%0 Conference Proceedings
%T Testing TLS Using Combinatorial Methods and Execution Framework
%+ SBA Research
%+ Graz University of Technology [Graz] (TU Graz)
%+ University of Texas at Arlington [Arlington]
%A Simos, Dimitris, E.
%A Bozic, Josip
%A Duan, Feng
%A Garn, Bernhard
%A Kleine, Kristoffer
%A Lei, Yu
%A Wotawa, Franz
%Z Part 3: Safety and Security Testing
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 29th IFIP International Conference on Testing Software and Systems (ICTSS)
%C St. Petersburg, Russia
%Y Nina Yevtushenko
%Y Ana Rosa Cavalli
%Y Hüsnü Yenigün
%I Springer International Publishing
%3 Testing Software and Systems
%V LNCS-10533
%P 162-177
%8 2017-10-09
%D 2017
%R 10.1007/978-3-319-67549-7_10
%K Combinatorial testing
%K Security testing
%K Security protocols
%K TLS
%Z Computer Science [cs]
%Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers
%X The TLS protocol is the standard for secure Internet communication between two parties. Unfortunately, there have been recently successful attacks like DROWN or BREACH that indicate the necessity for thoroughly testing TLS implementations. In our research work, we focus on automated test case generation and execution for the TLS security protocol, where the aim is to make use of combinatorial methods for providing test cases that ideally also reveal previously unknown attacks. This is made feasible by creating appropriate input parameter models for different messages that can appear in a TLS message sequence. In this paper, we present the resulting test case generation and execution framework together with the corresponding testing oracle. Furthermore, we discuss first empirical results obtained using different TLS implementations and their releases.
%G English
%Z TC 6
%Z WG 6.1
%2 https://inria.hal.science/hal-01678990/document
%2 https://inria.hal.science/hal-01678990/file/449632_1_En_10_Chapter.pdf
%L hal-01678990
%U https://inria.hal.science/hal-01678990
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC6
%~ IFIP-WG6-1
%~ IFIP-ICTSS
%~ IFIP-LNCS-10533