Is Data Privacy Always Good for Software Testing?

—Database-centric applications (DCAs) are common in enterprise computing, and they use nontrivial databases. Testing of DCAs is increasingly outsourced to test centers in order to achieve lower cost and higher quality. When releasing proprietary DCAs, its databases should also be made available to test engineers, so that they can test using real data. Testing with real data is important, since fake data lacks many of the intricate semantic connections among the original data elements. However, different data privacy laws prevent organizations from sharing these data with test centers because databases contain sensitive information. Currently, testing is performed with fake data that often leads to worse code coverage and fewer uncovered bugs, thereby reducing the quality of DCAs and obliterating benefits of test outsourcing. We show that a popular data anonymization algorithm called k–anonymity seriously degrades test coverage of DCAs. We propose an approach that uses program anal...

• Type: Journal
• Year: 2010
• Where: ISSRE
• Authors: Mark Grechanik, Christoph Csallner, Chen Fu, Qing Xie
• Keywords: Fake Data, ISSRE 2010, Real Data, Software Engineering, Test Coverage