The Experts below are selected from a list of 57885 Experts worldwide ranked by ideXlab platform
Lionel C Briand - One of the best experts on this subject based on the ideXlab platform.
-
SOFIA: An automated security oracle for Black-Box Testing of SQL-injection vulnerabilities
2016 31st IEEE ACM International Conference on Automated Software Engineering (ASE), 2016Co-Authors: Mariano Ceccato, Cu D. Nguyen, Dennis Appelt, Lionel C BriandAbstract:Security Testing is a pivotal activity in engineering secure software. It consists of two phases: generating attack inputs to test the system, and assessing whether test executions expose any vulnerabilities. The latter phase is known as the security oracle problem. In this work, we present SOFIA, a Security Oracle for SQL-Injection Vulnerabilities. SOFIA is programming-language and source-code independent, and can be used with various attack generation tools. Moreover, because it does not rely on known attacks for learning, SOFIA is meant to also detect types of SQLi attacks that might be unknown at learning time. The oracle challenge is recast as a one-class classification problem where we learn to characterise legitimate SQL statements to accurately distinguish them from SQLi attack statements. We have carried out an experimental validation on six applications, among which two are large and widely-used. SOFIA was used to detect real SQLi vulnerabilities with inputs generated by three attack generation tools. The obtained results show that SOFIA is computationally fast and achieves a recall rate of 100% (i.e., missing no attacks) with a low false positive rate (0.6%).
-
environment modeling with uml marte to support black box system Testing for real time embedded systems methodology and industrial case studies
Model Driven Engineering Languages and Systems, 2010Co-Authors: Muhammad Zohaib Iqbal, Andrea Arcuri, Lionel C BriandAbstract:The behavior of real-time embedded systems (RTES) is driven by their environment. Independent system test teams normally focus on Black-Box Testing as they have typically no easy access to precise design information. Black-Box Testing in this context is mostly about selecting test scenarios that are more likely to lead to unsafe situations in the environment. Our Model-Based Testing (MBT) methodology explicitly models key properties of the environment, its interactions with the RTES, and potentially unsafe situations triggered by failures of the RTES under test. Though environment modeling is not new, we propose a precise methodology fitting our specific purpose, based on a language that is familiar to software testers, that is the UML and its extensions, as opposed to technologies geared towards simulating natural phenomena. Furthermore, in our context, simulation should only be concerned with what is visible to the RTES under test. Our methodology, focused on Black-Box MBT, was assessed on two industrial case studies. We show how the models are used to fully automate Black-Box Testing using search-based test case generation techniques and the generation of code simulating the environment.
Yulianti Yulianti - One of the best experts on this subject based on the ideXlab platform.
-
Pengujian Perangkat Lunak Sistem Informasi Peminjaman PlayStation dengan Teknik Boundary Value Analysis Menggunakan Metode Black Box Testing
'Universitas Pamulang', 2020Co-Authors: Ahrizal Dekif, Miftah, Maula Khaerul, Kurniawan Romi, Zaelani Teguh, Yulianti YuliantiAbstract:Testing on an application aims to check whether a program has run properly or there are still errors that must be corrected so that the program created will be a program that has good quality. In this study the software that will be reviewed using Black Box Testing is a PlayStation Loan Information Application System where this application aims to facilitate the admin (PlayStation rental) in data collection on the number of borrowers, as well as the return date of PlayStation borrowed by members, where there are 2 forms to be filled in. Member added data form, game added form during the loan. lending data information applications will be tested using Black Box Testing where this test only aims to see the program whether in accordance with the expected function or not without knowing the program code used. Black Box Testing Method consists of several techniques, including Equivalence Partitions, Boundary Value Analysis, Sample Testing, and so on. Among the many Testing techniques, in this study the Testing technique was chosen using Boundary Value Analysis. Boundary Value Analysis Techniques, are software Testing techniques in which tests are designed to include representatives of boundary values in a range.Pengujian pada suatu aplikasi bertujuan untuk memeriksa apakah sebuah program telah berjalan dengan semestinya atau masih ada kesalahan yang harus diperbaiki agar program yang dibuat akan menjadi program yang memiliki kualitas yang baik. Pada pengkajian ini perangkat lunak