Reference : Testing obligation policy enforcement using mutation analysis
Scientific congresses, symposiums and conference proceedings : Paper published in a journal
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/26423
Testing obligation policy enforcement using mutation analysis
English
Elrakaiby, Yehia mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Mouelhi, Tejeddine mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) >]
Le Traon, Yves mailto [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)]
2012
Proceedings - IEEE 5th International Conference on Software Testing, Verification and Validation, ICST 2012
673-680
Yes
International
5th IEEE International Conference on Software Testing, Verification and Validation, ICST 2012
17 April 2012 through 21 April 2012
Montreal, QC
[en] Access control policies ; Application codes ; Java program ; Key elements ; Minimal errors ; Mutation analysis ; Mutation operators ; Mutation process ; Policy enforcement ; Policy management ; Test case ; Test selection ; Usage control ; Access control ; Java programming language ; Software testing
[en] The support of obligations with access control policies allows the expression of more sophisticated requirements such as usage control, availability and privacy. In order to enable the use of these policies, it is crucial to ensure their correct enforcement and management in the system. For this reason, this paper introduces a set of mutation operators for obligation policies. The paper first identifies key elements in obligation policy management, then presents mutation operators which injects minimal errors which affect these aspects. Test cases are qualified w.r.t. their ability in detecting problems, simulated by mutation, in the interactions between policy management and the application code. The use of policy mutants as substitutes for real flaws enables a first investigation of testing obligation policies in a system. We validate our work by providing an implementation of the mutation process: the experiments conducted on a Java program provide insights for improving test selection. © 2012 IEEE.
http://hdl.handle.net/10993/26423
10.1109/ICST.2012.157
90301
9780769546704

File(s) associated to this reference

Fulltext file(s):

FileCommentaryVersionSizeAccess
Open access
Testing Obligation Policy.pdfPublisher postprint852.63 kBView/Open

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.