Model-based security testing

Security-related tests should check and validate in engineering that the functionality derived from the security requirements has been correctly implemented. The design of effective tests for this security functionality requires, in addition to test models, a procedure for obtaining these models from previous artefacts of security engineering. This paper describes such an approach and focuses on the use of the artefacts of previous phases of security engineering for security testing.