Back
Tonella_2024_ACM_3597503.3640323
Conference paper (in proceedings)

Hypertesting of programs : theoretical foundation and automated test generation

  • Pasqua, Michele Dept. of Computer Science, University of Verona, Italy
  • Ceccato, Mariano Dept. of Computer Science, University of Verona, Italy
  • Tonella, Paolo ORCID Istituto del software (SI), Facoltà di scienze informatiche, Università della Svizzera italiana, Svizzera
  • 2024
Published in:
  • IEEE/ACM 46th International Conference on Software Engineering (ICSE). - 2024, p. 1 - 12
Search-based testing
Hyperproperties
Information flows
Security testing
Code coverage criteria
English Hyperproperties are used to define correctness requirements that involve relations between multiple program executions. This allows, for instance, to model security and concurrency requirements, which cannot be expressed by means of trace properties. In this paper, we propose a novel systematic approach for automated testing of hyperproperties. Our contribution is both foundational and practical. On the foundational side, we define a hyper-testing framework, which includes a novel hypercoverage adequacy criterion designed to guide the synthesis of test cases for hyperproperties. On the practical side, we instantiate such framework by implementing HyperFuzz and HyperEvo, two test generators targeting the Non-Interference security requirement, that rely respectively on fuzzing and search algorithms. Experimental results show that the proposed hypercoverage adequacy criterion correlates with the capability of a hypertest to expose hyperproperty violations and that both HyperFuzz and HyperEvo achieve high hypercoverage and high vulnerability exposure with no false alarms (by construction). While they both outperform the state-of-the-art dynamic taint analysis tool Phosphor, HyperEvo is more effective than HyperFuzz on some benchmark programs.
Collections
Language
  • English
Classification
Computer science and technology
Notes
  • ICSE '24: IEEE/ACM 46th International Conference on Software Engineering
  • Lisbon Portugal
  • April 14-24, 2024
License
CC BY
Open access status
hybrid
Identifiers
Persistent URL
https://n2t.net/ark:/12658/srd1333973
Statistics
Document views: 0 File downloads:
  • Tonella_2024_ACM_3597503.3640323: 0