Nikolai Tillmann
ABSTRACT
A web service exposes a public API that can be accessed by potentially hostile clients over the internet. Pex, a white-box test generation tool for .NET, can automatically create test inputs that cover comer cases of a web service implemented in .NET, simulating a malicous attacker.
- R. Akkiraju, J. Farrell, J. Miller, M. Nagarajan, M.-T. Schmidt, A. Sheth, and K. Verma. Web service semantics - wsdl-s version 1.0. http://www.w3.org/Submission/WSDL-S/, November 2005.Google Scholar
- C. Cadar, V. Ganesh, P. M. Pawlowski, D. L. Dill, and D. R. Engler. Exe: automatically generating inputs of death. In CCS '06: Proceedings of the 13th ACM conference on Computer and communications security, pages 322--335, New York, NY, USA, 2006. ACM Press. Google ScholarDigital Library
- P. Godefroid, N. Klarlund, and K. Sen. DART: directed automated random testing. SIGPLAN Notices, 40(6):213--223, 2005. Google ScholarDigital Library
- P. Godefroid, M. Y. Levin, and D. Molnar. Automated whitebox fuzz testing. In Proceedings of NDSS '08 (Network and Distributed Systems Security), pages 151--166, 2008.Google Scholar
- J. C. King. Symbolic execution and program testing. Commun. ACM, 19(7):385--394, 1976. Google ScholarDigital Library
- E. Martin, S. Basu, and T. Xie. Automated testing and response analysis of web services. In Proc. the IEEE International Conference on Web Services (ICWS 2007), Application Services and Industry Track, pages 647--654, July 2007.Google Scholar
- Microsoft Corporation. Windows Communication Foundation. http://msdn.microsoft.com/en-us/netframework/aa663324.aspx. {accessed 05-June-2008}.Google Scholar
- Pex development team. Pex. http://research.microsoft.com/Pex, 2007.Google Scholar
- K. Sen and G. Agha. CUTE and jCUTE: Concolic unit testing and explicit path model-checking tools. In CAV, pages 419--423, 2006. Google ScholarDigital Library
- N. Tillmann and J. de Halleux. Pex - white box test generation for .NET. In Proc. of Tests and Proofs (TAP '08), volume 4966 of LNCS, pages 134--153, Prato, Italy, April 2008. Springer. Google Scholar
- N. Tillmann and W. Schulte. Parameterized unit tests. In Proceedings of the 10th European Software Engineering Conference held jointly with 13th ACM SIGSOFT International Symposium on Foundations of Software Engineering., pages 253--262. ACM, 2005. Google ScholarDigital Library
- N. Tillmann and W. Schulte. Mock-object generation with behavior. In ASE '06: Proceedings of the 21st IEEE/ACM International Conference on Automated Software Engineering, pages 365--368, Washington, DC, USA, 2006. IEEE Computer Society. Google ScholarDigital Library
- N. Tillmann and W. Schulte. Unit tests reloaded: Parameterized unit testing with symbolic execution. IEEE Software, 23(4):38--47, 2006. Google ScholarDigital Library
Index Terms
- White-box testing of behavioral web service contracts with Pex
Recommendations
Parameterized unit testing: theory and practice
ICSE '10: Proceedings of the 32nd ACM/IEEE International Conference on Software Engineering - Volume 2Unit testing has been widely recognized as an important and valuable means of improving software reliability, as it exposes bugs early in the software development life cycle. However, manual unit testing is often tedious and insufficient. Testing tools ...
Exploring output-based coverage for testing PHP web applications
In software testing, different testers focus on different aspects of the software such as functionality, performance, design, and other attributes. While many tools and coverage metrics exist to support testers at the code level, not much support is ...
Bringing white-box testing to Service Oriented Architectures through a Service Oriented Approach
The attractive feature of Service Oriented Architecture (SOA) is that pieces of software conceived and developed by independent organizations can be dynamically composed to provide richer functionality. The same reasons that enable flexible compositions,...
Comments