http://www.cnr.it/ontology/cnr/individuo/prodotto/ID92162

Systematic XACML request generation for testing purposes (Contributo in atti di convegno)

Type

Label

Systematic XACML request generation for testing purposes (Contributo in atti di convegno) (literal)

Anno

Alternative label

Bertolino A.; Lonetti F.; Marchetti E. (2010)
Systematic XACML request generation for testing purposes
in 36th EUROMICRO Conference on Software Engineering and Advanced Applications (SEAA), Lille, France
(literal)

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#autori

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#note

In: EUROMICRO SEAA 2010 - 36th EUROMICRO Conference on Software Engineering and Advanced Applications (SEAA) (Lille, France, 1-3 September 2010). Proceedings, pp. 3 - 11. IEEE, 2010. (literal)

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#descrizioneSinteticaDelProdotto

ABSTRACT: A widely adopted security mechanism is the specification of access control policies by means of the XACML language. In this paper, we propose a framework, called X-CREATE, for the systematic generation of test inputs (XACML requests). Differently from existing tools, XCREATE exploits the XACML Context Schema. In particular, the tool applies a XML-based methodology (XPT) to systematically produce a set of intermediate instances, covering the XACML Context Schema. Moreover, for request generation, X-CREATE applies a procedure for parsing the policy under test and assigning values to the generated intermediate instances. The aim of the proposed framework is twofold: testing of policy evaluation engines and testing of access control policies. The experimental results show that the fault detection effectiveness of X-CREATE is similar or higher than that of existing approaches. (literal)

Http://www.cnr.it/ontology/cnr/pubblicazioni.owl#affiliazioni

Titolo

Prodotto di

Autore CNR

Insieme di parole chiave

Autore CNR di

Prodotto

Insieme di parole chiave di

data.CNR.it