Mining Similar Methods for Test Adaptation

Sondhi, Devika; Jobanputra, Mayank; Rani, Divya; Purandare, Salil; Sharma, Sakshi; Purandare, Rahul

doi:10.1109/tse.2021.3057163

Cited by 2 publications

(4 citation statements)

References 37 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We then run these test suites on each of the 80 combinations of bridges and wrappers available in the framework. This reuse of tests across libraries of the same domain is in part similar to the work of Sondhi and colleagues [17].…”

Section: Rq2 Can the Test Suite Of Libraries Be Curated And Reused To...supporting

confidence: 60%

See 1 more Smart Citation

Automatic Diversity in the Software Supply Chain

Harrand¹,

Durieux²,

Broman³

et al. 2021

Preprint

View full text Add to dashboard Cite

Despite its obvious benefits, the increased adoption of package managers to automate the reuse of libraries has opened the door to a new class of hazards: supply chain attacks. By injecting malicious code in one library, an attacker may compromise all instances of all applications that depend on the library. To mitigate the impact of supply chain attacks, we propose the concept of Library Substitution Framework. This novel concept leverages one key observation: when an application depends on a library, it is very likely that there exists other libraries that provide similar features. The key objective of Library Substitution Framework is to enable the developers of an application to harness this diversity of libraries in their supply chain. The framework lets them generate a population of application variants, each depending on a different alternative library that provides similar functionalities. To investigate the relevance of this concept, we develop ARGO, a proof-of-concept implementation of this framework that harnesses the diversity of JSON suppliers. We study the feasibility of library substitution and its impact on a set of 368 clients. Our empirical results show that for 195 of the 368 java applications tested, we can substitute the original JSON library used by the client by at least 15 other JSON libraries without modifying the client's code. These results show the capacity of a Library Substitution Framework to diversify the supply chain of the client applications of the libraries it targets.

show abstract

Section: Rq2 Can the Test Suite Of Libraries Be Curated And Reused To...supporting

confidence: 60%

“…Shacham and colleagues exploit the diversity of collection libraries [16] to optimize the applications depending on them. Sondhi [17] reuses the test cases of similar libraries. Our work is the first to propose to harness diverse libraries to generate variant applications.…”

Section: Diversity Reservoirs In Software Repositoriesmentioning

confidence: 99%

Automatic Diversity in the Software Supply Chain

Harrand¹,

Durieux²,

Broman³

et al. 2021

Preprint

View full text Add to dashboard Cite

show abstract

“…Basios [40] and Shacham and colleagues [13] exploit the diversity of data structure implementations to tailor the selection according to the application that uses a data structure. Sondhi and colleagues [14] leverage similarities between library implementations to reuse test cases from one to test another. Boussaa and colleagues [15] study family of code generators that target different languages from the same sources.…”

Section: Related Workmentioning

confidence: 99%

“…Behavioral diversity can be harnessed for improving reliability [11], [12], performance [13], or testing [14], [15]. All these techniques require one foundation: a sound assessment of the existing diversity that can be exploited.…”

Section: Introductionmentioning

confidence: 99%

The Behavioral Diversity of Java JSON Libraries

Harrand

Durieux

Broman

et al. 2021

2021 IEEE 32nd International Symposium on Software Reliability Engineering (ISSRE)

View full text Add to dashboard Cite

JSON is an essential file and data format in domains that span scientific computing, web APIs or configuration management. Its popularity has motivated significant software development effort to build multiple libraries to process JSON data. Previous studies focus on performance comparison among these libraries and lack a software engineering perspective.We present the first systematic analysis and comparison of the input / output behavior of 20 JSON libraries, in a single software ecosystem: Java/Maven. We assess behavior diversity by running each library against a curated set of 473 JSON files, including both well-formed and ill-formed files. The main design differences, which influence the behavior of the libraries, relate to the choice of data structure to represent JSON objects and to the encoding of numbers. We observe a remarkable behavioral diversity with ill-formed files, or corner cases such as large numbers or duplicate data. Our unique behavioral assessment of JSON libraries paves the way for a robust processing of illformed files, through a multi-version architecture.

show abstract

Mining Similar Methods for Test Adaptation

Cited by 2 publications

References 37 publications

Automatic Diversity in the Software Supply Chain

Automatic Diversity in the Software Supply Chain

The Behavioral Diversity of Java JSON Libraries

Contact Info

Product

Resources

About