Automated testing of eXtensible Access Control Markup Language-based access control systems

IET Software

Volumn 7, Issue 4, 2013, Pages 203-212

  Bertolino, Antonia ^a   Daoudagh, Said ^a   Lonetti, Francesca ^a   Marchetti, Eda ^a   Schilders, Louis ^b  

^a ISTI CNR   (Italy)

^b Custodix NV ^*  (Belgium)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATED TESTING; EXTENSIBLE ACCESS CONTROL MARKUP LANGUAGES; POLICY DECISION POINTS; PRIVACY PROTECTION; SENSITIVE DATAS; TEST AUTOMATION; TESTING STRATEGIES; XACML POLICIES;

COMPUTER GRAPHICS; COMPUTER SOFTWARE;

NETWORK SECURITY;

EID: 84880878736     PISSN: 17518806     EISSN: None     Source Type: Journal    
DOI: 10.1049/iet-sen.2012.0101     Document Type: Article

References (21)

1. TAS3 Project. Trusted Architecture for Securely Shared Services. http://www.tas3.eu/
2. OASIS: 'eXtensible Access Control Markup Language (XACML) Version 2.0, February 2005. https://www.oasis-open.org/committees/tc-home.php?wg-abbrev= xacml#XACML20
3. Bertolino, A., Lonetti, F., Marchetti, E.: 'Systematic XACML request generation for testing purposes'. Proc. SEAA, September 2010, pp. 3-11
4. Bertolino, A., Daoudagh, S., Lonetti, F., Marchetti, E.: 'Automatic XACML requests generation for policy testing'. Proc. ICST, April 2012, pp. 842-849
5. Bertolino, A., Daoudagh, S., Lonetti, F., Marchetti, E.: 'The X-CREATE framework: a comparison of XACML policy testing strategies'. Proc. WEBIST, April 2012, pp. 155-160
6. Custodix. https://www.custodix.com/
7. Bertolino, A., Gao, J., Marchetti, E., Polini, A.: 'Automatic test data generation for XML schema-based partition testing'. Proc. AST, May 2007, pp. 10-16
8. Martin, E.: 'Automated test generation for access control policies'. Proc. OOPSLA, October 2006, pp. 752-753 (Pubitemid 46729388)
9. Cohen, D.M., Dalal, S.R., Fredman, M.L., Patton, G.C.: 'The AETG system: an approach to testing based on combinatiorial design', IEEE Trans. Softw. Eng., 1997, 23, (7), pp. 437-444 (Pubitemid 127828305)
10. Ostrand, T.J., Balcer, M.J.: 'The category-partition method for specifying and generating functional tests', Commun. ACM, 1988, 31, (6), pp. 676-686
11. FedoraCommons. Fedora Commons Repository Software. http://www.fedora- commons.org/
12. DeMillo, RA., Lipton, R.J., Sayward, F.G: 'Hints on test data selection: help for the practicing programmer', Computer, 1978, 11, (4), pp. 34-41
13. Martin, E., Xie, T.: A fault model and mutation testing of access control policies'. Proc. WWW, May 2007, pp. 667-676 (Pubitemid 47582296)
14. Martin, E., Xie, T.: 'Automated test generation for access control policies via change-impact analysis'. Proc. SESS, May 2007, pp. 5-12
15. Fisler, K., Krishnamurthi, S., Meyerovich, LA., Tschantz, M.C.: 'Verification and change-impact analysis of access-control policies'. Proc. ICSE, May 2005, pp. 196-205
16. Li, N., Hwang, J., Xie, T.: 'Multiple-implementation testing for XACML implementations'. Proc. TAV-WEB, July 2008, pp. 27-33
17. Bertolino, A., Daoudagh, S., Lonetti, F., Marchetti, E., Martinelli, F., Mori, P.: 'Testing of PolPA authorization systems'. Proc. AST, June 2012, pp. 8-14
18. Le Traon, Y., Mouelhi, T., Baudry, B.: 'Testing security policies: going beyond functional testing'. Proc. ISSRE, November 2007, pp. 93-102
19. Mallouli, W., Orset, J.-M., Cavalli, A., Cuppens, N., Cuppens, F.: 'A formal approach for testing security rules'. Proc. SACMAT, June 2007, pp. 127-132 (Pubitemid 47281545)
20. Li, K., Mounier, L., Groz, R.: 'Test generation from security policies specified in or-BAC'. Proc. COMPSAC, July 2007, pp. 255-260 (Pubitemid 350301802)
21. Pretschner, A., Mouelhi, T., Le Traon, Y.: 'Model-based tests for access control policies'. Proc. ICST, April 2008, pp. 338-347