Test as a Service: A framework for Web security TaaS service in cloud environment

被引:12
|
作者
Tung, Yuan-Hsin [1 ]
Lin, Chen-Chiu [1 ]
Shan, Hwai-Ling [1 ]
机构
[1] Chunghwa Telecom Co Ltd, Telecommun Lab, Taipei, Taiwan
关键词
TaaS:Test as a Service; cloud computing; web vulnerability; security test; vulnerability detection; ANALYSIS TOOL;
D O I
10.1109/SOSE.2014.36
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
As its name suggests, cloud testing is a form of software testing which uses cloud infrastructure. Its effective unlimited storage, quick availability of the infrastructure with scalability, flexibility and availability of distributed testing environment translate to reducing the execution time of testing of large applications and hence lead to cost-effective solutions. In cloud testing, Testing-as-a-Service (TaaS) is a new model to effectively provide testing capabilities and on-demand testing to end users. There are many studies and solutions to support TaaS service. And security testing is the most suitable form for TaaS service. To leverage the features of TaaS, we propose a framework of TaaS for security testing. We implement the prototype system, Security TaaS (abbrev. S-TaaS) based on our proposed framework. The experiments are conducted to evaluate the performance of our framework and prototype system. The experiment results indicate that our prototype system can provide quality and stable service.
引用
收藏
页码:212 / 217
页数:6
相关论文
共 50 条
  • [41] A framework for checking and mitigating the security vulnerabilities of cloud service RESTful APIs
    Khan, Md Shohel
    Siam, Rubaiyat Sha Fardin
    Adnan, Muhammad Abdullah
    SERVICE ORIENTED COMPUTING AND APPLICATIONS, 2024,
  • [42] Cyber Security Risk Assessment Framework for Cloud Customer and Service Provider
    Kumari, N. Sujata
    Vurukonda, Naresh
    INTERNATIONAL JOURNAL OF ADVANCED COMPUTER SCIENCE AND APPLICATIONS, 2024, 15 (12) : 683 - 697
  • [43] Improvement Framework of Korean Certification System for Cloud Service Focus on Security
    Jeon, Hangoo
    Min, Young-Gi
    Seo, Kwang-Kyu
    INTERNATIONAL JOURNAL OF SECURITY AND ITS APPLICATIONS, 2016, 10 (02): : 75 - 84
  • [44] Selection of Cloud Service Providers for Hosting Web Applications in a Multi-cloud Environment
    Ramamurthy, Arun
    Saurabh, Saket
    Gharote, Mangesh
    Lodha, Sachin
    2020 IEEE 13TH INTERNATIONAL CONFERENCE ON SERVICES COMPUTING (SCC 2020), 2020, : 202 - 209
  • [45] Improving data transfer performance of web service workflows in the cloud environment
    Zhang, Donglai
    Coddington, Paul
    Wendelborn, Andrew L.
    INTERNATIONAL JOURNAL OF COMPUTATIONAL SCIENCE AND ENGINEERING, 2013, 8 (03) : 198 - 209
  • [47] Cloud Security Management Suite - Security as a Service
    Krishnan, Deepa
    Chatterjee, Madhumita
    PROCEEDINGS OF THE 2012 WORLD CONGRESS ON INFORMATION AND COMMUNICATION TECHNOLOGIES, 2012, : 431 - 436
  • [48] Service lifecycle in the cloud environment
    Munteanu, Victor Ion
    Fortis, Teodor-Florin
    Negru, Viorel
    14TH INTERNATIONAL SYMPOSIUM ON SYMBOLIC AND NUMERIC ALGORITHMS FOR SCIENTIFIC COMPUTING (SYNASC 2012), 2012, : 457 - 464
  • [49] Environment Quality of Service in Cloud
    Kalekuri, Manjusha
    Rao, Kolasani Ramchand H.
    PROCEEDINGS OF INTERNATIONAL CONFERENCE ON COMMUNICATION, COMPUTING AND VIRTUALIZATION (ICCCV) 2016, 2016, 79 : 118 - 126
  • [50] A Web Service Organization Method based on Cloud Cluster and Cloud Service Community
    Zhao, Pengfei
    Xu, Ruzhi
    Zhao, Zhikun
    Nie, Peiyao
    Fan, Bo
    PROCEEDINGS OF THE 2013 INTERNATIONAL CONFERENCE ON INFORMATION SCIENCE AND TECHNOLOGY APPLICATIONS (ICISTA-2013), 2013, 58 : 83 - 87