General safety test generation method based on threat modeling

Abstract

The invention discloses a general safety test generation method based on threat modeling. The method comprises the following steps: modeling according to system user requirements; performing threat recognition on the system by using STRIDE, and generating a threat type corresponding to each element; generating a universal threat mode tree based on the generated threat type, and then generating a universal test sequence based on the generated threat mode tree; and finally, formulating a universal test case based on the generated test sequence. According to the method, the defects that in the prior art, threats are recognized by using an STRIDE method of Microsoft, but specific analysis on reasons and conditions of occurrence of the threats is lacked, subsequent development and test design cannot be well guided, and safety problems cannot be fundamentally solved are overcome, universal tests can be generated on the basis of STRIDE, and the method has the advantages of being high in practicability and easy to popularize. Threat recognition and analysis are transited to test design, and the effect of fundamentally solving the safety problem can be well achieved.

Description

technical field [0001] The invention relates to the technical field of requirement modeling and security testing in the field of software engineering, in particular to a general security testing generation method based on threat modeling. Background technique [0002] As software is widely used, it has become an indispensable part of people's life and work. The use of software has brought convenience to people, and the security of software has also caused great trouble for people. The security of software becomes particularly important. With the increase of the product scale, if the security loopholes and defects of the software are repaired in the later stage of software testing or after the completion of the software construction, the losses will be huge. Only by identifying the threats faced by the system from the early requirements and design stages of software development, and solving them as soon as possible, and building safe software, can the software quality be bett...

AI Technical Summary

Problems solved by technology

However, this method is only used to identify threats, and lacks specific analysis of the causes and conditions of threats. It cannot guide subsequent development and test design well, and fundamentally solve security problems.

The existing security tests are not well connected with the STRIDE method. They are specific tests for specific threats.

Images