DIAMONDS

DIAMONDS will enable efficient and automated security testing methods of industrial relevance for highly secure systems in multiple domains (incl. e.g. banking, transport or telecommunication). As pointed out by the Software Engineering Institute, US, 2009: "The security of a software-intensive system is directly related to the quality of its software”. In particular, over 90% of software security incidents are caused by attackers exploiting known software defects. DIAMONDS addresses this increasing need for systematic security testing methods by developing techniques and tools that can efficiently be used to secure networked applications in different domains.

Goals

DIAMONDS will leverage systematic, model-based testing and monitoring approaches for security testing to enable highly secure systems by early testing and test automation. Advanced model-based security testing methods will allow the early identification of design vulnerabilities and efficient system/test design targeting security aspects.

top

---

Innovations

DIAMONDS will introduce four main innovations in the field of security testing methods and technologies:

1. Advanced model-based security testing methods that combine different techniques to obtain improved results applicable to multi-domain security.
2. Development of autonomous testing techniques based on automatic monitoring techniques to improve resilience of dynamically evolving systems.
3. Pre-standardization work on multi-domain security test methodologies and test patterns allowing DIAMONDS to offer interoperable security test techniques and tools.
4. Open source platform for security test tool integration to provide a common platform, which provides the user a single user interface towards various test tools, as well as a single reporting interface to have concise report from the various tools.

These innovations aim at building a pre-standard for model-based security testing targeting heterogeneous and distributed systems and services and represent the enabling technology necessary for the introduction of formal security testing in industry.

top

---

Expected Results

The four main results of DIAMONDS will be:

1. Security Fault Models
2. Risk-driven Security Test Methology
3. Model-based Security Test Methodology
4. Security Test Patterns Catalogue

top

---

German Partners

Fraunhofer FOKUS is the coordinator of this consortium.

	The Fraunhofer Institute for Open Communication Systems (FOKUS) conducts research in system development technologies, communication and cooperation systems and intelligent multimedia systems. The work of FOKUS is undertaken by seven Competence Centres. The Competence Centre on “Modeling and Testing for System and Service Solutions” (MOTION) of FOKUS will participate in this project. A main stream of MOTION’s research includes new approaches towards efficient model-based distributed, performance and interoperability testing, to monitoring and measurement of communication flows, and to an efficient test suite factory.
	Giesecke & Devrient is a leading supplier of banknote paper, banknote printing, currency automation systems, as well as smart cards and complex system solutions in the fields of telecommunications, electronic payment, health care, identification, transportation and IT security (PKI).
	Dornier Consulting is an internationally recognised consulting and project management company for traffic, transport and the environment / water. With innovative solutions Dornier Consulting provides important impulses for the economy and society.
	Testing Technologies IST GmbH develops and markets highly innovative test development tool series, solutions and services based on the test specification and implementation language TTCN-3. Testing Technologies offers under the brand TTworkbench a highly integrated test development and execution tool series for a wide range of industry domains, including the telecommunications, automotive and financial domains.

 

top

---

European Partners

 

The international consortium is part of the ITEA2 programme.

Six European countries take part in DIAMONDS



Project Leader of the international consortium:
Prof. Ina Schieferdecker, Fraunhofer FOKUS.

Austria: Secure Business Applications, TU Graz

Finland: VTT, Ericsson, Codenomicon, University Oulu, Conformiq, Metso

France: Thales, Gemalto, Montimage, Smartesting, FSCOM, Get IT, Grenoble INP

Germany: Fraunhofer FOKUS, Giesecke & Devrient, Dornier Consulting, Testing Technologies

Luxemburg: itrust

Norway: SINTEF, Norse Solutions

top

back     top