Security Testing Based on Attack Patterns
Testing for security related issues is an important task of growing interest due to the vast amount of applications and services available over the internet. In practice testing for security often is performed manually with the consequences of higher costs, and no integration of security testing with today's agile software development processes. In order to bring security testing into practice, many different approaches have been suggested including fuzz testing and model-based testing approaches. Most of these approaches rely on models of the system or the application domain. In this paper we suggest to formalize attack patterns from which test cases can be generated and even executed automatically. Hence, testing for known attacks can be easily integrated into software development processes where automated testing, e.g., for daily builds, is a requirement. The approach makes use of UML state charts. Besides discussing the approach, we illustrate the approach using a case study.
Nowadays with the rapid use of Internet makes it easy to collect information as a matter of mouse click over the Web. With this enormous opportunity it becomes easy to make copy and use of someone else's works or ideas without giving the proper credit to the original owner. Normally this kind of practice is known as plagiarism. Plagiarism has already become a serious issue for the different publishing house of journals or the conference organizers to prevent the authors to plagiarize their work. Considering this issue several tools have been developed to check for plagiarism mostly based on syntactical or word based matching. In this paper a new conceptual model is proposed to generate a decent tool to identify the plagiarized content based on syntactical and semantic matching.