Mapping linux security targets to existing test suites

C. A. Ardagna; E. Damiani; N. E. Ioini; F. Frati; P. Giovannini; R. Tchokpon

doi:10.1007/978-0-387-09684-1_3

Mapping linux security targets to existing test suites

C. A. Ardagna, E. Damiani, N. E. Ioini, F. Frati, P. Giovannini, R. Tchokpon

Electrical Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

1 Scopus citations

Abstract

The Common Criteria standard provides an infrastructure for evaluating security functions of IT products and for certifying that security policies claimed by product suppliers are correctly enforced by the security functions themselves. Certifying Open Source software (OSS) can pave the way to OSS adoption in a number of security-conscious application environments. Recent experiences in certifying Linux distributions has pointed out the problem of finding a mapping between descriptions of OSS security functions and existingtest suites developed independently, such as the Linux Test Project. In this paper, we describe a mechanism, based on matching techniques, which semiautomatically associates security functions to existing test suite such as the ones developed by Open Source communities.

Original language	British English
Title of host publication	Open Source Development, Communities and Quality
Subtitle of host publication	IFIP 20th World Computer Congress, Working Group 2.3 on Open Source Software
Editors	Barbara Russo, Giancarlo Succi, Ernesto Damiani, Scott Hissam, Björn Lundell
Pages	29-45
Number of pages	17
DOIs	https://doi.org/10.1007/978-0-387-09684-1_3
State	Published - 2008

Publication series

Name	IFIP International Federation for Information Processing
Volume	275
ISSN (Print)	1571-5736

Access to Document

10.1007/978-0-387-09684-1_3

Cite this

Ardagna, C. A., Damiani, E., Ioini, N. E., Frati, F., Giovannini, P., & Tchokpon, R. (2008). Mapping linux security targets to existing test suites. In B. Russo, G. Succi, E. Damiani, S. Hissam, & B. Lundell (Eds.), Open Source Development, Communities and Quality: IFIP 20th World Computer Congress, Working Group 2.3 on Open Source Software (pp. 29-45). (IFIP International Federation for Information Processing; Vol. 275). https://doi.org/10.1007/978-0-387-09684-1_3

Ardagna, C. A. ; Damiani, E. ; Ioini, N. E. et al. / Mapping linux security targets to existing test suites. Open Source Development, Communities and Quality: IFIP 20th World Computer Congress, Working Group 2.3 on Open Source Software. editor / Barbara Russo ; Giancarlo Succi ; Ernesto Damiani ; Scott Hissam ; Björn Lundell. 2008. pp. 29-45 (IFIP International Federation for Information Processing).

@inproceedings{943b140d57e64fde9756bb991e74fd24,

title = "Mapping linux security targets to existing test suites",

abstract = "The Common Criteria standard provides an infrastructure for evaluating security functions of IT products and for certifying that security policies claimed by product suppliers are correctly enforced by the security functions themselves. Certifying Open Source software (OSS) can pave the way to OSS adoption in a number of security-conscious application environments. Recent experiences in certifying Linux distributions has pointed out the problem of finding a mapping between descriptions of OSS security functions and existingtest suites developed independently, such as the Linux Test Project. In this paper, we describe a mechanism, based on matching techniques, which semiautomatically associates security functions to existing test suite such as the ones developed by Open Source communities.",

author = "Ardagna, {C. A.} and E. Damiani and Ioini, {N. E.} and F. Frati and P. Giovannini and R. Tchokpon",

year = "2008",

doi = "10.1007/978-0-387-09684-1_3",

language = "British English",

isbn = "9780387096834",

series = "IFIP International Federation for Information Processing",

pages = "29--45",

editor = "Barbara Russo and Giancarlo Succi and Ernesto Damiani and Scott Hissam and Bj{\"o}rn Lundell",

booktitle = "Open Source Development, Communities and Quality",

}

Ardagna, CA, Damiani, E, Ioini, NE, Frati, F, Giovannini, P & Tchokpon, R 2008, Mapping linux security targets to existing test suites. in B Russo, G Succi, E Damiani, S Hissam & B Lundell (eds), Open Source Development, Communities and Quality: IFIP 20th World Computer Congress, Working Group 2.3 on Open Source Software. IFIP International Federation for Information Processing, vol. 275, pp. 29-45. https://doi.org/10.1007/978-0-387-09684-1_3

Mapping linux security targets to existing test suites. / Ardagna, C. A.; Damiani, E.; Ioini, N. E. et al.
Open Source Development, Communities and Quality: IFIP 20th World Computer Congress, Working Group 2.3 on Open Source Software. ed. / Barbara Russo; Giancarlo Succi; Ernesto Damiani; Scott Hissam; Björn Lundell. 2008. p. 29-45 (IFIP International Federation for Information Processing; Vol. 275).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Mapping linux security targets to existing test suites

AU - Ardagna, C. A.

AU - Damiani, E.

AU - Ioini, N. E.

AU - Frati, F.

AU - Giovannini, P.

AU - Tchokpon, R.

PY - 2008

Y1 - 2008

N2 - The Common Criteria standard provides an infrastructure for evaluating security functions of IT products and for certifying that security policies claimed by product suppliers are correctly enforced by the security functions themselves. Certifying Open Source software (OSS) can pave the way to OSS adoption in a number of security-conscious application environments. Recent experiences in certifying Linux distributions has pointed out the problem of finding a mapping between descriptions of OSS security functions and existingtest suites developed independently, such as the Linux Test Project. In this paper, we describe a mechanism, based on matching techniques, which semiautomatically associates security functions to existing test suite such as the ones developed by Open Source communities.

AB - The Common Criteria standard provides an infrastructure for evaluating security functions of IT products and for certifying that security policies claimed by product suppliers are correctly enforced by the security functions themselves. Certifying Open Source software (OSS) can pave the way to OSS adoption in a number of security-conscious application environments. Recent experiences in certifying Linux distributions has pointed out the problem of finding a mapping between descriptions of OSS security functions and existingtest suites developed independently, such as the Linux Test Project. In this paper, we describe a mechanism, based on matching techniques, which semiautomatically associates security functions to existing test suite such as the ones developed by Open Source communities.

UR - http://www.scopus.com/inward/record.url?scp=47849131469&partnerID=8YFLogxK

U2 - 10.1007/978-0-387-09684-1_3

DO - 10.1007/978-0-387-09684-1_3

M3 - Conference contribution

AN - SCOPUS:47849131469

SN - 9780387096834

T3 - IFIP International Federation for Information Processing

SP - 29

EP - 45

BT - Open Source Development, Communities and Quality

A2 - Russo, Barbara

A2 - Succi, Giancarlo

A2 - Damiani, Ernesto

A2 - Hissam, Scott

A2 - Lundell, Björn

ER -

Ardagna CA, Damiani E, Ioini NE, Frati F, Giovannini P, Tchokpon R. Mapping linux security targets to existing test suites. In Russo B, Succi G, Damiani E, Hissam S, Lundell B, editors, Open Source Development, Communities and Quality: IFIP 20th World Computer Congress, Working Group 2.3 on Open Source Software. 2008. p. 29-45. (IFIP International Federation for Information Processing). doi: 10.1007/978-0-387-09684-1_3

Mapping linux security targets to existing test suites

Abstract

Publication series

Access to Document

Other files and links

Fingerprint

Cite this