%0 Conference Proceedings
%T Using Data Integration for Security Testing
%+ Université Clermont Auvergne [2017-2020] (UCA  [2017-2020])
%A Salva, Sébastien
%A Regainia, Loukmen
%Z Part 3: Safety and Security Testing
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 29th IFIP International Conference on Testing Software and Systems (ICTSS)
%C St. Petersburg, Russia
%Y Nina Yevtushenko
%Y Ana Rosa Cavalli
%Y Hüsnü Yenigün
%I Springer International Publishing
%3 Testing Software and Systems
%V LNCS-10533
%P 178-194
%8 2017-10-09
%D 2017
%R 10.1007/978-3-319-67549-7_11
%K Security
%K Security patterns
%K Attack Defense Trees
%K Test case generation
%Z Computer Science [cs]
%Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers
%X The explosion of digitisation makes a plethora of security data publicly available for developers. These numerous (often complex) documents expose them to the difficulty of choosing the most appropriate solution for securing their applications. We propose in this paper a method based upon data acquisition and integration, which assists developers in the Threat modelling stage and in the security test case execution. The method firstly helps devise Attack Defense Trees by means of a data-store. These trees show attacks, steps and defenses given under the form of security patterns, which are re-usable solutions to design more secure applications. These trees are then used for the test case generation. The data-store integrates test case stubs, which make this generation easier and developers more efficient. We evaluate our approach on 24 participants and show encouraging results on the use of data integration in software engineering.
%G English
%Z TC 6
%Z WG 6.1
%2 https://inria.hal.science/hal-01678954/document
%2 https://inria.hal.science/hal-01678954/file/449632_1_En_11_Chapter.pdf
%L hal-01678954
%U https://inria.hal.science/hal-01678954
%~ PRES_CLERMONT
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC6
%~ IFIP-WG6-1
%~ IFIP-ICTSS
%~ IFIP-LNCS-10533