DTester: Diversity-Driven Test Case Generation for Web Applications

被引:1
作者
Wu, Shumei [1 ]
Chang, Zexing [1 ]
Zhang, Zhanwen [1 ]
Li, Zheng [1 ]
Liu, Yong [1 ]
机构
[1] Beijing Univ Chem Technol, Coll Informat Sci & Technol, Beijing 100000, Peoples R China
基金
中国国家自然科学基金;
关键词
Web application; test case generation; genetic algorithm optimization; diversity metric; vulnerable path; VULNERABILITIES;
D O I
10.1142/S0218194023500559
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Search-based Test Case Generation (TCG) for web applications suffers from unstable performance and suboptimal test suite problems due to diversity loss. However, previous diversity metrics mainly only focus on client-side models or server-side code, which are prone to low robustness and poor generalization in practical applications. We propose a diversity-driven TCG method DTester, which can maximize behavior exploration and minimize the test suite size while covering more server-side vulnerable paths. Three diversity metrics (i.e. phenotypic coupling, intent coupling and competitiveness) are proposed to measure the underlying relationship between test cases from user behavior, code logic and test execution history. Moreover, a 3-dimensional weight graph is designed to model association among metrics, which provides fine-grained guidance for the genetic algorithm to generate diverse test cases from the client-side behavior model. Our empirical evaluation on five web applications shows that DTester can efficiently and robustly generate better test suites than the state-of-the-art TCG method. The maximum improvement is 85%, 60%, 716% and 88% in efficiency, test suite size, diversity and robustness.
引用
收藏
页码:357 / 390
页数:34
相关论文
共 52 条
  • [1] Almeida S, 2019, COMM COM INF SC, V1010, P339, DOI 10.1007/978-3-030-29238-6_25
  • [2] Alshahwan N, 2012, PROC INT CONF SOFTW, P1345, DOI 10.1109/ICSE.2012.6227083
  • [3] DATA DIVERSITY - AN APPROACH TO SOFTWARE FAULT TOLERANCE
    AMMANN, PE
    KNIGHT, JC
    [J]. IEEE TRANSACTIONS ON COMPUTERS, 1988, 37 (04) : 418 - 425
  • [4] Automatically Repairing Web Application Firewalls Based on Successful SQL Injection Attacks
    Appelt, Dennis
    Panichella, Annibale
    Briand, Lionel
    [J]. 2017 IEEE 28TH INTERNATIONAL SYMPOSIUM ON SOFTWARE RELIABILITY ENGINEERING (ISSRE), 2017, : 339 - 350
  • [5] Arcuri Andrea., 2011, Proceedings of the 2011 International Symposium on Software Testing and Analysis, P265
  • [6] Bachelet V., 1999, THESIS LILLE, P1
  • [7] Diversity-Based Web Test Generation
    Biagiola, Matteo
    Stocco, Andrea
    Ricca, Filippo
    Tonella, Paolo
    [J]. ESEC/FSE'2019: PROCEEDINGS OF THE 2019 27TH ACM JOINT MEETING ON EUROPEAN SOFTWARE ENGINEERING CONFERENCE AND SYMPOSIUM ON THE FOUNDATIONS OF SOFTWARE ENGINEERING, 2019, : 142 - 153
  • [8] Search Based Path and Input Data Generation for Web Application Testing
    Biagiola, Matteo
    Ricca, Filippo
    Tonella, Paolo
    [J]. SEARCH BASED SOFTWARE ENGINEERING, SSBSE 2017, 2017, 10452 : 18 - 32
  • [9] Billes M, 2017, ACM SIGPLAN NOTICES, V52, P171, DOI [10.1145/3140587.3062364, 10.1145/3062341.3062364]
  • [10] Diversity oriented test data generation using metaheuristic search techniques
    Bueno, Paulo M. S.
    Jino, Mario
    Wong, W. Eric
    [J]. INFORMATION SCIENCES, 2014, 259 : 490 - 509