Assessing Security Vulnerabilities: An Application of Partial and End-Game Verification and Validation

Simple item page
dc.contributor.authorFrazier, Edward Sneaden
dc.contributor.committeechairArthur, James D.en
dc.contributor.committeememberMarchany, Randolph C.en
dc.contributor.committeememberTront, Joseph G.en
dc.contributor.departmentElectrical and Computer Engineeringen
dc.date.accessioned2014-03-14T20:34:05Zen
dc.date.adate2010-06-02en
dc.date.available2014-03-14T20:34:05Zen
dc.date.issued2010-04-21en
dc.date.rdate2010-06-02en
dc.date.sdate2010-04-23en
dc.description.abstractModern software applications are becoming increasingly complex, prompting a need for expandable software security assessment tools. Violable constraints/assumptions presented by Bazaz [1] are expandable and can be modified to fit the changing landscape of software systems. Partial and End-Game Verification, Validation, and Testing (VV&T) strategies utilize the violable constraints/assumptions and are established by this research as viable software security assessment tools. The application of Partial VV&T to the Horticulture Club Sales Assistant is documented in this work. Development artifacts relevant to Partial VV&T review are identified. Each artifact is reviewed for the presence of constraints/assumptions by translating the constraints/assumptions to target the specific artifact and software system. A constraint/assumption review table and accompanying status nomenclature are presented that support the application of Partial VV&T. Both the constraint/assumption review table and status nomenclature are generic, allowing them to be used in applying Partial VV&T to any software system. Partial VV&T, using the constraint/assumption review table and associated status nomenclature, is able to effectively identify software vulnerabilities. End-Game VV&T is also applied to the Horticulture Club Sales Assistant. Base test strategies presented by Bazaz [1] are refined to target system specific resources such as user input, database interaction, and network connections. Refined test strategies are used to detect violations of the constraints/assumptions within the Horticulture Club Sales Assistant. End-Game VV&T is able to identify violation of constraints/assumptions, indicating vulnerabilities within the Horticulture Club Sales Assistant. Addressing vulnerabilities identified by Partial and End-Game VV&T will enhance the overall security of a software system.en
dc.description.degreeMaster of Scienceen
dc.identifier.otheretd-04232010-000938en
dc.identifier.sourceurlhttp://scholar.lib.vt.edu/theses/available/etd-04232010-000938/en
dc.identifier.urihttp://hdl.handle.net/10919/31849en
dc.publisherVirginia Techen
dc.relation.haspartFrazier_ES_T_2010.pdfen
dc.rightsIn Copyrighten
dc.rights.urihttp://rightsstatements.org/vocab/InC/1.0/en
dc.subjectAccess Driven VV&Ten
dc.subjectAssumptionsen
dc.subjectConstraintsen
dc.subjectAssessmenten
dc.subjectVulnerabilitiesen
dc.subjectSoftware Securityen
dc.titleAssessing Security Vulnerabilities: An Application of Partial and End-Game Verification and Validationen
dc.typeThesisen
thesis.degree.disciplineElectrical and Computer Engineeringen
thesis.degree.grantorVirginia Polytechnic Institute and State Universityen
thesis.degree.levelmastersen
thesis.degree.nameMaster of Scienceen

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Frazier_ES_T_2010.pdf
Size:
4.84 MB
Format:
Adobe Portable Document Format
Download

Collections

Masters Theses