A property-based testing framework for encryption programs

ISCAS OpenIR

	A property-based testing framework for encryption programs
	Sun, Chang-ai (1); Wang, Zuoyi (1); Wang, Guan (1); Sun, C.-A.(casun@ustb.edu.cn)
	2014
发表期刊	Frontiers of Computer Science
ISSN	20952228
卷号	8 期号:3 页码:478-489
摘要	In recent years, a variety of encryption algorithms were proposed to enhance the security of software and systems. Validating whether encryption algorithms are correctly implemented is a challenging issue. Software testing delivers an effective and practical solution, but it also faces the oracle problem (that is, under many practical situations, it is impossible or too computationally expensive to know whether the output for any given input is correct). In this paper, we propose a property-based approach to testing encryption programs in the absence of oracles. Our approach makes use of the so-called metamorphic properties of encryption algorithms to generate test cases and verify test results. Two case studies were conducted to illustrate the proposed approach and validate its effectiveness. Experimental results show that even without oracles, the proposed approach can detect nearly 50% inserted faults with at most three metamorphic relations (MRs) and fifty test cases. © 2014 Higher Education Press and Springer-Verlag Berlin Heidelberg.; In recent years, a variety of encryption algorithms were proposed to enhance the security of software and systems. Validating whether encryption algorithms are correctly implemented is a challenging issue. Software testing delivers an effective and practical solution, but it also faces the oracle problem (that is, under many practical situations, it is impossible or too computationally expensive to know whether the output for any given input is correct). In this paper, we propose a property-based approach to testing encryption programs in the absence of oracles. Our approach makes use of the so-called metamorphic properties of encryption algorithms to generate test cases and verify test results. Two case studies were conducted to illustrate the proposed approach and validate its effectiveness. Experimental results show that even without oracles, the proposed approach can detect nearly 50% inserted faults with at most three metamorphic relations (MRs) and fifty test cases. © 2014 Higher Education Press and Springer-Verlag Berlin Heidelberg.
收录类别	SCI ; EI
关键词	Software Testing Encryption Programs Test Oracles Metamorphic Testing (Mt)
部门归属	(1) School of Computer and Communication Engineering, University of Science and Technology Beijing, Beijing, 100083, China; (2) State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Beijing, 100190, China
语种	英语
WOS记录号	WOS:000337042200012
引用统计
内容类型	期刊论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16859
专题	中国科学院软件研究所
通讯作者	Sun, C.-A.(casun@ustb.edu.cn)
推荐引用方式 GB/T 7714	Sun, Chang-ai ,Wang, Zuoyi ,Wang, Guan ,et al. A property-based testing framework for encryption programs[J]. Frontiers of Computer Science,2014,8(3):478-489.
APA	Sun, Chang-ai ,Wang, Zuoyi ,Wang, Guan ,&Sun, C.-A..(2014).A property-based testing framework for encryption programs.Frontiers of Computer Science,8(3),478-489.
MLA	Sun, Chang-ai ,et al."A property-based testing framework for encryption programs".Frontiers of Computer Science 8.3(2014):478-489.