Graphical User Interfaces (GUIs) are critical for the security, safety and reliability of software systems. Injection attacks, for instance via SQL, succeed due to insufficient input validation and can be avoided if contract-based approaches, such as Design by Contract, are followed in the software development lifecycle of GUIs. This paper proposes a model-based testing approach for detecting GUI data contract violations, which may result in serious failures such as system crash. A contract-based model of GUI data specifications is used to develop test scenarios and to serve as test oracle. The technique introduced uses multi terminal binary decision diagrams, which are designed as an integral part of decision table-augmented event sequence graphs, to implement a GUI testing process. A case study, which validates the presented approach on a port scanner written in Java programming language, is presented.
Tugkan TUGLULAR
Izmir Institute of Technology
Arda MUFTUOGLU
M.O.S.S. Computer Grafik Systeme GmbH
Fevzi BELLI
Izmir Institute of Technology,University of Paderborn
Michael LINSCHULTE
Andagon GmbH
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Copy
Tugkan TUGLULAR, Arda MUFTUOGLU, Fevzi BELLI, Michael LINSCHULTE, "Model-Based Contract Testing of Graphical User Interfaces" in IEICE TRANSACTIONS on Information,
vol. E98-D, no. 7, pp. 1297-1305, July 2015, doi: 10.1587/transinf.2014EDP7364.
Abstract: Graphical User Interfaces (GUIs) are critical for the security, safety and reliability of software systems. Injection attacks, for instance via SQL, succeed due to insufficient input validation and can be avoided if contract-based approaches, such as Design by Contract, are followed in the software development lifecycle of GUIs. This paper proposes a model-based testing approach for detecting GUI data contract violations, which may result in serious failures such as system crash. A contract-based model of GUI data specifications is used to develop test scenarios and to serve as test oracle. The technique introduced uses multi terminal binary decision diagrams, which are designed as an integral part of decision table-augmented event sequence graphs, to implement a GUI testing process. A case study, which validates the presented approach on a port scanner written in Java programming language, is presented.
URL: https://globals.ieice.org/en_transactions/information/10.1587/transinf.2014EDP7364/_p
Copy
@ARTICLE{e98-d_7_1297,
author={Tugkan TUGLULAR, Arda MUFTUOGLU, Fevzi BELLI, Michael LINSCHULTE, },
journal={IEICE TRANSACTIONS on Information},
title={Model-Based Contract Testing of Graphical User Interfaces},
year={2015},
volume={E98-D},
number={7},
pages={1297-1305},
abstract={Graphical User Interfaces (GUIs) are critical for the security, safety and reliability of software systems. Injection attacks, for instance via SQL, succeed due to insufficient input validation and can be avoided if contract-based approaches, such as Design by Contract, are followed in the software development lifecycle of GUIs. This paper proposes a model-based testing approach for detecting GUI data contract violations, which may result in serious failures such as system crash. A contract-based model of GUI data specifications is used to develop test scenarios and to serve as test oracle. The technique introduced uses multi terminal binary decision diagrams, which are designed as an integral part of decision table-augmented event sequence graphs, to implement a GUI testing process. A case study, which validates the presented approach on a port scanner written in Java programming language, is presented.},
keywords={},
doi={10.1587/transinf.2014EDP7364},
ISSN={1745-1361},
month={July},}
Copy
TY - JOUR
TI - Model-Based Contract Testing of Graphical User Interfaces
T2 - IEICE TRANSACTIONS on Information
SP - 1297
EP - 1305
AU - Tugkan TUGLULAR
AU - Arda MUFTUOGLU
AU - Fevzi BELLI
AU - Michael LINSCHULTE
PY - 2015
DO - 10.1587/transinf.2014EDP7364
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E98-D
IS - 7
JA - IEICE TRANSACTIONS on Information
Y1 - July 2015
AB - Graphical User Interfaces (GUIs) are critical for the security, safety and reliability of software systems. Injection attacks, for instance via SQL, succeed due to insufficient input validation and can be avoided if contract-based approaches, such as Design by Contract, are followed in the software development lifecycle of GUIs. This paper proposes a model-based testing approach for detecting GUI data contract violations, which may result in serious failures such as system crash. A contract-based model of GUI data specifications is used to develop test scenarios and to serve as test oracle. The technique introduced uses multi terminal binary decision diagrams, which are designed as an integral part of decision table-augmented event sequence graphs, to implement a GUI testing process. A case study, which validates the presented approach on a port scanner written in Java programming language, is presented.
ER -