The Lifecycle of Model-Based Security Testing: A Cross-Domain Systematic Mapping Study

This repository gathers the supporting artifacts for the research "The Lifecycle of Model-Based Security Testing: A Cross-Domain Systematic Mapping Study", containing the following files: Research Protocol (RESEARCH_PROTOCOL.pdf): Document detailing the complete methodological planning of the study. It presents the definition of the Research Questions (RQ1–RQ8), the search strategy and string applied across the digital libraries (ACM Digital Library, IEEE Xplore, Scopus, and Web of Science), the primary Inclusion Criterion (IC1), the Exclusion Criteria (EC1–EC6), the PRISMA-based screening workflow, and the standardized data extraction schema. Study Selection Matrix (SELECTION_MATRIX): Complete spreadsheet consolidating the evaluation and screening workflow of all 861 candidate records retrieved across the digital libraries. It contains the deduplication tracking, the title/abstract screening and the rationale for inclusion or exclusion based on the established inclusion and exclusion criteria (available in both .xlsx and .pdf formats). Data Extraction Matrix (DATA_EXTRACTION_MATRIX): Comprehensive extraction sheet containing the structured data collected from the 135 primary studies (S1–S135) to address RQ1 through RQ8. It records bibliographic metadata, application domains and targeted vulnerabilities (RQ1, RQ2), model representations and construction automation modes (RQ3), generated test artifacts and automation levels (RQ4, RQ5), supporting tool ecosystems (RQ6), empirical evaluation designs and maturity contexts (RQ7), as well as reported engineering bottlenecks, technical limitations, and scalability challenges (RQ8) (available in both .xlsx and .pdf formats).