Security is a critical consideration for an enterprise communications system. Different work contexts and corporate cultures may have different security requirements. In fact, such requirements may range from "no security" to protection from all possible attacks. In addition, as a communications session progresses, its context may dynamically change, and its security requirements may need to be changed accordingly. In this paper, we present our approach to providing security in enterprise communications in an efficient manner and report on the results of our initial performance study, which shows that encrypting and decrypting real-time media payloads end-to-end does not significantly degrade the quality of the end-user experience in real-time communications. Our approach is implemented in an enterprise communications system, called SEC, which is designed to enable enterprise employees to conduct secure, spontaneous, multimedia, and multi-party conferencing.

Model-based testing is a new and evolving technique for generating a suite of test cases from requirements.Testers using this approach concentrate on a data model and generation infrastructure instead of hand-crafting individual tests.Several relatively small studies have demonstrated how combinatorial test generation techniques allow testers to achieve broad coverage of the input domain with a small number of tests.We have conducted several relatively large projects in which we applied these techniques to systems with millions of lines of code.Given the complexity of testing, the modelbased testing approach was used in conjunction with test automation harnesses.Since no large empirical study has been conducted to measure efficacy of this new approach, we report on our experience with developing tools and methods in support of model-based testing.The four case studies presented here offer details and results of applying combinatorial test-generation techniques on a large scale to diverse applications.Based on the four projects, we offer our insights into what works in practice and our thoughts about obstacles to transferring this technology into testing organizations.

This paper describes a new approach to testing that uses combinatorial designs to generate tests that cover the pairwise, triple, or n-way combinations of a system's test parameters. These are the parameters that determine the system's test scenarios. Examples are system configuration parameters, user inputs and other external events. We implemented this new method in the AETG system. The AETG system uses new combinatorial algorithms to generate test sets that cover all valid n-way parameter combinations. The size of an AETG test set grows logarithmically in the number of test parameters. This allows testers to define test models with dozens of parameters. The AETG system is used in a variety of applications for unit, system, and interoperability testing. It has generated both high-level test plans and detailed test cases. In several applications, it greatly reduced the cost of test plan development.

Software testing is expensive, tedious and time consuming. Thus, the problem of making testing more efficient and mechanical, without losing its effectiveness, is very important. The Automatic Efficient Test Generator (AETG) is a new tool that mechanically generates efficient test sets from user defined test requirements. It is based on algorithms that use ideas from statistical experimental design theory to minimize the number of tests needed for a specific level of test coverage of the input test space. The savings due to AETG are substantial when compared to exhaustive testing or other methods of testing. AETG has been used in Bellcore for screen testing, interoperability testing and for protocol conformance testing. The paper describes the current system and it constructs and reports some preliminary results obtained during initial trials.>