Mutation Analysis of NGAC Policies
Mutation Analysis of NGAC Policies
复制标题
DOI：
10.1145/3450569.3463563
复制
发表时间：
2021-06
期刊：
影响因子：
--
通讯作者：
Erzhuo Chen;Vladislav Dubrovenski;Dianxiang Xu
中科院分区：
文献类型：
--
作者：
Erzhuo Chen;Vladislav Dubrovenski;Dianxiang Xu
基于属性的访问控制（ABAC）的NGAC（下一代访问控制）标准允许通过由访问事件触发的管理义务来对许可和禁止配置进行运行时更改。它使访问控制更加细粒度和动态。然而，这对确保NGAC政策的正确性提出了挑战。策略测试是保证策略质量的重要手段，本文提出了一种NGAC策略突变分析方法。它可以评估测试方法的有效性，并揭示未充分测试的策略中的潜在错误。突变分析涵盖了NGAC政策的分配、关联、禁止和义务中的各种类型的潜在错误。本文还提出了一种增量测试方法，首先验证策略的初始配置，然后将策略作为一个整体。它有助于确定故障是否出现在配置或义务中。为了评估这项工作，我们根据当前NGAC参考实现开发了四个工作策略及其测试套件。实证研究表明，突变分析可以揭示测试集的优点和缺点。它们还表明需要开发更具成本效益的测试方法。
The NGAC (Next Generation Access Control) standard for attribute-based access control (ABAC) allows for run-time changes of the permission and prohibition configurations through administrative obligations triggered by access events. It makes access control more fine-grained and dynamic. However, it raises challenges for assuring the correctness of NGAC policies. As policy testing is an important technique for quality assurance, this paper presents an approach to mutation analysis of NGAC policies. It can evaluate the effectiveness of a testing method and reveal potential faults in an inadequately tested policy. The mutation analysis covers various types of potential faults in the assignments, associations, prohibitions, and obligations of NGAC policies. This paper also proposes an incremental testing approach that first validates the initial configuration of a policy and then the policy as a whole. It helps determine whether faults appear in the configuration or the obligations. To evaluate the work, we have developed four working policies and their test suites based on the current NGAC reference implementation. The empirical studies show that the mutation analysis can shed light on the strengths and weaknesses of the test suites. They also demonstrate the need for developing more cost-effective testing methods.