Title
Testing TLS Using Combinatorial Methods and Execution Framework.
Abstract
The TLS protocol is the standard for secure Internet communication between two parties. Unfortunately, there have been recently successful attacks like DROWN or BREACH that indicate the necessity for thoroughly testing TLS implementations. In our research work, we focus on automated test case generation and execution for the TLS security protocol, where the aim is to make use of combinatorial methods for providing test cases that ideally also reveal previously unknown attacks. This is made feasible by creating appropriate input parameter models for different messages that can appear in a TLS message sequence. In this paper, we present the resulting test case generation and execution framework together with the corresponding testing oracle. Furthermore, we discuss first empirical results obtained using different TLS implementations and their releases.
Year
DOI
Venue
2017
10.1007/978-3-319-67549-7_10
Lecture Notes in Computer Science
Keywords
Field
DocType
Combinatorial testing,Security testing,Security protocols,TLS
Security testing,Cryptographic protocol,Computer science,Oracle,Computer network,Implementation,Test case,Internet communication,Combinatorial testing
Conference
Volume
ISSN
Citations 
10533
0302-9743
2
PageRank 
References 
Authors
0.38
20
7
Name
Order
Citations
PageRank
Dimitris E. Simos110023.45
Josip Bozic2347.65
Feng Duan3344.43
Bernhard Garn4397.65
Kristoffer Kleine5183.12
Yu Lei611611.85
Franz Wotawa71660145.34