NDLI: Mutation-Based Testing of Format String Bugs

Content Provider	IEEE Xplore Digital Library
Author	Shahriar, H. Zulkernine, M.
Copyright Year	2008
Description	Author affiliation: Sch. of Comput., Queen's Univ., Kingston, ON (Shahriar, H.; Zulkernine, M.)
Abstract	Format string bugs (FSBs) make an implementation vulnerable to numerous types of malicious attacks. Testing an implementation against FSBs can avoid consequences due to exploits of FSBs such as denial of services, corruption of application states, etc. Obtaining an adequate test data set is essential for testing of FSBs. An adequate test data set contains effective test cases that can reveal FSBs. Unfortunately, traditional techniques do not address the issue of adequate testing of an application for FSB. Moreover, the application of source code mutation has not been applied for testing FSB. In this work, we apply the idea of mutation-based testing technique to generate an adequate test data set for testing FSBs. Our work addresses FSBs related to ANSI C libraries. We propose eight mutation operators to force the generation of adequate test dataset. A prototype mutation-based testing tool named MUFORMAT is developed to generate mutants automatically and perform mutation analysis. The proposed operators are validated by using four open source programs having FSBs. The results indicate that the proposed operators are effective for testing FSBs.
Starting Page	229
Ending Page	238
File Size	385917
Page Count	10
File Format	PDF
ISBN	9780769534824
ISSN	15302059
DOI	10.1109/HASE.2008.8
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2008-12-03
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Testing Computer bugs Genetic mutations Libraries Prototypes Runtime Performance evaluation Performance analysis Monitoring ANSI standards Test data adequacy Format String Bugs Mutation-based Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Research on Buffer Overflow Test Based on Invariant

MUTEC: Mutation-based testing of Cross Site Scripting

Interface Mutation to assess the adequacy of tests for components and systems

Abstraction in Assertion-Based Test Oracles

Assertion-Driven Development: Assessing the Quality of Contracts Using Meta-Mutations

Mutation Operators for Actor Systems

Strategy for mutation testing using genetic algorithms

Mutation-based testing of buffer overflows, sql injections, and format string bugs (2008).

MVP: a mutation-based validation paradigm

Mutation-Based Testing of Format String Bugs

Similar Documents

Research on Buffer Overflow Test Based on Invariant

MUTEC: Mutation-based testing of Cross Site Scripting

Interface Mutation to assess the adequacy of tests for components and systems

Abstraction in Assertion-Based Test Oracles

Assertion-Driven Development: Assessing the Quality of Contracts Using Meta-Mutations

Mutation Operators for Actor Systems

Strategy for mutation testing using genetic algorithms

Mutation-based testing of buffer overflows, sql injections, and format string bugs (2008).

MVP: a mutation-based validation paradigm

Mutation-Based Testing of Format String Bugs