{"id":"https://openalex.org/W2105420972","doi":"https://doi.org/10.1109/hicss.2004.1265703","title":"Automated testing of security functions using a combined model and interface-driven approach","display_name":"Automated testing of security functions using a combined model and interface-driven approach","publication_year":2004,"publication_date":"2004-01-01","ids":{"openalex":"https://openalex.org/W2105420972","doi":"https://doi.org/10.1109/hicss.2004.1265703","mag":"2105420972"},"language":"en","primary_location":{"id":"doi:10.1109/hicss.2004.1265703","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hicss.2004.1265703","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"37th Annual Hawaii International Conference on System Sciences, 2004. Proceedings of the","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001686667","display_name":"Ramaswamy Chandramouli","orcid":"https://orcid.org/0000-0002-7387-5858"},"institutions":[{"id":"https://openalex.org/I1321296531","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416","country_code":"US","type":"funder","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"R. Chandramouli","raw_affiliation_strings":["Computer Security Division, National Institute for Standards and Technology, USA","Div. of Comput. Security, National Inst. of Stand. & Technol., Gaithersburg, MD, USA"],"affiliations":[{"raw_affiliation_string":"Computer Security Division, National Institute for Standards and Technology, USA","institution_ids":[]},{"raw_affiliation_string":"Div. of Comput. Security, National Inst. of Stand. & Technol., Gaithersburg, MD, USA","institution_ids":["https://openalex.org/I1321296531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113963034","display_name":"Mark Blackburn","orcid":null},"institutions":[{"id":"https://openalex.org/I4210119740","display_name":"Vecna Technologies (United States)","ror":"https://ror.org/031r5nr48","country_code":"US","type":"company","lineage":["https://openalex.org/I4210119740"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"M. Blackburn","raw_affiliation_strings":["T-VEC Technologiese, Spain","T-VEC Technologies"],"affiliations":[{"raw_affiliation_string":"T-VEC Technologiese, Spain","institution_ids":[]},{"raw_affiliation_string":"T-VEC Technologies","institution_ids":["https://openalex.org/I4210119740"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5001686667"],"corresponding_institution_ids":["https://openalex.org/I1321296531"],"apc_list":null,"apc_paid":null,"fwci":0.3835,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.67874166,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"10 pp.","last_page":"10 pp."},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7927044630050659},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.5844330787658691},{"id":"https://openalex.org/keywords/white-box-testing","display_name":"White-box testing","score":0.5804853439331055},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5791751742362976},{"id":"https://openalex.org/keywords/model-based-testing","display_name":"Model-based testing","score":0.5044876337051392},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.46382370591163635},{"id":"https://openalex.org/keywords/interface","display_name":"Interface (matter)","score":0.4594349265098572},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.45661988854408264},{"id":"https://openalex.org/keywords/test-case","display_name":"Test case","score":0.4520225524902344},{"id":"https://openalex.org/keywords/black-box-testing","display_name":"Black-box testing","score":0.4115039110183716},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3980739116668701},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3869772255420685},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3624042272567749},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.28003132343292236},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.24068954586982727},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23635661602020264},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.22838714718818665},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.2204006314277649},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.2203860580921173},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21691054105758667},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.1949770748615265},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.13983136415481567},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.11147996783256531},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.0868794322013855}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7927044630050659},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.5844330787658691},{"id":"https://openalex.org/C162443782","wikidata":"https://www.wikidata.org/wiki/Q1066228","display_name":"White-box testing","level":5,"score":0.5804853439331055},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5791751742362976},{"id":"https://openalex.org/C165825675","wikidata":"https://www.wikidata.org/wiki/Q1399743","display_name":"Model-based