title: Metamorphic Testing for Cybersecurity.
abstract: Testing is a major approach for the detection of software defects, including vulnerabilities in security features. This article introduces metamorphic testing (MT), a relatively new testing method, and discusses how the new perspective of MT can help to conduct negative testing as well as to alleviate the oracle problem in the testing of security-related functionality and behavior. As demonstrated by the effectiveness of MT in detecting previously unknown bugs in real-world critical applications such as compilers and code obfuscators, we conclude that software testing of security-related features should be conducted from diverse perspectives in order to achieve greater cybersecurity.
authors: Department of Computer Science and Software Engineering, Swinburne University of Technology, Australia.
authors: Tsong Yueh
authors: TY
authors: Chen
authors: Department of Computer Science and Software Engineering, Swinburne University of Technology, Australia.
authors: Fei-Ching
authors: FC
authors: Kuo
authors: School of Computing and Information Technology, University of Wollongong, Australia.
authors: Wenjuan
authors: W
authors: Ma
authors: School of Computing and Information Technology, University of Wollongong, Australia.
authors: Willy
authors: W
authors: Susilo
authors: School of Computer Science, The University of Nottingham Ningbo China, China.
authors: Dave
authors: D
authors: Towey
authors: US National Institute of Standards and Technology (NIST).
authors: Jeffrey
authors: J
authors: Voas
authors: School of Computing and Information Technology, University of Wollongong, Australia.
authors: Zhi Quan
authors: ZQ
authors: Zhou