首页> 外文会议>Software Security and Reliability (SERE), 2012 IEEE Sixth International Conference on >Mining Executable Specifications of Web Applications from Selenium IDE Tests
【24h】

Mining Executable Specifications of Web Applications from Selenium IDE Tests

机译:从Selenium IDE测试中挖掘Web应用程序的可执行规范

获取原文
获取原文并翻译 | 示例

摘要

A common practice for system testing of web-based applications is to perform the test cases through a web browser. These tests are often recorded and managed by a record and replay tool, such as Selenium IDE. Mining specifications from such tests can be very useful for understanding, verifying, and debugging the system under test. This paper presents an approach to mining a behavior specification from a Selenium IDE test suite such that (a) it captures the behavior of the tests at a high level of abstraction, (b) the behavior can be simulated, and (c) all the tests are completely reproducible from the specification. We first identify similar test actions through context-sensitive clustering so as to normalize the given Selenium IDE tests. Then, we mine patterns of test actions that represent meaningful functions and transform Selenium IDE tests into abstract tests, which are similar to the tests used in the existing model-mining techniques. From the abstract tests, we synthesize a high-level Petri net that captures both temporal constraints and data values. For evaluation purposes, we applied our approach to eight test suites of two real-world systems, Magento (an online shopping system being used by many live stores) and Amazon. Two of the test suites are for security testing, aiming at SQL injection and XSS vulnerabilities. The result shows that our approach is effective in producing abstract yet executable specifications and reducing the complexity of the models.
机译:基于Web的应用程序的系统测试的常见做法是通过Web浏览器执行测试用例。这些测试通常由记录和重播工具(例如Selenium IDE)记录和管理。从此类测试中挖掘规范对于理解,验证和调试被测系统非常有用。本文提出了一种从Selenium IDE测试套件中挖掘行为规范的方法,该方法使得(a)可以在高度抽象的水平上捕获测试的行为,(b)可以模拟行为,并且(c)所有测试可以从规范中完全重现。我们首先通过上下文相关的群集来识别类似的测试操作,以规范给定的Selenium IDE测试。然后,我们挖掘代表有意义功能的测试动作的模式,并将Selenium IDE测试转换为抽象测试,这些测试类似于现有模型挖掘技术中使用的测试。从抽象测试中,我们综合了捕获时间约束和数据值的高级Petri网。为了进行评估,我们将我们的方法应用于两个实际系统的八个测试套件中,这两个系统分别是Magento(许多生活商店正在使用的在线购物系统)和Amazon。其中两个测试套件用于安全性测试,主要针对SQL注入和XSS漏洞。结果表明,我们的方法有效地生成了抽象但可执行的规范,并降低了模型的复杂性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号