Published: June 27, 2016
Citation: Computer (IEEE Computer) vol. 49, no. 6, (June 2016) pp. 48-55
Author(s)
Tsong Chen (Swinburne University of Technology), Fei-Ching Kuo (Swinburne University of Technology), Wenjuan Ma (University of Wollongong), Willy Susilo (University of Wollongong), Dave Towey (University of Nottingham Ningbo China), Jeffrey Voas (NIST), Zhi Zhou (University of Wollongong)
Metamorphic testing (MT) can enhance security testing by providing an alternative to using a test oracle, which is often unavailable or impractical. The authors report how MT detected previously unknown bugs in real-world critical applications such as code obfuscators, giving evidence that software testing requires diverse perspectives to achieve greater cybersecurity.
Metamorphic testing (MT) can enhance security testing by providing an alternative to using a test oracle, which is often unavailable or impractical. The authors report how MT detected previously unknown bugs in real-world critical applications such as code obfuscators, giving evidence that software...
See full abstract
Metamorphic testing (MT) can enhance security testing by providing an alternative to using a test oracle, which is often unavailable or impractical. The authors report how MT detected previously unknown bugs in real-world critical applications such as code obfuscators, giving evidence that software testing requires diverse perspectives to achieve greater cybersecurity.
Hide full abstract
Keywords
cybersecurity; cyberthreats; fuzzing; logic error; metamorphic testing; obfuscator testing; oracle problem; software testing; Web testing; Heartbleed bug; software vulnerability
Control Families
None selected
