Testing TLS using planning-based combinatorial methods and execution framework

Dimitris E. Simos*, Josip Bozic, Bernhard Garn, Manuel Leithner, Feng Duan, Kristoffer Kleine, Yu Lei, Franz Wotawa

*Korrespondierende/r Autor/-in für diese Arbeit

Publikation: Beitrag in einer FachzeitschriftArtikelBegutachtung

Abstract

The TLS protocol is the standard for secure Internet communication between two parties. Unfortunately, there have been recently successful attacks like DROWN, ROBOT, or BREACH that indicate the necessity for thoroughly testing TLS implementations. In our research work, we focus on automated test case generation and execution for the TLS security protocol, where the aim is to combine planning with combinatorial methods for providing test cases that ideally also reveal previously unknown attacks. This is made feasible by creating appropriate input parameter models for different messages that can appear in a TLS message sequence. In this paper, we present the resulting test case generation and execution framework together with the corresponding test oracle. Furthermore, we discuss in detail empirical results obtained via testing different TLS implementations.

Originalspracheenglisch
Seiten (von - bis)1-27
Seitenumfang27
FachzeitschriftSoftware Quality Journal
Frühes Online-Datum1 Juni 2018
DOIs
PublikationsstatusElektronische Veröffentlichung vor Drucklegung. - 1 Juni 2018

ASJC Scopus subject areas

  • Software
  • Sicherheit, Risiko, Zuverlässigkeit und Qualität

Fingerprint

Untersuchen Sie die Forschungsthemen von „Testing TLS using planning-based combinatorial methods and execution framework“. Zusammen bilden sie einen einzigartigen Fingerprint.

Dieses zitieren