Reference : Testing Obligation Policy Enforcement using Mutation Analysis
Scientific congresses, symposiums and conference proceedings : Paper published in a journal
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/26424
Testing Obligation Policy Enforcement using Mutation Analysis
English
El Rakaiby, Yehia [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) > ; University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)]
Mouelhi, Tejeddine mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
Le Traon, Yves mailto [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
2012
Proceedings of the 7th International Workshop on Mutation Analysis (associated to the Fifth International Conference on Software Testing, Verification, and Validation, ICST 2012)
100-110
Yes
International
MUTATION'12, 7th International workshop on mutation analysis
17 April 2012
Montreal, QC
Canada
[en] Access control policies ; Application codes ; Java program ; Key elements ; Minimal errors ; Mutation analysis ; Mutation operators ; Mutation process ; Policy enforcement ; Policy management ; Test case ; Test selection ; Usage control
[en] The support of obligations with access control policies allows the expression of more sophisticated requirements such as usage control, availability and privacy. In order to enable the use of these policies, it is crucial to ensure their correct enforcement and management in the system. For this reason, this paper introduces a set of mutation operators for obligation policies. The paper first identifies key elements in obligation policy management, then presents mutation operators which injects minimal errors which affect these aspects. Test cases are qualified w.r.t. their ability in detecting problems, simulated by mutation, in the interactions between policy management and the application code. The use of policy mutants as substitutes for real flaws enables a first investigation of testing obligation policies in a system. We validate our work by providing an implementation of the mutation process: the experiments conducted on a Java program provide insights for improving test selection.
http://hdl.handle.net/10993/26424

File(s) associated to this reference

Fulltext file(s):

FileCommentaryVersionSizeAccess
Open access
Obligations-Mutation12.pdfNo commentaryAuthor postprint695.37 kBView/Open

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.