Solving Some Modeling Challenges when Testing Rich Internet Applications for Security

  • Authors:
  • Suryakant Choudhary;Mustafa Emre Dincturk;Gregor V. Bochmann;Guy-Vincent Jourdan;Iosif Viorel Onut;Paul Ionescu

  • Affiliations:
  • -;-;-;-;-;-

  • Venue:
  • ICST '12 Proceedings of the 2012 IEEE Fifth International Conference on Software Testing, Verification and Validation
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Crawling is a necessary step for testing web applications for security. An important concept that impacts the efficiency of crawling is state equivalence. This paper proposes two techniques to improve any state equivalence mechanism. The first technique detects parts of the pages that are unimportant for crawling. The second technique helps identifying session parameters. We also present a summary of our research on crawling techniques for the new generation of web applications, so-called Rich Internet Applications (RIAs). RIAs present new security and crawling challenges that cannot be addressed by traditional techniques. Solving these issues is a must if we want to continue benefitting from automated tools for testing web applications.