A Practical Way of Testing Security Patterns - Archive ouverte HAL Access content directly
Conference Papers Year :

A Practical Way of Testing Security Patterns

Abstract

—We propose an approach for helping developers devise more secure applications from the threat modelling stage up to the testing one. This approach relies on a Knowledge base integrating varied security data to perform these task. It firstly assists developers in the design of Attack Defense Trees (ADTrees) expressing the attacker possibilities to compromise an application and the defenses that may be implemented. These defenses are expressed by means of security patterns, which are generic and re-usable solutions to design secure applications. ADTrees are then used to guide developers in the generation of test cases and of LTL specifications encoding properties about security pattern behaviours. Test verdicts show whether an application is vulnerable to the attack scenarios and if the security pattern properties hold in the application traces.
Fichier principal
Vignette du fichier
secupatterntesting.pdf (560.26 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01868218 , version 1 (05-09-2018)

Identifiers

  • HAL Id : hal-01868218 , version 1

Cite

Loukmen Regainia, Sébastien Salva. A Practical Way of Testing Security Patterns. Thirteenth International Conference on Software Engineering Advances (ICSEA'18), Oct 2018, Nice, France. ⟨hal-01868218⟩
147 View
199 Download

Share

Gmail Facebook Twitter LinkedIn More