Security Vulnerability Testing

Principal Investigator: Aditya Mathur

Research Assistants: W. Du, M. Mudin, M. Tripunitara

Sponsor: COAST Laboratory sponsors

The purpose of this project is to evaluate and develop methods of testing software efficiently that focuses on discovering security relevant software flaws before the final product is released. One goal is to study and review the existing literature on software testing, which describes a wide range of techniques including mutation testing, slicing, test case coverage determination, etc. Many of the software testing techniques are very expensive and time consuming. Therefore, one objective is to establish which existing testing techniques are most effective for vulnerability detection, in order to provide software engineers guidelines for the selection of testing methods. Another objective is to investigate the existing security vulnerabilities and earlier work on classification of software faults to find or design a suitable classification scheme.

1998
Annual Research Report

Department of
Computer Sciences