Browse > Article

A Study on Web Service Security Testing Methodology for Performance Evaluation  

Lee, Dong-Hwi (경기대학교 산업보안학과)
Ha, Ok-Hyun (호남대학교 경찰법행정학부)
Publication Information
Convergence Security Journal / v.10, no.4, 2010 , pp. 31-37 More about this Journal
Abstract
The risks and threats in IT security systems to protect, prevent damage and Risk should be minimized. Context of information security products such as information processing, storage, delivery, and in the process of information system security standards, That is the basic confidentiality, availability, integrity and secondary clarity, potential evidence, detection, warning and defense capabilities, to ensure sufficient and should be. Web services are the most important elements in the security, the web nature of port 80 for the service to keep the door open as a structure, Web applications, web sources and servers, networks, and to hold all the elements are fundamental weaknesses. Accordingly, these elements through a set of Web application development errors and set-up errors and vulnerabilities in Web applications using their own home pages and web servers to prevent hacking and to improve the efficiency of Web services is proposed methodology performs security BMT.
Keywords
BMT; Web Service;
Citations & Related Records
연도 인용수 순위
  • Reference
1 R. Baggen, K. Schill, and J. Visser, "Standardized Code Quality Benchmarking for Improving Software Maintainability", in 4th International Workshop on Software Quality and Maintainability(SQM 2010), 2010.
2 IT Security Center, Information-technology Promotion Agency(IPA), "Information Security Measures Benchmark (ISM-Benchmark)", 2008.
3 Uwe Schoning, Theoretische Informatik kurzgefasst, Spektrum Akademischer Verlag, Heidelberg, 2001.
4 Ted Humphreys, "ISO ISMS Standards", ETSI Security Workshop, 2006.
5 Ted Humphreys, "ISO ISMS Standards", ETSI Security Workshop, 2006.
6 Wikipedia, Benchmarking : http://de.wikipe dia.org/wiki/Benchmark_(EDV).
7 Performancetest : http://www.performance -test.de.
8 Wikipedia, ISO/IEC 27000-series : http://en.wikipedia.org/wiki/ISO/IEC_27000- series.
9 한국정보보호진흥원, "정보보호시스템 성능시험 방법론 연구", 2007.
10 M. Tsai, C. Kulkarni, C. Sauer, N. Shah, and K. Keutzer, "A Benchmarking Methodology for Network Processors", 1st Network Processor Workshop, 8th Int. Symposium on High Performance Computer Architectures( HPCA), Boston, MA, 2002.
11 E. D. Dolan and J. J. More, "Benchmarking optimization software with performance profiles", Mathematical Programming, Vol. 91, No. 2, pp. 201-213, 2002.   DOI   ScienceOn