An automated framework for continuous development and testing of access control systems. Issue 3 (27th August 2020) - Daoudagh, Said
Abstract: Automated testing in DevOps represents a key factor for providing fast release of new software features assuring quality delivery. In this paper, we introduce DOXAT, an automated framework for continuous development and testing of access control mechanisms based on the XACML standard. It leverages mutation analysis for the selection and assessment of the test strategies and provides automated facilities for test oracle definition, test execution, and results analysis, in order to speedup and automate the Plan, Code, Build, and Test phases of DevOps process. We show the usage of the framework during the planning and testing phases of the software development cycle of a PDP example. Abstract : Is it possible to leverage the traditional way of developing and testing of access control systems so as to be included into a DevOps process? Our answer is DOXAT (DevOps XAcml Testing): an automated framework for continuous development and testing oof acccess control systems. It leverages mutation analysis for the selection and assessment of the test strategies, provides automated facilities for test oracle defintion, test cases execution and results analysis during the DevOps process.