Security testing using JUnit and Perl scripts

TL;DR

This paper discusses a practical approach to security testing by integrating JUnit for security bug detection and Perl scripts for exploration, applied to a mature but insecure application.

Contribution

It introduces a combined testing methodology using JUnit and Perl scripts for security testing, demonstrating its application on a real-world, mature application.

Findings

JUnit effectively identified security bugs.

Perl scripts facilitated exploration of security issues.

The approach improved security testing coverage.

Abstract

In this paper, I describe a recent practical experience where JUnit was used for testing security bugs in addition to functional bugs. Perl scripts were also used during the exploration phase. The application being tested was mature, but insecure.