Verified firewall policy transformations for test case generation

ICST 2010 - 3rd International Conference on Software Testing, Verification and Validation

Volumn , Issue , 2010, Pages 345-354

  Brucker, Achim D ^a   Brügger, Lukas ^b   Kearney, Paul ^c   Wolff, Burkhart ^d  

^a SAP RESEARCH   (Germany)

^b ETH ZURICH   (Switzerland)

^c MARTLESHAM HEATH   (United Kingdom)

^d UNIVERSITÉ PARIS SACLAY   (France)

Author keywords

Model based testing; Security testing

Indexed keywords

DOMAIN SPECIFIC; FIREWALL POLICIES; FORMAL MODEL; FORMAL PROOFS; HIGHER ORDER LOGIC; ISABELLE/HOL; MODEL BASED TESTING; MODEL-BASED; OPTIMIZATION TECHNIQUES; ORDERS OF MAGNITUDE; PATH COVERAGE; POLICY TRANSFORMATION; SECURITY POLICY; SECURITY TESTING; STATE-SPACE EXPLOSION; TEST CASE; TEST CASE GENERATION; TESTING TOOLS;

COMPUTER SOFTWARE SELECTION AND EVALUATION; COMPUTER SYSTEM FIREWALLS; SECURITY OF DATA; SOFTWARE TESTING; VERIFICATION;

TESTING;

EID: 77954486920     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICST.2010.50     Document Type: Conference Paper

References (23)

1. "Securing cyberspace for the 44th presidency," Center for Strategic and International Studies (CSIS), Tech. Rep., 2008.
2. "Misconfigured router causes increased BGP traffic and isolated outages for internet services," http://tools.cisco.com/security/center/ viewAlert.x?alertId=17657, 2009.
3. A. D. Brucker, L. Brügger, and B. Wolff, "Model-based firewall conformance testing," in Testcom/FATES 2008, ser. LNCS, K. Suzuki and T. Higashino, Eds. Springer-Verlag, 2008, no. 5047, pp. 103-118.
4. T. Nipkow, L. C. Paulson, and M. Wenzel, Isabelle/HOL - A Proof Assistant for Higher-Order Logic, ser. LNCS. Springer-Verlag, 2002, vol. 2283.
5. A. Church, "A formulation of the simple theory of types," Journal of Symbolic Logic, vol. 5, no. 2, pp. 56-68, 1940.
6. P. B. Andrews, Introduction to Mathematical Logic and Type Theory: To Truth through Proof, 2nd ed. Kluwer Academic Publishers, 2002.
7. A. D. Brucker and B. Wolff, "Symbolic test case generation for primitive recursive functions," in Formal Approaches to Testing of Software, ser. LNCS, J. Grabowski and B. Nielsen, Eds. Springer-Verlag, 2004, no. 3395, pp. 16-32.
8. -, "Test-sequence generation with HOL-TESTGEN - with an application to firewall testing," in TAP 2007: Tests And Proofs, ser. LNCS, B. Meyer and Y. Gurevich, Eds. Springer-Verlag, 2007, no. 4454, pp. 149-168.
9. A. El-Atawy, K. Ibrahim, H. Hamed, and E. Al-Shaer, "Policy segmentation for intelligent firewall testing," in NPSec 05. IEEE Computer Society, 2005, pp. 67-72.
10. A. El-Atawy, T. Samak, Z. Wali, E. Al-Shaer, F. Lin, C. Pham, and S. Li, "An automated framework for validating firewall policy enforcement," in POLICY '07. IEEE Computer Society, 2007, pp. 151-160.
11. J. Jürjens and G. Wimmel, "Specification-based testing of firewalls," in Ershov Memorial Conference, ser. LNCS, D. Bjørner, M. Broy, and A. V. Zamulin, Eds., vol. 2244. Springer-Verlag, 2001, pp. 308-316.
12. S. Bishop, M. Fairbairn, M. Norrish, P. Sewell, M. Smith, and K. Wansbrough, "Engineering with logic: HOL specification and symbolic-evaluation testing for TCP implementations," in POPL, J. G. Morrisett and S. L. P. Jones, Eds. ACM Press, 2006, pp. 55-66.
13. R. Marmorstein and P. Kearns, "Firewall analysis with policy-based host classification," in LISA. USENIX Association, 2006, pp. 4-4.
14. "eXtensible Access Control Markup Language (XACML), version 2.0," 2005. [Online]. Available: http://docs.oasis-open.org/xacml/2.0/ XACML-2.0-OS-NORMATIVE.zip
15. P. Miseldine, "Automated XACML policy reconfiguration for evaluation optimisation," in Software Engineering for Secure Systems (SESS), B. D. Win, S.-W. Lee, and M. Monga, Eds. ACM Press, 2008, pp. 1-8.
16. A. X. Liu, E. Torng, and C. Meiners, "Firewall compressor: An algorithm for minimizing firewall policies," in IEEE Conference on Computer Communications (Infocom), 2008.
17. R. Dssouli, K. Karoui, K. Saleh, and O. Cherkaoui, "Communications software design for testability: specification transformations and testability measures," Information and Software Technology, vol. 41, no. 11-12, pp. 729-743, 1999.
18. M. Harman, L. Hu, R. Hierons, J. Wegener, H. Sthamer, A. Baresel, and M. Roper, "Testability transformation," IEEE Trans. Softw. Eng., vol. 30, no. 1, pp. 3-16, 2004.
19. R. M. Hierons, M. Harman, and C. Fox, "Branch-coverage testability transformation for unstructured programs," Comput. J., vol. 48, no. 4, pp. 421-436, 2005.
20. M. Harman, "Open problems in testability transformation," in Software Testing Verification and Validation Workshop (ICSTW), 2008, pp. 196-209.
21. M. Harman, A. Baresel, D. Binkley, R. M. Hierons, L. Hu, B. Korel, P. McMinn, and M. Roper, "Testability transformation - program transformation to improve testability," in Formal Methods and Testing, ser. LNCS, R. M. Hierons, J. P. Bowen, and M. Harman, Eds., vol. 4949. Springer-Verlag, 2008, pp. 320-344.
22. A. D. Brucker and B. Wolff, "A verification approach for applied system security," International Journal on Software Tools for Technology Transfer (STTT), vol. 7, no. 3, pp. 233-247, 2005.
23. A. D. Brucker, J. Doser, and B. Wolff, "An MDA framework supporting OCL," Electronic Communications of the EASST, vol. 5, 2006.