Non-operational testing of software for security issues
Shweta Subramani, Mladen Alan Vouk, Laurie A. Williams · 2013
We are studying extension of the classical Software Reliability Engineering (SRE) methodology into the security space. We combine “classical” reliability modeling, when applied to reported vulnerabilities found under “normal” operational profile conditions, with safety oriented fault management processes. We illustrate with open source Fedora software.