Browsing by Author "Linschulte, M."

Now showing 1 - 6 of 6

Citation Count: 8
Event-based input validation using design-by-contract patterns
(2009) Tuglular, T.; Muftuoglu, C.A.; Belli, F.; Linschulte, M.; Tuğlular, Tuğkan; Bilgisayar Mühendisliği Bölümü
This paper proposes an approach for validation of numerical inputs based on graphical user interfaces (GUI) that are modeled and specified by event sequence graphs (ESG). For considering complex structures of input data, ESGs are augmented by decision tables and patterns of design by contract (DbC). The approach is evaluated by experiments on boundary overflows, which occur when input values violate the range of specified values. Furthermore, a tool is presented that implements our approach enabling a semiautomatically detection of boundary overflow errors and suggesting correction steps based on DbC. © 2009 IEEE.
Citation Count: 4
GUI-based testing of boundary overflow vulnerability
(2009) Tuglular, T.; Muftuoglu, C.A.; Kaya, O.; Belli, F.; Linschulte, M.; Tuğlular, Tuğkan; Bilgisayar Mühendisliği Bölümü
Boundary overflows are caused by violation of constraints, mostly limiting the range of internal values of a program, and can be provoked by an intruder to gain control of or access to stored data. In order to countermeasure this well-known vulnerability issue, this paper focuses on input validation of graphical user interfaces (GUI). The approach proposed generates test cases for numerical inputs based on GUI specification through decision tables. If boundary overflow error(s) are detected, the source code will be analyzed to localize and correct the encountered error(s) automatically. © 2009 IEEE.
Citation Count: 1
Karar Tablosu Destekli Olay Sira Çizgeleri Temelli Sinama Durum Üretim Arac
(CEUR-WS, 2016) Belli, F.; Linschulte, M.; Tuǧlular, T.; Tuğlular, Tuğkan
[No abstract available]
Message from the MVV workshop chairs
(IEEE Computer Society, 2012) Tuglular, T.; Linschulte, M.; Tuğlular, Tuğkan; Bilgisayar Mühendisliği Bölümü
[No abstract available]
Citation Count: 3
Model-based contract testing of graphical user interfaces
(Maruzen Co., Ltd., 2015) Tuglular, T.; Muftuoglu, A.; Belli, F.; Linschulte, M.; Tuğlular, Tuğkan; Bilgisayar Mühendisliği Bölümü
Graphical User Interfaces (GUIs) are critical for the security, safety and reliability of software systems. Injection attacks, for instance via SQL, succeed due to insufficient input validation and can be avoided if contract-based approaches, such as Design by Contract, are followed in the software development lifecycle of GUIs. This paper proposes a model-based testing approach for detecting GUI data contract violations, which may result in serious failures such as system crash. A contract-based model of GUI data specifications is used to develop test scenarios and to serve as test oracle. The technique introduced uses multi terminal binary decision diagrams, which are designed as an integral part of decision tableaugmented event sequence graphs, to implement a GUI testing process. A case study, which validates the presented approach on a port scanner written in Java programming language, is presented. Copyright © 2015 The Institute of Electronics, Information and Communication Engineers.
Model-based selective layer-centric testing
(Information Processing Society of Japan, 2018) Belli, F.; Dincer, N.G.; Linschulte, M.; Tuglular, T.; Tuğlular, Tuğkan; Bilgisayar Mühendisliği Bölümü
Model-based testing of large systems usually requires decomposition of the model into hierarchical submodels for generating test sequences, which fulfills the goals of module testing, but not those of system testing. System testing requires test sequences be generated from a fully resolved model, which necessitates refining the toplevel model, that is, by replacing its elements with submodels they represent. If the depth of model hierarchy is high, the number of test sequences along with their length increases resulting in high test costs. For solving this conflict, a novel approach is introduced that generates test sequences based on the top-level model and replaces elements of these sequences by corresponding, optimized test sequences generated by the submodels. To compensate the shortcoming at test accuracy, the present approach selects components that have lowering impact on the overall system reliability. The objective is to increase the reliabilities of these critical components by intensive testing and appropriate correction which, as a consequence, also increases the overall reliability at less test effort without losing accuracy. An empirical study based on a large web-based commercial system is performed to validate the approach and analyze its characteristics, and to discuss its strengths and weaknesses. © 2018 Information Processing Society of Japan.