yang akan dikaji menggunakan Black Box Testing adalah sebuah Sistem Aplikasi Informasi Peminjaman PlayStation dimana aplikasi ini bertujuan memudahkan admin (rental PlayStation) dalam pendataan jumlah peminjam, serta tanggal pengembalian PlayStation yang dipinjam anggota, dimana terdapat 2 form yang akan diisi dengan data form tambah Anggota, form tambah game selama di peminjaman. aplikasi informasi data peminjaman tersebut akan diuji menggunakan Black Box Testing di mana pengujian ini hanya bertujuan untuk melihat program apakah sesuai dengan fungsi yang diharapkan atau tidak tanpa mengetahui kode program yang digunakan. Metode Black Box Testing terdiri atas beberapa teknik, antara lain Equivalence Partitions, Boundary Value Analysis, Sample Testing, dan sebagainya. Di antara banyak teknik pengujian tersebut, pada penelitian ini dipilih teknik pengujian menggunakan Boundary Value Analysis. Teknik Boundary Value Analysis, adalah perangkat lunak pengujian teknik di mana tes dirancang untuk mencangkup perwakilan dari nilai-nilai batas dalam kisaran
-
Pengujian Aplikasi Pemesanan Tiket Kereta berbasis Website Menggunakan Metode Black Box dengan Teknik Equivalence Partitioning
'Universitas Pamulang', 2020Co-Authors: Trengginaz, Riro Bregas, Yusup Ade, Sunyoto, Daniel Sovian, Jihad, Muhammad Ruhul, Yulianti YuliantiAbstract:The train ticket booking application is an important application because it involves financial transactions. If something goes wrong can be detrimental to the parties involved. The developer of the train ticket booking application must be able to provide a guarantee that the application has been made according to the requirements and has good quality. To provide a guarantee can be done by Testing the application. Testing on a product intends to check if a program has been running as per its capacities or still have blunders that should be adjusted so as to have a decent quality program. A famous Testing strategy and broadly utilized by analyzers to investigate the program works out in a good way or not is Black Box Testing and White Box Testing. In this examination, the product that will be surveyed utilizing Black Box Testing is a train ticket booking framework that has two structures: the login structure and the booking type of the train pass to be filled by the administrator. The application will test utilizing Black Box Testing in which the test is just planned to see whether the program is as per the capacity that the program needs without realizing the program code utilized. The sort of Testing of the Black Box Testing technique shifts one of which is Equivalence Partitions utilized by the creators in this investigation. Comparability Partitions procedure is a test dependent on entering information on each structure on the framework, each info menu will be tried and assembled by work either legitimate or invalid. Incorrect test results can be found and corrected immediately. So after Testing, all requirements have been met and can be guaranteed that the train ticket booking application that has been made is error free and meets all the requirements specified.Aplikasi pemesanan tiket kereta merupakan aplikasi yang penting karena melibatkan transaksi keuangan. Jika terjadi kesalahan dapat merugikan pihak-pihak yang terlibat. Pengembang aplikasi pemesanan tiket kereta harus dapat memberikan jaminan bahwa aplikasi yang dibuat telah sesuai persyaratan dan memiliki kualitas yang baik. Untuk memberikan jaminan dapat dilakukan dengan pengujian aplikasi. Pengujian pada suatu perangkat lunak bertujuan untuk memeriksa apakah sebuah program telah berjalan sesuai dengan fungsinya atau masih memiliki kesalahan yang harus diperbaiki agar program yang dimiliki memiliki kualitas yang baik. Teknik pengujian yang popular dan banyak digunakan oleh para penguji untuk memeriksa program berjalan baik atau tidak adalah Black Box Testing dan White Box Testing. Pada pengkajian kali ini perangkat lunak yang akan dikaji menggunakan Black Box Testing adalah sebuah sistem pemesanan tiket kereta yang memiliki dua form yaitu form login dan form memesan tiket kereta yang akan diisi oleh admin. Aplikasi tersebut akan melakukan pengujian menggunakan Black Box Testing di mana pengujian ini hanya bertujuan untuk melihat program tersebut apakah sesuai dengan fungsi yang diinginkan program tersebut tanpa mengetahui kode program yang digunakan. Jenis pengujian dari metode Black Box Testing beragam salah satunya adalah Equivalence Partitions yang dipakai oleh penulis dalam penelitian ini. Teknik Equivalence Partitions merupakan pengujian berdasarkan masukkan data pada setiap form yang ada pada sistem, setiap menu masukkan akan dilakukan pengujian dan dikelompokkan berdasarkan fungsinya baik itu bernilai valid maupun tidak valid. Hasil pengujian yang tidak sesuai dapat ditemukan dan langsung diperbaiki. Sehingga setalah pengujian, semua persyaratan telah terpenuhi dan dapat diberikan jaminan bahwa aplikasi pemesanan tiket kereta yang dibuat telah bebas dari kesalahan dan memenuhi semua persyaratan yang ditetapkan
