Palanivel Maragathavalli, Selvadurai Kanmani
Department of Information Technology, Pondicherry Engineering College, Puducherry, India.
Springerplus. 2014 Dec 19;3:754. doi: 10.1186/2193-1801-3-754. eCollection 2014.
Security testing is a process of determining risks present in the system states and protects them from vulnerabilities. But security testing does not provide due importance to threat modeling and risk analysis simultaneously that affects confidentiality and integrity of the system. Risk analysis includes identification, evaluation and assessment of risks. Threat modeling approach is identifying threats associated with the system. Risk-driven security testing uses risk analysis results in test case identification, selection and assessment to prioritize and optimize the testing process. Threat modeling approach, STRIDE is generally used to identify both technical and non-technical threats present in the system. Thus, a security testing mechanism based on risk analysis results using STRIDE approach has been proposed for identifying highly risk states. Risk metrics considered for testing includes risk impact, risk possibility and risk threshold. Risk threshold value is directly proportional to risk impact and risk possibility. Risk-driven security testing results in reduced test suite which in turn reduces test case selection time. Risk analysis optimizes the test case selection and execution process. For experimentation, the system models namely LMS, ATM, OBS, OSS and MTRS are considered. The performance of proposed system is analyzed using Test Suite Reduction Rate (TSRR) and FSM coverage. TSRR varies from 13.16 to 21.43% whereas FSM coverage is achieved up to 91.49%. The results show that the proposed method combining risk analysis with threat modeling identifies states with high risks to improve the testing efficiency.
安全测试是一个确定系统状态中存在的风险并保护其免受漏洞影响的过程。但安全测试没有同时对威胁建模和风险分析给予应有的重视，这会影响系统的保密性和完整性。风险分析包括风险的识别、评估和评价。威胁建模方法是识别与系统相关的威胁。风险驱动的安全测试在测试用例的识别、选择和评估中使用风险分析结果，以对测试过程进行优先级排序和优化。威胁建模方法STRIDE通常用于识别系统中存在的技术和非技术威胁。因此，已经提出了一种基于使用STRIDE方法的风险分析结果的安全测试机制，用于识别高风险状态。用于测试的风险指标包括风险影响、风险可能性和风险阈值。风险阈值与风险影响和风险可能性成正比。风险驱动的安全测试会减少测试套件，进而减少测试用例的选择时间。风险分析优化了测试用例的选择和执行过程。为了进行实验，考虑了系统模型LMS、ATM、OBS、OSS和MTRS。使用测试套件缩减率（TSRR）和有限状态机覆盖率（FSM coverage）对所提出系统的性能进行了分析。TSRR在13.16%至21.43%之间变化，而FSM覆盖率达到了91.49%。结果表明，将风险分析与威胁建模相结合的所提出方法能够识别高风险状态，从而提高测试效率。
