Engineering internet-centric software systems

点击翻译按钮获取中文摘要

Web 2.0 applications are set to revolutionize computing, especially within cloud computing environments. However, Web 2.0 applications are error prone. Hence, this research program proposes a radical new approach to verification. It is argued that this approach needs to consider these systems in a language-neutral fashion rather than statically analyze their code base. Fuzzing or Fuzz testing is a popular, highly automated, language-neutral verification technique. However, traditional fuzzing approaches suffer from poor code and input coverage characteristics. It has been shown that traditional forms of fuzzing can be successfully extended by integrating other techniques such as symbolic execution. However, such extensions are often computational highly expensive. Recently grammar-based white-box fuzz testing has been proposed as such an extension; however, this extension has received limited attention in terms of its actualization.