Towards test automation for certification tests in the banking domain

Name: Towards test automation for certification tests in the banking domain
Author: Elakas, A., Tarlan, Ozan, Safak, I., Çakmakçı, Kübra Kalkan, Sözer, Hasan

İsim	Towards test automation for certification tests in the banking domain
Yazar	Elakas, A., Tarlan, Ozan, Safak, I., Çakmakçı, Kübra Kalkan, Sözer, Hasan
Basım Tarihi:	2023
Basım Yeri	- IEEE
Konu	Banking domain, Certification tests, Industrial case study, Network topology, Software-defined network, Test automation
Tür	Belge
Dil	İngilizce
Dijital	Evet
Yazma	Hayır
Kütüphane:	Özyeğin Üniversitesi
Demirbaş Numarası	2-s2.0-85177605078
Kayıt Numarası	b97fbdd3-e850-4777-b6cd-ef48c6dbaec9
Lokasyon	Computer Science
Tarih	2023
Notlar	TÜBİTAK
Örnek Metin	Software systems in the banking domain are business-critical applications that provide financial services. These systems are subject to rigorous certification tests, which are performed manually, and take weeks to complete. In this paper, we suggest that automation of the certificate tests are possible and it will save a considerable amount of time. A certification testing operation which can take a few weeks can be reduced to a few seconds. Firstly, we review the existing test activities to identify the ones that can be automated and introduce a prototype tool for automating some of the tests used for certification. We focus on rules that are verified by analyzing the banking infrastructure. Our tool takes the network topology of the banking infrastructure as input and verifies a subset of these rules. The tool can be extended with additional rules in order to reduce the effort for certification tests. In addition to this tool, we introduce softwaredefined network-based tests to automatically verify compliance with the rules by checking the firewall constraints and host connections. In particular, we focus on a security certification standard named Payment Card Industry Data Security Standard. This certification aims to reduce the risk of data breaches in cardholder data by ensuring industry standard practices for payment card transactions. Our tool offers effort reduction in auditing through automation. It supports continuous auditing and network security enhancement processes.
DOI	10.1109/UBMK59864.2023.10286638

Kaynağa git Özyeğin Üniversitesi

Aramaya Dön

Özyeğin Üniversitesi

Kaynağa git

Towards test automation for certification tests in the banking domain

Yazar Elakas, A., Tarlan, Ozan, Safak, I., Çakmakçı, Kübra Kalkan, Sözer, Hasan

Basım Tarihi 2023

Basım Yeri - IEEE

Konu Banking domain, Certification tests, Industrial case study, Network topology, Software-defined network, Test automation

Tür Belge

Dil İngilizce

Dijital Evet

Yazma Hayır

Kütüphane Özyeğin Üniversitesi

Demirbaş Numarası 2-s2.0-85177605078

Kayıt Numarası b97fbdd3-e850-4777-b6cd-ef48c6dbaec9

Lokasyon Computer Science

Tarih 2023

Notlar TÜBİTAK

Örnek Metin Software systems in the banking domain are business-critical applications that provide financial services. These systems are subject to rigorous certification tests, which are performed manually, and take weeks to complete. In this paper, we suggest that automation of the certificate tests are possible and it will save a considerable amount of time. A certification testing operation which can take a few weeks can be reduced to a few seconds. Firstly, we review the existing test activities to identify the ones that can be automated and introduce a prototype tool for automating some of the tests used for certification. We focus on rules that are verified by analyzing the banking infrastructure. Our tool takes the network topology of the banking infrastructure as input and verifies a subset of these rules. The tool can be extended with additional rules in order to reduce the effort for certification tests. In addition to this tool, we introduce softwaredefined network-based tests to automatically verify compliance with the rules by checking the firewall constraints and host connections. In particular, we focus on a security certification standard named Payment Card Industry Data Security Standard. This certification aims to reduce the risk of data breaches in cardholder data by ensuring industry standard practices for payment card transactions. Our tool offers effort reduction in auditing through automation. It supports continuous auditing and network security enhancement processes.

DOI 10.1109/UBMK59864.2023.10286638