Metamorphic testing for cybersecurity

Chen, Tsong Yueh; Kuo, Fei-Ching; Ma, Wenjuan; Susilo, Willy; Towey, Dave; Voas, Jeffrey; Zhou, Zhi Quan

Abstract

Metamorphic testing (MT) can enhance security testing by providing an alternative to using a testing oracle, which is often unavailable or impractical. The authors report how MT detected previously unknown bugs in real-world critical applications such as code obfuscators, giving evidence that software testing requires diverse perspectives to achieve greater cybersecurity.

Citation

Chen, T. Y., Kuo, F.-C., Ma, W., Susilo, W., Towey, D., Voas, J., & Zhou, Z. Q. (2016). Metamorphic testing for cybersecurity. Computer, 49(6), https://doi.org/10.1109/MC.2016.176

• Journal Article Type: Article
• Acceptance Date: Jan 1, 2016
• Publication Date: Jun 1, 2016
• Deposit Date: May 15, 2018
• Publicly Available Date: May 15, 2018
• Journal: Computer
• Print ISSN: 0018-9162
• Electronic ISSN: 0018-9162
• Publisher: Institute of Electrical and Electronics Engineers
• Peer Reviewed: Peer Reviewed
• Volume: 49
• Issue: 6
• DOI: https://doi.org/10.1109/MC.2016.176
• Public URL: https://nottingham-repository.worktribe.com/output/786880
• Publisher URL: https://ieeexplore.ieee.org/document/7490306/
• Contract Date: May 15, 2018