testcom09

H. Marchand, J. Dubreil, T. Jéron. Automatic Testing of Access Control for Security Properties. In TestCom'09, LNCS, Volume 5826, Pages 113-128, November 2009.

Download [help]

Download paper: Doi page

Download paper: Adobe portable document (pdf)

Copyright notice: This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.
This page is automatically generated by bib2html v216, © INRIA 2002-2007, Projet Lagadic

Abstract

In this work, we investigate the combination of controller synthesis and test generation techniques for the testing of open, partially observable systems with respect to security policies. We consider two kinds of properties: integrity properties and confidentiality properties. We assume that the behavior of the system is modeled by a labeled transition system and assume the existence of a black-box implementation. We first outline a method allowing to automatically compute an ideal access control ensuring these two kinds of properties. Then, we show how to derive testers that test the conformance of the implementation with respect to its specification, the correctness of the real access control that has been composed with the implementation in order to ensure a security property, and the security property itself

Contact

Hervé Marchand http://www.irisa.fr/prive/hmarchan
Jérémy Dubreil
Thierry Jéron http://www.irisa.fr/prive/jeron

BibTex Reference

@InProceedings{testcom09,
   Author = {Marchand, H. and Dubreil, J. and Jéron, T.},
   Title = {Automatic Testing of Access Control for Security Properties},
   BookTitle = {TestCom'09},
   Volume = {    5826},
   Pages = {113--128},
   Series = {LNCS},
   Publisher = {Springer-Verlag},
   Month = {November},
   Year = {2009}
}

EndNote Reference [help]

Get EndNote Reference (.ref)