{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2023,1,3]],"date-time":"2023-01-03T06:51:48Z","timestamp":1672728708076},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2012,7,18]],"date-time":"2012-07-18T00:00:00Z","timestamp":1342569600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2014,2]]},"DOI":"10.1007\/s10664-012-9216-x","type":"journal-article","created":{"date-parts":[[2012,7,17]],"date-time":"2012-07-17T13:39:15Z","timestamp":1342532355000},"page":"69-104","source":"Crossref","is-referenced-by-count":5,"title":["A case study on bypass testing of web applications"],"prefix":"10.1007","volume":"19","author":[{"given":"Jeff","family":"Offutt","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vasileios","family":"Papadimitriou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Upsorn","family":"Praphamontripong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2012,7,18]]},"reference":[{"key":"9216_CR1","first-page":"69","volume-title":"Proceedings of the ninth annual conference on computer assurance (COMPASS 94)","author":"P Ammann","year":"1994","unstructured":"Ammann P, Offutt J (1994) Using formal methods to derive test frames in category-partition testing. In: Proceedings of the ninth annual conference on computer assurance (COMPASS 94). IEEE Computer Society, Gaithersburg, pp\u00a069\u201380"},{"issue":"3","key":"9216_CR2","doi-asserted-by":"crossref","first-page":"326","DOI":"10.1007\/s10270-004-0077-7","volume":"4","author":"A Andrews","year":"2005","unstructured":"Andrews A, Offutt J, Alexander R (2005) Testing Web applications by modeling with FSMs. Softw Syst Model, Springer 4(3):326\u2013345","journal-title":"Softw Syst Model, Springer"},{"issue":"1","key":"9216_CR3","doi-asserted-by":"crossref","first-page":"52","DOI":"10.1016\/j.infsof.2009.06.002","volume":"52","author":"A Andrews","year":"2010","unstructured":"Andrews A, Offutt J, Dyreson C, Mallery CJ, Jerath K, Alexander R (2010) Scalability issues with using FSMWeb to test web applications. Inf Softw Technol (Elsevier) 52(1):52\u201366. doi: 10.1016\/j.infsof.2009.06.002","journal-title":"Inf Softw Technol (Elsevier)"},{"key":"9216_CR4","volume-title":"Designing for the Web, about face 2.0: the essentials of interaction design","author":"A Cooper","year":"2003","unstructured":"Cooper A, Reimann R (2003) Designing for the Web, about face 2.0: the essentials of interaction design. Wiley, New York"},{"issue":"9","key":"9216_CR5","doi-asserted-by":"crossref","first-page":"900","DOI":"10.1109\/32.92910","volume":"17","author":"RA DeMillo","year":"1991","unstructured":"DeMillo RA, Offutt J (1991) Constraint-based automatic test data generation. IEEE Trans Softw Eng 17(9):900\u2013910","journal-title":"IEEE Trans Softw Eng"},{"issue":"3","key":"9216_CR6","first-page":"227","volume":"3","author":"C Eaton","year":"2007","unstructured":"Eaton C, Memon AM (2007) An empirical approach to testing web applications across diverse client platform configurations. International Journal on Web Engineering and Technology (IJWET), Special Issue on Empirical Studies in Web Engineering 3(3):227\u2013253","journal-title":"International Journal on Web Engineering and Technology (IJWET), Special Issue on Empirical Studies in Web Engineering"},{"key":"9216_CR7","unstructured":"ChristeyKarre S, Rothermel G S (ed) (2011) CWE\/SANS top 25 most dangerous software errors. Online, September 2011. http:\/\/cwe.mitre.org\/top25 , last access April 2012"},{"key":"9216_CR8","first-page":"49","volume-title":"Proceedings of the 25th international conference on software engineering","author":"S Elbaum","year":"2003","unstructured":"Elbaum S, Karre S, Rothermel G (2003) Improving Web application testing with user session data. In: Proceedings of the 25th international conference on software engineering. IEEE Computer Society, Portland, pp\u00a049\u201359"},{"issue":"3","key":"9216_CR9","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1109\/TSE.2005.36","volume":"31","author":"S Elbaum","year":"2005","unstructured":"Elbaum