Model-based Firewall Conformance Testing
by Achim D. Brucker, Lukas Brügger, and Burkhart Wolff
Firewalls are a cornerstone of todays security infrastructure for networks. Their configuration, implementing a firewall policy, is inherently complex, hard to understand, and difficult to validate.
We present a substantial case study performed with the model-based testing tool HOL-TestGen. Based on a formal model of firewalls and their policies in HOL, we first present a derived theory for simplifying policies. We discuss different test plans for test specifications. Finally, we show how to integrate these issues to a domain-specific firewall testing tool HOL-TestGen/FW.
Keywords: Security Testing, Model-based Testing, Firewall, Conformance Testing
Categories: ,
Documents: (article)
Please cite this article as follows:
Achim D. Brucker, Lukas Brügger, and Burkhart Wolff.
Model-based Firewall Conformance Testing.
In Testcom/FATES 2008. Lecture Notes in Computer Science (5047), pages 103-118, Springer-Verlag, 2008.
Keywords: Security Testing, Model-based Testing, Firewall, Conformance Testing
(article) (BibTeX) (Endnote) (RIS) (Word) (doi:10.1007/978-3-540-68524-1_9) (
| abstract | = | {Firewalls are a cornerstone of todays security infrastructure for networks. Their configuration, implementing a firewall policy, is inherently complex, hard to understand, and difficult to validate.\\\\We present a substantial case study performed with the model-based testing tool HOL-TestGen. Based on a formal model of firewalls and their policies in HOL, we first present a derived theory for simplifying policies. We discuss different test plans for test specifications. Finally, we show how to integrate these issues to a domain-specific firewall testing tool HOL-TestGen/FW.}, | |
| address | = | {Heidelberg}, | |
| author | = | {Achim D. Brucker and Lukas Br{\"u}gger and Burkhart Wolff}, | |
| booktitle | = | {Testcom/FATES 2008}, | |
| doi | = | {10.1007/978-3-540-68524-1_9}, | |
| editor | = | {Kenji Suzuki and Teruo Higashino}, | |
| keywords | = | {Security Testing, Model-based Testing, Firewall, Conformance Testing}, | |
| language | = | {USenglish}, | |
| location | = | {Tokyo, Japan}, | |
| number | = | {5047}, | |
| pages | = | {103--118}, | |
| = | {http://www.brucker.ch/bibliography/download/2008/brucker.ea-model-based-2008.pdf}, | ||
| publisher | = | {Springer-Verlag}, | |
| series | = | {Lecture Notes in Computer Science}, | |
| title | = | {Model-based Firewall Conformance Testing}, | |
| url | = | {http://www.brucker.ch/bibliography/abstract/brucker.ea-model-based-2008}, | |
| year | = | {2008}, |