Precise interface identification to improve testing and analysis of web applications

Proceedings of the 18th International Symposium on Software Testing and Analysis, ISSTA 2009

Volumn , Issue , 2009, Pages 285-295

  Halfond, William G J ^a   Anand, Saswat ^a   Orso, Alessandro ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Interface identification; Web application testing

Indexed keywords

QUALITY ASSURANCE;

DYNAMIC CONTENT; EMPIRICAL EVALUATIONS; NEW APPROACHES; PENETRATION TESTING; SYMBOLIC EXECUTION; TEST INPUTS; WEB APPLICATION; WEB APPLICATION TESTING;

SOFTWARE TESTING;

EID: 85008255060     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1572272.1572305     Document Type: Conference Paper

References (23)

1. S. Anand, A. Orso, and M. J. Harrold. Type-dependence Analysis and Program Transformation for Symbolic Execution. In Proc. TACAS, pages 117-133, 2007.
2. S. Anand, C. S. Pasareanu, and W. Visser. JPF-SE: A Symbolic Execution Extension to Java Pathfinder. In Proc. TACAS, pages 134-138, 2007.
3. A. A. Andrews, J. Offutt, and R. T. Alexander. Testing Web Applications by Modeling with FSMs. In Software Systems and Modeling, pages 326-345, July 2005.
4. S. Artzi, A. Kiezun, J. Dolby, F. Tip, D. Dig, A. Paradkar, and M. D. Ernst. Finding Bugs in Dynamic Web Applications. In Proceedings of the International Symposium on Software Testing and Analysis, July 2008.
5. Y. Deng, P. Frankl, and J. Wang. Testing Web Database Applications. SIGSOFT Software Engineering Notes, 29(5):1-10, 2004.
6. S. Elbaum, K.-R. Chilakamarri, M. F. II, and G. Rothermel. Web Application Characterization Through Directed Requests. In International Workshop on Dynamic Analysis, pages 49-56, May 2006.
7. S. Elbaum, S. Karre, and G. Rothermel. Improving Web Application Testing with User Session Data. In International Conference on Software Engineering, pages 49-59, November 2003.
8. S. Elbaum, G. Rothermel, S. Karre, and M. F. II. Leveraging User-Session Data to Support Web Application Testing. IEEE Transactions On Software Engineering, 31(3):187-202, March 2005.
9. M. Emmi, R. Majumdar, and K. Sen. Dynamic test input generation for database applications. In ISSTA, pages 151-162, 2007.
10. W. G. Halfond, S. R. Choudhary, and A. Orso. Penetration Testing with Improved Input Vector Identification. In Proceedings of the IEEE International Conference on Software Testing, April 2009.
11. W. G. Halfond and A. Orso. Command-Form Coverage for Testing Database Applications. In The IEEE and ACM International Conference on Automated Software Engineering, pages 69-78, September 2006.
12. W. G. Halfond and A. Orso. Improving Test Case Generation for Web Applications Using Automated Interface Discovery. In Proceedings of the Joint ESEC/SIGSOFT Symposium on the Foundations of Software Engineering, September 2007.
13. W. G. Halfond and A. Orso. Automated Identification of Parameter Mismatches in Web Applications. In Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering, November 2008.
14. Y. Huang, S. Huang, T. Lin, and C. Tsai. Web Application Security Assessment by Fault Injection and Behavior Monitoring. In Proc. of the 12th International World Wide Web Conference (WWW 03), pages 148-159, May 2003.
15. X. Jia and H. Liu. Rigorous and Automatic Testing of Web Applications. In 6th IASTED International Conference on Software Engineering and Applications, pages 280-285, November 2002.
16. C. Kallepalli and J. Tian. Measuring and Modeling Usage and Reliability for Statistical Web Testing. IEEE Transactions on Software Engineering, 27(11):1023-1036, 2001.
17. S. Khurshid, C. Pasareanu, and W. Visser. Generalized Symbolic Execution for Model Checking and Testing. In Proc. TACAS, pages 553-568, 2003.
18. J. C. King. Symbolic Execution and Program Testing. Commun. ACM, 19(7):385-394, 1976.
19. F. Ricca and P. Tonella. Analysis and Testing of Web Applications. In International Conference on Software Engineering, pages 25-34, May 2001.
20. J. Sant, A. Souter, and L. Greenwald. An Exploration of Statistical Models for Automated Test Case Generation. In Proceedings of the International Workshop on Dynamic Analysis, pages 1-7, May 2005.
21. P. Tonella and F. Ricca. Dynamic Model Extraction and Statistical Analysis of Web Applications. In Proceedings of the Fourth International Workshop on Web Site Evolution, pages 43-52, October 2002.
22. W. Visser, K. Havelund, G. Brat, S. J. Park, and F. Lerda. Model Checking Programs. Automated Software Engineering Journal, 10(2):203-232, April 2003.
23. G. Wassermann, D. Yu, A. Chander, D. Dhurjati, H. Inamura, and Z. Su. Dynamic Test Input Generation for Web Applications. In Proceedings of the International Symposium on Software Testing and Analysis, July 2008.