Mutation-based testing of integer overflow vulnerabilities

Proceedings - 5th International Conference on Wireless Communications, Networking and Mobile Computing, WiCOM 2009

Volumn , Issue , 2009, Pages

  Zeng, Fanping ^a,b   Mao, Liangliang ^a   Chen, Zhide ^a   Cao, Qing ^a  

^a UNIVERSITY OF SCIENCE AND TECHNOLOGY OF CHINA   (China)

^b Anhui Province Key Laboratory of Software in Computing and Communication   (China)

Author keywords

ANSI C; Integer overflow; Mutation operators; Mutation testing

Indexed keywords

ANSI C PROGRAMS; COMMON SOFTWARE; DYNAMIC EXECUTION; INTEGER OVERFLOW; MUTATION ANALYSIS; MUTATION OPERATORS; MUTATION TESTING; RUNTIME DISTRIBUTIONS; SECURITY ISSUES; SOURCE CODES; TEST DATA; TIME-CONSUMING PROCESS;

MOBILE COMPUTING; WIRELESS NETWORKS; WIRELESS TELECOMMUNICATION SYSTEMS;

STATISTICAL TESTS;

EID: 73149094741     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WICOM.2009.5302048     Document Type: Conference Paper

References (12)

1. Brian Chess, Jacob West, Secure Programming with Static Analysis. Boston: Addison-Wesley, 2007, pp.235-242
2. http://www.securityfocus.com/
3. Jon Heffley, Pascal Meunier, "Can source code auditing software identify common vulnerabilities and be used to evaluate software security?," Proceedings of the 37th Hawaii International Conference on System Sciences, 2004, pp. 196-207.
4. Flawfinder, http://www.dwheeler.com/flawfinder/
5. A. Jefferson Offutt, Roland H. Untch, "Mutation 2000: Uniting the orthogonal," Proceedings of the Mutation 2000: Mutation Testing in the Twentieth and the Twenty First Centuries, San Jose, CA, USA, 2000, pp.45-55.
6. R.A. Demillo, R.J. Lipton, F.G. Sayward, "Hints on test data selection: Help for the practicing programmer," IEEE Computer Magazine, Volume 11, Issue 4, 1978, pp.34-41.
7. Aditya P. Mathur, Foundations of Software Testing(English Edition). Beijing: China Machine Press, August 2008.
8. Eugene H.Spafford. "Extending Mutation Testing to Find Environmental Bugs," Technical Report SERC-TR-21-P, Software Practice& Experience, 20(2), Feb 1990, pp.181-189.
9. H. Agrawal, R.A. DeMillo, B. Hathaway, W. Hsu, W. Hsu, E.W. Krauser, R.J. Martin, A.P. Mathur, E. Spafford, "Design of mutant operators for the C programming language," Technical Reprot SERC-TR41-P, Revision 1.04, Software Eng. Research Center, Purdue University, April 2006.
10. Micheal Ellims, Darrel Ince, Marian Petre, "The Csaw C mutation tool: Initial Results," Third Workshop on Mutation Analysis (Mutation 2007), Windsor, UK, Sept, 2007, pp. 185-192.
11. Hossain Shahriar, Mohammad Zulkernine, "Mutation-based Testing of Buffer Overflow Vulnerabilities," Proceedings of the Second International Workshop on Security in Software Engineering (IWSSE 2008), Turku, Finland, 2008, pp. 979-984.
12. Zhu hong, Jin Lingzi, Software Quality Assurance and Testing.Beijing: Science Press, 1997.