pdfreaders.org

Security Testing: A Survey

by Michael Felderer, Matthias Büchler, Martin Johns, Achim D. Brucker, Ruth Breu, and Alexander Pretschner

Cover for felderer.ea:security-testing:2016.Identifying vulnerabilities and ensuring security functionality by security testing is a widely applied measure to evaluate and improve the security of software. Due to the openness of modern software-based systems, applying appropriate security testing techniques is of growing importance and essential to perform effective and efficient security testing. Therefore, an overview of actual security testing techniques is of high value both for researchers to evaluate and refine the techniques and for practitioners to apply and disseminate them. This chapter fulfills this need and provides an overview of recent security testing techniques. For this purpose, it first summarize the required background of testing and security engineering. Then, basics and recent developments of security testing techniques applied during the secure software development lifecycle, i.e., model-based security testing, code-based testing and static analysis, penetration testing and dynamic analysis, as well as security regression testing are discussed. Finally, the security testing techniques are illustrated by adopting them for an example three-tiered web-based business application.

Keywords:
Categories: ,
Documents: (full text as PDF file)

QR Code for felderer.ea:security-testing:2016.Please cite this article as follows:
Michael Felderer, Matthias Büchler, Martin Johns, Achim D. Brucker, Ruth Breu, and Alexander Pretschner. Security Testing: A Survey. In Advances in Computers, 101, pages 1-51, 2016.
(full text as PDF file) (BibTeX) (Endnote) (RIS) (Word) (doi:10.1016/bs.adcom.2015.11.003) (Share article on LinkedIn. Share article on CiteULike. )

BibTeX
@Article{ felderer.ea:security-testing:2016,
abstract = {Identifying vulnerabilities and ensuring security functionality by security testing is a widely applied measure to evaluate and improve the security of software. Due to the openness of modern software-based systems, applying appropriate security testing techniques is of growing importance and essential to perform effective and efficient security testing. Therefore, an overview of actual security testing techniques is of high value both for researchers to evaluate and refine the techniques and for practitioners to apply and disseminate them. This chapter fulfills this need and provides an overview of recent security testing techniques. For this purpose, it first summarize the required background of testing and security engineering. Then, basics and recent developments of security testing techniques applied during the secure software development lifecycle, i.e., model-based security testing, code-based testing and static analysis, penetration testing and dynamic analysis, as well as security regression testing are discussed. Finally, the security testing techniques are illustrated by adopting them for an example three-tiered web-based business application.},
author = {Michael Felderer and Matthias B{\"u}chler and Martin Johns and Achim D. Brucker and Ruth Breu and Alexander Pretschner},
doi = {10.1016/bs.adcom.2015.11.003},
editor = {Ali Hurson and Atif Memon},
isbn = {978-0-12-805158-0},
journal = {Advances in Computers},
language = {USenglish},
month = {mar},
num_pages = {51},
pages = {1--51},
pdf = {https://www.brucker.ch/bibliography/download/2016/felderer.ea-security-testing-2016.pdf},
publisher = {Academic Press},
title = {Security Testing: A Survey},
url = {https://www.brucker.ch/bibliography/abstract/felderer.ea-security-testing-2016},
volume = {101},
year = {2016},
}