Combinational metamorphic testing in integer vulnerabilities detection

Abstract

Integer vulnerability is a common and hidden problem of software security. Even mature software written by experienced programmers cannot avoid integer vulnerability. Therefore, it is very important for testers to detect the bugs. However, testing the bugs will face the test oracle problem. As far as we know, the metamorphic testing can effectively alleviate the test oracle problem. In this paper, a method of combinational metamorphic relations (CMR) is proposed, which solves the test oracle problem and is more effective than metamorphic relation for Integer vulnerability detection. A case study results shows that the combinational metamorphic relations are more effective in bugs-detection than the single metamorphic relations.