S, Rothermel G, Karre S, Fisher M (2005) Leveraging user-session data to support web application testing. IEEE Trans Softw Eng 31(3):187\u2013202","journal-title":"IEEE Trans Softw Eng"},{"key":"9216_CR10","unstructured":"Gold R (2003) Httpunit home. online: SourceForge. http:\/\/httpunit.sourceforge.net\/ , last access June 2005"},{"key":"9216_CR11","first-page":"145","volume-title":"Proceedings of the foundations of software engineering","author":"WGJ Halfond","year":"2007","unstructured":"Halfond WGJ, Orso A (2007) Improving test case generation for web applications using automated interface discovery. In: Proceedings of the foundations of software engineering. Dubrovnik, Croatia, pp\u00a0145\u2013154"},{"key":"9216_CR12","first-page":"61","volume-title":"International conference on software engineering, workshop on the future of software engineering","author":"MJ Harrold","year":"2000","unstructured":"Harrold MJ (2000) Testing: A roadmap. In: International conference on software engineering, workshop on the future of software engineering. Limerick, Ireland, pp\u00a061\u201372"},{"key":"9216_CR13","doi-asserted-by":"crossref","unstructured":"Hilburn T, Towhidnejad M (2002) Software quality across the curriculum. In: Proceedings of the 15th conference on software engineering education and training","DOI":"10.1109\/FIE.2002.1158641"},{"key":"9216_CR14","unstructured":"Hower R (2002) Web site test tools and site management tools. www.softwareqatest.com\/qatweb1.html"},{"key":"9216_CR15","unstructured":"Joomla (2007) The Joomla project. Online: http:\/\/www.joomla.org\/ . Last accessed June 2012"},{"key":"9216_CR16","doi-asserted-by":"crossref","first-page":"537","DOI":"10.1109\/CMPSAC.2000.884778","volume-title":"24th annual international computer software and applications conference (COMPSAC2000)","author":"D Kung","year":"2000","unstructured":"Kung D, Liu CH, Hsia P (2000) An object-oriented Web test model for testing Web applications. In: 24th annual international computer software and applications conference (COMPSAC2000). IEEE Computer Society, Taipei, pp\u00a0537\u2013542"},{"key":"9216_CR17","first-page":"84","volume-title":"Proceedings of the 11th international symposium on software reliability engineering","author":"CH Liu","year":"2000","unstructured":"Liu CH, Kung D, Hsia P, Hsu CT (2000) Structural testing of Web applications. In: Proceedings of the 11th international symposium on software reliability engineering. IEEE Computer Society, San Jose, pp\u00a084\u201396"},{"key":"9216_CR18","first-page":"74","volume-title":"5th international workshop on web site evolution (WSE 2003)","author":"GAD Lucca","year":"2003","unstructured":"Lucca GAD, Penta MD (2003) Considering browser interaction in web application testing. In: 5th international workshop on web site evolution (WSE 2003). IEEE Computer Society, Amsterdam, pp\u00a074\u201384"},{"key":"9216_CR19","doi-asserted-by":"crossref","unstructured":"Miller J, Zhang L, Ofuonye E, Smith M (2010) Towards automated bypass testing of web applications. In: Web engineering advancements and trends. IGI, pp\u00a0212\u2013229","DOI":"10.4018\/978-1-60566-719-5.ch012"},{"key":"9216_CR20","first-page":"210","volume-title":"4th international conference on software testing, verification and validation (ICST)","author":"T Mouelhi","year":"2011","unstructured":"Mouelhi T, Traon YL, Abgrall E, Baudry B, Gombault S (2011) Tailored shielding and bypass testing of web applications. In: 4th international conference on software testing, verification and validation (ICST). IEEE, Berlin, pp\u00a0210\u2013219"},{"key":"9216_CR21","doi-asserted-by":"crossref","unstructured":"Nguyen-Tuong A, Guarnieri S, Greene D, Shirley J, Evans D (2005) Automatically hardening Web applications using precise tainting. In: Proceedings of the 20th IFIP international information security conference. Makuhari-Messe, Chiba, Japan","DOI":"10.21236\/ADA436667"},{"issue":"2","key":"9216_CR22","first-page":"25","volume":"19","author":"J