An automated framework for continuous development and testing of access control systems. Issue 3 (27th August 2020)

• Record Type: Journal Article
• Authors: Daoudagh, Said; Lonetti, Francesca; Marchetti, Eda
• Is Part Of: Journal of software. Volume 35:Issue 3(2023)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2020-08-27
• Subjects: access control systems -- continuous development and testing -- DevOps -- mutation analysis -- XACML; Software engineering -- Periodicals; Computer software -- Development -- Periodicals; Software maintenance -- Periodicals; 005.1
• DOI: 10.1002/smr.2306
• Languages: English
• ISSNs: 2047-7473

Abstract

Abstract: Automated testing in DevOps represents a key factor for providing fast release of new software features assuring quality delivery. In this paper, we introduce DOXAT, an automated framework for continuous development and testing of access control mechanisms based on the XACML standard. It leverages mutation analysis for the selection and assessment of the test strategies and provides automated facilities for test oracle definition, test execution, and results analysis, in order to speedup and automate the Plan, Code, Build, and Test phases of DevOps process. We show the usage of the framework during the planning and testing phases of the software development cycle of a PDP example. Abstract : Is it possible to leverage the traditional way of developing and testing of access control systems so as to be included into a DevOps process? Our answer is DOXAT (DevOps XAcml Testing): an automated framework for continuous development and testing oof acccess control systems. It leverages mutation analysis for the selection and assessment of the test strategies, provides automated facilities for test oracle defintion, test cases execution and results analysis during the DevOps process.