Test Cases

get_test_cases(
    api_key: str,
    model_name: str | None = None,
    prompt: str | None = None
) -> str

from test_cases import get_test_cases, create_test_cases_prompt

# Define identified threats
threats = """
1. Spoofing: Attacker impersonates legitimate user
2. Tampering: Unauthorized modification of data in transit
3. Repudiation: User denies performing an action
"""

# Create the prompt
prompt = create_test_cases_prompt(threats)

# Generate test cases
try:
    test_cases = get_test_cases(
        api_key="your-openai-api-key",
        model_name="gpt-4o",
        prompt=prompt
    )
    print(test_cases)
except Exception as e:
    print(f"Error generating test cases: {e}")

create_test_cases_prompt(threats: str) -> str

from test_cases import create_test_cases_prompt

threats = """
Threat 1: SQL Injection - Attacker can inject malicious SQL queries
Threat 2: XSS Attack - Attacker can inject malicious scripts into web pages
Threat 3: CSRF - Attacker can perform unauthorized actions on behalf of user
"""

prompt = create_test_cases_prompt(threats)
print(prompt)

# Threats identified from STRIDE analysis
identified_threats = """
1. Spoofing Identity:
   - Threat: An attacker could impersonate a legitimate user by stealing credentials
   - Impact: Unauthorized access to sensitive data
   
2. Tampering with Data:
   - Threat: Data transmitted over unencrypted channels could be modified
   - Impact: Data integrity compromise
   
3. Information Disclosure:
   - Threat: Sensitive information exposed in error messages
   - Impact: Exposure of system internals to attackers
"""

from test_cases import create_test_cases_prompt

prompt = create_test_cases_prompt(identified_threats)

import os
from test_cases import get_test_cases
from error_handler import handle_exception

try:
    api_key = os.getenv("OPENAI_API_KEY")
    
    test_cases = get_test_cases(
        api_key=api_key,
        model_name="gpt-4o",
        prompt=prompt
    )
    
    # Display or save the test cases
    print("Generated Test Cases:")
    print(test_cases)
    
except Exception as e:
    handle_exception(e, "Failed to generate test cases. Please check your API key and try again.")

# Test Case 1: Spoofing Identity

Given an attacker has stolen user credentials
When the attacker attempts to log in with stolen credentials
Then the system should detect anomalous login behavior
And the system should require additional authentication factors
And the legitimate user should be notified of the login attempt

# Test Case 2: Tampering with Data

Given data is transmitted over the network
When an attacker attempts to intercept and modify the data
Then the system should detect the data integrity violation
And the system should reject the tampered data
And an alert should be logged for security review

DEFAULT_MODEL_NAME = "gpt-4o"

from error_handler import handle_exception

if not api_key:
    handle_exception(
        ValueError("OpenAI API key is required"),
        "OpenAI API key is required"
    )
    
if not prompt:
    handle_exception(
        ValueError("Prompt is required for test cases generation"),
        "Prompt is required for test cases generation"
    )

# Good: Detailed threat description
threats = """
Spoofing: An attacker could forge authentication tokens by exploiting 
weak JWT signature validation, allowing them to impersonate any user 
in the system without proper credentials.
"""

# Less effective: Vague description
threats = "Spoofing: User impersonation"

import os

api_key = os.getenv("OPENAI_API_KEY")
if not api_key:
    raise ValueError("OPENAI_API_KEY environment variable not set")

try:
    test_cases = get_test_cases(api_key, prompt=prompt)
except ValueError as e:
    handle_exception(e, "Invalid input provided")
except Exception as e:
    handle_exception(e, "Failed to generate test cases")

import logging

logger = logging.getLogger(__name__)
logger.info(f"Generating test cases for {len(threat_list)} threats")

test_cases = get_test_cases(api_key, prompt=prompt)

logger.info("Successfully generated test cases")