Metamorphic testing for cybersecurity

Authors

Tsong Yueh Chen, Swinburne University of TechnologyFollow
Fei-Ching Kuo, Swinburne University of TechnologyFollow
Wenjuan Ma, University of WollongongFollow
Willy Susilo, University of WollongongFollow
Dave Towey, University of Nottingham China Campus
Jeffrey Voas, US National Institute of Standards and Technology
Zhiquan Zhou, University of WollongongFollow

RIS ID

105775

Publication Details

Chen, T., Kuo, F., Ma, W., Susilo, W., Towey, D., Voas, J. & Zhou, Z. (2016). Metamorphic testing for cybersecurity. Computer, 49 (6), 48-55.

Abstract

Metamorphic testing (MT) can enhance security testing by providing an alternative to using a test oracle, which is often unavailable or impractical. The authors report how MT detected previously unknown bugs in real-world critical applications such as code obfuscators, giving evidence that software testing requires diverse perspectives to achieve greater cybersecurity.