.png){kind=icon}
返回
Similarity testing for access control
.png){kind=icon}
OA
AI
DOI：10.1016/j.infsof.2014.07.003.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Context: Access control is among the most important security mechanisms, and XACML is the de facto standard for specifying, storing and deploying access control policies. Since it is critical that enforced policies are correct, policy testing must be performed in an effective way to identify potential security flaws and bugs. In practice, exhaustive testing is impossible due to budget constraints. Therefore the tests need to be prioritized so that resources are focused on their most relevant subset. Objective: This paper tackles the issue of access control test prioritization. It proposes a new approach for access control test prioritization that relies on similarity. Method: The approach has been applied to several policies and the results have been compared to random prioritization (as a baseline). To assess the different prioritization criteria, we use mutation analysis and compute the mutation scores reached by each criterion. This helps assessing the rate of fault detection. Results: The empirical results indicate that our proposed approach is effective and its rate of fault detection is higher than that of random prioritization. Conclusion: We conclude that prioritization of access control test cases can be usefully based on similarity criteria. (C) 2014 Elsevier B.V. All rights reserved.
Keyword:
Similarity
Test prioritization
Security policies
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
4.3
论文数:
3.8K
被引数:
7.7K
机构
引用论文
Using mutation analysis for assessing and comparing testing coverage criteria使用突变分析评估和比较测试覆盖率标准
PREAI
分享收藏Deletion of the sex-determining gene SXI1α enhances the spread of mitochondrial introns in Cryptococcus neoformans.png)
Mobile DNAOAAI
Mobile DNAIF0
OAAI分享收藏
分享收藏
查看更多内容