Perceiving and understanding cyber-attacks can be a difficult task, and more effective
techniques are needed to aid cyber-attack perception. Attack modelling techniques (AMTs) …

This paper presents the current state of the art on attack and defense modeling approaches
that are based on directed acyclic graphs (DAGs). DAGs allow for a hierarchical …

Developers often build software on top of third-party libraries (Libs) to improve programmer
productivity and software quality. The libraries may contain vulnerabilities exploitable by …

Security attacks typically result from unintended behaviors or invalid inputs. Security testing
is labor intensive because a real-world program usually has too many invalid inputs. It is …

Perceiving and understanding cyber-attacks can be a difficult task. This problem is widely
recognized and welldocumented, and more effective techniques are needed to aid cyber …

Incorporating security features is one of the most important and challenging tasks in
designing distributed systems. Over the last decade, researchers and practitioners have …

A large number of Web sites use online recommendations to make Web users interested in
their products or content. Since no single recommendation approach is always best it is …

This article introduces a new method for knowledge-based security testing by logic
programming and the related tool implementation for model-based non-functional security …

Context: Security and performance are critical software non-functional requirements.
Therefore, verification activities should be included in the development process to identify …

The penetration test is a crucial way to enhance the security of web applications. Improving
accuracy is the core issue of the penetration test research. The test case is an important …