AIM: Automated Input Set Minimization for Metamorphic Security Testing

arXiv:2402.10773v1 Announce Type: new
Abstract: For Web systems, which are accessible to any machine connected to internet, security is a critical concern. Although security testing can be automated by generating crafted inputs as an attacker would do, solutions to automate the test oracle, i.e., distinguishing correct from incorrect outputs for a given input, remain preliminary. Specifically, previous work has demonstrated the potential of metamorphic testing; indeed, security failures can be determined by metamorphic relations that turn valid inputs into malicious …

aim arxiv attacker automated can connected critical cs.cr cs.se input inputs internet machine minimization oracle security security testing solutions systems test testing web