testing","level":4,"score":0.5044876337051392},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.46382370591163635},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.4594349265098572},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.45661988854408264},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.4520225524902344},{"id":"https://openalex.org/C24169984","wikidata":"https://www.wikidata.org/wiki/Q879969","display_name":"Black-box testing","level":5,"score":0.4115039110183716},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3980739116668701},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3869772255420685},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3624042272567749},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.28003132343292236},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.24068954586982727},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23635661602020264},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.22838714718818665},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2204006314277649},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.2203860580921173},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21691054105758667},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.1949770748615265},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.13983136415481567},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.11147996783256531},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0868794322013855},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C157915830","wikidata":"https://www.wikidata.org/wiki/Q2928001","display_name":"Bubble","level":2,"score":0.0},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0},{"id":"https://openalex.org/C129307140","wikidata":"https://www.wikidata.org/wiki/Q6795880","display_name":"Maximum bubble pressure method","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/hicss.2004.1265703","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hicss.2004.1265703","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"37th Annual Hawaii International Conference on System Sciences, 2004. Proceedings of the","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5099999904632568,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W1595351489","https://openalex.org/W1764347589","https://openalex.org/W1835501018","https://openalex.org/W6635444149"],"related_works":["https://openalex.org/W2252827360","https://openalex.org/W12495686","https://openalex.org/W2767512594","https://openalex.org/W1974673257","https://openalex.org/W2225555312","https://openalex.org/W2949104238","https://openalex.org/W1663662652","https://openalex.org/W4286797010","https://openalex.org/W2952740084","https://openalex.org/W4323054491"],"abstract_inverted_index":{"Independent":[0],"security":[1,6,26,50,94,150,163,246],"functional":[2,95,247],"testing":[3,96,248],"(testing":[4],"of":[5,8,31,40,51,93,100,107,114,149,162,242,249],"functions":[7,151,164],"a":[9,21,159,233,250],"product":[10,155,200,218],"or":[11],"system":[12],"for":[13,89,97,245],"conformance":[14],"to":[15,29,157,185,203,219],"published":[16],"behavior)":[17],"is":[18,123,138,178,214,236],"often":[19,66],"given":[20],"low":[22],"priority":[23],"in":[24,37,74],"traditional":[25],"evaluations,":[27],"due":[28],"combination":[30],"cost":[32],"and":[33,61,117,129,192,232],"technical":[34],"considerations,":[35],"except":[36],"the":[38,48,58,69,91,105,112,130,139,146,154,166,182,193,217,240],"case":[39],"high":[41],"assurance":[42],"products.":[43],"However":[44],"we":[45,85,132],"argue":[46],"that":[47],"overall":[49],"an":[52,87],"Enterprise":[53],"IT":[54],"environment":[55],"depends":[56],"upon":[57],"weakest":[59,63],"link":[60],"these":[62],"links":[64],"are":[65,196,226],"commercial":[67,101,251],"off":[68],"shelf":[70],"software":[71],"products":[72,102],"involved":[73],"number":[75],"crunching,":[76],"data":[77],"storage,":[78],"transaction":[79],"processing":[80],"etc.":[81],"In":[82],"this":[83],"paper":[84],"present":[86],"approach":[88,144],"improving":[90],"economics":[92],"many":[98],"classes":[99],"by":[103,153],"automating":[104],"process":[106],"test":[108,187,194,206,212,224,230,234],"code":[109,213],"generation":[110],"through":[111,181],"use":[113],"formal":[115,171],"models":[116],"interface":[118,201],"information.":[119],"The":[120,142,173,189,211,222],"underlying":[121],"framework":[122],"called":[124],"TAF":[125,137,143],"(test":[126,208],"automation":[127],"framework)":[128],"toolkit":[131,244],"have":[133],"developed":[134],"based":[135],"on":[136],"TAF-SFT":[140,183,243],"toolkit.":[141],"uses":[145],"text-based":[147],"specifications":[148,202],"provided":[152],"vendor":[156],"develop":[158],"machine-readable":[160],"specification":[161,176],"using":[165],"SCR":[167],"(Software":[168],"Cost":[169],"Reduction)":[170],"language.":[172],"resultant":[174],"behavioral":[175,190],"model":[177,191],"then":[179,197],"processed":[180],"Toolkit":[184],"generate":[186,205],"vectors.":[188],"vectors":[195],"combined":[198],"with":[199,228],"automatically":[204],"drivers":[207],"execution":[209],"code).":[210],"executed":[215],"against":[216],"be":[220],"tested.":[221],"actual":[223],"results":[225,231],"compared":[227],"expected":[229],"report":[235],"generated.":[237],"We":[238],"illustrate":[239],"application":[241],"DBMS":[252],"product.":[253]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}