Model-based Firewall Conformance Testing

Achim D. Brucker and Lukas Brügger and Burkhart Wolff

Firewalls are a cornerstone of todays security infrastructure for networks. Their configuration, implementing a firewall policy, is inherently complex, hard to understand, and difficult to validate.

We present a substantial case study performed with the model-based testing tool HOL-TestGen. Based on a formal model of firewalls and their policies in HOL, we first present a derived theory for simplifying policies. We discuss different test plans for test specifications. Finally, we show how to integrate these issues to a domain-specific firewall testing tool HOL-TestGen/FW.

Keywords: Security Testing, Model-based Testing, Firewall, Conformance Testing
Categories: ,

Please cite this article as follows:
Achim D. Brucker and Lukas Brügger and Burkhart Wolff. Model-based Firewall Conformance Testing. In Testcom/FATES 2008. Lecture Notes in Computer Science (5047), pages 103-118, Springer-Verlag, 2008.
Keywords: Security Testing, Model-based Testing, Firewall, Conformance Testing
(PDF) (BibTeX) (Endnote) (RIS) (doi:10.1007/978-3-540-68524-1_9) ( )