Pattern based Web Security Testing

Paulo J. M. Araújo; Ana C. R. Paiva

Research.Publish.Connect.

*Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Country:
Subject:

Advanced Search Affiliations Search

If you're looking for an exact phrase use quotation marks on text fields.

Proceedings

Proceedings Search *Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

Papers

Papers Search *Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

Authors

Authors Search *Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

Advanced Search

Paper

Pattern based Web Security Testing

Topics: Model-Based Testing and Validation

In Proceedings of the 6th International Conference on Model-Driven Engineering and Software Development MODELSWARD - Volume 1, 472-479, 2018 , Funchal, Madeira, Portugal

Authors: Paulo J. M. Araújo ¹ and Ana C. R. Paiva ²

Affiliations: ¹ Faculty of Engineering of University of Porto, Portugal ; ² Faculty of Engineering of University of Porto and INESC TEC, Portugal

Keyword(s): Security Testing, Pattern based Testing, Pattern based Security Testing, Security Web Testing.

Related Ontology Subjects/Areas/Topics: Applications and Software Development ; Model-Based Testing and Validation ; Model-Driven Software Development ; Software Engineering

Abstract: This paper presents a Pattern Based Testing approach for testing security aspects of the applications under test (AUT). It describes the two security patterns which are the focus of this work (``Account Lockout'' and ``Authentication Enforcer'') and the test strategies implemented to check if the applications are vulnerable or not regarding these patterns. The PBST (Pattern Based Security Testing) overall approach has two phases: exploration (to identify the web pages of the application under test) and testing (to execute the test strategies developed in order to detect vulnerabilities). An experiment is presented to validate the approach over five public web applications. The goal is to assess the behavior of the tool when varying the upper limit of pages to visit and assess its capacity to find real vulnerabilities. The results are promising. Indeed, it was possible to check that the vulnerabilities detected corresponded to real security problems.

CC BY-NC-ND 4.0

Guest: Register as new SciTePress user now for free.

SciTePress user: please login.

My Papers

You are not signed in, therefore limits apply to your IP address 3.135.216.196

In the current month:

Recent papers: 100 available of 100 total

2⁺ years older papers: 200 available of 200 total

Paper citation in several formats:

J. M. Araújo, P. and C. R. Paiva, A. (2018). Pattern based Web Security Testing. In Proceedings of the 6th International Conference on Model-Driven Engineering and Software Development - MODELSWARD; ISBN 978-989-758-283-7; ISSN 2184-4348, SciTePress, pages 472-479. DOI: 10.5220/0006606504720479

@conference{modelsward18,
author={Paulo {J. M. Araújo}. and Ana {C. R. Paiva}.},
title={Pattern based Web Security Testing},
booktitle={Proceedings of the 6th International Conference on Model-Driven Engineering and Software Development - MODELSWARD},
year={2018},
pages={472-479},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0006606504720479},
isbn={978-989-758-283-7},
issn={2184-4348},
}

TY - CONF

JO - Proceedings of the 6th International Conference on Model-Driven Engineering and Software Development - MODELSWARD
TI - Pattern based Web Security Testing
SN - 978-989-758-283-7
IS - 2184-4348
AU - J. M. Araújo, P.
AU - C. R. Paiva, A.
PY - 2018
SP - 472
EP - 479
DO - 10.5220/0006606504720479
PB - SciTePress