Istituto di Scienza e Tecnologie dell'Informazione     
Bertolino A., Daoudagh S., Lonetti F., Marchetti E., Schilders L. Automated testing of eXtensible access control markup language-based access control systems. In: IET Software, vol. 7 (4) pp. 203 - 212. IET DL, 2013.
The trustworthiness of sensitive data needs to be guaranteed and testing is a common activity among privacy protection solutions, even if quite expensive. Accesses to data and resources are ruled by the policy decision point (PDP), which relies on the eXtensible Access Control Markup Language (XACML) standard language for specifying access rights. In this study, the authors propose a testing strategy for automatically deriving test requests from a XACML policy and describe their pilot experience in test automation using this strategy. Considering a real two-level PDP implemented for health data security, the authors compare the effectiveness of the test plan automatically derived with the one derived by a standard manual testing process.
URL: http://digital-library.theiet.org/content/journals/10.1049/iet-sen.2012.0101
DOI: 10.1049/iet-sen.2012.0101
Subject Access control policy
Test automation
Policy Decision Point (PDP)
D.2.5 Testing and Debugging
D.2.6 Security and Protection. Access controls

Icona documento 1) Download Document PDF

Icona documento Open access Icona documento Restricted Icona documento Private


Per ulteriori informazioni, contattare: Librarian http://puma.isti.cnr.it

Valid HTML 4.0 Transitional