SOFIA: an automated security oracle for black-box testing of SQL-injection vulnerabilities
Mariano Ceccato, Cu Duy Nguyen, Dennis Appelt, Lionel Briand · 2016
Security testing is a pivotal activity in engineering secure software. It consists of two phases: generating attack inputs to test the system, and assessing whether test executions expose any vulnerabilities. The latter phase is known as the security oracle problem.