• Title/Summary/Keyword: White-box Test

Search Result 22, Processing Time 0.018 seconds

A White Box Implementation of Lightweight Block Cipher PIPO (경량 블록 암호 PIPO의 화이트박스 구현 기법)

  • Ham, Eunji;Lee, Youngdo;Yoon, Kisoon
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.5
    • /
    • pp.751-763
    • /
    • 2022
  • With the recent increase in spending growth in the IoT sector worldwide, the importance of lightweight block ciphers to encrypt them is also increasing. The lightweight block cipher PIPO algorithm proposed in ICISC 2020 is an SPN-structured cipher using an unbalanced bridge structure. The white box attack model refers to a state in which an attacker may know the intermediate value of the encryption operation. As a technique to cope with this, Chow et al. proposed a white box implementation technique and applied it to DES and AES in 2002. In this paper, we propose a white box PIPO applying a white box implementation to a lightweight block cipher PIPO algorithm. In the white box PIPO, the size of the table decreased by about 5.8 times and the calculation time decreased by about 17 times compared to the white box AES proposed by Chow and others. In addition, white box PIPO was used for mobile security products, and experimental results for each test case according to the scope of application are presented.

Vertical System Testing Method For Efficient Error Tracing (효과적인 오류 추적을 위한 수직적 시스템 시험 방법)

  • Seo, Kwang-Ik;Choi, Eun-Man
    • Journal of the Korea Society of Computer and Information
    • /
    • v.13 no.2
    • /
    • pp.19-29
    • /
    • 2008
  • In case of unit testing, White-box test can be used to closely check source code and to analyze logic and statement errors. On the other hand, in case of function testing of system level, Black-box test can be mainly used to compare actual and expected results by inputting test data because the scale of function is large. This Black-Box test in system testing level has problem in tracing errors in source code when we find errors. Moreover applying White-box test is not easy for system testing level because the levels of test target are different. Therefore this paper suggests the vertical test method of a practical and integrated system level which can checks up to source code level using White-box test style although it aims to test the highly abstract level like a system function. In addition, the experiment explains how to apply the vertical test by displaying an example which traces from UML specification model to the source code and also shows efficiency of error trace.

  • PDF

An Effective Test Data Selection Technique for Customized COM Components and its Empirical Study (맞춤된 COM 컴포넌트를 위한 효과적인 테스트 데이타 선정 기법과 적용사례)

  • 윤회진;이병희;김은희;최병주
    • Journal of KIISE:Software and Applications
    • /
    • v.31 no.6
    • /
    • pp.741-749
    • /
    • 2004
  • Component users must customize components they obtain from providers, in order to fit them to their own purposes. Normally, a component consists of black-box parts and white-box parts. Component users customize a component by modifying white-box parts of a component, and the customization faults appear through the interaction between black-box parts and white-box parts. Customization testing could be an integration testing of these two parts of a component. Also, customization testing in CBSD should select effective test data to reduce the testing cost, since CBSD aims to reduce the development cost. Therefore, this paper proposes a customization testing technique based on COM architecture through analyzing many COM components, and the technique selects effective test data. This paper evaluates the effectiveness of the test data selected by the proposed technique through an empirical study. It applies the techlique to a large-scale component-based system, Chamois, and it shows that the technique enables us to test customized COM components that run in a real component-based system

A Component Composition Testing Technique in CBSD (CBSD에서의 컴포넌트 조립 테스트 기법)

  • Yoon, Hoi-Jin;Choi, Byoung-Ju
    • Journal of KIISE:Software and Applications
    • /
    • v.29 no.10
    • /
    • pp.694-702
    • /
    • 2002
  • An application in Component-Based Software Development (CBSD) is built by 'composing'two kinds of components; One is a component that is made by current developer himself, and the other is a component that is from other developments. We define the former as a 'White-box component' and the latter as a 'Black-box component.' The error from the composition can be said to be caused by interactions of Black-box components and White-box components. This paper proposes a new testing technique for composition errors, and applies the technique to Enterprise Java Beans component architecture. Our technique selects test cases by injecting a fault only into the specific parts of a White-box component. This specific parts for injecting a fault are selected by analyzing composition patterns, and lead to make our test cases have a good effectiveness. We show the effectiveness of our test cases through an experiment. Moreover, we also mention an automation tool for our technique.

A Method for Testing Web Applications by Using Black-box Tests based on User Screens and Web Interface Test Coverage (사용자 화면 중심의 블랙 박스 테스트와 웹 인터페이스 테스트 커버리지를 통한 웹 어플리케이션 테스트 방법)

  • Lim, Jeung-Hee;Lee, Si-Hyun;Jang, Jin-A;Choi, Byoung-Ju;Hwang, Sang-Cheol
    • Journal of KIISE:Software and Applications
    • /
    • v.36 no.9
    • /
    • pp.706-717
    • /
    • 2009
  • A web application is implemented by reusing the library provided by framework and has hierarchical architecture. Also, to deal with the user request from a screen, the web application has an execution flow, called 'Business Logic', which starts with a screen, executes its composed component and comes back to the screen via database. To test web application effectively, it should reflect the characteristics of web application. In this paper we propose to test web applications via user screens with the black-box testing approach and verify its source codes with the web interface white-box test coverage that covers all the business logics of the test target and their corresponding interfaces. We analyze the proposing testing method through its tool: Testopiacov.

