A controlled experiment on white-box database testing

Tuya, Javier; Dolado, José Javier; Suárez-Cabal, M. José; Riva, Claudio de la

doi:10.1145/1344452.1344462

Cited by 10 publications

(5 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We also intend to adapt test generation algorithms to include these new test purposes types. In addition, we want to investigate the automatic analysis of non-observable system reactions in the context a white box testing [24].…”

Section: Discussionmentioning

confidence: 99%

Modeling and Testing Secure Web-Based Systems: Application to an Industrial Case Study

Mallouli

Lallali

Morales

et al. 2008

2008 IEEE International Conference on Signal Image Technology and Internet Based Systems

View full text Add to dashboard Cite

Ensuring that a Web-based system respects its security requirements is a critical issue that has become more and more difficult to perform in these last years. This difficulty is due to the complexity level of such systems as well as their variety and increasing distribution. To guarantee such a respect, we need to test the target Web system by applying a complete set of test cases covering all the possible scenarios. To reach this aim, we first specify the Web system behavior from its functional point of view using IF language. Second, this model is augmented by applying a set of dedicated algorithms to integrate timed security properties specified in Nomad language. This language is well adapted to express security properties with time constraints. Then, we use a dedicated tool called TestGen-IF, to perform an automatic test generation of test cases targeting security purposes. These test sequences are transformed in executable test cases that can be applied on a real Web application. We present in this paper an industrial Web-based system provided by France Telecom 1 as a case study to demonstrate the reliability of our framework.

show abstract

Section: Discussionmentioning

confidence: 99%

Modeling and Testing Secure Web-Based Systems: Application to an Industrial Case Study

Mallouli

Lallali

Morales

et al. 2008

2008 IEEE International Conference on Signal Image Technology and Internet Based Systems

View full text Add to dashboard Cite

show abstract

“…The approach taken was generating four different test databases with different sizes, in order to show the performance of the rules when executing against the databases. The open source tool dbMonster 5 was used for such purpose. The resulting databases have 4, 10, 100 and 1000 rows per table under the Oracle XE 10g database management system.…”

Section: Set Of Queries and Test Databasementioning

confidence: 99%

“…Each of them has a number of coverage nodes that represent the situations to be covered by the query when executed against the test data. A further controlled experiment [5] in which each of the situations to be covered is presented to the user in the form of a textual rule reveals that using this approach leads to test inputs able to reveal more faults in the queries than when it is not used. However, the main drawback is the scalability and performance because the coverage trees may grow exponentially and the evaluation of the coverage is done algorithmically.…”

Section: Related Workmentioning

confidence: 99%

“…During the development, a small test database may be created from scratch in order to fulfill the coverage of test data against the query. A controlled experiment previously conducted by the authors [5] has shown that when the user develops a test database assisted by a coverage criterion, it leads to tests that are able to detect more faults in the query than if he/she is not guided by the criterion. However, creating new test databases for each query is very time consuming.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Full predicate coverage for testing SQL database queries

Tuya

Suárez-Cabal

Riva

2010

Software Testing Verif & Rel

Self Cite

View full text Add to dashboard Cite

SUMMARYIn the field of database applications a considerable part of the business logic is implemented using a semi-declarative language: the Structured Query Language (SQL). Because of the different semantics of SQL compared to other procedural languages, the conventional coverage criteria for testing are not directly applicable. This paper presents a criterion specifically tailored for SQL queries (SQLFpc). It is based on Masking Modified Condition Decision Coverage (MCDC) or Full Predicate Coverage and takes into account a wide range of the syntax and semantics of SQL, including selection, joining, grouping, aggregations, subqueries, case expressions and null values. The criterion assesses the coverage of the test data in relation to the query that is executed and it is expressed as a set of rules that are automatically generated and efficiently evaluated against a test database. The use of the criterion is illustrated in a case study which includes complex queries.

show abstract

“…In the literature, there is other related work that used mutation analysis for testing database applications. Tuya et al 15 conducted a controlled experiment to compare the effectiveness of a structural test coverage criterion developed for SQL queries with other conventional criteria (e.g. equivalence partitioning and boundary value analysis).…”

Section: Introductionmentioning

confidence: 99%

JDAMA: Java database application mutation analyser

Zhou

Frankl

2011

Software Testing Verif & Rel

View full text Add to dashboard Cite

Database application programs are ubiquitous; hence, good techniques for testing them are needed. Several approaches to testing database applications have been proposed recently, including test generation techniques and adequacy criteria. Tuya et al. proposed mutation‐based adequacy criteria for database queries and developed a set of mutation operators for Structured Query Language SELECT statements. This paper extends that approach by integrating it with analysis and instrumentation of the application bytecode. The design and implementation of a tool, Java Database Application Mutation Analyser (JDAMA), are described. JDAMA instruments application bytecode so as to compare the results of queries executed by the application under test to the results of mutants of those queries. JDAMA can be used to support mutation testing for Java database applications. A second, potentially more useful application of JDAMA is to support experiments evaluating testing techniques for database applications, in which query mutation is used to seed faults into subject applications. The paper illustrates these uses of JDAMA with experiments comparing two approaches to test generation and experiments evaluating coverage criteria. Copyright © 2011 John Wiley & Sons, Ltd.

show abstract

A controlled experiment on white-box database testing

Cited by 10 publications

References 9 publications

Modeling and Testing Secure Web-Based Systems: Application to an Industrial Case Study

Modeling and Testing Secure Web-Based Systems: Application to an Industrial Case Study

Full predicate coverage for testing SQL database queries

JDAMA: Java database application mutation analyser

Contact Info

Product

Resources

About