A Generic Metamodel For Security Policies Mutation
Abstract
We present a new approach for mutation analysis of Security Policies test cases. We propose a metamodel that provides a generic representation of security policies access control models and define a set of mutation operators at this generic level. We use Kermeta to build the metamodel and implement the mutation operators. We also illustrate our approach with two successful instantiation of this metamodel: we defined policies with RBAC and OrBAC and mutated these policies.
Domains
Software Engineering [cs.SE]
Origin : Files produced by the author(s)