RAILROADMAP: An Agile Security Testing Framework for Web-application Development
Seiji Munetoh, Nobukazu Yoshioka · 2013
We propose a model-assisted security testing framework for developing Web applications. We devised a tool called “RailroadMap” that automatically extracts a behavior model from the code base of Ruby-on-Rails. This model provides a unified point of view for analyzing security problems by representing an application's behavior, which includes all security functions and possible attack scenarios.