2013 · 40 citations · 12 references
ComputingComputer EngineeringCybersecurityApplication SecurityVulnerability AnalysisWeb SecurityApplication Security TestingModel-driven Software EngineeringSoftware TestingWeb Application SecurityWeb Application TestingWeb Application VulnerabilitiesAutomated Test GenerationAutomated Web Security TestingModel TestingModel-based TestingTest GenerationTest Generation From ModelsVulnerabilityWeb Application Security Testing
This paper deals with an original approach to automate Model-Based Vulnerability Testing (MBVT) for Web applications, which aims at improving the accuracy and precision of vulnerability testing. Today, Model-Based Testing techniques are mostly used to address functional features. The adaptation of such techniques for vulnerability testing defines novel issues in this research domain. In this paper, we describe the principles of our approach, which is based on a mixed modeling of the application under test: the specification indeed captures some behavioral aspects of the Web application, and includes vulnerability test purposes to drive the test generation algorithm. This approach is illustrated with the widely-used DVWA example.
12
State of the Art: Automated Black-Box Web Application Vulnerability Testing
Jason Bau, Elie Bursztein, Divij Gupta et al. · 2010 · 317 citations
A subset of precise UML for model-based testing
Fabrice Bouquet, Christophe Grandpierre, Bruno Legeard et al. · 2007 · 82 citations · Full text
A Threat Model Driven Approach for Security Testing
Linzhang Wang, Eric W. M. Wong, Dianxiang Xu · 2007 · 54 citations