Integration of Formal Methods and Testing for Model-Based Security Engineering
Achim D. Brucker · 2014
We present a brief overview of various security testing works that range from applying off-the-shell tools (both dynamic tools as well as static program analysis) to theorem-prover based testing for ensuring the compliance of systems to high-level security policies.Moreover, we report on the process of selecting the most appropriate (security) testing tools during product development derive open research questions based on our experience in developing, introducing, and applying (security) testing tools at SAP SE.