Risk-based security testing in cloud computing environments

Proceedings - 4th IEEE International Conference on Software Testing, Verification, and Validation, ICST 2011

Volumn , Issue , 2011, Pages 411-414

  Zech, Philipp ^a  

^a UNIVERSITY OF INNSBRUCK   (Austria)

Author keywords

Cloud Computing; Model Driven Testing; Security Testing

Indexed keywords

COMPUTING ENVIRONMENTS; EMERGING TRENDS; INFINITE NUMBERS; MISUSE CASE; MODEL-DRIVEN METHODOLOGY; MODEL-DRIVEN TESTING; RISK-BASED SECURITY; SECURITY REQUIREMENTS; SECURITY TESTING; SOFTWARE SYSTEMS; SYSTEM UNDER TEST;

COMPUTER SOFTWARE SELECTION AND EVALUATION; COMPUTER SYSTEMS; RISK ANALYSIS; RISK ASSESSMENT; SOFTWARE TESTING; VERIFICATION;

CLOUD COMPUTING;

EID: 79958738559     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICST.2011.23     Document Type: Conference Paper

References (14)

1. S. L. Garfinkel, Architects of the Information Society: Thirty-Five Years of the Laboratory for Computer Science at MIT, H. Abelson, Ed. The MIT Press, April 1999.
2. L. M. Vaquero, L. Rodero-Merino, J. Caceres, and M. Lindner, "A break in the clouds: towards a cloud definition," SIGCOMM Comput. Commun. Rev., pp. 50-55, 2009.
3. Cloud Security Alliance, Cloud Security Alliance (CSA) - Security Guidance for Critical Areas of Focus in Cloud Computing, V2.1, 2009. [Online]. Available: http://www.cloudsecurityalliance.org/csaguide.pdf
4. -, Cloud Security Alliance (CSA) - Top Threats to Cloud Computing, V1.0, 2010. [Online]. Available: http://www.cloudsecurityalliance.org/topthreats/ csathreats.v1.0.pdf
5. M. Felderer, B. Agreiter, and R. Breu, "Security Testing by Telling TestStories," in Modellierung 2010. Gesellschaft fuer Informatik, 2010, pp. 195-202.
6. T. M. King and A. S. Ganti, "Migrating Autonomic Self- Testing to the Cloud," Software Testing Verification and Validation Workshop, IEEE International Conference on, pp. 438-443, 2010.
7. T. Rings, J. Grabowski, and S. Schulz, "On the Standardization of a Testing Framework for Application Deployment on Grid and Cloud Infrastructures," in The Second International Conference on Advances in System Testing and Validation Lifecycle. IEEE, 2010, pp. 99-107.
8. R. Breu, "Ten Principles for Living Models - A Manifesto of Change-Driven Software Engineering," in CISIS. IEEE Computer Society, 2010, pp. 1-8.
9. D. Verdon and G. McGraw, "Risk Analysis in Software Design," IEEE Security and Privacy, pp. 79-84, 2004.
10. OMG, OMG Unified Modeling Language (OMG UML), Infrastructure, V2.3, 2010. [Online]. Available: http://www.omg.org/docs/formal/07-11-04.pdf
11. -, OMG Unified Modeling Language (OMG UML), Superstructure, V2.3, 2010. [Online]. Available: http://www.omg.org/docs/formal/07-11-02.pdf
12. D. Firesmith, "Security Use Cases," Journal of Object Technology, pp. 53-64, 2003.
13. M. Felderer, P. Zech, F. Fiedler, and R. Breu, "A Tool-based methodology for System Testing of Service-oriented Systems," in The Second International Conference on Advances in System Testing and Validation Lifecycle. IEEE, 2010, pp. 108-113.
14. M. Felderer, P. Zech, F. Fiedler, J. Chimiak-Opoka, and R. Breu, "Towards Adaptive Test Code Generation for Service Oriented Systems," in QSIC. IEEE Computer Society, 2009, pp. 155-160.