Automated testing of eXtensible Access Control Markup Language‐based access control systems. Issue 4 (1st August 2013)

• Record Type: Journal Article
• Authors: Bertolino, Antonia; Daoudagh, Said; Lonetti, Francesca; Marchetti, Eda; Schilders, Louis
• Is Part Of: IET software. Volume 7:Issue 4(2013)
• Page Start: 203
• Page End: 212
• Publication Date: 2013-08-01
• Subjects: authorisation -- health care -- program testing -- XML -- trusted computing; automated testing strategy -- extensible access control markup language-based access control systems -- trustworthiness -- policy decision point -- XACML policy -- access rights -- real two-level PDP -- health data security -- privacy protection solutions; Computer software -- Periodicals; Software engineering -- Periodicals; 005.1
• DOI: 10.1049/iet-sen.2012.0101
• Languages: English
• ISSNs: 1751-8806

Abstract

Abstract : The trustworthiness of sensitive data needs to be guaranteed and testing is a common activity among privacy protection solutions, even if quite expensive. Accesses to data and resources are ruled by the policy decision point (PDP), which relies on the eXtensible Access Control Markup Language (XACML) standard language for specifying access rights. In this study, the authors propose a testing strategy for automatically deriving test requests from a XACML policy and describe their pilot experience in test automation using this strategy. Considering a real two‐level PDP implemented for health data security, the authors compare the effectiveness of the test plan automatically derived with the one derived by a standard manual testing process.