Offutt","year":"2002","unstructured":"Offutt J (2002) Quality attributes of Web software applications. IEEE Softw (Special Issue on Software Engineering of Internet Software) 19(2):25\u201332","journal-title":"IEEE Softw (Special Issue on Software Engineering of Internet Software)"},{"issue":"2","key":"9216_CR23","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1002\/(SICI)1097-024X(199902)29:2<167::AID-SPE225>3.0.CO;2-V","volume":"29","author":"J Offutt","year":"1999","unstructured":"Offutt J, Jin Z Pan J (1999) The dynamic domain reduction approach to test data generation. Softw Pract Exp 29(2):167\u2013193","journal-title":"Softw Pract Exp"},{"key":"9216_CR24","doi-asserted-by":"crossref","first-page":"187","DOI":"10.1109\/ISSRE.2004.13","volume-title":"15th international symposium on software reliability engineering","author":"J Offutt","year":"2004","unstructured":"Offutt J, Wu Y, Du X, Huang H (2004a) Bypass testing of web applications. In: 15th international symposium on software reliability engineering. IEEE Computer Society, Saint-Malo, pp\u00a0187\u2013197"},{"key":"9216_CR25","first-page":"106","volume-title":"Workshop on quality assurance and testing of web-based applications; associated with COMPSAC 2004","author":"J Offutt","year":"2004","unstructured":"Offutt J, Wu Y, Du X, Huang H (2004b) Web application bypass testing. In: Workshop on quality assurance and testing of web-based applications; associated with COMPSAC 2004. PRC, Hong Kong, pp\u00a0106\u2013109"},{"issue":"2","key":"9216_CR26","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1007\/s10270-009-0125-4","volume":"9","author":"J Offutt","year":"2010","unstructured":"Offutt J, Wu Y (2010) Modeling presentation layers of web applications for testing. Softw Syst Model 9(2):257\u2013280. doi: 10.1007\/s10270-009-0125-4","journal-title":"Softw Syst Model"},{"key":"9216_CR27","unstructured":"Papadimitriou V (2006) Automating bypass testing for web applications. Master\u2019s thesis, Department of Information and Software Engineering, George Mason University, Fairfax VA. Available on the web at: http:\/\/www.cs.gmu.edu\/~offutt\/"},{"key":"9216_CR28","unstructured":"Raggett D, Hors AL, Jacobs I (1999) HTML 4.01 specification\u2014W3C recommendation 24. World Wide Web Consortium (W3C). Online: http:\/\/www.w3.org\/TR\/html401\/ , last access September 2007"},{"key":"9216_CR29","doi-asserted-by":"crossref","unstructured":"Ricca F, Tonella P (2001) Analysis and testing of web applications. In: IEEE 23rd international conference on software engineering (ICSE \u201801). Toronto, CA, pp\u00a025\u201334","DOI":"10.1109\/ICSE.2001.919078"},{"issue":"1\u20134","key":"9216_CR30","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1023\/A:1020549507418","volume":"14","author":"F Ricca","year":"2002","unstructured":"Ricca F, Tonella P (2002) Testing processes of web applications. Ann Softw Eng 14(1\u20134):93\u2013114","journal-title":"Ann Softw Eng"},{"key":"9216_CR31","doi-asserted-by":"crossref","unstructured":"Sampath S, Mihaylov V, Souter A, Pollock L (2004) A scalable approach to user-session based testing of web applications through concept analysis. In: 19th IEEE international conference on automated software engineering, pp\u00a0132\u2013141","DOI":"10.1109\/ASE.2004.1342731"},{"key":"9216_CR32","doi-asserted-by":"crossref","unstructured":"Sampath S, Sprenkle S, Gibson E, Pollock L (2006) Web application testing with customized test requirements\u2014an experimental comparison study. In: 17th international symposium on software reliability engineering (ISSRE\u201906). IEEE Computer Society Press, pp\u00a0266\u2013278","DOI":"10.1109\/ISSRE.2006.51"},{"issue":"10","key":"9216_CR33","doi-asserted-by":"crossref","first-page":"643","DOI":"10.1109\/TSE.2007.70723","volume":"33","author":"S Sampath","year":"2007","unstructured":"Sampath S, Sprenkle S, Gibson E, Pollock L, Greenwald AS (2007) Applying concept analysis to user-session-based testing of web applications. IEEE Trans Softw Eng 