-
Pengujian Black Box pada Aplikasi Sistem Informasi Pengelolaan Masjid Menggunakan Teknik Equivalence Partitions
'Universitas Pamulang', 2020Co-Authors: Hendri Hendri, Hasiholan Manurung, Jimmi Walter, Ferian, Rifqi Audi, Hanaatmoko, Wahyu Faharrudin, Yulianti YuliantiAbstract:Black-Box Testing is very important because this technique is able to identify errors in functions, interfaces, data models, and access to external data sources. In implementation problems often arise when testers are never sure whether the software being tested has actually passed the test. This happens because there may be several execution paths that have never been tested. Testers must make every possible input data combination for Testing. The selection of input data to find errors is a problem for testers because it has a high probability, so the test case design can automatically become a solution. In this implementation the application to be tested using Black-Box Testing is the Mosque Management Information System. The Mosque Management application will be tested using black box Testing where the test is only intended to see if the program matches the function desired by the program without knowing the program code used. To produce test case designs automatically in black box method software Testing with equality partition technique. Equivalence Partitions technique is a test based on entering data on each form in the mosque management information system, each menu will be tested and grouped according to function whether it is valid or not.Pengujian Black-Box sangat penting karena teknik tersebut mampu mengidentifikasi kesalahan dalam fungsi, antar muka, model data, dan akses kesumber data eksternal. Dalam pelaksanaan sering timbul masalah penguji tidak pernah yakin apakah perangkat lunak yang diuji telah benar-benar lolos dalam pengujian. Hal ini terjadi karena kemungkinan masih ada beberapa jalur eksekusi yang belum pernah teruji. Penguji seharusnya membuat setiap kemungkinan kombinasi data masukan untuk pengujian. Pemilihan data masukan untuk menemukan kesalahan menjadi masalah bagi penguji karena memiliki probabilitas yang tinggi, sehingga desain test case secara otomatis dapat menjadi solusi. Pada implementasi ini aplikasi yang akan di uji menggunakan Black-Box Testing adalah sebuah Sistem Informasi Pengelolaan Masjid. Aplikasi Pengelolaan Masjid tersebut akan diuji menggunakan Black-Box Testing di mana pengujian ini hanya bertujuan untuk melihat program tersebut apakah sesuai dengan fungsi yang diinginkan program tersebut tanpa mengetahui kode program yang dipakai. Untuk menghasilkan desain test case secara otomatis dalam pengujian perangkat lunak metode Black-Box dengan teknik equivalence partitioning. Teknik Equivalence Partitions adalah pengujian didasarkan masukkan data pada setiap form yang ada pada sistem informasi pengelolaan masjid, setiap menu akan dilakukan pengujian dan dikelompokkan berdasarkan fungsinya baik itu bernilai valid ataupun tidak valid
Taratip Suwannasart - One of the best experts on this subject based on the ideXlab platform.
-
web service test case generation based on decision table short paper
International Conference on Quality Software, 2008Co-Authors: Siripol Noikajana, Taratip SuwannasartAbstract:Software Testing [1] consumes at least 50% of labor and its cost approximates 50-70% of software cost which it may cause software delay. To date, web service is a popular way of implementing a Service-Oriented Architecture (SOA), which has gained rapid adoption and support from leading companies in industry [2]. Most of researches, test case is generated from web service description only based on black box Testing which its limitation is a large number of generated test cases. This paper proposes a methodology to generate web service test case based on decision table. The generated test case corresponds to web service's requirement and web service description which are defined in WSDL-S and SWRL.
-
web service test case generation based on decision table
2008Co-Authors: Siripol Noikajana, Taratip SuwannasartAbstract:Software Testing [1] consumes at least 50% of labor and its cost approximates 50-70% of software cost which it may cause software delay. To date, web service is a popular way of implementing a ServiceOriented Architecture (SOA), which has gained rapid adoption and support from leading companies in industry [2]. Most of researches, test case is generated from web service description only based on black box Testing which its limitation is a large number of generated test cases. This paper proposes a methodology to generate web service test case based on decision table. The generated test case corresponds to web service’s requirement and web service description which are defined in WSDL-S and SWRL.
Desyani Teti - One of the best experts on this subject based on the ideXlab platform.
