Selection of Regression System Tests for Security Policy Evolution

JeeHyun Hwang,Tao Xie,Donia El Kateb,Tejeddine Mouelhi,Yves Le Traon
DOI: https://doi.org/10.1145/2351676.2351719
2012-01-01
Abstract:As security requirements of software often change, developers may modify security policies such as access control policies (policies in short) according to evolving requirements. To increase confidence that the modification of policies is correct, developers conduct regression testing. However, rerunning all of existing system test cases could be costly and time-consuming. To address this issue, we develop a regression-test-selection approach, which selects every system test case that may reveal regression faults caused by policy changes. Our evaluation results show that our test-selection approach reduces a substantial number of system test cases efficiently.
What problem does this paper attempt to address?