Report: Functional Security Testing Closing the Software --- Security Testing Gap: A Case from a Telecom Provider

Authors:
Albin Zuccato;Clemens Kögler
Affiliations:
TeliaSonera, Product Security, Sweden and Department of Computer and System Science, Stockholm University, Sweden;TeliaSonera, Product Security, Sweden
Venue:
ESSoS '09 Proceedings of the 1st International Symposium on Engineering Secure Software and Systems
Year:
2009

Citing 10
Cited 1

Testing Computer Software, Second Edition

Testing Computer Software, Second Edition
Systematic Software Testing

Systematic Software Testing
Writing Secure Code

Writing Secure Code
Why Security Testing Is Hard

IEEE Security and Privacy
Exploiting Software: How to Break Code

Exploiting Software: How to Break Code
Software Security Testing

IEEE Security and Privacy
Software Security: Building Security In

Software Security: Building Security In
Analysis of the SSL 3.0 protocol

WOEC'96 Proceedings of the 2nd conference on Proceedings of the Second USENIX Workshop on Electronic Commerce - Volume 2
Security Requirement Engineering at a Telecom Provider

ARES '08 Proceedings of the 2008 Third International Conference on Availability, Reliability and Security
Secure programming with static analysis

Secure programming with static analysis

Report: modular safeguards to create holistic security requirement specifications for system of systems

ESSoS'10 Proceedings of the Second international conference on Engineering Secure Software and Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

To offer successful products and services in the telecom business requires to show that the specified security is implemented as expected. Functional security testing is suitable for this purpose as it bridges the gap between software and security testing. In this paper we describe the aspects of such a functional security testing approach. Further we provide evidence for a practical application of our approach and show the benefits we found.