Inroads in Testing Access Control
Tejeddine Mouelhi*; Donia El Kateb†; Yves Le Traon† * itrust consulting, Berbourg, Luxembourg† Interdisciplinary Research Centre, SnT, University of Luxembourg, Kirchberg, Luxembourg
Abstract
In the last few years, a plethora of research has addressed security testing issues. Several commercial tools have emerged to provide security testing services. Software security testing goes beyond functional testing to reveal flaws and vulnerabilities in software design and behavior. Access control is a major pillar in computer security. This chapter pursues the goal of describing the landscape in the research area of access control testing. We provide an outline of the different existing research over ...