SRC05: Automated Test Generation for Access Control Policies

To increase confidence in the correctness of access control policies, we use policy testing to probe the policy with test inputs (in the form of requests) and check test outputs (in the form of responses) against expected ones. We present a set of tools to facilitate systematic policy testing.