Test as a Service: A framework for Web security TaaS service in cloud environment

被引:12
|
作者
Tung, Yuan-Hsin [1 ]
Lin, Chen-Chiu [1 ]
Shan, Hwai-Ling [1 ]
机构
[1] Chunghwa Telecom Co Ltd, Telecommun Lab, Taipei, Taiwan
关键词
TaaS:Test as a Service; cloud computing; web vulnerability; security test; vulnerability detection; ANALYSIS TOOL;
D O I
10.1109/SOSE.2014.36
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
As its name suggests, cloud testing is a form of software testing which uses cloud infrastructure. Its effective unlimited storage, quick availability of the infrastructure with scalability, flexibility and availability of distributed testing environment translate to reducing the execution time of testing of large applications and hence lead to cost-effective solutions. In cloud testing, Testing-as-a-Service (TaaS) is a new model to effectively provide testing capabilities and on-demand testing to end users. There are many studies and solutions to support TaaS service. And security testing is the most suitable form for TaaS service. To leverage the features of TaaS, we propose a framework of TaaS for security testing. We implement the prototype system, Security TaaS (abbrev. S-TaaS) based on our proposed framework. The experiments are conducted to evaluate the performance of our framework and prototype system. The experiment results indicate that our prototype system can provide quality and stable service.
引用
收藏
页码:212 / 217
页数:6
相关论文
共 50 条
  • [21] A Security Assessment Framework and Selection Method for Outsourcing Cloud Service
    Liu, Xiaochen
    Xia, Chunhe
    Cao, Jiajin
    Gao, Jinghua
    Wei, Zhao
    INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS, 2014, 8 (06): : 375 - 388
  • [22] SNUAGE: an efficient platform-as-a-service security framework for the cloud
    Wassim Itani
    Ayman Kayssi
    Ali Chehab
    Cluster Computing, 2013, 16 : 707 - 724
  • [23] Mutual Auditing Framework for Service Level Security Auditing in Cloud
    Sasmal, Soumitra
    Pan, Indrajit
    2017 THIRD IEEE INTERNATIONAL CONFERENCE ON RESEARCH IN COMPUTATIONAL INTELLIGENCE AND COMMUNICATION NETWORKS (ICRCICN), 2017, : 297 - 302
  • [24] SNUAGE: an efficient platform-as-a-service security framework for the cloud
    Itani, Wassim
    Kayssi, Ayman
    Chehab, Ali
    CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS, 2013, 16 (04): : 707 - 724
  • [25] A SECURITY-AS-A-SERVICE SOLUTION FOR APPLICATIONS IN CLOUD COMPUTING ENVIRONMENT
    Chen, Wen
    Sharieh, Salah
    Blainey, Bob
    COMMUNICATIONS AND NETWORKING SYMPOSIUM (CNS 2018), 2018,
  • [26] A Review of Research on Security of Cloud Service Platform in Medical Environment
    Liu, Kun
    Chen, Chunling
    Guo, Jianjun
    Li, Qi
    Guo, Yongan
    2019 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS - TAIWAN (ICCE-TW), 2019,
  • [27] A Collaborative Filtering Method for Web Data Service in Cloud Environment
    Wang, Zhechong
    Xu, Jianbo
    Ke, Jian
    Xie, Songyou
    2020 IEEE INTERNATIONAL CONFERENCE ON SMART CLOUD (SMARTCLOUD 2020), 2020, : 204 - 208
  • [28] QoS and SLA Aware Web Service Composition in Cloud Environment
    Wang, Dandan
    Ding, Hao
    Yang, Yang
    Mi, Zhenqiang
    Liu, Li
    Xiong, Zenggang
    KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS, 2016, 10 (12): : 5231 - 5248
  • [29] A new Security Framework for Protecting WSDL File of Web Service
    Mirtalebi, Arezoo
    Khayyambashi, Mohammad Reza
    INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND NETWORK SECURITY, 2012, 12 (09): : 84 - 90
  • [30] PIRAP: Security Assessment Framework for Heterogeneous Web Service Composition
    Padmanaban, R.
    Thirumaran, M.
    Aruna, R.
    Jayakumar, L.
    INTERNATIONAL JOURNAL OF COOPERATIVE INFORMATION SYSTEMS, 2023, 32 (01N02)