{"id":"https://openalex.org/W4246766813","doi":"https://doi.org/10.4018/978-1-5225-3422-8.ch018","title":"An Alternative Threat Model-Based Approach for Security Testing","display_name":"An Alternative Threat Model-Based Approach for Security Testing","publication_year":2017,"publication_date":"2017-08-11","ids":{"openalex":"https://openalex.org/W4246766813","doi":"https://doi.org/10.4018/978-1-5225-3422-8.ch018"},"language":"en","primary_location":{"id":"doi:10.4018/978-1-5225-3422-8.ch018","doi":"https://doi.org/10.4018/978-1-5225-3422-8.ch018","is_oa":false,"landing_page_url":"https://doi.org/10.4018/978-1-5225-3422-8.ch018","pdf_url":null,"source":{"id":"https://openalex.org/S4306463409","display_name":"IGI Global eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Application Development and Design","raw_type":"book-chapter"},"volume":{"id":"https://openalex.org/W4239336008","display_name":"Application Development and Design"},"type":"book-chapter","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004094787","display_name":"Bouchaib Falah","orcid":"https://orcid.org/0000-0001-5086-0808","observed_orcids":["https://orcid.org/0000-0001-5086-0808"]},"institutions":[{"id":"https://openalex.org/I47844","display_name":"Al Akhawayn University","ror":"https://ror.org/03erkev52","country_code":"MA","type":"education","lineage":["https://openalex.org/I47844"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Bouchaib Falah","raw_affiliation_strings":["Al Akhawayn University, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Al Akhawayn University, Morocco","institution_ids":["https://openalex.org/I47844"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041474454","display_name":"Mohammed Akour","orcid":"https://orcid.org/0000-0002-5858-8957","observed_orcids":["https://orcid.org/0000-0002-5858-8957"]},"institutions":[{"id":"https://openalex.org/I85507684","display_name":"Yarmouk University","ror":"https://ror.org/004mbaj56","country_code":"JO","type":"education","lineage":["https://openalex.org/I85507684"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Mohammed Akour","raw_affiliation_strings":["Yarmouk University, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yarmouk University, Jordan","institution_ids":["https://openalex.org/I85507684"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090887528","display_name":"Samia Oukemeni","orcid":"https://orcid.org/0000-0001-8600-3429","observed_orcids":["https://orcid.org/0000-0001-8600-3429"]},"institutions":[{"id":"https://openalex.org/I47844","display_name":"Al Akhawayn University","ror":"https://ror.org/03erkev52","country_code":"MA","type":"education","lineage":["https://openalex.org/I47844"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Samia Oukemeni","raw_affiliation_strings":["Al Akhawayn University, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Al Akhawayn University, Morocco","institution_ids":["https://openalex.org/I47844"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"441","last_page":"454"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/threat-modeling","display_name":"threat modeling","score":0.8820000290870667},{"id":"https://openalex.org/keywords/security-testing","display_name":"security testing","score":0.8450000286102295},{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.9629999995231628},{"id":"https://openalex.org/keywords/owasp","display_name":"OWASP","score":0.6899999976158142},{"id":"https://openalex.org/keywords/threat-categorization","display_name":"threat categorization","score":0.906000018119812},{"id":"https://openalex.org/keywords/malicious-users","display_name":"malicious users","score":0.5699999928474426}],"concepts":[{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.7991617321968079},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.765446662902832},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6533880233764648},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.5964303612709045},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.5823662281036377},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.5538569092750549},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.5298967957496643},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5241577625274658},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.4820002615451813},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4755425453186035},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.4116992950439453},{"id":"https://openalex.org/C17520342","wikidata":"https://www.wikidata.org/wiki/Q7797190","display_name":"Threat","level":5,"score":0.41047102212905884},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3815019428730011},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.37188613414764404},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.36445653438568115},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.35214871168136597},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.3243585228919983},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3065098524093628},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.2666091322898865},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.25509440898895264},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.24632295966148376},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.21951556205749512},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.1891147792339325},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C194222762","wikidata":"https://www.wikidata.org/wiki/Q114486","display_name":"Query by Example","level":4,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.4018/978-1-5225-3422-8.ch018","doi":"https://doi.org/10.4018/978-1-5225-3422-8.ch018","is_oa":false,"landing_page_url":"https://doi.org/10.4018/978-1-5225-3422-8.ch018","pdf_url":null,"source":{"id":"https://openalex.org/S4306463409","display_name":"IGI Global eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Application Development and Design","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W641490396","https://openalex.org/W1909163279","https://openalex.org/W1980474774","https://openalex.org/W2006481682"],"related_works":["https://openalex.org/W157860609","https://openalex.org/W2140178650","https://openalex.org/W167273263","https://openalex.org/W109818852","https://openalex.org/W7098339236","https://openalex.org/W92552905","https://openalex.org/W2347611354","https://openalex.org/W2379325400","https://openalex.org/W4294576920","https://openalex.org/W7117972308"],"abstract_inverted_index":{"In":[0],"modern":[1],"interaction,":[2],"web":[3,63,84,139],"applications":[4],"has":[5],"gained":[6],"more":[7,9],"and":[8,22,28,34,75],"popularity,":[10],"which":[11,95],"leads":[12],"to":[13,19,30,46,56,100,149],"a":[14],"significate":[15],"growth":[16],"of":[17,40,80,87,120,123],"exposure":[18],"malicious":[20,73],"users":[21],"vulnerability":[23],"attacks.":[24,154],"This":[25,59],"causes":[26],"organizations":[27],"companies":[29],"lose":[31],"valuable":[32],"information":[33],"suffer":[35],"from":[36],"bad":[37],"reputation.":[38],"One":[39,86],"the":[41,51,57,70,77,118,121,136],"effective":[42],"mitigation":[43],"practices":[44],"is":[45,92],"perform":[47],"security":[48,89,141,153],"testing":[49,90],"against":[50,72],"application":[52,64,71,140],"before":[53],"release":[54],"it":[55,67],"market.":[58],"solution":[60],"won't":[61],"protect":[62],"100%":[65],"but":[66],"will":[68],"test":[69],"codes":[74],"reduce":[76],"high":[78],"number":[79],"potential":[81],"attacks":[82],"on":[83,116],"application.":[85],"known":[88,152],"approach":[91],"threat":[93,145],"modeling,":[94],"provides":[96],"an":[97],"efficient":[98],"technique":[99],"identify":[101],"threats":[102,124],"that":[103,134],"can":[104],"compromise":[105],"system":[106],"security.":[107],"The":[108],"authors":[109],"proposed":[110],"method,":[111],"in":[112,143,147],"this":[113],"paper,":[114],"focuses":[115],"improving":[117],"effectiveness":[119],"categorization":[122],"by":[125],"using":[126],"Open":[127],"10":[128],"Web":[129],"Application":[130],"Security":[131],"Project's":[132],"(OWASP)":[133],"are":[135],"most":[137],"critical":[138],"risks":[142],"generating":[144],"trees":[146],"order":[148],"cover":[150],"widely":[151]},"counts_by_year":[],"updated_date":"2026-10-10T09:11:00.788812","created_date":"2022-05-12T00:00:00"}