公开(公告)号：US20240220636A1

公开(公告)日：2024-07-04

申请号：US18550865

申请日：2022-10-12

Applicant: Foundation of Soongsil University-Industry Cooperation

Inventor： Jeong Hyun YI ,  Haehyun CHO ,  Kyungmin SIM ,  Sunjun LEE ,  Geochang JEON

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F2221/033

Abstract: Provided is a unit test case-based security design flaw detection method performed in a security design flaw detection apparatus for detecting a security design flaw of a software system, and the method comprises collecting a unit test case for the software system from an external device and preprocessing the unit test case; generating a first test case by testing whether the software system violates a security policy using the preprocessed unit test case; generating a second test case that is a data set for testing a function of the software system based on the first test case; and detecting a vulnerability of the software system by executing the second test case.