Earticle

초록

영어

The Model Based Testing (MBT) is an original approach where test cases are automatically generated from the specifications of the system under tests. These specifications take the form of a behavioral model allowing the test generator to determine, on the one hand, the possible and relevant execution contexts. On the other hand, to predict the effects of these executions on the system. This paper proposes new methodology to generate vulnerability test cases based on SysML model of Europay-Mastercard and Visa (EMV) specifications. Our main aim is to ensure that not only the features described by the EMV specifications are met, but also that there is no vulnerability in the system. To meet these two objectives, we automatically generated concrete tests basing on SysML models. Indeed, this paper highlights the importance of modeling EMV specifications. We opted for the choice of SysML modeling language due to its ability to model Embedded Systems through several types of diagrams. In our work we used state machine diagram to generate vulnerability test cases for a secure and robust system.

목차

Abstract
 1. Introduction
 2. State of the Art
  2.1. Model-Based Testing
  2.2. Limitations
 3. Application Domain: The EMV Infrastructure
  3.1. APDU Command
  3.2. EMV Transaction
 4. Tools and Method
 5. Our new Methodology of vulnerabilities detection
  5.1. Practical vulnerabilities of EMV Cards
  5.2. Our New Methodology
 6. Results and Discussions
  6.1. Modeling EMV Transaction using Machine State Diagram
  6.2. Generation of Event-B Model
  6.3. Validation of Event-B model
  6.4. Generation of Abstract Tests
  6.5. Our Automatic Vulnerability Tests Generator
  6.6. Synthesis
 7. Conclusion
 References

키워드

저자

• Noura Ouerdi [ Department Mathematical and Computer, Lab. ACSA, Faculty of Sciences, Mohammed First University, Oujda 60000, Morocco ]
• Mostafa Azizi [ Department Computer, Lab. MATSI, ESTO, Mohammed First University, Oujda 60000, Morocco ]
• M’Hammed Ziane [ Department Mathematical and Computer, Lab. ACSA, Faculty of Sciences, Mohammed First University, Oujda 60000, Morocco ]
• Abdelmalek Azizi [ Department Mathematical and Computer, Lab. ACSA, Faculty of Sciences, Mohammed First University, Oujda 60000, Morocco ]
• Jean-louis Lanet [ XLIM/DMI/SSD,87 street of Isles, 87000 Limoges, France ]
• Aymerick Savary [ GRIL, IT department, Sherbrook University, Quebec, Canada ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605