A Decentralized Solution for Combinatorial Testing of Access Control Engine

Said Daoudagh, Francesca Lonetti, Eda Marchetti

2019

Abstract

In distributed environments, information security is a key factor and access control is an important means to guarantee confidentiality of sensitive and valuable data. In this paper, we introduce a new decentralized framework for testing of XACML-based access control engines. The proposed framework is composed of different web services and provides the following functionalities: i) generation of test cases based on combinatorial testing strategies; ii) decentralized oracle that associates the expected result to a given test case, i.e. an XACML request; and finally, iii) a GUI for interacting with the framework and providing some analysis about the expected results. A first validation confirms the efficiency of the proposed approach.

Paper Citation

in Harvard Style

Daoudagh S., Lonetti F. and Marchetti E. (2019). A Decentralized Solution for Combinatorial Testing of Access Control Engine.In Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-359-9, pages 126-135. DOI: 10.5220/0007379401260135

in Bibtex Style

@conference{icissp19,
author={Said Daoudagh and Francesca Lonetti and Eda Marchetti},
title={A Decentralized Solution for Combinatorial Testing of Access Control Engine},
booktitle={Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2019},
pages={126-135},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007379401260135},
isbn={978-989-758-359-9},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - A Decentralized Solution for Combinatorial Testing of Access Control Engine
SN - 978-989-758-359-9
AU - Daoudagh S.
AU - Lonetti F.
AU - Marchetti E.
PY - 2019
SP - 126
EP - 135
DO - 10.5220/0007379401260135