Security Test Case Prioritization through Ant Colony Optimization Algorithm  

作　　者：Abdulaziz Attaallah Khalil al-Sulbi Areej Alasiry Mehrez Marzougui Mohd Waris Khan Mohd Faizan Alka Agrawal Dhirendra Pandey 

机构地区：[1]Department of Computer Science,Faculty of Computing and Information Technology,King Abdulaziz University,Jeddah,21589,Saudi Arabia [2]Department of Computer Science,Al-Qunfudah Computer College,Umm Al-Qura University,Mecca,Saudi Arabia [3]College of Computer Science,King Khalid University,Abha,61421,Saudi Arabia [4]Department of Computer Application,Integral University,Lucknow,Uttar Pradesh,226026,India [5]Department of Information Technology,Babasaheb Bhimrao Ambedkar University,Lucknow,Uttar Pradesh,226025,India

出　　处：《Computer Systems Science & Engineering》2023年第12期3165-3195,共31页计算机系统科学与工程(英文)

基　　金：Deanship of Scientific Research at King Khalid University for funding this work through Large Group Research Project under Grant Number RGP2/249/44.

摘　　要：Security testing is a critical concern for organizations worldwide due to the potential financial setbacks and damage to reputation caused by insecure software systems.One of the challenges in software security testing is test case prioritization,which aims to reduce redundancy in fault occurrences when executing test suites.By effectively applying test case prioritization,both the time and cost required for developing secure software can be reduced.This paper proposes a test case prioritization technique based on the Ant Colony Optimization(ACO)algorithm,a metaheuristic approach.The performance of the ACO-based technique is evaluated using the Average Percentage of Fault Detection(APFD)metric,comparing it with traditional techniques.It has been applied to a Mobile Payment Wallet application to validate the proposed approach.The results demonstrate that the proposed technique outperforms the traditional techniques in terms of the APFD metric.The ACO-based technique achieves an APFD of approximately 76%,two percent higher than the second-best optimal ordering technique.These findings suggest that metaheuristic-based prioritization techniques can effectively identify the best test cases,saving time and improving software security overall.

关 键 词：CONFIDENTIALITY INTEGRITY AUTHENTICATION NON-REPUDIATION RESILIENCE AUTHORIZATION Ant Colony Optimization algorithm 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]