Study of Testing of Security Model for an Object Oriented Design (SMOOD)

Software security involves internal weakness and external attacks. The external threat often breaks a software system by exploiting its internal weakness or vulnerabilities. As a result, they can affect the violation and breakdown of security. Security architecture must be designed to cater the needs of product security goals and sensitive information. To keep the sensitive information confidential, special attention need be given at designing phase. An object oriented approach naturally lends itself to an early assessment and evaluation. To check the security of design author has proposed SMOOD model which is based on the relationship between design properties such as encapsulation, inheritance, complexity, abstraction, cohesion, coupling and polymorphism with security attributes like confidentiality, integrity, and availability (CIA). In this paper, the proposed model is validating using empirical validation reported by Fenton. We have used five open source projects with multiple versions to test the SMOOD model and discussed the results.