Skip to main content

AI-Driven Cybersecurity Testing and Intelligent Quality Assurance for Modern Mobile Applications

Abstract

The use of mobile apps has changed the nature of cyber attacks and their conventional testing and quality assurance policies, might not prove efficient in realizing the new vulnerabilities and offer a guarantee of the reliable application performance. The study presents a cybersecurity testing and smart quality assurance model that was developed with the help of artificial intelligence to combine AI, machine learning, and automated security testing, as well as intelligent quality testing in one mobile application testing life cycle, the AI-CTIQAF. The framework is separated into five main layers, which includes: data collection and preprocessing, AI based vulnerability detection, intelligent test-case generation, risk-aware quality assessment and continuous monitoring and feedback. Using machine learning models will perform the analysis of application behavior, application code, network interactions and previous test results to learn about the possible security vulnerabilities and prioritize high-risk test cases as well. Test generation Test generation: The test generation dynamically supplies usable test cases of functional, performance, usability and security tests and an intelligent decision engine that matches the vulnerabilities found with quality indicators to facilitate adaptive testing. The suggested framework enables continuous validation of the security during both the application development and deployment and eliminates the necessity to humanly test it along with improving defect detection, prioritization of risks, and overall reliability of the software. The study establishes an extendable methodology of incorporating cybersecurity and quality assurance to enable safe, robust and reliable modern-day mobile applications.

References

[1] J. Senanayake, H. Kalutarage, M. O. Al-Kadri, A. Petrovski, and L. Piras, “Android source code vulnerability detection: A systematic literature review,” ACM Computing Surveys, vol. 55, no. 9, 2023, doi: 10.1145/3556974.
[2] J. Senanayake, H. Kalutarage, M. O. Al-Kadri, A. Petrovski, and L. Piras, “Fedrevan: Real-time detection of vulnerable Android source code through federated neural network with XAI,” in Computer Security. ESORICS 2023 International Workshops, Springer, Cham, Switzerland, 2023, pp. 1–16, doi: 10.1007/978-3-031-54129-2_25.
[3] F. A. Mulla, “Modern mobile testing tools: A comprehensive guide to quality assurance and automation,” International Journal of Scientific Research in Computer Science, Engineering and Information Technology, vol. 10, no. 6, 2024.
[4] S. Rajapaksha, J. Senanayake, H. Kalutarage, and M. O. Al-Kadri, “AI-powered vulnerability detection for secure source code development,” in Innovative Security Solutions for Information Technology and Communications, Springer, Cham, Switzerland, 2023, pp. 275–288, doi: 10.1007/978-3-031-32636-3_16.
[5] J. Senanayake, H. Kalutarage, M. O. Al-Kadri, A. Petrovski, and L. Piras, “Android code vulnerabilities early detection using AI-powered ACVED plugin,” in Data and Applications Security and Privacy XXXVII, Springer, Cham, Switzerland, 2023, pp. 339–357, doi: 10.1007/978-3-031-37586-6_20.
[6] A. Wijekoon and N. Wiratunga, “A user-centred evaluation of DisCERN: Discovering counterfactuals for code vulnerability detection and correction,” Knowledge-Based Systems, vol. 278, Art. no. 110830, 2023, doi: 10.1016/j.knosys.2023.110830.
[7] S. M. Ghaffarian and H. R. Shahriari, “Software vulnerability analysis and discovery using machine-learning and data-mining techniques: A survey,” ACM Computing Surveys, vol. 50, no. 4, 2017, doi: 10.1145/3092566.
[8] J. Tang, R. Li, K. Wang, X. Gu, and Z. Xu, “A novel hybrid method to analyze security vulnerabilities in Android applications,” Tsinghua Science and Technology, vol. 25, no. 5, pp. 589–603, 2020, doi: 10.26599/TST.2019.9010067.
[9] S. Garg and N. Baliyan, “Comparative analysis of Android and iOS from security viewpoint,” Computer Science Review, vol. 40, Art. no. 100372, 2021, doi: 10.1016/j.cosrev.2021.100372.
[10] T. N. Nguyen and R. Choo, “Human-in-the-loop XAI-enabled vulnerability detection, investigation, and mitigation,” in Proc. 36th IEEE/ACM Int. Conf. Automated Software Engineering (ASE), 2021, pp. 1210–1212, doi: 10.1109/ASE51524.2021.9678840.
[11] G. Srivastava, R. H. Jhaveri, S. Bhattacharya, S. Pandya, L. Rajeswari, and P. K. R. Maddikunta, “XAI for cybersecurity: State of the art, challenges, open issues and future directions,” 2022, doi: 10.48550/arXiv.2206.03585.
[12] B. Nagaria and T. Hall, “How software developers mitigate their errors when developing code,” IEEE Transactions on Software Engineering, vol. 48, no. 6, pp. 1853–1867, 2022, doi: 10.1109/TSE.2020.3040554.
[13] T. Li, A. K. Sahu, A. Talwalkar, and V. Smith, “Federated learning: Challenges, methods, and future directions,” IEEE Signal Processing Magazine, vol. 37, no. 3, pp. 50–60, 2020, doi: 10.1109/MSP.2020.2975749.
[14] P. Soltanzadeh, M. R. Feizi-Derakhshi, and M. Hashemzadeh, “Addressing the class-imbalance and class-overlap problems by a metaheuristic-based under-sampling approach,” Pattern Recognition, vol. 143, Art. no. 109721, 2023, doi: 10.1016/j.patcog.2023.109721.