Selective Regression Test for Access Control System Employing RBAC

Huang, Chao; Sun, Jun; Wang, Xinyu; Si, Yuanjie

doi:10.1007/978-3-642-02617-1_8

Cited by 4 publications

(3 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These approaches test both, security mechanisms and vulnerabilities. Several subset-based approaches [34,75,5,58,62] and retest-all approaches [128,22,78,106] have been proposed.…”

Section: Test Case Selectionmentioning

confidence: 99%

“…This approach is based on change detection in the service test model, which will determine if new test cases need to be generated, or existing ones to be selected for re-execution on the evolved service. Huang et al [58] address security regression testing of access control policies. This approach selects tests if they cover changed elements in the policy.…”

Section: Test Case Selectionmentioning

confidence: 99%

See 1 more Smart Citation

Security Testing

Felderer

Büchler

Johns

et al. 2016

Advances in Computers

124

View full text Add to dashboard Cite

ReuseThis article is distributed under the terms of the Creative Commons Attribution-NonCommercial-NoDerivs (CC BY-NC-ND) licence. This licence only allows you to download this work and share it with others as long as you credit the authors, but you can't change the article in any way or use it commercially. More information and the full terms of the licence here: https://creativecommons.org/licenses/ Takedown If you consider content in White Rose Research Online to be in breach of UK law, please notify us by emailing eprints@whiterose.ac.uk including the URL of the record and the reason for the withdrawal request. Identifying vulnerabilities and ensuring security functionality by security testing is a widely applied measure to evaluate and improve the security of software. Due to the openness of modern software-based systems, applying appropriate security testing techniques is of growing importance and essential to perform effective and efficient security testing. Therefore, an overview of actual security testing techniques is of high value both for researchers to evaluate and refine the techniques and for practitioners to apply and disseminate them. This chapter fulfills this need and provides an overview of recent security testing techniques. For this purpose, it first summarize the required background of testing and security engineering. Then, basics and recent developments of security testing techniques applied during the secure software development lifecycle, i.e., model-based security testing, code-based testing and static analysis, penetration testing and dynamic analysis, as well as security regression testing are discussed. Finally, the security testing techniques are illustrated by adopting them for an example three-tiered web-based business application.

show abstract

“…These approaches test both, security mechanisms and vulnerabilities. Several subset-based approaches [34,75,5,58,62] and retest-all approaches [128,22,78,106] have been proposed.…”

Section: Test Case Selectionmentioning

confidence: 99%

Section: Test Case Selectionmentioning

confidence: 99%

Security Testing

Felderer

Büchler

Johns

et al. 2016

Advances in Computers

124

View full text Add to dashboard Cite

show abstract

“…Huang et al [61] propose an approach for security regression testing of access control policies. Their approach selects tests if they cover changed elements in the policy.…”

Section: Resultsmentioning

confidence: 99%

A systematic classification of security regression testing approaches

Felderer

Fourneret

2015

Int J Softw Tools Technol Transfer

View full text Add to dashboard Cite

The openness of modern IT systems and their permanent change make it challenging to keep these systems secure. A combination of regression and security testing called security regression testing, which ensures that changes made to a system do not harm its security, are therefore of high significance and the interest in such approaches has steadily increased. In this article we present a systematic classification of available security regression testing approaches based on a solid study of background and related work to sketch which parts of the research area seem to be well understood and evaluated, and which ones require further research. For this purpose we extract approaches relevant to security regression testing from computer science digital libraries based on a rigorous search and selection strategy. Then, we provide a classification of these according to security regression approach criteria: abstraction level, security issue, regression testing techniques, and tool support, as well as evaluation criteria, for instance evaluated system, maturity of the system, and evaluation measures. From the resulting classification we derive observations with regard to the abstraction level, regression testing techniques, tool support as well as evaluation, and finally identify several potential directions of future research.

show abstract