-
Pengujian Aplikasi Reservasi Hotel di LeGreen Hotel & Suite dengan Metode Black Box Testing Boundary Value Analysis
'Universitas Pamulang', 2020Co-Authors: Yani Achmad, Setiawan Deny, Sofian, Novrizal Egi, Subagja Rizky, Desyani TetiAbstract:In this test we will use software that has been made, namely the desktop-based LeGreen Hotel Reservation Application. In Testing this hotel room reservation application, the writer uses the black box Testing method. Black Box Testing is suitable in Testing hotel booking applications because this test aims to ensure the functionality of the LeGreen Hotel Reservation application. This study has several stages that must be done, including the identification of experimental problems, input data samples into the process system, then Testing to evaluate the output and finally the documentation of test results. Based on the analysis of the results of the application of methods to solve the problem shows that the level of application that runs reaches 70%, able to run and process employee data, rooms, visitors and payments used for hotel reservations. In the admin login form of 30%, only 20% succeeded, and in the Print Report Form, repairs are needed in order to improve the quality of the application in processing report print data as it functions.Dalam pengujian ini kami akan menggunakan software yang telah dibuat yaitu Aplikasi Reservasi Hotel LeGreen berbasis desktop. Dalam pengujian aplikasi pemesanan kamar hotel ini penulis menggunakan metode black box Testing. Black Box Testing cocok dalam pengujian aplikasi pemesanan kamar hotel karna pengujian ini bertujuan untuk memastikan fungsionalitas dari aplikasi reservasi Hotel LeGreen. Penelitian ini memiliki beberapa tahapan yang harus dilakukan, diantaranya yaitu Identifikasi masalah percobaan, input data sample kedalam system proses, selanjutnya pengujian melakukan evaluasi pada output dan yang terakhir dokumentasi hasil uji. berdasarkan analisa hasil penerapan metode untuk menyelesaikan masalah menunjukkan bahwa tingkat aplikasi yang berjalan mencapai 70%, mampu menjalankan dan mengolah data karyawan, kamar, pengujung serta pembayaran yang digunakan untuk keperluan reservasi di hotel. Dalam form login admin dari 30 % hanya 20 % berhasil dan pada Form Cetak Laporan diperlukan perbaikan kembali guna untuk meningkatkan kualitas aplikasi dalam mengolah data cetak laporan sebagai mana fungsinya
-
Implementasi Pengujian Black Box menggunakan Teknik Equivalents Partitions pada Aplikasi Pendaftaran Commuter Line Berbasis Web
'Universitas Pamulang', 2020Co-Authors: Oktafian, Muhamad Diky, Haetami, Muhamad Azi, Jibril Muhamad, Said Reyhan, Desyani TetiAbstract:Computer Program that contains defectives (mistakes) can cause a disadvantage that can affect to stakeholders. The disadvantaged can take the shape of money related, time, and others. So sometime recently the program is executed it has to be Testing. Testing on an application proposed to check the program is running legitimately or not. In Testing, this computer program will utilize Black Box Testing. Black Box Testing Strategy had a few strategies, Equivalence Partitions, Boundary Value Analysis, Sample Testing, etc. From many Testing methods, we will use the Equivalence Partitions. Equivalence Partitions method is a test based on data input for each form where the application system of performance data information each menu input would be tested and grouped accord to the function whether valid or invalid. Testing is doing on the Application form that will be in the content from the data that suitable with personal data. The final results show there is still much lack when valid data will be inputted causes data stored in the database to be incompatible with the expected data. The results of this test would be used to improve the application at performance data for the future. In the end, the application could handle normal and abnormal data with a percentage of success 91,67%.Perangkat lunak yang mengandung cacat (kesalahan) dapat menimbulkan kerugian. Kerugian yang diakibatkan dapat berdampak pada semua stakeholder. Kerugian dapat berbentuk finansial, waktu, dan lain-lain. Sehingga sebelum perangkat lunak diimplementasikan perlu dilakukan pengujian. Pengujian pada suatu aplikasi bertujuan memeriksa program pada aplikasi apabila telah berfungsi dengan semestinya. Pada pengujian perangkat lunak ini akan menggunakan Blackbox Testing. Metode Black Box Testing memiliki beberapa teknik, Equivalence Partitions, Boundary Value Analysis, Sample Testing, dan sebagainya. Di antara banyak teknik pengujian tersebut, pada penelitian ini dipilih teknik pengujian menggunakan Equivalence Partitions. Teknik Equivalence