Title
Testing TLS using planning-based combinatorial methods and execution framework
Abstract
The TLS protocol is the standard for secure Internet communication between two parties. Unfortunately, there have been recently successful attacks like DROWN, ROBOT, or BREACH that indicate the necessity for thoroughly testing TLS implementations. In our research work, we focus on automated test case generation and execution for the TLS security protocol, where the aim is to combine planning with combinatorial methods for providing test cases that ideally also reveal previously unknown attacks. This is made feasible by creating appropriate input parameter models for different messages that can appear in a TLS message sequence. In this paper, we present the resulting test case generation and execution framework together with the corresponding test oracle. Furthermore, we discuss in detail empirical results obtained via testing different TLS implementations.
Year
DOI
Venue
2019
10.1007/s11219-018-9412-z
Software Quality Journal
Keywords
Field
DocType
Combinatorial testing, Security testing, Planning, Security protocols, TLS
Security testing,Software engineering,Cryptographic protocol,Computer science,Oracle,Implementation,Test case,Combinatorial testing,Internet communication,Robot,Reliability engineering
Journal
Volume
Issue
ISSN
27.0
SP2
1573-1367
Citations 
PageRank 
References 
1
0.36
27
Authors
8
Name
Order
Citations
PageRank
Dimitris E. Simos110023.45
Josip Bozic2347.65
Bernhard Garn3397.65
Manuel Leithner411713.95
Feng Duan5344.43
Kristoffer Kleine6183.12
Yu Lei711611.85
Franz Wotawa8239.28