Combining Algorithm Based Data Flow Testing Approach for XACML
Sagar Limaye, Yunpeng Zhang · 2018
XACML is a standardise access control policy language. Numerous implementations of XACML's evaluation engine are available. Policy writers create rules that control access to defined resources in an application. In order to increase confidence in the policies, formal verification and testing is usually carried out to show that the policy satisfies certain test cases. This paper describes a testing strategy utilizing a data flow approach. Path testing metric is used to evaluate the coverage of a policy, using data flow analysis. The test inputs are randomly generated, and the algorithm calculates the coverage of paths through the policy. We believe this method will highlight the path coverage of the policy which serves yet another useful metric in evaluating the fault-detection capability of the policy under test.