DTester: Diversity-Driven Test Case Generation for Web Applications

被引:1
作者
Wu, Shumei [1 ]
Chang, Zexing [1 ]
Zhang, Zhanwen [1 ]
Li, Zheng [1 ]
Liu, Yong [1 ]
机构
[1] Beijing Univ Chem Technol, Coll Informat Sci & Technol, Beijing 100000, Peoples R China
基金
中国国家自然科学基金;
关键词
Web application; test case generation; genetic algorithm optimization; diversity metric; vulnerable path; VULNERABILITIES;
D O I
10.1142/S0218194023500559
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Search-based Test Case Generation (TCG) for web applications suffers from unstable performance and suboptimal test suite problems due to diversity loss. However, previous diversity metrics mainly only focus on client-side models or server-side code, which are prone to low robustness and poor generalization in practical applications. We propose a diversity-driven TCG method DTester, which can maximize behavior exploration and minimize the test suite size while covering more server-side vulnerable paths. Three diversity metrics (i.e. phenotypic coupling, intent coupling and competitiveness) are proposed to measure the underlying relationship between test cases from user behavior, code logic and test execution history. Moreover, a 3-dimensional weight graph is designed to model association among metrics, which provides fine-grained guidance for the genetic algorithm to generate diverse test cases from the client-side behavior model. Our empirical evaluation on five web applications shows that DTester can efficiently and robustly generate better test suites than the state-of-the-art TCG method. The maximum improvement is 85%, 60%, 716% and 88% in efficiency, test suite size, diversity and robustness.
引用
收藏
页码:357 / 390
页数:34
相关论文
共 52 条
[41]   An Integrated Approach for Effective Injection Vulnerability Analysis of Web Applications Through Security Slicing and Hybrid Constraint Solving [J].
Thome, Julian ;
Shar, Lwin Khin ;
Bianculli, Domenico ;
Briand, Lionel .
IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 2020, 46 (02) :163-195
[42]  
Tosun A., 2021, 28 AS PAC SOFTW ENG, P70
[43]   Does Diversity Improve the Test Suite Generation for Mobile Applications? [J].
Vogel, Thomas ;
Tran, Chinh ;
Grunske, Lars .
SEARCH-BASED SOFTWARE ENGINEERING, SSBSE 2019, 2019, 11664 :58-74
[44]   Parallel evolutionary test case generation for web applications [J].
Wang, Weiwei ;
Wu, Shumei ;
Li, Zheng ;
Zhao, Ruilian .
INFORMATION AND SOFTWARE TECHNOLOGY, 2023, 155
[45]   Test Case Generation based on Client-Server of Web Applications by Memetic Algorithm [J].
Wang, Weiwei ;
Guo, Xiaohong ;
Li, Zheng ;
Zhao, Ruilian .
2019 IEEE 30TH INTERNATIONAL SYMPOSIUM ON SOFTWARE RELIABILITY ENGINEERING (ISSRE), 2019, :206-216
[46]   A DOMAIN STRATEGY FOR COMPUTER-PROGRAM TESTING [J].
WHITE, LJ ;
COHEN, EI .
IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 1980, 6 (03) :247-257
[47]   Automated Model-Based Test Case Generation for Web User Interfaces (WUI) From Interaction Flow Modeling Language (IFML) Models [J].
Yousaf, Nazish ;
Azam, Farooque ;
Butt, Wasi Haider ;
Anwar, Muhammad Waseem ;
Rashid, Muhammad .
IEEE ACCESS, 2019, 7 :67331-67354
[48]   Search-based Testing and System Testing: A Marriage in Heaven [J].
Zeller, Andreas .
2017 IEEE/ACM 10TH INTERNATIONAL WORKSHOP ON SEARCH-BASED SOFTWARE TESTING (SBST), 2017, :49-50
[49]   Resource and dependency based test case generation for RESTful Web services [J].
Zhang, Man ;
Marculescu, Bogdan ;
Arcuri, Andrea .
EMPIRICAL SOFTWARE ENGINEERING, 2021, 26 (04)
[50]   Diversity-Oriented Test Suite Generation for EFSM Model [J].
Zhao, Ruilian ;
Wang, Weiwei ;
Song, Yuqi ;
Li, Zheng .
IEEE TRANSACTIONS ON RELIABILITY, 2020, 69 (02) :611-631