Automatic UML-based Test Data Generating Tool: AUTEG (UML기반의 테스트 데이타 자동생성 도구 : AUTEG)

  • Kim, Cheong-Ah;Choi, Byoung-Ju
    • Journal of KIISE:Computing Practices and Letters
    • /
    • v.8 no.3
    • /
    • pp.268-276
    • /
    • 2002
  • In this paper we suggest a method to produce automatically teat data using UML development diagrams, and analytically describe the application of a tool, Automatic UML-based Test Data Generation (AUTEG) developed using XML technology, to the examples of insurance system. Our AUTEG automatically generates test diagrams that enable to detect errors existing at the interface area between modules composing the whole system, along with test data by applying the existing white-box test technique to the test diagram. Our AUTEG can be applied to the integration test as well as the system test and using the tool, users may make the unit modules of the integration test into several groups.

Optimal Synthesis Conditions of Zinc White (아연화의 최적 합성조건)

  • Shin, Wha-Woo;Kim, Youn-Seol
    • YAKHAK HOEJI
    • /
    • v.40 no.6
    • /
    • pp.659-665
    • /
    • 1996
  • Zinc white is mainly used as a mild astringent, protectant. and has weak antiseptic action. It is well known that the yield of zinc white produced is greatly affected by the syn thetic conditions such as the reactant concentration, reaction temperature, washing water temperature, mole ratio of reactants, and drying temperature, calcination temperature, etc. The purpose of this study is to investigate the optimal synthesis conditions of zinc white produced. A randomized complete block design suggested by G.E.P. Box and K.B. Wilson was applied for this purpose. Basic zinc carbonate was prepared by reacting zinc sulfate and sod. carbonate solution in this study. Zinc white comes when prepared by calcination of basic zinc carbonate. The optimum synthesis conditions of zinc white obtained from this study is as follows: 1) The reacting temperature range is: 92-100$^{\circ}C$, 2) The concentration of reactant solution is 23.6-27%, 3) The optimum mole-ratio: [ZnSO4]/[Na2CO3] is 1.74~1.96, 4) The washing water temperature is 36$^{\circ}C$, 5) The drying temperature range is 68-74$^{\circ}C$, 6) The calcination temperature is 600$^{\circ}C$. The outcome of DSC indicated a desolvation of basic zinc carbonate occurred at about 133.3$^{\circ}C$. The dehydration of the compound ceased at about 267.9$^{\circ}C$ and the decarboxylation ceased at about 379.9$^{\circ}C$. The physical and chemical properties of zinc white as medicine were studied by use of Volume Test.

  • PDF

A Design of Smart Fuzzing System Based on Hybrid Analysis (하이브리드 분석 기반의 스마트 퍼징 시스템 설계)

  • Kim, Mansik;Kang, Jungho;Jun, Moon-seog
    • Journal of Digital Convergence
    • /
    • v.15 no.3
    • /
    • pp.175-180
    • /
    • 2017
  • In accordance with the development of IT industry worldwide, software industry has also grown tremendously, and it is exerting influence on the general society starting from daily life to financial organizations and public institutions. However, various security threats that can inflict serious threat to provided services in proportion to the growing software industry, have also greatly increased. In this thesis, we suggest a smart fuzzing system combined with black box and white box testing that can effectively detectxdistinguish software vulnerability which take up a large portion of the security incidents in application programs.

A Portmanteau Test Based on the Discrete Cosine Transform (이산코사인변환을 기반으로 한 포트맨토 검정)

  • Oh, Sung-Un;Cho, Hye-Min;Yeo, In-Kwon
    • The Korean Journal of Applied Statistics
    • /
    • v.20 no.2
    • /
    • pp.323-332
    • /
    • 2007
  • We present a new type of portmanteau test in the frequency domain which is derived from the discrete cosine transform(DCT). For the stationary time series, DCT coefficients are asymptotically independent and their variances are expressed by linear combinations of autocovariances. The covariance matrix of DCT coefficients for white noises is diagonal matrix whose diagonal elements is the variance of time series. A simple way to test the independence of time series is that we divide DCT coefficients into two or three parts and then compare sample variances. We also do this by testing the slope in the linear regression model of which the response variables are absolute values or squares of coefficients. Simulation results show that the proposed tests has much higher powers than Ljung-Box test in most cases of our experiments.

Design of Effective Reliability Tests for New Products (신제품 개발에 따른 효과적인 신뢰성 시험 설계)

  • Park, B.H.;Jang, J.S.;Kim, G.Y.;Lee, J.H.;Kim, S.J.;Chan, S.I.;Jeong, K.Y.;Kim, D.J.;Lee, C.B.
    • Journal of Applied Reliability
    • /
    • v.9 no.2
    • /
    • pp.107-119
    • /
    • 2009
  • Reliability tests should be designed to verify whether reliability requirements are satisfied or not effectively and efficiently. The portion of reliability requirements that a reliability test scheme composed of different types of tests can cover is defined as test coverage in software engineering. For the cases of hardwares, to be effective, a reliability test scheme should enhance the test coverage. This study is to develop an evaluation method of test coverage for a reliability test scheme proposed for new products. Case studies are also given.

  • PDF