Hong Huang

Publications (2)0 Total impact

• Source

  Available from: psu.edu

  Conference Proceeding: Web application bypass testing

  J. Offutt, Ye Wu, Xaiochen Du, Hong Huang
  [show abstract] [hide abstract]
  ABSTRACT: Input validation refers to checking user inputs to a program to ensure that they conform to expectations of the program. Input validation is used to check the format of numbers and strings, check the length of strings, and to ensure that strings do not contain invalid characters. Input validation testing (IVT) is particularly important for software that has a heavy reliance on user inputs, including Web applications. A common technique in Web applications is to perform input validation on the client by using HTML attributes and scripting languages such as JavaScript. An insidious problem with performing input validation on the client is that end users have the ability to bypass this validation. Bypass testing is a unique and novel way to create test cases that is available only because of the unusual mix of client-server, HTML GUI, and JavaScript technologies that are used in Web applications. This workshop paper presents the issues and concerns that allow bypass testing, the preliminary concepts behind the technique, and some early results on applying it. How effective and useful bypass testing can be in testing Web applications is determined through ongoing research and automation.
  Computer Software and Applications Conference, 2004. COMPSAC 2004. Proceedings of the 28th Annual International; 10/2004
• Source

  Available from: psu.edu

  Conference Proceeding: Coverage criteria for logical expressions

  P. Ammann, J. Offutt, Hong Huang
  [show abstract] [hide abstract]
  ABSTRACT: A large number of coverage criteria to generate tests from logical expressions have been proposed. Although there have been large variations in the terminology, the articulation of the criteria and the original source of the expressions, many of these criteria are fundamentally the same. The most commonly known and widely used criterion is that of modified condition decision coverage (MCDC), but some articulations of MCDC have had some ambiguities. This has led to confusion on the part of testers, students, and tool developers on how best to implement these test criteria. This paper presents a complete comprehensive set of criteria that incorporate all the existing criteria, and eliminates the ambiguities by introducing precise definitions of the various possibilities.
  Software Reliability Engineering, 2003. ISSRE 2003. 14th International Symposium on; 12/2003