Assessing Testing Strategies for Access Control Systems: A Controlled Experiment Topics: Access and Usage Control; Security In Proceedings of the 6th International Conference on Information Systems Security and Privacy ICISSP - Volume 1, 107-118, 2020 , Valletta, Malta