Reference : A Toolchain for Model-Based Design and Testing of Access Control Systems
Scientific congresses, symposiums and conference proceedings : Paper published in a journal
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/20262
A Toolchain for Model-Based Design and Testing of Access Control Systems
English
Daoudagh, Said mailto [Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”]
El Kateb, Donia mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)]
Lonetti, Francesca mailto [Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”]
Marchetti, Eda mailto [Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”]
Mouelhi, Tejeddine mailto [itrust consulting, Niederanven, Luxembourg]
2014
MODELSWARD
No
No
International
MODELSWARD 2015
9-11 february 2015
[en] XACML Language ; Access control systems ; Model-based-testing
[en] In access control systems, aimed at regulating the accesses to protected data and resources, a critical component
is the Policy Decision Point (PDP), which grants or denies the access according to the defined policies.
Due to the complexity of the standard language, it is recommended to rely on model-driven approaches which
allow to overcome difficulties in the XACML policy definition. We provide in this paper a toolchain that
involves a model-driven approach to specify and generate XACML policies and also enables automated testing
of the PDP component. We use XACML-based testing strategies for generating appropriate test cases
which are able to validate the functional aspects, constraints, permissions and prohibitions of the PDP. An
experimental assessment of the toolchain and its use on a realistic case study are also presented.
http://hdl.handle.net/10993/20262
10.1007/978-3-319-07452-8_11

There is no file associated with this reference.

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.