Testing TLS Using Combinatorial Methods and Execution Framework - Testing Software and Systems (ICTSS 2017)
Conference Papers Year : 2017

Testing TLS Using Combinatorial Methods and Execution Framework

Dimitris E. Simos
  • Function : Author
Josip Bozic
  • Function : Author
  • PersonId : 994797
Feng Duan
  • Function : Author
  • PersonId : 1026264
Bernhard Garn
  • Function : Author
  • PersonId : 1023381
Kristoffer Kleine
  • Function : Author
  • PersonId : 1023379
Yu Lei
  • Function : Author
  • PersonId : 1023382
Franz Wotawa
  • Function : Author
  • PersonId : 994796

Abstract

The TLS protocol is the standard for secure Internet communication between two parties. Unfortunately, there have been recently successful attacks like DROWN or BREACH that indicate the necessity for thoroughly testing TLS implementations. In our research work, we focus on automated test case generation and execution for the TLS security protocol, where the aim is to make use of combinatorial methods for providing test cases that ideally also reveal previously unknown attacks. This is made feasible by creating appropriate input parameter models for different messages that can appear in a TLS message sequence. In this paper, we present the resulting test case generation and execution framework together with the corresponding testing oracle. Furthermore, we discuss first empirical results obtained using different TLS implementations and their releases.
Fichier principal
Vignette du fichier
449632_1_En_10_Chapter.pdf (430.37 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01678990 , version 1 (09-01-2018)

Licence

Identifiers

Cite

Dimitris E. Simos, Josip Bozic, Feng Duan, Bernhard Garn, Kristoffer Kleine, et al.. Testing TLS Using Combinatorial Methods and Execution Framework. 29th IFIP International Conference on Testing Software and Systems (ICTSS), Oct 2017, St. Petersburg, Russia. pp.162-177, ⟨10.1007/978-3-319-67549-7_10⟩. ⟨hal-01678990⟩
170 View
213 Download

Altmetric

Share

More