一句话:研究在无源码的黑盒测试环境中,仅借助二进制代码通过动态分析检测执行路径,以支持路径覆盖度量。
路径覆盖用于度量给定输入在运行时实际执行的路径比例,常用以评估软件的稳定性、安全性和功能,因此与软件测试紧密相关。传统路径覆盖依赖源码进行白盒测试,需要知道软件潜在的执行路径;当源码不可得而只能使用二进制代码时,该任务变得更具挑战。这种情况可能出现在商业产品、遗留系统或受限/无许可代码中。论文关注黑盒测试环境下的执行路径检测,讨论/研究通过动态分析在缺少源码的条件下识别运行时执行路径,从而为路径覆盖度量提供支持。摘要未报告具体实现细节、实验对象或量化结果。
Path coverage is the process of measuring the fraction of execution paths that are taken during run-time in a software by a given set of inputs. It is commonly used to assess the stability, security, and functionality of an application; therefore, this is closely associated with software testing. Path coverage requires knowledge of the software’s source code (white-box testing), specifically the software’s potential execution paths; however, the problem becomes more challenging when the source code is not available and path coverage must be done using only the software’s binary code. This can occur if the software is a product, the software is a legacy system, or the source code is not available (e.g. contracted software or permission-less).
DOI 原文 ·
@inproceedings{paperbot7317,
title = {Execution Path Detection through Dynamic Analysis in Black-Box Testing Environments},
author = {Frank Dixon Whitworth},
booktitle = {ASE},
year = {2022},
doi = {10.1145/3551349.3559506}
}