An Alternative Threat Model-based Approach for Security Testing

Autor:	Mohammed Akour, Samia Oukemeni, Bouchaib Falah
Rok vydání:	2015
Předmět:	Computer science business.industry Computer security computer.software_genre Web application security Security testing Security information and event management Threat Security service Application security Threat model business computer Countermeasure (computer)
Zdroj:	International Journal of Secure Software Engineering. 6:50-64
ISSN:	1947-3044 1947-3036
Popis:	In modern interaction, web applications has gained more and more popularity, which leads to a significate growth of exposure to malicious users and vulnerability attacks. This causes organizations and companies to lose valuable information and suffer from bad reputation. One of the effective mitigation practices is to perform security testing against the application before release it to the market. This solution won't protect web application 100% but it will test the application against malicious codes and reduce the high number of potential attacks on web application. One of known security testing approach is threat modeling, which provides an efficient technique to identify threats that can compromise system security. The authors proposed method, in this paper, focuses on improving the effectiveness of the categorization of threats by using Open 10 Web Application Security Project's (OWASP) that are the most critical web application security risks in generating threat trees in order to cover widely known security attacks.
Databáze:	OpenAIRE
Externí odkaz:	https://explore.openaire.eu/search/publication?articleId=doi_________::66ed0a590b00aa5d5afe17707304ca66 https://doi.org/10.4018/ijsse.2015070103 Zobrazit plný text záznamu