NDLI: Security Vulnerabilities Detection Using Model Inference for Applications and Security Protocols

Please wait, while we are loading the content...

2015 IEEE Eighth International Conference on Software Testing, Verification and Validation Workshops (ICSTW)

2014 IEEE Seventh International Conference on Software Testing, Verification and Validation Workshops

2013 IEEE Sixth International Conference on Software Testing, Verification and Validation Workshops

2011 IEEE Fourth International Conference on Software Testing, Verification and Validation Workshops

Table of Contents

Workshop Organizers

Test Selection for Data-Flow Reactive Systems Based on Observations

Abstracting Time and Data for Conformance Testing of Real-Time Systems

Model Based Statistical Testing of Embedded Systems

Risk-Based Testing of Safety-Critical Embedded Systems Driven by Fault Tree Analysis

Simulated Restriction of Coverage Criteria on UML State Machines

An Experience Report on an Industrial Case-Study about Timed Model-Based Testing with UPPAAL-TRON

Reconfigurable Model-Based Test Program Generator for Microprocessors

Model-Based Testing for the Second Generation of Integrated Modular Avionics

Using a DSL and Fine-Grained Model Transformations to Explore the Boundaries of Model Verification -- Extended Abstract

TripleT: Improving Test Responsiveness for High Performance Embedded Systems

Inverse Model Based Testing -- Generating Behavior Models from Abstract Test Cases

Scenario Based Test Generation Using Test Designer

Scenario-Based Testing Applied in Two Real Contexts: Healthcare and Employability

Empirically Evaluating Regression Testing Techniques: Challenges, Solutions, and a Potential Way Forward

Challenges in Audit Testing of Web Services

Customer-Oriented Regression Testing: An Initial Discussion

Making the Case for MORTO: Multi Objective Regression Test Optimization

Regression Test Selection Techniques for Test-Driven Development

Selective Test Generation Method for Evolving Critical Systems

Dynamic Prioritization in Regression Testing

Employing Privacy-Preserving Techniques to Protect Control-Flow Graphs in a Decentralized, End-to-End Regression Test Selection Framework for Web Services

Agent-Based Test Case Prioritization

Search-Based Software Testing: Past, Present and Future

MOST: A Multi-objective Search-Based Testing from EFSM

Porantim-Opt: Optimizing the Combined Selection of Model-Based Testing Techniques

A Principled Evaluation of the Effect of Directed Mutation on Search-Based Statistical Testing

Towards Search-Based Testing for Event-B Models

Search-Based Application Security Testing: Towards a Structured Search Space

Identifying Infeasible GUI Test Cases Using Support Vector Machines and Induced Grammars

Event-Based GUI Testing and Reliability Assessment Techniques -- An Experimental Insight and Preliminary Results

Behind the Scenes: An Approach to Incorporate Context in GUI Test Case Generation

Improved Bug Reporting and Reproduction through Non-intrusive GUI Usage Monitoring and Automated Replaying

Model-Based Testing with a General Purpose Keyword-Driven Test Automation Framework

A GUI Crawling-Based Technique for Android Mobile Application Testing

Decision Support for Test Management and Scope Selection in a Software Product Line Context

A Survey of Empirics of Strategies for Software Product Line Testing

Proof Composition for Deductive Verification of Software Product Lines

Calculating Prioritized Interaction Test Sets with Constraints Using Binary Decision Diagrams

Automated Detection of Discontinuities in Models Inferred from Execution Traces

Validating Service Value Propositions Regarding Stakeholder Preferences

Grey-Box Testing and Verification of Java/JML

Utilizing Model Checking for Automatic Test Case Generation from Conjunctions of Predicates

Optimizing Constraint Solving to Better Support Symbolic Execution

Online Test Generation with PathCrawler: Tool Demo

IPEG: Utilizing Infeasibility

CPTEST: A Framework for the Automatic Fault Detection, Localization and Correction of Constraint Programs

Dealing with Constraints in Boolean Expression Testing

When Does My Program Fail?

