This paper deals with an original approach to automate Model-Based Vulnerability Testing (MBVT) for Web applications. Today, Model-Based Testing techniques are mostly used to address functional features. The adaptation of such techniques for vulnerability testing defines novel issues in this research domain. In this paper, we describe the principles of our approach, which is based on a mixed modelling of the application under test: the specification indeed captures some behavioral aspects of the Web application, and includes vulnerability test purposes to drive the test generation algorithm. Finally, this MBVT approach is illustrated with the widely-used DVWA example.
F. REF , proposed an approach from a behavioral model and test patterns, which aims to address both technical and logical vulnerabilities based on Model-Based Vulnerability Testing (MBVT).
Model-Based Vulnerability Testing for Web Applications
2013 IEEE Sixth International Conference on Software Testing, Verification and Validation Workshops
2013 IEEE Sixth International Conference on Software Testing, Verification and Validation Workshops
Computer Science