II-NEW: Infrastructure for model-based security testing, controlled experiments, and education

该项目致力于构建一个测试平台，以实现对应用程序的可扩展和自动化安全测试。软件安全设计和安全测试技术是开发安全软件的基础。然而，这些技术的许多特性、优点和局限性只有通过严格的对照实验才能完全了解。该项目解决了这些挑战。总体目标是帮助工程师创建可靠的安全系统。为了做到这一点，本项目从事以下研究和开发活动：-开发由三个组件组成的测试生成工具：基于模型的安全测试序列生成器，它考虑到两个设计级模型，从安全设计自动生成测试？安全和威胁模型；可执行测试代码生成器，用于将来自安全和威胁模型的安全测试转换为可与被测实现一起执行的测试代码；测试输入生成器，用于使用基于语法的测试方法生成实际输入以完成测试用例。-开发试验台，其中包括各种软件构件和测试自动化工具，以支持带有安全测试的受控实验。预计这项工作将产生几个切实的结果。该项目的成功可能会为安全自动化测试开辟一条新的途径，这可以改善安全保证，同时显著降低安全系统的总体开发成本。特别是，这项工作可能使开发许多新的策略来根据丰富的安全设计模型的覆盖标准来生成安全测试代码成为可能。这将为评估各种安全测试策略的可扩展性和成本效益(例如，在漏洞检测能力和测试成本方面)奠定基础。这个项目有几个广泛的影响：拟议的工作将支持几个研究生和本科生朝着他们的学位目标努力，并为他们提供开发工具和实证研究的经验。此外，这项提议的重点是使由此产生的基础设施可供研究人员和教育工作者使用，使他们能够使用工具和执行受控实验，以及培训学生。北达科他州是EPSCoR州，因此，对该项目的支持将有助于实现EPSCoR计划的目标。

This project focuses on building a test bed that will enable scalable and automated security testing of applications.Software secure design and security testing techniques are fundamental to the development of secure software. Many of the properties, strengths, and limitations of these techniques, however, can be fully understood only through rigorous, controlled experiments. This project addresses these challenges. The overall objective is to help engineers create dependable secure systems. To do this, this project engages in the following research and development activities: -Development of test generation tools that consist of three components: a model-based security test sequence generator that generates tests automatically from a secure design considering two design-level models ? security and threat models; an executable test code generator that converts security tests derived from security and threat models to test code that can be executed together with the implementation under test; a test input generator that generates actual inputs to complete test cases using a syntax-based testing approach. -Development of the testbed that includes various software artifacts and test automation tools to support controlled experiments with security testing.Several tangible results from this work are expected. The success of this project may open a new avenue to automated testing for security, which can improve security assurance while significantly reducing the overall development costs of secure systems. In particular, this work may make it possible to develop many new strategies for generating security test code in terms of a rich variety of coverage criteria for secure design models. This will lay a foundation for evaluating scalability and cost-effectiveness (e.g., in terms of vulnerability detection capability and testing cost) of various security testing strategies. This project has several broad impacts: the proposed work will support several graduate and undergraduate students as they work toward their degree goals and provide them with experience with developing tools and empirical studies. Also, this proposal is focused on making the resulting infrastructure available to researchers and educators, enabling them to use tools and perform controlled experiments as well as train students. North Dakota is an EPSCOR state, thus, support for this project will help meet the goals of the EPSCoR program.