Research Of Security Testing For Railway Operating Maintenance Software

ABSTRACT:Along with the rapid development of railway informatization of china, many Railway Operation and Maintenance Software had been developed and put into railroading for using. Railway Operation and Maintenance Software is a class of railway applications software.This software can gain the aim of "comprehensive maintenance, centralized control" for those interrelated to railway management such as information system,equipment,business and resources. This software can liberate the railway operation and maintenance engineers' time and space, while the software's quality and security has become a determining factor for railway operations department product smoothly. In this case, software security testing which is used to verify the quality of railway operation and maintenance software become particularly important. How to implement the security testing systemic for those Railway Operation and Maintenance Software that has been developed and was being developing, is a major issue is urgent to solve.In conjunction with the project "Research of the key testing technologies towards Railway Computer Application system" which is Ministry of Railways focused research projects, this paper choose the Railway Operation and Maintenance Software as object to study the flow and method of software security testing.This paper first analyzes several key issues such as the developing demand of the Operation and Maintenance Software,the general software testing process,the definition of software security,content of the security testing,classification and some mature testing methods. On this basis, then we unified the request on function and quality, then we describes the general system architecture of Railway Operation and Maintenance Software, then analyzes and summarizes testing needs of tested software. According to the specific testing requirements, we design a testing method named " fault code injection based on Threat Modeling " to improve testing coverage, reduce testing difficulty, save the resources for testing. Then we described in detail every step in this testing method process. The theory studying has a certain depth and pioneering, and research results can be used for security testing in practical work of Railway Operation and Maintenance software and to play a better role.In the end, we choose a real Railway Operation and Maintenance Software as example to take a practical testing, which is used the results of study in this paper. The result verified the availability and effectiveness of the research.