CLIAMS:We claim:
1. A method for hybrid testing, comprising:
receiving a list of input points associated with a software unit under test;
assigning, by a processor, risk values to the input points based on one or more risk rating factors, the risk values reflecting security risk associated with the input points;
providing, to the software unit under test, input values indicative of a functional test for input points assigned risk values reflecting a low security risk; and
providing, to the software unit under test, input values indicative of a security test for input points assigned risk values reflecting a high security risk; and
executing a security test for the software unit under test using the input values.
2. The method of claim 1, wherein the security test comprises at least one of a penetration test and a source code security test.
3. The method of claim 1, wherein the one or more risk rating factors comprise at least one of a source of input associated with each input point, credibility of a provider of the input, transmission line security of the channel for inputs that are remotely provided, positioning of the input points relative to a firewall, or intrusion detection and intrusion prevention associated with the software unit under test.
4. The method of claim 1, wherein assigning risk values to the input points comprises:
serially comparing a value of each risk rating factor with respective threshold values;
calculating, by the processor, a risk value for each input point when one of the risk rating factor values exceeds a respective threshold value;
calculating, by the processor, a weighted vector sum value for each input point based on the one or more risk rating factors when no risk rating factor value exceeds the respective threshold values; and
comparing the weighted vector sum value to a threshold risk value.
5. The method of claim 4, further comprising:
assigning, by the processor, a risk value reflecting a low security risk to input points having a weighted vector sum value less than the threshold risk value; and
assigning, by the processor, a risk value reflecting a high security risk to input points having a weighted vector sum value greater than the threshold risk value.
6. The method of claim 1, wherein assigning risk values to the input points further comprises:
splitting one or more input points, reflecting the high security risk, into a plurality of risk levels based on the risk values; and
providing, to the software unit under test, input values indicative of a security test for the one or more input points based on the plurality of risk levels.
7. A system for hybrid testing, comprising:
one or more hardware processors; and
one or more memory devices storing instructions executable by the one or more hardware processors for:
receiving a list of input points associated with a software unit under test;
assigning, by a processor, risk values to the input points based on one or more risk rating factors, the risk values reflecting security risk associated with the input points;
providing, to the software unit under test, input values indicative of a functional test for input points assigned risk values reflecting a low security risk; and
providing, to the software unit under test, input values indicative of a security test for input points assigned risk values reflecting a high security risk; and
executing a security test for the software unit under test using the input values.
8. The system of claim 7, wherein the security test comprises at least one of a penetration test and a source code security test.
9. The system of claim 7, wherein the one or more risk rating factors comprise at least one of a source of input associated with each input point, credibility of a provider of the input, transmission line security of the channel for inputs that are remotely provided, positioning of the input points relative to a firewall, or intrusion detection and intrusion prevention associated with the software unit under test.
10. The system of claim 7, wherein the one or more memory devices store instructions executable by the one or more hardware processors for assigning risk values to the input points by:
calculating, by the processor, a risk value for each input point by serially comparing a value of each risk rating factor with respective threshold values, the risk value being calculated when one of the risk rating factor values exceeds the respective threshold value;
calculating, by the processor, a weighted vector sum value for each received input point based on the one or more risk rating factors upon identifying that no risk rating factor value exceeds the respective threshold values; and
comparing the weighted vector sum value to a threshold risk value.
11. The system of claim 10, wherein the one or more memory devices store instructions executable by the one or more hardware processors for:
assigning, by the processor, a risk value reflecting a low security risk to input points having a weighted vector sum value less than the threshold risk value; and
assigning, by the processor, a risk value reflecting a high security risk to input points having a weighted vector sum value greater than the threshold risk value.
12. The system of claim 7, wherein the one or more memory devices store instructions executable by the one or more hardware processors for assigning risk values to the input points by:
splitting one or more input points, reflecting the high security risk, into a plurality of risk levels based on the risk values; and
providing, to the software unit under test, input values indicative of a security test for the one or more input points based on the plurality of risk levels.
13. A non-transitory computer-readable medium storing instructions for hybrid testing, the instructions comprising:
receiving a list of input points associated with a software unit under test;
assigning, by a processor, risk values to the input points based on one or more risk rating factors, the risk values reflecting security risk associated with the input points;
providing, to the software unit under test, input values indicative of a functional test for input points assigned risk values reflecting a low security risk; and
providing, to the software unit under test, input values indicative of a security test for input points assigned risk values reflecting a high security risk; and
executing a security test for the software unit under test using the input values.

Dated this 10th day of March, 2015
Swetha S.N
Of K&S Partners
Agent for the Applicant
,TagSPECI:TECHNICAL FIELD
The present disclosure relates generally to software testing. More particularly, the present disclosure relates to methods and systems for hybrid software testing.