Model checking and security testing are two verification techniques available to help finding flaws in security-sensitive, distributed applications. In this paper, we present an approach to security testing of web-based applications in which test cases are automatically derived from counterexamples found through model checking. We illustrate our approach by discussing its application against of the SAML-based Single Sign-On for Google Apps.
Published in:
Software Testing, Verification, and Validation Workshops (ICSTW), 2010 Third International Conference on
Date of Conference: 6-10 April 2010