State of the art of methodologies for risk- and model-based security testing

This document constitutes the first deliverable of work package 4 of the DIAMONDS project. Whereas the other work packages focus on techniques (work package 2) and tools (work package 3), work package 4 focuses on methodology, i.e. processes and guidelines for how to apply the techniques and tools in practice. The deliverable addresses two main research areas: model-based security testing and risk-based security testing. The first topic is related to task 4.2 of work package 4, and is documented in Section 2. The second topic is related to task 4.3 of work package 4 and documented in Section 3.