An Analysis of OO Mutation Operators

Object-Oriented Mutation Applied in Common Intermediate Language Programs Originated from C#

Paraµ -- A Partial and Higher-Order Mutation Tool with Concurrency Operators

Change Sensitivity Based Prioritization for Audit Testing of Webservice Compositions

An Evaluation of Mutation and Data-Flow Testing: A Meta-analysis

Calibrated Mutation Testing

Breeding High-Impact Mutations

Test Case Generation from Mutants Using Model Checking Techniques

Analogies and Differences between Mutation Operators for WS-BPEL 2.0 and Other Languages

Model Driven Mutation Applied to Adaptative Systems Testing

Refactoring as Testability Transformation

Munch: An Efficient Modularisation Strategy to Assess the Degree of Refactoring on Sequential Source Code Checkings

Parameter-Based Refactoring and the Relationship with Fan-in/Fan-out Coupling

Automated Refactoring for Testability

Test-Oriented Languages: Is it Time for a New Era?

An Experience Report on Using Code Smells Detection Tools

Prioritising Refactoring Using Code Bad Smells

Looking for Patterns in Code Bad Smells Relations

Enabling Testing, Design and Refactoring Practices in Remote Locations

Extracting Properties from Test Cases by Refactoring

On Investigating Code Smells Correlations

Alignment of Requirements Specification and Testing: A Systematic Mapping Study

Automatic Validation and Correction of Formalized, Textual Requirements

Model Based Test Specifications: Developing of Test Specifications in a Semi Automatic Model Based Way

Requirements-Driven Testing with Behavior Trees

Protocol Security Testing with SPIN and TTCN-3

Defining and Matching Test-Based Certificates in Open SOA

Scanstud: A Methodology for Systematic, Fine-Grained Evaluation of Static Analysis Tools

Offset-Aware Mutation Based Fuzzing for Buffer Overflow Vulnerabilities: Few Preliminary Results

Security Vulnerabilities Detection Using Model Inference for Applications and Security Protocols

Practical Considerations in Control-Flow Integrity Monitoring

Applying Security Assurance Techniques to a Mobile Phone Application: An Initial Approach

How Test Organizations Adopt New Testing Practices and Methods?

Introducing Test Case Derivation Techniques into Traditional Software Development: Obstacles and Potentialities

Assessing the Impact of Using Fault Prediction in Industry

An Empirical Study on Object-Oriented Metrics and Software Evolution in Order to Reduce Testing Costs by Predicting Change-Prone Classes

Combining Model-Based and Capture-Replay Testing Techniques of Graphical User Interfaces: An Industrial Approach

Verifying Code and Its Optimizations: An Experience Report

Monitoring and Testing with Case Observer Automata: An Industry Report

Estimation of Clock Drift in HiL Testing by Property-Based Conformance Check

Automated Debugging: Are We There Yet?

An Abstract Operational Framework for Dependence Models in Software Debugging

Identifying Failure-Correlated Dependence Chains

Probabilistic Error Propagation Modeling in Logic Circuits

On the Use of Constraints in Dynamic Slicing for Program Debugging

Modeling the Diagnostic Efficiency of Regression Test Suites

Compression Strategies for Passive Testing

A Diagnostic Point of View for the Optimization of Preparation Costs in Runtime Testing

Publisher Information

2010 Third International Conference on Software Testing, Verification, and Validation Workshops

2009 International Conference on Software Testing, Verification, and Validation Workshops

2008 IEEE International Conference on Software Testing Verification and Validation Workshop

Security Vulnerabilities Detection Using Model Inference for Applications and Security Protocols

Content Provider	IEEE Xplore Digital Library
Author	Hossen, K. Groz, R. Richier, J.L.
Copyright Year	2011
Abstract	"Internet of Services" (IoS) is a vision of the Internet of the Future where applications are built by combining services provided by a variety of service providers over the network. They are deployed as needed and consumed at run-time in a demand-driven and flexible way. Model-based testing is one method for testing security of applications but it needs formal models and most of the time service providers are not able to provide them. For that, model inference methods adapted to security testing can be used. This document tries to give some directions in order to combine enhanced model inference and model testing to ensure security of services automatically.
Starting Page	534
Ending Page	536
File Size	225877
Page Count	3
File Format	PDF
ISBN	9781457700194
e-ISBN	9780769543451
DOI	10.1109/ICSTW.2011.83
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-03-21
Publisher Place	Germany
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	model inference Adaptation models Protocols security Computational modeling Conferences model-based testing Inference algorithms Security Testing
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in