Comparison of SETAM with Security Use Case and Security Misuse Case:A Software Security Testing Study

作     者：HUI Zhanwei HUANG Song HUI Zhanwei;HUANG Song

作者机构：Software Test and Evaluation CentrePLA University of Science and TechnologyNanjing 210007JiangsuChina PLA Military Training Software Test and Evaluation CentreNanjing 210007JiangsuChina 

出 版 物：《Wuhan University Journal of Natural Sciences》 (武汉大学学报（自然科学英文版）)

年 卷 期：2012年第17卷第6期

页      面：516-520页

学科分类：08[工学] 0839[工学-网络空间安全] 081201[工学-计算机系统结构] 0812[工学-计算机科学与技术（可授工学、理学学位）] 

基　　金：Supported by the National High Technology Research and Development Program of China (863 Program) (2009AA01Z402) the PLA University of Science and Technology Pre-research Project (20110202, 20110210) the Natural Science Foundation of Jiangsu Province of China (BK2012059,BK2012060) the PLAUST Outstanding Graduate Student Thesis Fund (2012) 

主　　题：security testing security use case security misuse case software security testing behavior model security testing requirement 

摘      要：A software security testing behavior model,SETAM,was proposed in our previous work as the integrated model for describing software security testing requirements behavior,which is not only compatible with security functions and latent typical misuse behaviors,but also with the interaction of *** this paper,we analyze the differences between SETAM with security use case and security misuse case in different types of security test *** illustrate the effectiveness of SETAM,we compare them in a practical case study by the number of test cases and the number of faults detected by *** results show that SETAM could decrease about 34.87% use cases on average,and the number of faults detected by SETAM increased by 71.67% in average,which means that our model can detect more faults with fewer test cases for software security testing.