Combinational metamorphic testing in integer vulnerabilities detection-Reference-Cited by-同舟云学术

Combinational metamorphic testing in integer vulnerabilities detection

Published:2021-01-19 Issue:4 Volume:20 Page:1053-1061
ISSN:1472-7978
Container-title:Journal of Computational Methods in Sciences and Engineering
language:
Short-container-title:JCM

Author:

Yao Yi¹,Liu Jialuo¹,Zhu Jing¹²,Gu Xiaodong³

Affiliation:

1. Command and Control Engineering College, Army Engineering University of PLA, Nanjing, Jiangsu, China

2. Navy Command College Training Management Department, China

3. National Airspace Management Center, China

Abstract

Integer vulnerability is a common and hidden problem of software security. Even mature software written by experienced programmers cannot avoid integer vulnerability. Therefore, it is very important for testers to detect the bugs. However, testing the bugs will face the test oracle problem. As far as we know, the metamorphic testing can effectively alleviate the test oracle problem. In this paper, a method of combinational metamorphic relations (CMR) is proposed, which solves the test oracle problem and is more effective than metamorphic relation for Integer vulnerability detection. A case study results shows that the combinational metamorphic relations are more effective in bugs-detection than the single metamorphic relations.

Publisher

IOS Press

Subject

Computational Mathematics,Computer Science Applications,General Engineering

Reference14 articles.

1. A semi-supervised learning model for intrusion detection;Jiang;Intelligent Decision Technologies,2019

2. Sebastián ventura: Mining association rules on big data through MapReduce genetic programming;Padillo;Integrated Computer-Aided Engineering,2018

3. S. Christey and R.A. Martin, Vulnerability type distributions in CVE, http://cwe.mitre.org/documents/vuln-trends/index.html, 2007.

4. Metamorphic slice: An application in spectrum-based fault localization;Xie;Information and Software Technology,2013

5. J. Regehr, Finding compiler bugs by removing dead code. http://blog.regehr.org/archives/1161, 2014.

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Achieving Last-Mile Functional Coverage in Testing Chip Design Software Implementations;2023 IEEE/ACM 45th International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP);2023-05