Partitions merupakan sebuah pengujian berdasarkan masukan data pada setiap form yang ada pada sistem aplikasi informasi data kinerja, setiap menu masukan akan dilakukan pengujian dan dikelompokkan berdasarkan fungsinya baik itu bernilai valid ataupun tidak valid. Pengujian dilakukan pada 1 form pendaftaran yang akan di isi dengan data sesuai data pribadi. Hasil sebuah pengujian dapat menunjukkan adanya kesalahan ketika pengguna melakukan validasi data yang akan dimasukkan, akhirnya bisa menyebabkan data yang akan dimasukkan pada database tidak sesuai dengan data yang sudah dirancang. Hasil dari pengujian bisa jadi masukan untuk perbaikan aplikasi pada data kinerja di kedepannya. Pada akhirnya aplikasi dapat menangani data normal maupun tidak, dengan persentase keberhasilan 91,67%
-
Pengujian Terhadap Aplikasi Parking Management Menggunakan Metode Black-Box Berbasis Equivalence Partitions
'Universitas Pamulang', 2020Co-Authors: Fauzi, Fahmi Ahmad, Putra, Gunawan Eka, Supriyanto Supriyanto, Saputra, Nurul Asia, Desyani TetiAbstract:Testing is a process in implementing a program for the purpose of finding / looking for an error. A test case is said to be good is if the test to be performed has the possibility of finding an error that cannot be revealed. While Testing is said to be successful if the test to be carried out successfully found an error that originally could not be found. This research was tested by applying the Black Boxt Testing method. There are several ways in the Black Box Testing method, namely Boundary Value Analysis, Comparison Testing, Sample Testing, Robustness Testing, Equivalence Partitioning and others. In this study using Testing by Equivalence Partitioning. Equivalence Partitioning Analysis is a case / problem that will be tested by finding several errors and reducing / minimizing the number of cases that must be made. This test is performed on the Parking Management Application function to facilitate managing parking. The test results indicate the application is in accordance with needs.Pengujian adalah suatu proses dalam melaksanakan suatu program untuk tujuan menemukan/mencari suatu kesalahan. Kasus pengujian dikatakan baik adalah apabila pengujian yang akan dilakukan memiliki kemungkinan dalam menemukan suatu kesalahan yang tidak dapat terungkap. Sedangkan pengujian dikatakan berhasil adalah apabila pengujian yang akan dilakukan berhasil menemukan suatu kesalahan yang awalanya tidak dapat ditemukan. Penelitian ini dilakukan pengujian dengan menerapkan metode Black Boxt Testing. Terdapat beberapa cara dalam metode Black Box Testing yaitu Boundary Value Analysis, Comparison Testing, Sample Testing, Robustness Tesing, Equivalence Partitioning dan lain-lain. Pada penelitian ini menggunakan pengujian dengan cara Equivalence Partitioning. Equivalence Partitioning Analysis merupakan suatu kasus/permasalahan yang akan dilakukan pengujian dengan ditemukannya beberapa kesalahan dan mengurangi/meminimalisir atas jumlah kasus yang harus dibuat. Pengujian ini dilakukan pada fungsi Aplikasi Parking Management guna memudahkan mengelola parkir. Hasil pengujian menunjukkan aplikasi sudah sesuai dengan kebutuhan
Mariano Ceccato - One of the best experts on this subject based on the ideXlab platform.
-
SOFIA: An automated security oracle for Black-Box Testing of SQL-injection vulnerabilities
2016 31st IEEE ACM International Conference on Automated Software Engineering (ASE), 2016Co-Authors: Mariano Ceccato, Cu D. Nguyen, Dennis Appelt, Lionel C BriandAbstract:Security Testing is a pivotal activity in engineering secure software. It consists of two phases: generating attack inputs to test the system, and assessing whether test executions expose any vulnerabilities. The latter phase is known as the security oracle problem. In this work, we present SOFIA, a Security Oracle for SQL-Injection Vulnerabilities. SOFIA is programming-language and source-code independent, and can be used with various attack generation tools. Moreover, because it does not rely on known attacks for learning, SOFIA is meant to also detect types of SQLi attacks that might be unknown at learning time. The oracle challenge is recast as a one-class classification problem where we learn to characterise legitimate SQL statements to accurately distinguish them from SQLi attack statements. We have carried out an experimental validation on six applications, among which two are large and widely-used. SOFIA was used to detect real SQLi vulnerabilities with inputs generated by three attack generation tools. The obtained results show that SOFIA is computationally fast and achieves a recall rate of 100% (i.e., missing no attacks) with a low false positive rate (0.6%).