33(10):643\u2013658","journal-title":"IEEE Trans Softw Eng"},{"key":"9216_CR34","first-page":"253","volume-title":"Proceedings of the 20th international conference of automated software engineering","author":"S Sprenkle","year":"2005","unstructured":"Sprenkle S, Gibson E, Sampath S, Pollock L (2005a) Automated replay and failure detection for web applications. In: Proceedings of the 20th international conference of automated software engineering. ACM, Long Beach, pp\u00a0253\u2013262"},{"key":"9216_CR35","doi-asserted-by":"crossref","unstructured":"Sprenkle S, Sampath S, Gibson E, Souter A, Pollock L (2005b) An empirical comparison of test suite reduction techniques for user-session-based testing of web applications. In: 21st IEEE international conference on software maintenance (ICSM), pp\u00a0587\u2013596","DOI":"10.1109\/ICSM.2005.18"},{"key":"9216_CR36","first-page":"253","volume-title":"Proceedings of the 18th international symposium on software reliability engineering","author":"S Sprenkle","year":"2007","unstructured":"Sprenkle S, Pollock L, Esquivel H, Hazelwood B, Ecott S (2007) Automated oracle comparators for testing web applications. In: Proceedings of the 18th international symposium on software reliability engineering. IEEE Computer Society, Trollhatten, pp\u00a0253\u2013262"},{"key":"9216_CR37","volume-title":"5th international conference on software testing, verification and validation (ICST)","author":"S Sprenkle","year":"2012","unstructured":"Sprenkle S, Cobb C, Pollock L (2012) Leveraging user-privilege classification to customize usage-based statistical models of web applications. In: 5th international conference on software testing, verification and validation (ICST). IEEE, Montreal"},{"key":"9216_CR38","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1109\/ADC.2005.11","volume-title":"Proceedings of the Agile development conference (ADC \u201905)","author":"A Tappenden","year":"2005","unstructured":"Tappenden A, Beatty P, Miller J, Geras A, Smith M (2005) Agile security testing of web-based systems via HTTPUnit. In: Proceedings of the Agile development conference (ADC \u201905). IEEE Computer Society, Denver, pp\u00a029\u201338"},{"key":"9216_CR39","unstructured":"van Kestern A (2008) The XMLHttpRequest object. World Wide Web Consortium (W3C). Online: http:\/\/www.w3.org\/TR\/XMLHttpRequest\/ , last access July 2009"},{"key":"9216_CR40","first-page":"293","volume-title":"Proceedings of the 14th international symposium on software reliability engineering","author":"WL Wang","year":"2003","unstructured":"Wang WL, Tang MH (2003) User-oriented reliability modeling for a web system. In: Proceedings of the 14th international symposium on software reliability engineering. IEEE Computer Society, Denver, pp\u00a0293\u2013304"},{"key":"9216_CR41","unstructured":"Wu Y, Offutt J (2002) Modeling and testing web-based applications. Technical report ISE-TR-02-08, Department of Information and Software Engineering, George Mason University, Fairfax, VA. http:\/\/www.cs.gmu.edu\/~tr_admin\/2002.html"},{"key":"9216_CR42","unstructured":"Xu W, Bhatkar S, Sekar R (2005) A unified approach for preventing attacks exploiting a range of software vulnerabilities. Technical Report SECLAB-05-05, Department of Computer Science, Stony Brook University. http:\/\/seclab.cs.sunysb.edu\/seclab1\/pubs\/papers\/seclab-05-05.pdf"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-012-9216-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10664-012-9216-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-012-9216-x","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,1]],"date-time":"2019-07-01T02:38:17Z","timestamp":1561948697000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10664-012-9216-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,7,18]]},"references-count":42,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2014,2]]}},"alternative-id":["9216"],"URL":"https:\/\/doi.org\/10.1007\/s10664-012-9216-x","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,7,18]]}}}