SOFIA: an automated security oracle for black-box testing of SQL-injection vulnerabilities

Mariano Ceccato, Cu D. Nguyen, Dennis Appelt, Lionel C. Briand

Abstract

Security testing is a pivotal activity in engineering secure software. It consists of two phases: generating attack inputs to test the system, and assessing whether test executions expose any vulnerabilities. The latter phase is known as the security oracle problem.

BibTeX

@inproceedings{Ceccato-al:ASE16,
  author    = {Mariano Ceccato and
               Cu D. Nguyen and
               Dennis Appelt and
               Lionel C. Briand},
  title     = {{SOFIA:} an automated security oracle for black-box testing of {SQL-injection} vulnerabilities},
  booktitle = {ASE},
  pages     = {167--177},
  publisher = {{ACM}},
  year      = {2016},
}

SOFIA: an automated security oracle for black-box testing of SQL-injection vulnerabilities

Abstract

Related papers