Sökning: onr:"swepub:oai:DiVA.org:mdh-66165" >
Model-Driven Securi...
Model-Driven Security Test Case Generation Using Threat Modeling and Automata Learning
-
- Marksteiner, Stefan (författare)
- Mälardalens universitet,Akademin för innovation, design och teknik,AVL List GmbH,Cyber-Physical Systems Analysis
-
- Sirjani, Marjan, Professor (preses)
- Mälardalens universitet,Inbyggda system
-
- Sjödin, Mikael, Professor, 1971- (preses)
- Mälardalens universitet,Inbyggda system
-
visa fler...
-
- Mousavi, Mohammad Reza, Professor (opponent)
- King’s College London, UK
-
visa färre...
-
(creator_code:org_t)
- ISBN 9789174856385
- Västerås : Mälardalen University, 2024
- Engelska.
-
Serie: Mälardalen University Press Licentiate Theses, 1651-9256 ; 355
- Relaterad länk:
-
https://mdh.diva-por... (primary) (Raw object)
-
visa fler...
-
https://urn.kb.se/re...
-
visa färre...
Abstract
Ämnesord
Stäng
- Automotive systems are not only becoming more open through developments like advanced driving assistance functions, autonomous driving, vehicle-to-everything communication and software-defined vehicle functionality, but also more complex. At the same time, technology from standard IT systems become frequently adopted in this setting. These developments have two negative effects on correctness and security: the rising complexity adds potential flaws and vulnerabilities while the increased openness expands attack surfaces and entry points for adversaries. To provide more secure systems, the amount of verifying system security through testing has to be significantly increased, which is also a requirement by international regulation and standards. Due to long supply chains and non-disclosure policies, verification methods often have to operate in a black box setting. This thesis strives therefore towards finding more efficient methods of automating test case generation in both white and black box scenarios. The focus lies on communication protocols used in vehicular systems. The main approaches used are model-based methods. We provide a practical method to automatically obtain behavioral models in the form of state machines of communication protocol implementations in real-world settings using automata learning. We also provide a means to automatically check these implementation models for their compliance with a specification (e.g., from a standard). We furthermore present a technique to automatically derive test-cases to point out found deviations on the actual system.We also present a method to create abstract cybersecurity test case specifications from semi-formal threat models using attack trees.
Ämnesord
- NATURVETENSKAP -- Data- och informationsvetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences (hsv//eng)
- NATURVETENSKAP -- Data- och informationsvetenskap -- Datavetenskap (hsv//swe)
- NATURAL SCIENCES -- Computer and Information Sciences -- Computer Sciences (hsv//eng)
Nyckelord
- Computer Science
- datavetenskap
Publikations- och innehållstyp
- vet (ämneskategori)
- lic (ämneskategori)
Hitta via bibliotek
Till lärosätets databas