieved from https:\/\/www.mathworks.com\/help\/simulink\/ug\/creating-subsystems.html. (2025)."},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/2345141.2248437"},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180231"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380381"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549159"},{"key":"e_1_3_2_29_2","first-page":"1","volume-title":"Proceedings of the 2023 60th ACM\/IEEE Design Automation Conference (DAC)","author":"Jiang He","year":"2023","unstructured":"He Jiang, Hongyi Cheng, Shikai Guo, and Xiaochen Li. 2023. Partition based differential testing for finding embedded code generation bugs in simulink. In Proceedings of the 2023 60th ACM\/IEEE Design Automation Conference (DAC). IEEE, 1\u20136."},{"key":"e_1_3_2_30_2","unstructured":"Code and bugs. 2025. Retrieved from https:\/\/github.com\/LJXueee\/DESCO. (2025)."},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/2024724.2024777"},{"key":"e_1_3_2_32_2","unstructured":"Simulink and Matlab. 2025. Retrieved from https:\/\/www.mathworks.com\/help\/simulink\/index.html. (2025)."},{"key":"e_1_3_2_33_2","first-page":"1033","volume-title":"Proceedings of the 59th ACM\/IEEE Design Automation Conference","author":"Su Zhuo","year":"2022","unstructured":"Zhuo Su, Zehong Yu, Dongyan Wang, Yixiao Yang, Yu Jiang, Rui Wang, Wanli Chang, and Jiaguang Sun. 2022. HCG: Optimizing embedded code generation of simulink with SIMD instruction synthesis. In Proceedings of the 59th ACM\/IEEE Design Automation Conference. 1033\u20131038."},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11704-019-8231-0"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1145\/3363562"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468591"},{"key":"e_1_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1145\/2858965.2814319"},{"key":"e_1_3_2_38_2","doi-asserted-by":"publisher","DOI":"10.1145\/2983990.2984038"},{"issue":"7","key":"e_1_3_2_39_2","doi-asserted-by":"crossref","first-page":"2339","DOI":"10.1109\/TSE.2021.3058671","article-title":"CTOS: Compiler testing for optimization sequences of LLVM","volume":"48","author":"Jiang He","year":"2021","unstructured":"He Jiang, Zhide Zhou, Zhilei Ren, Jingxuan Zhang, and Xiaochen Li. 2021. CTOS: Compiler testing for optimization sequences of LLVM. IEEE Transactions on Software Engineering 48, 7 (2021), 2339\u20132358.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2889771"},{"key":"e_1_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3605233"},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.76.036106"},{"key":"e_1_3_2_43_2","unstructured":"MathWorks. 2025. Retrieved from https:\/\/ww2.mathworks.cn\/support\/bugreports. (2025)."}],"container-title":["ACM Transactions on Design Automation of Electronic Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3797030","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T11:56:26Z","timestamp":1775735786000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3797030"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,9]]},"references-count":42,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2026,9,30]]}},"alternative-id":["10.1145\/3797030"],"URL":"https:\/\/doi.org\/10.1145\/3797030","relation":{},"ISSN":["1084-4309","1557-7309"],"issn-type":[{"value":"1084-4309","type":"print"},{"value":"1557-7309","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,4,9]]},"assertion":[{"value":"2025-01-29","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-02-04","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2026-04-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}