Fabio Arciniegas 

In the development of non-trivial systems, the difficulties involved in presenting effectively test results in relation to other artifacts and required actions can sometimes rival the complexity of making the test themselves. While product support for traceability has increased with centralized tools like Requisite Pro, two major traceability-related issues are still open to a satisfactory solution

• The definition of sufficient coverage and traceability between tests and *abuse cases* (often negative scenarios hard to prove solved by the success of a particular test)
• The representation of such security-test traceability in a formal and convincing way that facilitates strategic decision-making

This talk presents a number of home-grown tools for the effective presentation of traceability between abuse cases and tests, their rationale, and practical effectiveness.

---