Paper Info
Title
A General Framework for Decentralized Combinatorial Testing of Access Control Engine - Examples of Application.
Abstract
Access control mechanisms aim to assure data protection in modern software systems. Testing of such mechanisms is a key activity to avoid security flaws and violations inside the systems or applications. In this paper, we introduce the general architecture of a new decentralized framework for testing of XACML-based access control engines. The proposed framework is composed of different web services and can be instantiated for different testing purposes: i) generation of test cases based on combinatorial testing strategies; ii) distributed test cases execution; iii) decentralized oracle derivation able to associate the expected authorization decision to a given XACML request. The effectiveness of the framework has been proven into two different experiments. The former addressed the evaluation of the distributed vs non distributed testing solution. The latter focused on the performance comparison of two distributed oracle approaches.
Year
DOI
Venue
2019
10.1007/978-3-030-49443-8_10
ICISSP
DocType
Citations 
PageRank 
Conference
0
0.34
References 
Authors
18
3
Name
Order
Citations
PageRank
Said Daoudagh19911.31
Francesca Lonetti227929.13
Eda Marchetti339241.68