Testing security policies for web applications - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès ICSTW '08 : IEEE International Conference on Software Testing Verification and Validation Workshop Année : 2008

Testing security policies for web applications

Résumé

Due to the increasing complexity of Web systems, security testing is becoming a critical activity to guarantee the respect of such systems to their security requirements. To challenge this issue, we rely in this paper on model based active testing. We first specify the Web system behavior using IF formalism. Second, we integrate security rules -modeled in Nomad language- within this IF model using specific algorithms. Then, we perform automatic test generation using a dedicated tool, called HJ2If, developed in our laboratory. Finally, we briefly present a Travel agency system as an ongoing case study to demonstrate the reliability of our framework.
Fichier non déposé

Dates et versions

hal-00796098 , version 1 (01-03-2013)

Identifiants

Citer

Wissam Mallouli, Gerardo Morales, Ana Rosa Cavalli. Testing security policies for web applications. ICSTW '08 : IEEE International Conference on Software Testing Verification and Validation Workshop, Apr 2008, Lillehammer, Norway. pp.269-270, ⟨10.1109/ICSTW.2008.45⟩. ⟨hal-00796098⟩
41 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More