Validating security design patterns application using model testing

Proceedings - 2013 International Conference on Availability, Reliability and Security, ARES 2013

Volumn , Issue , 2013, Pages 62-71

  Kobashi, Takanori ^a   Yoshioka, Nobukazu ^b   Okubo, Takao ^c   Kaiya, Haruhiko ^b   Washizaki, Hironori ^a   Fukazawa, Yoshiaki ^a  

^a WASEDA UNIVERSITY   (Japan)

^b NATIONAL INSTITUTE OF INFORMATICS   (Japan)

^c INSTITUTE OF INFORMATION SECURITY   (Japan)

Author keywords

Model Testing; Security Patterns; Test Driven Development; UML

Indexed keywords

MODEL TESTING; SECURITY DESIGN; SECURITY PATTERNS; SOFTWARE DEVELOPER; TARGET SYSTEMS; TEST DRIVEN DEVELOPMENT; THREATS AND VULNERABILITIES; UML;

COMPUTER SOFTWARE REUSABILITY;

SECURITY OF DATA;

EID: 84892391200     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2013.13     Document Type: Conference Paper

References (18)

1. N.Yoshioka, H.Washizaki, K.Maruyama A Survey on Security Patterns, Progress in Informatics, No.5, pp. 35-47. 2008
2. M.Schumacher, Eduardo Fernandez-Buglioni, Duane Hybertson, Frank Buschmann, Peter Sommerlad. "SECURITY PATTERNS". Wikey. 2006
3. T. Heyman, K. Yskout, R. Scandariato, and W. Joosen, "An analysis of the security patterns landscape," in Proceedings of the Third International Workshop on Software Engineering for Secure Systems, ser. SESS '07. IEEE Computer Society, 2007, pp. 3-.
4. -Unified Modeling Language (UML)
5. Jan Jurijens "Secure Systems Development with UML" 2004,Springer.
6. Y.Torsten Lodderstedt David A. Basin Jürgen Doser "SecureUML: A UML-Based Modeling Language for Model-Driven Security" 2002
7. T.Okubo, H.Kaiya, N.Yoshikawa Effective Security Impact Analysis with Patterns for SoftwareEnhancement - IJSSE 3(1): 37-61 (2012)
8. T.Okubo, K.taguch, N.Yoshioka Misuse Cases + Assets + Security Goals International Conference on Computational Science and Engineering 2009.
9. Guttorm Sindre and Andreas L. Opdahl. Eliciting security requirements by misuse cases. In TOOLS (37), pages 120-131. IEEE Computer Society, 2000.
10. T. Peng, J. Dong, and Y. Zhao, "Verifying Behavioral Correctness of Design Pattern Implementation," Proceedings of the Twentieth International Conference on Software Engineering &Knowledge Engineering (SEKE'2008)
11. Arnon Sturm, Jenny Abramov, Peretz Shoval Validating and Implementing Security Patterns for Database Applications SPAQu '09 2009
12. Heejin Kim, Byoungju Choi, Seokjin Yoon "Performance testing based on test-driven development for mobile applications" ICUIMC '09
13. Steven Fraser, Dave Astels, Kent Beck, Barry Boehm, John McGregor, James Newkirk, Charlie Poole"Discipline and practices of TDD (test driven development)" OOPSLA '03
14. USE http://www.db.informatik.uni-bremen.de/projects/USE/index.html
15. Jos. Warmer, Annke Kleppe "The Object Constraint Language-Precise Modeling with UML" Addison-Wesley, 1999
16. M. Howard and S. Lipner, The Security Development Lifecy-cle. Microsoft, 2006.
17. Web Application Security Frame http://msdn.microsoft.com/en-us/library/ ms978518
18. NII/TopSE project "aspect oriented lecture" http://topse.jp