• Proceedings of the Korean Information Science Society Conference
• /
• 2007.06a
• /
• pp.105-106
• /
• 2007

• Venture DIGEST
• /
• s.115
• /
• pp.20-20
• /
• 2008

STA(Software Testing Alliance)는 사명 그대로 소프트웨어(SW) 테스팅 전문기업이다. 이 회사는 SW 품질향상을 위한 테스팅 분야에서 관련 서비스를 제공하는 '테스팅관리 자동화 지원 도구 보급', '테스트 컨설팅', '테스팅 교육 서비스'등 SW테스팅 전반에 걸쳐 사업을 전개하고 있다.

• Proceedings of the Korean Society of Precision Engineering Conference
• /
• 2007.06a
• /
• pp.71-72
• /
• 2007

• Review of KIISC
• /
• v.11 no.3
• /
• pp.16-23
• /
• 2001

위험관리는 정보기술 보안관리의 초석이라고 할 정도로 매우 중요하고 비용효과적인 보안대책을 구현, 운영하기 위해서는 반드시 실행되어야 하는 과정이다. 특히 최근의 보안관리체계 인증에 대한 수요가 점증되면서 위험관리의 중요성이 대두되고 있다. 본 고에서는 위험관리 과정에 대한 표준문서의 내용을 요약 정리하였고 새로운 위험관리 기법의 발전방향인 시나리오 기반의 위험관리에 대해 소개하며 기존의 대표적인 위험분석 자동화 도구에 대한 비교분석을 수행하였다.

• The KIPS Transactions:PartD
• /
• v.11D no.5
• /
• pp.1087-1094
• /
• 2004

Normally, formalization and standardization are followed while doing any system analysis and design. But, in actual system development, products can't be written using the automated tool for all products due to their own characteristics. That results the inconsistency among development products and various kinds of problem can occur in the products. In this paper, we present a technique that supports consistency among products of analysis and design phase developed according to object oriented method. And, this paper also presents the implementation tool.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2000.10b
• /
• pp.961-964
• /
• 2000

단위 자동화 시스템에 내장되어 운용되는 내장형 시스템의 응용 소프트웨어의 제작은 대부분 다년간 실무 경험을 갖고 있는 전문가들이 타겟 시스템의 목적과 기능 및 성능 명세를 작성하고 이를 구현함으로써, 개발 생산성이나 타겟 시스템의 신뢰성 향상이 곤란하다. 또한 개발의 마지막 단계에서 테스트를 통해 오류를 발견하게 되고 이로 인해 대부분 앞 단계로 돌아가 전체 설계를 재검토해야만 하는 실정이다. 본 논문에서는 이러한 내장형 응용 소프트웨어 개발을 위해 편의성과 신뢰성을 향상시킬 수 있기 위해 소프트웨어 자동 검증을 위한 정형기법, 컴파일러 및 사용자 편의를 위한 GUI, 재사용 및 유지보수가 용이한 목적코드의 발생 등 전반적인 소프트웨어 공학적인 기술들을 이용하여 시각적 명세에 의한 실시간 내장형 응용 소프트웨어 개발 자동화 도구의 개발을 위한 기술의 개발을 목표로 삼고 기술되었다.

• The KIPS Transactions:PartD
• /
• v.17D no.6
• /
• pp.423-430
• /
• 2010

As software becomes large-scale and complicated, the need for Quality Assurance and management is increased and software testing is becoming more important. The main aims of software testing are not only detecting and handling the defects in the system but also investigating and managing the present system. But automatic testing tools require lots of time and efforts to detect and manage the risk in the system because test-cases used in the general automatic testing tools have the simply static information. In this thesis, the dynamic management technique for weighted testcases is designed to test the high-risk testcases preferentially by giving the testcases dynamic weight.

• Journal of KIISE:Computing Practices and Letters
• /
• v.7 no.4
• /
• pp.288-298
• /
• 2001

Utilizing standards for software process to a specific project requires a tailoring process to meet the development domain. However, the existing tailoring schemes are not systematical and possible to use without analyzing the methodology and development domain. Also, it is not quite easy to apply them to similar projects. This paper includes: 1) systematical tailoring steps and 2) an automatic algOlithm for generating test process based on "a scheme of tailoring process using the component-based development paradigm"; 3) "an automation tool for tailoring, AutoTP" which is derived from XML techniques. Users can generate a tailored test process through our AutoTP automatically without analyzing standards. methodology and domain.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.6
• /
• pp.1023-1030
• /
• 2020

Wearable devices, such as a smart watch and a wrist band, store owner's private information in the devices so that security in a high level is required. Applications developed by third parties in Tizen request for an access to designated services through the desktop bus (D-Bus). The D-Bus verifies application's privileges to grant the request for an access. We developed a fuzzing tool, so-called DAN (the D-bus ANalyzer), to detect errors in implementations for privilege verifications and access controls within Tizen's system services. The DAN has found a number of vulnerable services which granted accesses to unauthorized applications. We built a proof-of-concept application based on those findings to demonstrate a bypass in the privilege examination.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.13 no.9
• /
• pp.4207-4213
• /
• 2012

Software quality is strongly associated with requirement quality. Accordingly, companies are trying effect for enhancing requirement quality. But, it is difficult to verify the requirement of specification format, which have to rely on abnormal business knowledge of analyst. Also, it is insufficient to normal methodology or automated technique for enhancing requirement quality of specification format. In this paper, we propose the process of requirement verification and automated verification tool for enhancing requirement quality. we compare the external view design and internal view design for verifying requirement. In the case study, we evaluate the feasibility of the proposed automated verification technique of requirement.