Skip to main content
Top

2019 | OriginalPaper | Chapter

Automatic Test Data Generation for a Given Set of Applications Using Recurrent Neural Networks

Authors : Ciprian Paduraru, Marius-Constantin Melemciuc, Miruna Paduraru

Published in: Software Technologies

Publisher: Springer International Publishing

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

To address the problem of automatic software testing against vulnerabilities, our work focuses on creating a tool capable in assisting users to generate automatic test sets for multiple programs under test at the same time. Starting with an initial set of inputs in a corpus folder, the tool works by clustering the inputs depending on their application target type, then produces a generative model for each of these clusters. The architecture of the models is falling in the recurrent neural network architecture class, and for training and inferencing the models we used the Tensorflow framework. Online-learning is supported by the tool, thus models can get better as long as new inputs for each application cluster are added to the corpus folder. Users can interact with the tool similar to the interface used in expert systems: customize various parameters exposed per cluster, or override various function hooks for learning and inferencing the model, with the purpose of getting finer control over the tool’s backend. As the evaluation section shows, the tool can be useful for creating important sets of new inputs, with good code coverage quality and less resources consumed.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
3.
go back to reference Arzt, S., et al.: Flowdroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. In: PLDI (2014) Arzt, S., et al.: Flowdroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps. In: PLDI (2014)
7.
go back to reference Chen, P., Chen, H.: Angora: efficient fuzzing by principled search. CoRR abs/1803.01307 (2018) Chen, P., Chen, H.: Angora: efficient fuzzing by principled search. CoRR abs/1803.01307 (2018)
8.
go back to reference Cho, K., van Merrienboer, B., Gülçehre, Ç., Bougares, F., Schwenk, H., Bengio, Y.: Learning phrase representations using RNN encoder-decoder for statistical machine translation. CoRR abs/1406.1078 (2014). http://arxiv.org/abs/1406.1078 Cho, K., van Merrienboer, B., Gülçehre, Ç., Bougares, F., Schwenk, H., Bengio, Y.: Learning phrase representations using RNN encoder-decoder for statistical machine translation. CoRR abs/1406.1078 (2014). http://​arxiv.​org/​abs/​1406.​1078
12.
go back to reference Godefroid, P.: Random testing for security: blackbox vs. whitebox fuzzing. In: RT 2007 (2007) Godefroid, P.: Random testing for security: blackbox vs. whitebox fuzzing. In: RT 2007 (2007)
15.
go back to reference Godefroid, P., Peleg, H., Singh, R.: Learn&fuzz: machine learning for input fuzzing. In: Rosu, G., Penta, M.D., Nguyen, T.N. (eds.) Proceedings of the 32nd IEEE/ACM International Conference on Automated Software Engineering, ASE 2017, Urbana, IL, USA, 30 October–3 November 2017, pp. 50–59. IEEE Computer Society (2017). https://doi.org/10.1109/ASE.2017.8115618 Godefroid, P., Peleg, H., Singh, R.: Learn&fuzz: machine learning for input fuzzing. In: Rosu, G., Penta, M.D., Nguyen, T.N. (eds.) Proceedings of the 32nd IEEE/ACM International Conference on Automated Software Engineering, ASE 2017, Urbana, IL, USA, 30 October–3 November 2017, pp. 50–59. IEEE Computer Society (2017). https://​doi.​org/​10.​1109/​ASE.​2017.​8115618
18.
go back to reference Kaner, C., Bach, J., Pettichord, B.: Lessons Learned in Software Testing. Wiley, New York (2001) Kaner, C., Bach, J., Pettichord, B.: Lessons Learned in Software Testing. Wiley, New York (2001)
22.
go back to reference Newsome, J.: Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software (2005) Newsome, J.: Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software (2005)
23.
go back to reference Paduraru, C., Melemciuc, M.: An automatic test data generation tool using machine learning. In: Maciaszek, L.A., van Sinderen, M. (eds.) Proceedings of the 13th International Conference on Software Technologies, ICSOFT 2018, Porto, Portugal, 26–28 July 2018, pp. 506–515. SciTePress (2018). https://doi.org/10.5220/0006836605060515 Paduraru, C., Melemciuc, M.: An automatic test data generation tool using machine learning. In: Maciaszek, L.A., van Sinderen, M. (eds.) Proceedings of the 13th International Conference on Software Technologies, ICSOFT 2018, Porto, Portugal, 26–28 July 2018, pp. 506–515. SciTePress (2018). https://​doi.​org/​10.​5220/​0006836605060515​
30.
go back to reference Sutton, M., Greene, A., Amini, P.: Fuzzing: Brute Force Vulnerability Discovery. Addison-Wesley Professional, Reading (2007) Sutton, M., Greene, A., Amini, P.: Fuzzing: Brute Force Vulnerability Discovery. Addison-Wesley Professional, Reading (2007)
Metadata
Title
Automatic Test Data Generation for a Given Set of Applications Using Recurrent Neural Networks
Authors
Ciprian Paduraru
Marius-Constantin Melemciuc
Miruna Paduraru
Copyright Year
2019
DOI
https://doi.org/10.1007/978-3-030-29157-0_14

Premium Partner