Toward Security Test Automation for Event Driven GUI Web Contents
Автор: Izzat Alsmadi, Ahmed AlEroud
Журнал: International Journal of Computer Network and Information Security(IJCNIS) @ijcnis
Статья в выпуске: 6 vol.4, 2012 года.
Бесплатный доступ
The web is taking recently a large percentage of software products. The evolving nature of web applications put a serious challenge on testing, if we consider the dynamic nature of the current web. More precisely, testing both blocked contents and AJAX interfaces, might create new challenges in terms of test coverage and completeness. In this paper, we proposed enhancements and extensions of the current test automation activities. In the proposed framework, user interaction with AJAX interfaces is used to collect DOM violation states. A blocked content is accessed through multiple forms' submission with dynamic contents, and in each iteration the vulnerability events databases are modified. Next, the test cases database of possible vulnerable inputs for both AJAX and blocked contents is built. Finally, Coverage assessment is evaluated after executing those test cases based on several possible coverage aspects.
Web Testing, Test Automation, Security Testing, Coverage Metrics
Короткий адрес: https://sciup.org/15011090
IDR: 15011090
Список литературы Toward Security Test Automation for Event Driven GUI Web Contents
- A. Danny ,"Web Application Security: Automated Scanning Versus Manual Penetration Testing". Web application security White paper, January, 2008.
- W. Yao, T .Chung, L .Tsung, "A Testing Framework for Web Application Security Assessment", Journal of Computer Networks, vol. 48, PP (739–761), 2005
- C.Kallepalli, and J.Tian, "Measuring and Modeling Usage and Reliability for Statistical Web Testing", IEEE Trans Software Engineering, 27(11): PP (1023-1034), 2001
- L. Xu, B. Xu, and Z. Chen, "A Scheme of Web Testing Approach", Journal of Najing in Chinese, 38(11): PP (182-186), 2002.
- J. Offutt, Y. Wu, X. Du and H. Huang,"Bypass Testing of Web Applications", In Proc. of the 15th International Symposium on Software Reliability Engineering (ISSRE'04), Saint-Malo, Bretagne, France, 2004.
- Z. Qia, M. Ko, and H. Zen, "A Practical Web Testing Model for Web Application Testing", in the 3d International IEEE Conference on Signal-Image Technologies and Internet-Based System, Bali, Indonesia, (2008), PP(434-441)
- B. Marín, Tanja, G. Giachetti, A. Baars, , "Towards Testing Future Web Applications", Fifth International conference in Research Challenges in Information Science (RCIS), Valencia, Spain, 2011, PP (1 – 12).
- X. Luo, F. Ping, and M. Hwa, "Clustering and Tailoring User Session Data for Testing Web Applications", International Conference on Software Testing Verification and Validation, Berlin, 2009, PP(336 – 345)
- F. Ricca and P. Tonella. "Analysis and Testing Of Web Applications". In Proc. of ICSE 2001, International Conference on Software Engineering, Toronto, Ontario, Canada, May, 2001, 12-19, pages 25–34.
- S. Raghavan, And H. Garcia-molina, "Crawling the Hidden Web". In Proc. of the 27th VLDB Conference, Roma, Italy, 2001, PP (129–138).
- A. Mesbah, A. Deursen and D. Roest," Invariant-Based Automated Testing of Modern Web Applications". IEEE Transactions on Software Engineering, vol. 40, no. 8, 2012.
- H. Alessandro, and P. Tonella, "Improving Web Application Testing Using Testability Measures", 11th IEEE International Symposium on Web Systems Evolution (WSE), Issue Date: 25-26 Sept. 2009, PP (49 - 58).
- I. Alsmadi, and K. Magel, "An Object Oriented Framework for User Interface Test Automation". Midwest Instruction and Computing Symposium, ND, USA 2007.
