9

81

27

6

Non-repudiation is about taking responsibility (and transparency about the responsibilities taken) for establishing security

Integrity deals with processes that assure that data is accessible only to those with authorized access

Authentication deals with processes that help determine whether a data requester is actually allowed to receive a service or perform an operation

Integrity deals with processes helping the receiver of data to determine that the associated information it is providing is actually correct

A Field Study is a heuristic evaluation.

Nielsen’s list of evaluation heuristics is typically used in Field Studies.

Heuristic Evaluation is an Inspection Method

Cognitive Walkthrough and Heuristic Evaluation mean the same thing.

Process Assessment

Vulnerability Scanning

Risk Assessment

Ethical Hacking

Test outputs and their relationships.

A source test case, a follow-up test case, and an expected relation between the outputs of the two test cases for given inputs, and independent test oracles for each test case.

Test inputs and their relationships.

A source test case, a follow-up test case, and an expected relation between the outputs of the two test cases for given inputs.

Reliability Testing

Usage-based Testing

Exploratory Testing

Monkey Testing

Automated penetration testing

Manual penetration testing

The following test scenario would cover all specified states:

S1 -> E1/A1 -> S2 -> E3/A3 -> S3

The following test scenario would cover all specified states:

S1 -> E1/A1 -> S2 -> E4/A4 -> S1

The following test scenarios would cover all specified state transitions:

S1 -> E1/A1 -> S2 -> E3/A3 -> S3

S1 -> E1/A1 -> S2 -> E4/A4 -> S1

The following input-output (or: event-action) combinations have been specified:

E2-A2

E3-A3

E4-A4

Filters help determine whether the reaction of the system under test to a specific action is suspicious.

Filters are used to avoid that a specific action is executed.

Filters can be used to avoid that a specific action that would unwantedly stop the test session (e.g., pressing the ‘close’ button) is executed. To be able to check whether the software under test actually would close the application (as expected) when executing a specific action, related filters should only be activated after that specific action has been tested once.

Filters can be used to avoid that a specific action, of which it is already known that it leads to a failure, is executed again. Thus, adding filters helps avoid that redundant tests leading to the same failure are executed repeatedly.

Covering all states is at least as strong a criterion than covering all state-transitions.

Covering all state-transitions is at least as strong a criterion than covering all events.

Covering all states is at least as strong a criterion than covering all events.

Covering all state-transitions is at least as strong a criterion than covering all states.