The detection of software vulnerability requires critical attention during the development
phase to make it secure and less vulnerable. Vulnerable software always invites hackers to …

This paper presents the current state of the art on attack and defense modeling approaches
that are based on directed acyclic graphs (DAGs). DAGs allow for a hierarchical …

Context With the development of mobile apps, public concerns about security issues are
continually rising. From the user's perspective, it is crucial to be aware of the security issues …

Emerging Cloud computing infrastructures provide computing resources on demand based
on postpaid principles. For example, the RESERVOIR project develops an infrastructure …

Background: Software testing and software security have become one of the most important
parts of an application. Many studies have explored each of these topics but there is a gap …

Security vulnerabilities and breaches remain a major concern for firms as they cost billions
of dollars in downtime, maintenance and disruptions. Although researchers in the fields of …

Context: Testing usually involves the interaction of the tester with the system under test.
However, there are many situations in which this interaction is not feasible and so one …

Nowadays attack trees are often used by large organisations to analyse security threats
against their systems. Designing such an attack tree requires detailed knowledge regarding …

The existence of software vulnerabilities is an indicator of the reliability and safety of
software products. Software vulnerabilities can be predicted using metrics derived from …

Graph models are helpful means of analyzing computer networks as well as complex system
architectures for security. In this paper we evaluate the current state of research for …