Test as a service: A framework for web security TaaS service in cloud environment

Proceedings - IEEE 8th International Symposium on Service Oriented System Engineering, SOSE 2014

Volumn , Issue , 2014, Pages 212-217

  Tung, Yuan Hsin ^a   Lin, Chen Chiu ^a   Shan, Hwai Ling ^a  

^a CHUNGHWA TELECOM CO LTD   (Taiwan)

Author keywords

cloud computing; security test; TaaS; Test as a Service; vulnerability detection; web vulnerability

Indexed keywords

CLOUD COMPUTING; SOFTWARE TESTING; SYSTEMS ENGINEERING;

CLOUD ENVIRONMENTS; CLOUD INFRASTRUCTURES; COST-EFFECTIVE SOLUTIONS; DISTRIBUTED TESTING; SECURITY TESTS; TAAS; VULNERABILITY DETECTION; WEB VULNERABILITY;

EXPERIMENTS;

EID: 84903650412     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SOSE.2014.36     Document Type: Conference Paper

References (29)

1. "Acunetix Ltd, Web Vulnerability Scanner", http://www.acunetix. com/vulnerability-scanner/[Last accessed 1 May, 2013]
2. "Cloud testing", http://en.wikipedia.org/wiki/Cloud-testing [Last accessed 1 May, 2013]
3. "Cloud computing", http://en.wikipedia.org/wiki/Cloud-computing [Last accessed 1 May, 2013]
4. "CodeSecure", http://www.armorize.com/codesecure/, [Last accessed 1 May, 2013]
5. D. Stuttard and M. Pinto, The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws. Wiley, 2007.
6. Definition: Testing as a Service (TaaS), "http:// searchcloudapplications.techtarget.com/definition/Testing-asa- Service-TaaS", [Last accessed 1 May, 2013]
7. F. Yu, M. Alkhalaf, and T. Bultan, "Stranger: An automata-based string analysis tool for php, " in TACAS, 2010, pp. 154-157.
8. G. V. Kondraske, "Performance Theory: Implications for Performance Measurement, Task Analysis, and Performance Prediction, " Annual EMBS International Conference, Chicago IL., 23-28 July, 2000.
9. "HP WebInspect", https://download.hpsmartupdate.com/webinspect/ , [Last accessed 1 May, 2013]
10. "HP FORTIFY", http://www8.hp.com/us/en/softwaresolutions/ software.html?compURI=1337262#.UYKTGaLAdmx [Last accessed 1 May, 2013]
11. "HP Test-as-a-Service", http://www8.hp.com/us/en/ softwaresolutions/software.html?compURI=1173731[Last accessed 1 May, 2013]
12. "IBM AppScan", http://www- 03.ibm.com/software/products/us/en/ appscan, [Last accessed 1 Nov., 2013]
13. I.-H. Chung, G. Cong, D. Klepacki, S. Sbaraglia, S. Seelam, H.-F. Wen, "A Framework for Automated Performance Bottleneck Detection, " Parallel and Distributed Processing, IEEE International Symposium on(IPDPS 2008), pp. 1-7, 14-18 April 2008.
14. I. Rish, M. Brodie, S. Ma, N. Odintsova, A. Beygelzimer, G. Grabarnik, and K. Hernandez, "Adaptive diagnosis in distributed systems, " IEEE Trans. on Neural Networks, Vol. 16, No. 5, Sep. 2005.
15. J. Gao, X. Bai, and W. T. Tsai, "Cloud-Testing: Issues, Challenges, Needs and Practice, " Software Engineering: An International Journal (SEJI), Vol. 1, No. 1, pp. 9-23, September 2011.
16. L. van der Aalst, "Software testing as a service (STaaS)", http://www.tmap.net/sites/tmap.net/files/attachments/Paper-STaaS.pdf[Last accessed 1 Nov., 2013]
17. L. Cherkasova, W. Tang, and S. Singhal, "An SLA-Oriented Capacity Planning Tool for Streaming Media Services, " International Conference on Dependable Systems and Networks (DSN'04), Florence, Italy, 28 June -1 July 2004.
18. Lenzini, L.; Mingozzi, E.; Steay, G., "Tradeoffs between low complexity, low latency, and fairness with deficit round-robin schedulers", IEEE/ACM Transactions on Networking, vol. 12, pp. 681-693, 2004
19. L. M. Riungu, O. Taipale, and K. Smolander, "Research Issues for Software Testing in the Cloud, " Third International Conference on Software Testing, Verification, and Validation Workshops (ICSTW 2010).
20. MileScan ParosPro, [Online]. Available: http://www.milescan.com/hk/.
21. M. Brodie, I. Rish, and S. Ma, "Optimizing probe selection for fault localization, " Distributed Syst. Oper. Manage., pp. 1147-1157, 2001.
22. N. Jovanovic, C. Krugel, and E. Kirda, "Pixy: A static analysis tool for detecting web application vulnerabilities (short paper), " in IEEE Symposium on Security and Privacy, 2006, pp. 258-263.
23. "Oracle Test-as-a-Service", http://www.oracle.com/technetwork/ oem/cloud-mgmt/testing-as-aservice- 1905801.html[Last accessed 1 May, 2013]
24. P. Mell and T. Grance, The NIST Definition of Cloud Computing, Technical report, National Institute of Standards and Technology, September 2011.
25. "PIXY", https://security.web.cern.ch/security/recommendations/ en/codetools/pixy.shtml, [Last accessed 1 May, 2013]
26. R. Buyya, C. S. Yeo, S. Venugopal, J. Broberg, and I. Brandic, "Cloud computing and emerging IT Platforms" Vision, hype, and reality for delivering computing as the 5th utility, " Future Generation Computer System 25 (2009), pp. 599-616.
27. Arunkumar, K. V., and E. Samlinson. Testing As A Service (Taas)-An Enhanced Security Framework for Taas In Cloud Environment. International Journal Of Internet Computing 1.
28. "User Story", http://en.wikipedia.org/wiki/User-story, [Last accessed 1 May, 2013]
29. X. Bai, M. Li, B. Chen, W.-T. Tsai, and J. Gao, Cloud testing tools, International Symposium on Service Oriented System Engineering(SOSE), pp. 1-12, 2011.