An Approach of Vulnerability Testing for Third-Party Component Based on Condition and Parameter Mutation

Procedure 1

MSA(Mutation Sub-item Approach).

Stipulation:𝐸_𝑖=Exp_𝑖1&&𝐸𝑥𝑝_𝑖𝑗&&…&&𝐸𝑥𝑝_𝑖𝑛

(01) MSA (𝐸_𝑖)

(02) {

(03) RRF(𝐸𝑥𝑝_𝑖𝑘) = Mutants obtained after RRF operator is used to mutate 𝐸𝑥𝑝_𝑖𝑘;

(04) 𝑇_𝑖1= {𝐸𝑥𝑝_𝑖1, RRF(𝐸𝑥𝑝_𝑖1)}, 𝑇_𝑖𝑗={𝐸𝑥𝑝_𝑖𝑗, RRF(𝐸𝑥𝑝_𝑖𝑗)}, 𝑇_𝑖𝑛={𝐸𝑥𝑝_𝑖𝑛, RRF(𝐸𝑥𝑝_𝑖𝑛)};

(05) 𝑆={(𝜎₁ &&𝜎_𝑗 &&…&&𝜎_𝑛)∣𝜎₁∈𝑇_𝑖1, 𝜎_𝑗∈𝑇_𝑖𝑗, 𝜎_𝑛∈𝑇_𝑖𝑛};

(06) 𝑆=𝑆−𝐸_𝑖;

(07) return 𝑆;

(08) }