Model-Based Tests for Access Control Policies - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2008

Model-Based Tests for Access Control Policies

Résumé

We present a model-based approach to testing access control requirements. By using combinatorial testing, we first automatically generate test cases from and without access control policies- i.e., the model and assess the effectiveness of the test suites by means of mutation testing. We also compare them to purely random tests. For some of the investigated strategies, non-random tests kill considerably more mutants than the same number of random tests. Since we rely on policies only, no information on the application is required at this stage. As a consequence, our methodol- ogy applies to arbitrary implementations of the policy decision points
Fichier principal
Vignette du fichier
mouelhi08a.pdf (500.18 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00456952 , version 1 (16-02-2010)

Identifiants

  • HAL Id : inria-00456952 , version 1

Citer

Alexander Pretschner, Tejeddine Mouelhi, Yves Le Traon. Model-Based Tests for Access Control Policies. ICST 2008 : First IEEE International Conference on Software, Testing, Verification and Validation, April 9-11, Lillehammer, Norway, RSM - Dépt. Réseaux, Sécurité et Multimédia (Institut TELECOM ; TELECOM Bretagne), ETH - Eidgenössische Technische Hochschule Zürich (ETH Zurich), 2008, Lillehammer, Norway. ⟨inria-00456952⟩
239 Consultations
463 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More