自然科学版 英文版
自然科学版 英文版
自然科学版 英文版

您目前所在的位置:首页 - 期刊简介 - 详细页面

中南大学学报(英文版)

Journal of Central South University

Vol. 16    No. 2    April 2009

[PDF Download]    [Flash Online]

    

A fault injection model-oriented testing strategy for component security
CHEN Jin-fu(陈锦富)1, LU Yan-sheng(卢炎生)1, ZHANG Wei(张 卫)2, XIE Xiao-dong(谢晓东)1

1. College of Computer Science and Technology, Huazhong University of Science and Technology,
Wuhan 430074, China;
2. Department of Computer Science, Iowa State University, Ames 50011, USA

Abstract: A fault injection model-oriented testing strategy was proposed for detecting component vulnerabilities. A fault injection model was defined, and the faults were injected into the tested component based on the fault injection model to trigger security exceptions. The testing process could be recorded by the monitoring mechanism of the strategy, and the monitoring information was written into the security log. The component vulnerabilities could be detected by the detecting algorithm through analyzing the security log. Lastly, some experiments were done in an integration testing platform to verify the applicability of the strategy. The experimental results show that the strategy is effective and operable. The detecting rate is more than 90% for vulnerability components.

 

Key words: component testing; component security; fault injection model; testing strategy; detecting algorithm

中南大学学报(自然科学版)
  ISSN 1672-7207
CN 43-1426/N
ZDXZAC
中南大学学报(英文版)
  ISSN 2095-2899
CN 43-1516/TB
JCSTFT
版权所有:《中南大学学报(自然科学版、英文版)》编辑部
地 址:湖南省长沙市中南大学 邮编: 410083
电 话: 0731-88879765 传真: 0731-88877727
电子邮箱:zngdxb@csu.edu.cn 湘ICP备09001153号