2013 8th International Workshop on Automation of Software Test (AST)最新文献_第2页

ParTes: A test generation strategy for choreography participants 参与者:编排参与者的测试生成策略

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595787

F. D. Angelis, D. Fanì, A. Polini

{"title":"ParTes: A test generation strategy for choreography participants","authors":"F. D. Angelis, D. Fanì, A. Polini","doi":"10.1109/IWAST.2013.6595787","DOIUrl":"https://doi.org/10.1109/IWAST.2013.6595787","url":null,"abstract":"Inter-organizational business processes permit to specify how different organizations can integrate to carryon business activities together. In this context choreography specifications provide a particularly useful view permitting to define how different organizations should interact and exchange messages in order to fruitfully cooperate. Tools and mechanisms permitting to check that a stakeholder, and its provided e-services, are able to correctly cooperate according to the global specification become an important and useful asset. This is particularly true when open specifications are considered and services dynamically integrate with each other at run-time. This paper proposes a novel derivation strategy for test case skeletons, which can be successively refined and concretized to check the behaviour of parties willing to play a role within a choreography enactment. The very basic idea is to derive test cases from the possible interaction traces included in the choreography specification handled as a workflow graph. The selection of traces to use for test derivation purpose is driven by a specifically conceived technique to work flow refactoring which permits to reduce the number of interleavings to explore, in particular when parallel statements are considered.","PeriodicalId":291838,"journal":{"name":"2013 8th International Workshop on Automation of Software Test (AST)","volume":"471 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116805831","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Profile directed systematic testing of concurrent programs 配置文件指导并发程序的系统测试

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.5555/2662413.2662424

Yan Hu, Jun Yan, Jian Zhang, He Jiang

引用次数: 2

A refactoring-based approach for test case selection and prioritization 用于测试用例选择和优先级排序的基于重构的方法

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595798

Everton L. G. Alves, Patricia D. L. Machado, T. Massoni, Samuel T. C. Santos

{"title":"A refactoring-based approach for test case selection and prioritization","authors":"Everton L. G. Alves, Patricia D. L. Machado, T. Massoni, Samuel T. C. Santos","doi":"10.1109/IWAST.2013.6595798","DOIUrl":"https://doi.org/10.1109/IWAST.2013.6595798","url":null,"abstract":"Refactoring edits, commonly applied during software development, may introduce faults in a previously-stable code. Therefore, regression testing is usually applied to check whether the code maintains its previous behavior. In order to avoid rerunning the whole regression suite, test case prioritization techniques have been developed to order test cases for earlier achievement of a given goal, for instance, improving the rate of fault detection during regression testing execution. However, as current techniques are usually general purpose, they may not be effective for early detection of refactoring faults. In this paper, we propose a refactoring-based approach for selecting and prioritizing regression test cases, which specializes selection/prioritization tasks according to the type of edit made. The approach has been evaluated through a case study that compares it to well-known prioritization techniques by using a real open-source Java system. This case study indicates that the approach can be more suitable for early detection of refactoring faults when comparing to the other prioritization techniques.","PeriodicalId":291838,"journal":{"name":"2013 8th International Workshop on Automation of Software Test (AST)","volume":"80 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126220354","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17

Automated generation of state abstraction functions using data invariant inference 使用数据不变推理自动生成状态抽象函数

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595795

P. Tonella, Duy Cu Nguyen, A. Marchetto, Kiran Lakhotia, M. Harman

引用次数: 11

Automated scalability testing of software as a service 软件即服务的自动化可伸缩性测试

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595784

Paulo Moura, Fabio Kon

引用次数: 10

XSS pattern for attack modeling in testing 用于测试中的攻击建模的XSS模式

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595794

Josip Bozic, F. Wotawa

{"title":"XSS pattern for attack modeling in testing","authors":"Josip Bozic, F. Wotawa","doi":"10.1109/IWAST.2013.6595794","DOIUrl":"https://doi.org/10.1109/IWAST.2013.6595794","url":null,"abstract":"Security issues of web applications are still a current topic of interest especially when considering the consequences of unintended behaviour. Such services might handle sensitive data about several thousands or millions of users. Hence, exploiting services or other undesired effects that cause harm on users has to be avoided. Therefore, for software developers of such applications one of the major tasks in providing security is to embed testing methodologies into the software development cycle, thus minimizing the subsequent damage resulting in debugging and time intensive upgrading. Model-based testing evolved as one of the methodologies which offer several theoretical and practical approaches in testing the system under test (SUT) that combine several input generation strategies like mutation testing, using of concrete and symbolic execution etc. by putting the emphasis on specification of the model of an application. In this work we propose an approach that makes use of an attack pattern model in form of a UML state machine for test case generation and execution. The paper also discusses the current implementation of our attack pattern testing tool using a XSS attack pattern and demonstrates the execution in a case study.","PeriodicalId":291838,"journal":{"name":"2013 8th International Workshop on Automation of Software Test (AST)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131118148","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 26

