An automated model-based test oracle for access control systems

In the context of XACML-based access control systems, an intensive testing activity is among the most adopted means to assure that sensible information or resources are correctly accessed. Unfortunately, it requires a huge effort for manual inspection of results: thus automated verdict derivation is a key aspect for improving the cost-effectiveness of testing. To this purpose, we introduce XACMET, a novel approach for automated model-based oracle definition. XACMET defines a typed graph, called the XAC-Graph, that models the XACML policy evaluation. The expected verdict of a specific request execution can thus be automatically derived by executing the corresponding path in such graph. Our validation of the XACMET prototype implementation confirms the effectiveness of the proposed approach.Comment: 7 page

Using formal methods to support testing

Formal methods and testing are two important approaches that assist in the development of high quality software. While traditionally these approaches have been seen as rivals, in recent years a new consensus has developed in which they are seen as complementary. This article reviews the state of the art regarding ways in which the presence of a formal specification can be used to assist testing

Reducing combinatorial uncertainties: A new technique based on MT2 variables

We propose a new method to resolve combinatorial ambiguities in hadron collider events involving two invisible particles in the final state. This method is based on the kinematic variable MT2 and on the MT2-assisted-on-shell reconstruction of invisible momenta, that are reformulated as `test' variables Ti of the correct combination against the incorrect ones. We show how the efficiency of the single Ti in providing the correct answer can be systematically improved by combining the different Ti and/or by introducing cuts on suitable, combination-insensitive kinematic variables. We illustrate our whole approach in the specific example of top anti-top production, followed by a leptonic decay of the W on both sides. However, by construction, our method is also directly applicable to many topologies of interest for new physics, in particular events producing a pair of undetected particles, that are potential dark-matter candidates. We finally emphasize that our method is apt to several generalizations, that we outline in the last sections of the paper.Comment: 1+23 pages, 8 figures. Main changes in v3: (1) discussion at the end of sec. 2 improved; (2) added sec. 4.2 about the method's dependence on mass information. Matches journal versio