A fault injection model-oriented testing strategy for component security

  • Jin-fu Chen (陈锦富)
  • Yan-sheng Lu (卢炎生)
  • Wei Zhang (张卫)
  • Xiao-dong Xie (谢晓东)
Article

Abstract

A fault injection model-oriented testing strategy was proposed for detecting component vulnerabilities. A fault injection model was defined, and the faults were injected into the tested component based on the fault injection model to trigger security exceptions. The testing process could be recorded by the monitoring mechanism of the strategy, and the monitoring information was written into the security log. The component vulnerabilities could be detected by the detecting algorithm through analyzing the security log. Lastly, some experiments were done in an integration testing platform to verify the applicability of the strategy. The experimental results show that the strategy is effective and operable. The detecting rate is more than 90% for vulnerability components.

Key words

component testing component security fault injection model testing strategy detecting algorithm 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Central South University Press and Springer-Verlag GmbH 2009

Authors and Affiliations

  • Jin-fu Chen (陈锦富)
    • 1
  • Yan-sheng Lu (卢炎生)
    • 1
  • Wei Zhang (张卫)
    • 2
  • Xiao-dong Xie (谢晓东)
    • 1
  1. 1.College of Computer Science and TechnologyHuazhong University of Science and TechnologyWuhanChina
  2. 2.Department of Computer ScienceIowa State UniversityAmesUSA

Personalised recommendations