Implementation Support of Security Design Patterns Using Test Templates

Security patterns are intended to support software developers as the patterns encapsulate security expert knowledge. However, these patterns may be inappropriately applied because most developers are not security experts, leading to threats and vulnerabilities. Here we propose a support method for s...

Full description

Saved in:

Bibliographic Details
Published in:	Information (Basel) Vol. 7; no. 2; p. 34
Main Authors:	Yoshizawa, Masatoshi, Washizaki, Hironori, Fukazawa, Yoshiaki, Okubo, Takao, Kaiya, Haruhiko, Yoshioka, Nobukazu
Format:	Journal Article
Language:	English
Published:	MDPI AG 15.06.2016
Subjects:	aspect-oriented programming model-based testing security patterns test-driven development
ISSN:	2078-2489, 2078-2489
Online Access:	Get full text
Tags:	Add Tag No Tags, Be the first to tag this record!

Description
Summary:	Security patterns are intended to support software developers as the patterns encapsulate security expert knowledge. However, these patterns may be inappropriately applied because most developers are not security experts, leading to threats and vulnerabilities. Here we propose a support method for security design patterns in the implementation phase of software development. Our method creates a test template from a security design pattern, consisting of an “aspect test template” to observe the internal processing and a “test case template”. Providing design information creates a test from the test template with a tool. Because our test template is reusable, it can easily perform a test to validate a security design pattern. In an experiment involving four students majoring in information sciences, we confirm that our method can realize an effective test, verify pattern applications, and support pattern implementation.
ISSN:	2078-2489 2078-2489
DOI:	10.3390/info7020034