位置:成果数据库 > 期刊 > 期刊详情页
A property-based testing framework for encryption programs
  • ISSN号:0254-4164
  • 期刊名称:《计算机学报》
  • 时间:0
  • 分类:TP311[自动化与计算机技术—计算机软件与理论;自动化与计算机技术—计算机科学与技术] TP31[自动化与计算机技术—计算机软件与理论;自动化与计算机技术—计算机科学与技术]
  • 作者机构:[1]School of Computer and Communication Engineering, University of Science and Technology Beijing, Beijing 100083, China, [2]State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China
  • 相关基金:Acknowledgements Authors would like to thank Professor Tsong Yueh Chen for his constructive comments on the earlier version of this paper and Rong Liang for her involvement in the experiments reported in this work. This research was supported by the National Natural Science Foundation of China (Grant Nos. 60903003, 61370061), the Beijing Natural Science Foundation of China (4112037), the Fundamental Research Funds for the Central Universities (FRF-SD-12-015A), the Open Funds of the State Key Laboratory of Computer Science of Chinese Academy of Science, (SYSKF1105), and the Beijing Municipal Training Program for Excellent Talents (2012D009006000002). Thanks to the anonymous reviewers who provided useful suggestions on earlier versions of this paper.
中文摘要:

在最近的年里,许多加密算法被建议提高软件和系统的安全。验证加密算法是否正确地被实现是一个挑战性的问题。软件测试交付一个有效、实际的解决方案,但是它也面对神谕问题(也就是说在许多实际状况下面,知道为任何给定的输入的输出是否是正确的不可能或太计算地昂贵) 。在这份报纸,我们当神谕不在时建议一条基于性质的途径到严峻的加密程序。我们的途径使用加密算法的所谓的变形性质产生测试用例并且验证测试结果。二案例研究被进行说明建议途径并且验证它的有效性。试验性的结果证明甚至没有神谕,建议途径能检测将近 50% 插入的差错与至多三种变形关系(太太) 和五十个测试用例。

英文摘要:

In recent years, a variety of encrypfion algorithms were proposed to enhance the security of software and systems. Validating whether encryption algorithms are correctly implemented is a challenging issue. Software testing delivers an effective and practical solution, but it also faces the oracle problem (that is, under many practical situations, it is impossible or too computationally expensive to know whether the output for any given input is correct). In this paper, we propose a property-based approach to testing encryption programs in the absence of oracles. Our approach makes use of the so-called metamorphic properties of encryption algorithms to generate test cases and verify test results. Two case studies were conducted to illustrate the proposed approach and validate its effectiveness. Experimental results show that even without oracles, the proposed approach can detect nearly 50% inserted faults with at most three metamorphic relations (MRs) and fifty test cases.

同期刊论文项目
期刊论文 13 会议论文 8 专利 4
同项目期刊论文
期刊信息
  • 《计算机学报》
  • 北大核心期刊(2011版)
  • 主管单位:中国科学院
  • 主办单位:中国计算机学会 中国科学院计算技术研究所
  • 主编:孙凝晖
  • 地址:北京中关村科学院南路6号
  • 邮编:100190
  • 邮箱:cjc@ict.ac.cn
  • 电话:010-62620695
  • 国际标准刊号:ISSN:0254-4164
  • 国内统一刊号:ISSN:11-1826/TP
  • 邮发代号:2-833
  • 获奖情况:
  • 中国期刊方阵“双效”期刊
  • 国内外数据库收录:
  • 美国数学评论(网络版),荷兰文摘与引文数据库,美国工程索引,美国剑桥科学文摘,日本日本科学技术振兴机构数据库,中国中国科技核心期刊,中国北大核心期刊(2004版),中国北大核心期刊(2008版),中国北大核心期刊(2011版),中国北大核心期刊(2014版),中国北大核心期刊(2000版)
  • 被引量:48433