Currently, eXtensible Access Control Markup Language (XACML) has becoming the standard for implementing access control policies and consequently more attention is dedicated to testing the correctness of XACML policies. In particular, coverage measures can be adopted for assessing test strategy effectiveness in exercising the policy elements. This study introduces a set of XACML coverage criteria and describes the access control infrastructure, based on a monitor engine, enabling the coverage criterion selection and the on-line tracing of the testing activity. Examples of infrastructure usage and of assessment of different test strategies are provided.
Finally, concerning the adoption of monitoring facilities for coverage assessment, the work in @cite_16 represents a preliminary attempt of an infrastructure for enabling coverage criterion selection and policy coverage assessment analysis. Several general-purpose monitoring proposals are currently available, which can be mainly divided into two groups: those that are embedded in the execution engine such as @cite_21 @cite_23 and those that can be integrated into the execution framework as an additional component such for instance @cite_14 . Among the additional monitor facility in this paper we refer to the monitoring framework called Glimpse @cite_7 , which is extremely flexible and adaptable to various scenarios and SOA architecture patterns.
@cite_14 @cite_7 @cite_21 @cite_23 @cite_16
2155891645 2753556020 2167838480 2160614176
Structural coverage criteria are often used as an indicator of the thoroughness of testing, but complete satisfaction of a criterion is seldom achieved. When a software product is released with less than 100 coverage, testers are explicitly or implicitly assuming that executions satisfying the remaining test obligations (the residue) are either infeasible or occur so rarely that they have negligible impact on quality. Violation of this assumption indicates shortcomings in the testing process. Monitoring in the deployed environment, even in the beta test phase, is typically limited to error and sanity checks. Monitoring the residue of test coverage in actual use can provide additional useful information, but it is unlikely to be accepted by users unless its performance impact is very small. Experience with a prototype tool for residual test coverage monitoring of Java programs suggests that, at least for statement coverage, the simple strategy of removing all probes except those corresponding to the residue of coverage testing reduces execution overhead to acceptably low levels. Testing access control policies relies on their execution on a security engine and the evaluation of the correct responses. Coverage measures can be adopted to know which parts of the policy are most exercised. This paper proposes an access control infrastructure for enabling the coverage criterion selection, the monitoring of the policy execution and the analysis of the policy coverage assessment. The framework is independent from the policy specification language and does not require the instrumentation of the evaluation engine. We show an instantiation of the proposed infrastructure for assessing the XACML policy testing. The main objective of this paper is to describe a multilevel framework that facilitates seamless integration of existing state estimators (SEs) that are designed to function at different levels of modeling hierarchy in order to accomplish very large-scale monitoring of interconnected power systems. This has been a major challenge for decades as power systems grew pretty much independently in different areas, which had to operate in an interconnected and synchronized fashion. The paper initially provides a brief historical perspective which also explains the existing state estimation paradigm. This is followed by a review of the recent technological and regulatory drivers that are responsible for the new developments in the energy management functions. The paper then shows that a common theoretical framework can be used to implement a hierarchical scheme by which even very large-scale power systems can be efficiently and accurately monitored. This is illustrated for substation level, transmission system level as well as for a level between different transmission system operators in a given power system. Finally, the paper describes the use and benefits of phasor measurements when incorporated at these different levels of the proposed infrastructure. Numerical examples are included to illustrate performance of the proposed multilevel schemes. We describe the Monitoring and Checking (MaC) framework which provides assurance on the correctness of an execution of a real-time system at runtime. Monitoring is performed based on a formal specification of system requirements. MaC bridges the gap between formal specification, which analyzes designs rather than implementations, and testing, which validates implementations but lacks formality. An important aspect of the framework is a clear separation between implementation-dependent description of monitored objects and high-level requirements specification. Another salient feature is automatic instrumentation of executable code. The paper presents an overview of the framework, languages to express monitoring scripts and requirements, and a prototype implementation of MaC targeted at systems implemented in Java.