Department of Mathematics and Computer Science, Faculty of Science, Chulalongkorn University, Bangkok Thailand.

---

Abstract—Vulnerability detection is commonly been executed during the testing phase of software development. Current methods are not able to detect system or software security vulnerabilities of certain types of attacks during the early stages of software development. These attacks include both the ones we did not anticipate as well as the ones unknown during the design phase. In this paper we propose a method to detect the security vulnerabilities during the design phase of software development. This approach simulates attacks according to the misuse patterns using model testing method. With this approach, we are able to analyze system security vulnerabilities during the design stage of the system development. The practical example provides evidences the feasibility of our method.

Index Terms—Vulnerability, security patterns, misuse patterns, UML, USE, model testing.

[PDF]

Cite: Yuan Yifan, Somjai Boonsiri, "Analysis of Security Vulnerabilities Using Misuse Pattern Testing Approach," Journal of Software vol. 10, no. 5, pp. 650-658, 2015.