English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Security testing verifies that the data and the resources of software systemsare protected from attackers. Unfortunately, it suffers from the oracleproblem, which refers to the challenge, given an input for a system, ofdistinguishing correct from incorrect behavior. In many situations wherepotential vulnerabilities are tested, a test oracle may not exist, or it mightbe impractical due to the many inputs for which specific oracles have to bedefined. In this paper, we propose a metamorphic testing approach thatalleviates the oracle problem in security testing. It enables engineers tospecify metamorphic relations (MRs) that capture security properties of thesystem. Such MRs are then used to automate testing and detect vulnerabilities.We provide a catalog of 22 system-agnostic MRs to automate security testing inWeb systems. Our approach targets 39% of the OWASP security testing activitiesnot automated by state-of-the-art techniques. It automatically detected 10 outof 12 vulnerabilities affecting two widely used systems, one commercial and theother open source (Jenkins).

Metamorphic Security Testing for Web Systems