XACMUT: XACML 2.0 Mutants Generator
- 1 March 2013
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 28-33
Abstract
Testing of security policies is a critical activity and mutation analysis is an effective approach for measuring the adequacy of a test suite. In this paper, we propose a set of mutation operators addressing specific faults of the XACML 2.0 access control policy and a tool, called XACMUT (XACml MUTation) for creating mutants. The tool generates the set of mutants, provides facilities to run a given test suite on the mutants set and computes the test suite effectiveness in terms of mutation score. The tool includes and enhances the mutation operators of existing security policy mutation approaches.Keywords
This publication has 10 references indexed in Scilit:
- Automatic XACML Requests Generation for Policy Testing2012
- Model-Based Tests for Access Control Policies2008
- Testing Security Policies: Going Beyond Functional Testing2007
- Mutation Analysis for Security Tests Qualification2007
- A fault model and mutation testing of access control policies2007
- Automated Test Generation for Access Control Policies via Change-Impact Analysis2007
- Verification and change-impact analysis of access-control policies2005
- Organization based access control2004
- Proposed NIST standard for role-based access controlACM Transactions on Information and System Security, 2001
- Hints on Test Data Selection: Help for the Practicing ProgrammerComputer, 1978