The paper proposes a security testing technique to detect known vulnerabilities of web applications using both static and dynamic analysis. We also present a process to improve the security of web applications by mitigating many of the vulnerabilities revealed in the testing phase, and address a new method for detecting unknown vulnerabilities by applying dynamic black-box testing based on a fu...

This document discusses data flow testing: a form of structural (white box) testing that is a variant on path testing, focussing on the definition and usage of variables, rather than the structure of the program. Two different topics relating to data flow testing are discussed: define/use testing, along with a set of test coverage metrics; and the concept of splitting a program into slices, acc...

Augmented test suite generation is a technique to minimise test effort and duration. Modified condition and decision coverage (MC/DC) is a white box software testing criteria targeting to prove all the conditions involved in a predicate which can influence the predicate value in an efficient way. The coverage analysis is a structural testing method, which helps to remove gaps in a test suite an...

Although both blackand white-box testing have the same objective, namely detecting faults in a program, they are often conducted separately. In our opinion, the reason is the lack of techniques and tools integrating both strategies, although integration can substantially decrease testing costs. Specifically, an integrated technique can generate a reduced test suite, as single test cases can cov...

The idea of using models in mutation analysis dates back to mid 1980s. Recently, it is shown that, with some proper adaptations, mutation testing can also be utilized as a black-box testing approach. For this purpose, a modeling structure, a set of mutation operators, coverage criteria and test case generation methods are required. This paper compares event-based and state-based realizations of...

Data ow and mutation testing are two powerful white box testing techniques for unit-level software testing. Unfortunately, they cannot be completely compared on an analytical basis, for example, mutation is incomparable on an inclusion basis with most data ow criteria. This paper shows that mutation includes the All-defs data ow criterion, but is incomparable with other data ow criteria, and pr...

Although both blackand white-box testing have the same objective, namely detecting faults in a program, they are often conducted separately. In our opinion, the reason is the lack of techniques and tools integrating both strategies, although an integration can substantially decrease testing costs. Specifically, an integrated technique can generate a reduced test suite, as single test cases can ...

Model-based Debugging is an application of Model-based Diagnosis techniques to debugging computer systems. Its basic principle is to compare a model, i.e., a description of the correct behaviour of a system, to the observed behaviour of the system. In this paper we show how this technique can be applied in the context of model-based mutation testing (MBMT) with timed automata. In MBMT we automa...

Component Based Software Development (CBSD) is gaining popularity in recent years. In this way of software development, software components, which are typically black-box components, are intensively reused to construct new systems. To ensure the quality of software systems composed of black-box components, a primary concern is how to ensure the quality of black-box components. Thus, adequate te...

This paper describes part of an STL conformance test suite currently under development. Test suites for all of the STL containers have been written, demonstrating the feasibility of thorough and highly automated testing of industrial component libraries. We describe affordable test suites that provide good code and boundary value coverage, including the thousands of cases that naturally occur f...