Authors:
Said Daoudagh
1
;
Donia El Kateb
2
;
Francesca Lonetti
1
;
Eda Marchetti
1
and
Tejeddine Mouelhi
3
Affiliations:
1
Istituto di Scienza e Tecnologie dell’Informazione “A. Faedo”, Italy
;
2
University of Luxembourg, Luxembourg
;
3
itrust consulting, Luxembourg
Keyword(s):
XACML Language, Model-based-testing, Access Control Systems.
Related
Ontology
Subjects/Areas/Topics:
Applications and Software Development
;
Domain-Specific Modeling and Domain-Specific Languages
;
Languages, Tools and Architectures
;
Model-Based Testing and Validation
;
Model-Driven Software Development
;
Software Engineering
Abstract:
In access control systems, aimed at regulating the accesses to protected data and resources, a critical component
is the Policy Decision Point (PDP), which grants or denies the access according to the defined policies.
Due to the complexity of the standard languag-e, it is recommended to rely on model-driven approaches
which allow to overcome difficulties in the XACML policy definition. We provide in this paper a toolchain
that involves a model-driven approach to specify and generate XACML policies and also enables automated
testing of the PDP component. We use XACML-based testing strategies for generating appropriate test cases
which are able to validate the functional aspects, constraints, permissions and prohibitions of the PDP. An
experimental assessment of the toolchain and its use on a realistic case study are also presented.