关键任务系统中可信协作的多面向组件测试框架

Joon S. Park, A. Suresh, Gaeil An, J. Giordano
{"title":"关键任务系统中可信协作的多面向组件测试框架","authors":"Joon S. Park, A. Suresh, Gaeil An, J. Giordano","doi":"10.1109/COLCOM.2006.361878","DOIUrl":null,"url":null,"abstract":"Although we need software-component sharing in a large distributed system, we cannot simply trust those components provided by participating organizations, especially when malicious groups or competitors are involved in the collaboration. When a wide range of malicious activity needs to be tested, a large overhead is incurred in scanning for malicious code and checking internal failures. Large projects also have multi-functional teams working and any lack of communication or overlooks in design can lead to unchecked security holes when the system is integrated. Moreover, it is not always easy to test the whole system for security and accuracy in preventing attacks because one can never develop a test plan for that which one is unaware of, such as a specialized attack by a hacker that compromises a system. Therefore, in this paper we develop a dynamic approach for testing software components in using multiple aspects of testing with high accuracy. We also present new techniques that provide for an automated system architecture that provides for a scalable and flexible distributed testing mechanism capable of handling newer threats at very short notice. We have considered the use of Microsoft's .Net and C# as the platform to describe and prototype the testing mechanisms","PeriodicalId":315775,"journal":{"name":"2006 International Conference on Collaborative Computing: Networking, Applications and Worksharing","volume":"125 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2006-11-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"5","resultStr":"{\"title\":\"A Framework of Multiple-Aspect Component-Testing for Trusted Collaboration in Mission-Critical Systems\",\"authors\":\"Joon S. Park, A. Suresh, Gaeil An, J. Giordano\",\"doi\":\"10.1109/COLCOM.2006.361878\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Although we need software-component sharing in a large distributed system, we cannot simply trust those components provided by participating organizations, especially when malicious groups or competitors are involved in the collaboration. When a wide range of malicious activity needs to be tested, a large overhead is incurred in scanning for malicious code and checking internal failures. Large projects also have multi-functional teams working and any lack of communication or overlooks in design can lead to unchecked security holes when the system is integrated. Moreover, it is not always easy to test the whole system for security and accuracy in preventing attacks because one can never develop a test plan for that which one is unaware of, such as a specialized attack by a hacker that compromises a system. Therefore, in this paper we develop a dynamic approach for testing software components in using multiple aspects of testing with high accuracy. We also present new techniques that provide for an automated system architecture that provides for a scalable and flexible distributed testing mechanism capable of handling newer threats at very short notice. We have considered the use of Microsoft's .Net and C# as the platform to describe and prototype the testing mechanisms\",\"PeriodicalId\":315775,\"journal\":{\"name\":\"2006 International Conference on Collaborative Computing: Networking, Applications and Worksharing\",\"volume\":\"125 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2006-11-17\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"5\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2006 International Conference on Collaborative Computing: Networking, Applications and Worksharing\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/COLCOM.2006.361878\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2006 International Conference on Collaborative Computing: Networking, Applications and Worksharing","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/COLCOM.2006.361878","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 5

摘要

尽管我们需要在大型分布式系统中共享软件组件,但我们不能简单地信任参与组织提供的那些组件,特别是当恶意组织或竞争对手参与协作时。当需要测试范围广泛的恶意活动时,在扫描恶意代码和检查内部故障方面会产生很大的开销。大型项目也有多功能团队,在集成系统时,任何缺乏沟通或设计上的疏忽都可能导致未经检查的安全漏洞。此外,为了防止攻击而测试整个系统的安全性和准确性并不总是容易的,因为人们永远无法为自己不知道的情况制定测试计划,例如黑客对系统进行的专门攻击。因此,在本文中,我们开发了一种动态的方法来测试软件组件,使用多个方面的测试,具有较高的准确性。我们还提出了提供自动化系统体系结构的新技术,该体系结构提供了可伸缩且灵活的分布式测试机制,能够在很短的时间内处理更新的威胁。我们考虑使用微软的。net和c#作为平台来描述和原型化测试机制
本文章由计算机程序翻译,如有差异,请以英文原文为准。
A Framework of Multiple-Aspect Component-Testing for Trusted Collaboration in Mission-Critical Systems
Although we need software-component sharing in a large distributed system, we cannot simply trust those components provided by participating organizations, especially when malicious groups or competitors are involved in the collaboration. When a wide range of malicious activity needs to be tested, a large overhead is incurred in scanning for malicious code and checking internal failures. Large projects also have multi-functional teams working and any lack of communication or overlooks in design can lead to unchecked security holes when the system is integrated. Moreover, it is not always easy to test the whole system for security and accuracy in preventing attacks because one can never develop a test plan for that which one is unaware of, such as a specialized attack by a hacker that compromises a system. Therefore, in this paper we develop a dynamic approach for testing software components in using multiple aspects of testing with high accuracy. We also present new techniques that provide for an automated system architecture that provides for a scalable and flexible distributed testing mechanism capable of handling newer threats at very short notice. We have considered the use of Microsoft's .Net and C# as the platform to describe and prototype the testing mechanisms
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信