Automated Reusable Tests for Mitigating Secure Pattern Interpretation Errors

Carlos Cunha

doi:10.1109/ACCESS.2023.3279823

2023-01-01

Carlos Cunha *

Nuno Pombo

DOI：10.1109/ACCESS.2023.3279823

原文链接

原文求助

摘要

En 中文

The importance of software security has increased along with the number and severity of incidents in recent years. Security is a multidisciplinary aspect of the software development lifecycle, operation, and user utilization. Being a complex and specialized area of software engineering, it is often sidestepped in software development methodologies and processes. We address software security at the design level by adopting design patterns that encapsulate reusable solutions for recurring security problems. Design patterns can help development teams implement the best-proven solutions for a specialized problem domain. However, from the analysis of three secure pattern implementations by 70 junior programmers, we detected several structural errors resulting from their interpretation. We propose reusable unit testing test cases based on annotations to avoid secure pattern interpretation errors and provide an example for one popular secure pattern. Providing these test cases to the same group of programmers, they implemented the pattern without errors. The reason is annotations build a framework that disciplines programmers to incorporate secure patterns in their applications and ensure automatic testing.

Keyword:

Security

Software reliability

Software testing

Measurement

Computer architecture

Codes

Production facilities

software design

software safety

software testing