Testing input validation in Web applications through automated model recovery

Journal of Systems and Software

Volumn 81, Issue 2, 2008, Pages 222-233

  Liu, Hui ^a   Kuan Tan, Hee Beng ^a  

^a NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

Author keywords

[No Author keywords available]

Indexed keywords

CONSTRAINT THEORY; GRAPH THEORY; MATHEMATICAL MODELS;

CONTROL FLOW GRAPHS; INPUT VALIDATION; WEB APPLICATIONS;

WEB SERVICES;

EID: 37049007001     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jss.2007.05.007     Document Type: Article

References (33)

1. Bazzichi F., and Spadafora I. An automatic generator for compiler testing. IEEE Trans. Software Eng. SE-8 4 (1982) 343-353
2. BCEL, 2006. Byte code engineering library. http://jakarta.apache.org/bcel/.
3. Beizer B. Software Testing Techniques (1990), Van Nostrand Reinhold, New York
4. Chilenski J.J., and Miller S.P. Applicability of modified condition/decision coverage to software testing. Software Eng. J. 9 5 (1994) 193-200
5. China Webmaster, 2006. Open source website: http://code.cnzz.cn.
6. Clarke L.A., Podgurski A., Richardson D.J., and Zeil S.J. Formal evaluation of data flow path selection criteria. IEEE Trans. Software Eng. 15 11 (1989) 1318-1332
7. Ferguson R., and Korel B. The chaining approach for software test data generation. ACM Trans. Software Eng. Methodol. 5 1 (1996) 63-86
8. Gupta, N., Mathur, A.P., Soffa, M.L., 1998. Automated test data generation using an iterative relaxation method. In: Proceedings of the Sixth International Symposium on the Foundations of Software Engineering (FSE-6), pp. 231-244.
9. Harman M., Hu L., et al. Testability transformation. IEEE Trans. Software Eng. 30 1 (2004) 3-16
10. Hayes, J.H., Offutt, A.J., 1999. Increased software reliability through input validation analysis and testing. In: Proceedings of the 10th International Symposium on Software Reliability Engineering, pp. 199-209.
11. Hower, R., 2006. Web site test tools and site management tools.
12. JABA, 2006. Java architecture for bytecode analysis: http://www.cc.gatech.edu/aristotle/Tools/jaba.html.
13. Joseph R.R., Sebastian E., et al. Experimental program analysis: a new program analysis paradigm. Proceedings of the 2006 international symposium on Software testing and analysis (2006), ACM Press, Portland, Maine, USA
14. Kitchenham B.A., Pfleeger S.L., et al. Preliminary guidelines for empirical research in software engineering. IEEE Trans. Software Eng. 28 8 (2002) 721-734
15. Korel B. Automated software test data generation. IEEE Trans. Software Eng. 16 8 (1990) 870-879
16. Liu, C.-H., Kung, D.C., Hsia, P., Hsu, C.-T., 2000. Structural testing of web applications. In: 11th International Symposium on Software Reliability Engineering, pp. 84-96.
17. Liu, H., Tan, H.B.K., 2006. Automated Verification and Test Case Generation for Input Validation. In: Proceedings of First Workshop on Automation of Software Test (Co-located with ICSE 2006), pp. 29-35.
18. Marick B. The craft of software testing: Subsystem testing including object-based and object-oriented testing (1995), PTR Prentice Hall, Englewood Cliffs, NJ
19. Memon, A.M., Soffa, M.L., Pollack, M.E., 2001. Coverage criteria for gui testing. In: Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering, pp. 256-267.
20. Montgomery D.C., and Runger G.C. Applied statistics and probability for engineers (2003), John and Wiley, New York
21. MSDN, 2006. Design guidelines for secure web application: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/ html/secmod77.asp.
22. Myers G.J., Badgett T., Thomas T.M., and Sandler C. The art of software testing (2004), John Wiley and Sons, Hoboken, NJ
23. Ntafos S.C. A comparison of some structural testing strategies. IEEE Trans. Software Eng. 14 6 (1988) 868-874
24. Offutt, J., Wu, Y., Du, X., Huang, H., 2004. Bypass testing of web applications. In: Proceedings of the 15th International Symposium on Software Reliability Engineering, pp. 187-197.
25. Qi, Y., Kung, D., Wong, E., 2005. An agent-based testing approach for web applications. In: Computer Software and Applications Conference, 2005, COMPSAC 2005, 29th Annual International, 26-28 July 2005. pp. 45-50.
26. Ricca, F., Tonella, P., 2001. Analysis and testing of web applications. In: Proceedings of 23rd International Conference on Software Engineering, pp. 25-34.
27. Rountev, A., Kagan, S., Sawin, J., 2005. Coverage criteria for testing of object interactions in sequence diagrams In: Proceedings of Eighth International Conference of Fundamental Approaches to Software Engineering (FASE'05), pp. 289-304.
28. Sinha S., Harrold M.J., and Rothermel G. Interprocedural control dependence. ACM Trans. Software Eng. Methodol. 10 2 (2001) 209-254
29. Sourceforge, 2006. Open source website: http://sourceforge.net.
30. Tai K.-C. Theory of fault-based predicate testing for computer programs. IEEE Trans. Software Eng. 22 8 (1996) 552-562
31. Wegener J., Baresel A., et al. Evolutionary test environment for automatic structural testing. Inform. Software Technol. 43 14 (2001) 841-854
32. Weyuker, E.J., Weiss, S.N., Hamlet, D., 1991. Comparison of program testing strategies. In: Proceedings of the Symposium on Testing, Analysis, and Verification (TAV4), p. 1.
33. Zhu H., Hall P.A.V., and May J.H.R. Software unit test coverage and adequacy. ACM Comput. Surv. 29 4 (1997) 366-427