TTP: Small: Automated Conformance Testing of Access Control and Obligation Policies

基于属性的强制访问控制是实现细粒度授权和保证系统责任的一种新的访问控制范式。但是，由于编程错误和对策略的误解等各种原因，访问控制和义务策略可能会被错误地实现。揭示策略规范与实际系统实现之间的差异是很重要的。目的是什么？过渡到实践？项目是开发一个开源工具，用于基于模型的基于属性的访问控制和义务策略的测试。它可以通过将基于属性的访问控制和义务规则与功能测试模型集成来构建测试模型，从测试模型中生成满足给定覆盖标准的测试用例，并将模型级测试用例转换为目标语言和测试执行环境中的可执行代码。然后，测试代码可以与被测系统一起执行，以执行访问控制和义务策略。由于支持各种编程语言和测试执行环境，该工具适用于各种系统。它独立于在测试系统中如何实现访问控制和义务策略。该项目的广泛影响包括将该工具部署到各种学术和行业项目中，并让学生（特别是本科生）参与前沿研究。

Attributed-based obligatory access control is a new access control paradigm for achieving fine-grained authorization and assured system accountability. However, access control and obligation policies can be implemented incorrectly for various reasons, such as programming errors and misunderstanding about the policies. It is important to reveal discrepancy between the policy specification and the actual system implementation. The objective of this ?Transition To Practice? project is to develop an open source tool for model-based testing of attribute-based access control and obligation policies. It can build test models by integrating attribute-based access control and obligation rules with functional test models, generate test cases from the test models to meet given coverage criteria, and transform model-level test cases into executable code in a target language and test execution environment. The test code can then be executed with the system under test to exercise the access control and obligation policies. The tool is applicable to a great variety of systems due to the support for various programming languages and test execution environments. It is independent of how access control and obligation policies are implemented in the system under test. The broader impacts of this project include deployment of the tool to various academic and industry projects and involvement of students, particularly undergraduate students, in cutting-edge research.