Extension of Selenium RC tool to perform automated testing with databases in web applications Selenium RC工具的扩展，用于在web应用程序中对数据库执行自动化测试

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595803

A. D. Castro, Gisele Macedo, Eliane Collins, A. C. Dias-Neto

引用次数: 27

Access control enforcement testing 访问控制执行测试

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595793

Donia El Kateb, Yehia Elrakaiby, T. Mouelhi, Yves Le Traon

{"title":"Access control enforcement testing","authors":"Donia El Kateb, Yehia Elrakaiby, T. Mouelhi, Yves Le Traon","doi":"10.1109/IWAST.2013.6595793","DOIUrl":"https://doi.org/10.1109/IWAST.2013.6595793","url":null,"abstract":"A policy-based access control architecture comprises Policy Enforcement Points (PEPs), which are modules that intercept subjects access requests and enforce the access decision reached by a Policy Decision Point (PDP), the module implementing the access decision logic. In applications, PEPs are generally implemented manually, which can introduce errors in policy enforcement and lead to security vulnerabilities. In this paper, we propose an approach to systematically test and validate the correct enforcement of access control policies in a given target application. More specifically, we rely on a two folded approach where a static analysis of the target application is first made to identify the sensitive accesses that could be regulated by the policy. The dynamic analysis of the application is then conducted using mutation to verify for every sensitive access whether the policy is correctly enforced. The dynamic analysis of the application also gives the exact location of the PEP to enable fixing enforcement errors detected by the analysis. The approach has been validated using a case study implementing an access control policy.","PeriodicalId":291838,"journal":{"name":"2013 8th International Workshop on Automation of Software Test (AST)","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124784246","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Test algebra for combinatorial testing 用于组合测试的测试代数

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595786

W. Tsai, C. Colbourn, Jie Luo, Guanqiu Qi, Qingyang Li, Xiaoying Bai

引用次数: 21

Automatic test generation for mutation testing on database applications 对数据库应用程序进行突变测试的自动测试生成

2013 8th International Workshop on Automation of Software Test (AST) Pub Date : 2013-05-18 DOI: 10.1109/IWAST.2013.6595801

Kai Pan, Xintao Wu, Tao Xie

{"title":"Automatic test generation for mutation testing on database applications","authors":"Kai Pan, Xintao Wu, Tao Xie","doi":"10.1109/IWAST.2013.6595801","DOIUrl":"https://doi.org/10.1109/IWAST.2013.6595801","url":null,"abstract":"To assure high quality of database applications, testing database applications remains the most popularly used approach. In testing database applications, tests consist of both program inputs and database states. Assessing the adequacy of tests allows targeted generation of new tests for improving their adequacy (e.g., fault-detection capabilities). Comparing to code coverage criteria, mutation testing has been a stronger criterion for assessing the adequacy of tests. Mutation testing would produce a set of mutants (each being the software under test systematically seeded with a small fault) and then measure how high percentage of these mutants are killed (i.e., detected) by the tests under assessment. However, existing test-generation approaches for database applications do not provide sufficient support for killing mutants in database applications (in either program code or its embedded or resulted SQL queries). To address such issues, in this paper, we propose an approach called MutaGen that conducts test generation for mutation testing on database applications. In our approach, we first apply an existing approach that correlates various constraints within a database application through constructing synthesized database interactions and transforming the constraints from SQL queries into normal program code. Based on the transformed code, we generate program-code mutants and SQL-query mutants, and then derive and incorporate query-mutant-killing constraints into the transformed code. Then, we generate tests to satisfy query-mutant-killing constraints. Evaluation results show that MutaGen can effectively kill mutants in database applications, and MutaGen outperforms existing test-generation approaches for database applications in terms of strong mutant killing.","PeriodicalId":291838,"journal":{"name":"2013 8th International Workshop on Automation of Software Test (AST)","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2013-05-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114941968","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 26