NDLI: XSS pattern for attack modeling in testing

Please wait, while we are loading the content...

Integrated TaaS platform for mobile development: architecture solutions

Test algebra for combinatorial testing

Automatic generation of parallel unit tests

Security testing of the communication among Android applications

Automated generation of state abstraction functions using data invariant inference

A refactoring-based approach for test case selection and prioritization

Automatic test generation for mutation testing on database applications

Quantifying the complexity of dataflow testing

Automated scalability testing of software as a service

ParTes: a test generation strategy for choreography participants

Profile directed systematic testing of concurrent programs

Access control enforcement testing

Towards automatic scenario generation from coverage information

Utilizing software reuse experience for automated test recommendation

An industry proof-of-concept demonstration of automated combinatorial test

Computation and visualization of cause-effect paths

Vee@Cloud: the virtual test lab on the cloud

Functional SOA testing based on constraints

Which compiler optimization options should I use for detecting data races in multithreaded programs?

XSS pattern for attack modeling in testing

Test-duo: a framework for generating and executing automated acceptance tests from use cases

Did we test our changes?: assessing alignment between tests and development in practice

Extension of selenium RC tool to perform automated testing with databases in web applications

JIFFY: a framework for encompassing aspects in testing and debugging software

XSS pattern for attack modeling in testing

Content Provider	ACM Digital Library
Author	Bozic, Josip Wotawa, Franz
Abstract	Security issues of web applications are still a current topic of interest especially when considering the consequences of unintended behaviour. Such services might handle sensitive data about several thousands or millions of users. Hence, exploiting services or other undesired effects that cause harm on users has to be avoided. Therefore, for software developers of such applications one of the major tasks in providing security is to embed testing methodologies into the software development cycle, thus minimizing the subsequent damage resulting in debugging and time intensive upgrading. Model-based testing evolved as one of the methodologies which offer several theoretical and practical approaches in testing the system under test (SUT) that combine several input generation strategies like mutation testing, using of concrete and symbolic execution etc. by putting the emphasis on specification of the model of an application. In this work we propose an approach that makes use of an attack pattern model in form of a UML state machine for test case generation and execution. The paper also discusses the current implementation of our attack pattern testing tool using a XSS attack pattern and demonstrates the execution in a case study.
Starting Page	71
Ending Page	74
Page Count	4
File Format	PDF
ISBN	9781467361613
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-05-18
Access Restriction	Subscribed
Subject Keyword	Cross-site scripting Model-based testing Attack pattern model Security testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

XSS pattern for attack modeling in testing

Automatic web security unit testing: XSS vulnerability detection

Preventing persistent Cross-Site Scripting (XSS) attack by applying pattern filtering approach

Security Testing Based on Attack Patterns

Prediction of Cross-Site Scripting Attack Using Machine Learning Algorithms

MUTEC: Mutation-based testing of Cross Site Scripting

A threat pattern for the cross-site scripting (XSS) attack

On Security Issues in Web Applications through Cross Site Scripting (XSS)

Security against cross site scripting (XSS) attacks: signature based model on server side

XSS pattern for attack modeling in testing

Similar Documents

XSS pattern for attack modeling in testing

Automatic web security unit testing: XSS vulnerability detection

Preventing persistent Cross-Site Scripting (XSS) attack by applying pattern filtering approach

Security Testing Based on Attack Patterns

Prediction of Cross-Site Scripting Attack Using Machine Learning Algorithms

MUTEC: Mutation-based testing of Cross Site Scripting

A threat pattern for the cross-site scripting (XSS) attack

On Security Issues in Web Applications through Cross Site Scripting (XSS)

Security against cross site scripting (XSS) attacks: signature based model on server side

XSS pattern for attack modeling in testing