Test system and method for identifying security vulnerabilities of a device under test

A method for identifying security vulnerabilities of a device under test, with the following steps:

• providing a test system for identifying security vulnerabilities of a device under test, the test system comprising a device under test that is a mobile user end device, a network simulator connected to the device under test via a radio frequency connection, a deep packet inspection engine connected to the network simulator for monitoring IP traffic, a power consumption measurement device connected to the device under test for monitoring the power consumption of the device under test, and an over-the-top application analyzer module, wherein the network simulator comprises at least one penetration test module for performing at least one penetration test;
• performing at least one penetration test on the device under test in order to simulate an attack on the device under test, the network simulator defining network conditions under which the device under test is tested;
• monitoring the power consumption of the device under test during the respective attack simulated;
• collecting information from at least one of the device under test, the network simulator, the deep packet inspection engine, and the power consumption measurement device when the attack on the device under test is simulated;
• and
• analyzing the information so as to identify an abnormal behavior of the device under test from expected behavior under the conditions applied and to identify at least one security threat, thereby identifying security vulnerabilities of the device under test.

A test system for identifying security vulnerabilities of a device under test, comprising:

• a device under test, wherein the device under test is a mobile user end device, wherein an over-the-top application is provided that runs on the device under test;
• a network simulator connected to the device under test, the network simulator comprising at least one penetration test module configured for performing at least one penetration test in order to simulate an attack on the device under test, the network simulator being configured to define network conditions under which the device under test is tested;
• a deep packet inspection engine connected to the network simulator for monitoring IP traffic;
• a power consumption measurement device connected to the device under test for monitoring the power consumption of the device under test during the respective attack simulated;
• and
• an over-the-top application analyzer module,
• the over-the-top application analyzer module being adapted to gather information from at least one of the device under test, the network simulator, the deep packet inspection engine, and the power consumption measurement device when the attack on the device under test is simulated,
• the over-the-top application analyzer module being adapted to correlate all information gathered to identify an abnormal behavior of the device under test from expected behavior under the conditions applied and to identify at least one security threat, thereby identifying security vulnerabilities of the over-the-top application running on the device under test.