Security testing framework: strategy and approach

Thorsten Schulz, Andreas Hohenegger, Staffan Persson, Alvaro Ortega, Reinhard Hametner, Michael Paulitsch, Caspar Gries, Sergey Tverdyshev, Holger Blasum, Kertis Tomáš
2017 Zenodo  
This deliverable evaluates the state of the art in security testing techniques in relation to relevant industrial security standards. The research starts with a survey of non-industrial security frameworks and general identification of security vulnerabilities. We then have a look into the different testing contexts covered by Common Criteria requirements and IEC62443 standards and certification schemes. This is also brought into context with the certMILS application pilots and the
more » ... nd the applicability to testing of compositions as the fundamental architecture of a MILS system. Future work will focus on refining features of the testing framework for security testing of operating system components.The strategy for these activities is outlined in the third chapter, together with a short study of the technical feasibility.
doi:10.5281/zenodo.2586591 fatcat:lz4li6fdwfhnnktbfdtjlsnlzu