II-NEW: Infrastructure for model-based security testing, controlled experiments, and education

这个项目的重点是构建一个测试平台，它将支持应用程序的可伸缩和自动化的安全性测试。软件安全设计和安全测试技术是安全软件开发的基础。然而，这些技术的许多特性、优势和局限性只有通过严格的、受控的实验才能完全理解。这个项目解决了这些挑战。总体目标是帮助工程师创建可靠的安全系统。为此，该项目从事以下研究和开发活动：-开发由三个组件组成的测试生成工具：基于模型的安全测试序列生成器，它从考虑两个设计级模型的安全设计自动生成测试？安全和威胁模型；一种可执行的测试代码生成器，它将源自安全和威胁模型的安全测试转换为可与被测实现一起执行的测试代码；使用基于语法的测试方法生成实际输入以完成测试用例的测试输入生成器。开发测试平台，包括各种软件工件和测试自动化工具，以支持安全测试的受控实验。预计这项工作将产生若干切实的成果。这个项目的成功可能会为安全性的自动化测试开辟一条新的道路，这可以在显著降低安全系统的总体开发成本的同时提高安全性保证。特别地，这项工作可能使开发许多新的策略成为可能，这些策略是根据安全设计模型的丰富多样的覆盖标准生成安全测试代码的。这将为评估各种安全测试策略的可扩展性和成本效益（例如漏洞检测能力和测试成本）奠定基础。这个项目有几个广泛的影响：拟议的工作将支持一些研究生和本科生，因为他们努力实现他们的学位目标，并为他们提供开发工具和实证研究的经验。此外，该提案的重点是使由此产生的基础设施可供研究人员和教育工作者使用，使他们能够使用工具并进行控制实验以及培训学生。北达科他州是EPSCOR州，因此，对该项目的支持将有助于实现EPSCOR计划的目标。

This project focuses on building a test bed that will enable scalable and automated security testing of applications.Software secure design and security testing techniques are fundamental to the development of secure software. Many of the properties, strengths, and limitations of these techniques, however, can be fully understood only through rigorous, controlled experiments. This project addresses these challenges. The overall objective is to help engineers create dependable secure systems. To do this, this project engages in the following research and development activities: -Development of test generation tools that consist of three components: a model-based security test sequence generator that generates tests automatically from a secure design considering two design-level models ? security and threat models; an executable test code generator that converts security tests derived from security and threat models to test code that can be executed together with the implementation under test; a test input generator that generates actual inputs to complete test cases using a syntax-based testing approach. -Development of the testbed that includes various software artifacts and test automation tools to support controlled experiments with security testing.Several tangible results from this work are expected. The success of this project may open a new avenue to automated testing for security, which can improve security assurance while significantly reducing the overall development costs of secure systems. In particular, this work may make it possible to develop many new strategies for generating security test code in terms of a rich variety of coverage criteria for secure design models. This will lay a foundation for evaluating scalability and cost-effectiveness (e.g., in terms of vulnerability detection capability and testing cost) of various security testing strategies. This project has several broad impacts: the proposed work will support several graduate and undergraduate students as they work toward their degree goals and provide them with experience with developing tools and empirical studies. Also, this proposal is focused on making the resulting infrastructure available to researchers and educators, enabling them to use tools and perform controlled experiments as well as train students. North Dakota is an EPSCOR state, thus, support for this project will help meet the goals of the EPSCoR program.