{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T18:26:54Z","timestamp":1773772014859,"version":"3.50.1"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319675480","type":"print"},{"value":"9783319675497","type":"electronic"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-67549-7_10","type":"book-chapter","created":{"date-parts":[[2017,9,14]],"date-time":"2017-09-14T12:56:18Z","timestamp":1505393778000},"page":"162-177","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Testing TLS Using Combinatorial Methods and Execution Framework"],"prefix":"10.1007","author":[{"given":"Dimitris E.","family":"Simos","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Josip","family":"Bozic","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Feng","family":"Duan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bernhard","family":"Garn","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kristoffer","family":"Kleine","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Lei","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Franz","family":"Wotawa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,9,15]]},"reference":[{"key":"10_CR1","unstructured":"The gnutls transport layer security library. http:\/\/www.gnutls.org\/. Accessed 07 June 2017"},{"key":"10_CR2","unstructured":"mitls: A verified reference implementation of tls. https:\/\/mitls.org\/. Accessed 07 June 2017"},{"key":"10_CR3","unstructured":"Openssl. https:\/\/www.openssl.org\/. Accessed 07 June 2017"},{"key":"10_CR4","unstructured":"Rfc 5246. https:\/\/tools.ietf.org\/rfc\/rfc5246.txt. Accessed 31 May 2017"},{"key":"10_CR5","unstructured":"Ssl library mbed tls \/ polarssl. https:\/\/tls.mbed.org\/. Accessed 07 June 2017"},{"key":"10_CR6","unstructured":"Tls-attacker. https:\/\/github.com\/RUB-NDS\/TLS-Attacker. Accessed 04 Dec 2016"},{"key":"10_CR7","unstructured":"The transport layer security (tls) protocol version 1.3. https:\/\/tools.ietf.org\/html\/draft-ietf-tls-tls13-07. Accessed 31 May 2017"},{"key":"10_CR8","unstructured":"wolfssl. https:\/\/www.wolfssl.com\/. Accessed 07 June 2017"},{"key":"10_CR9","unstructured":"AlFardan, N., Paterson, K.G.: Plaintext-recovery attacks against datagram tls. In: Network and Distributed System Security Symposium (NDSS 2012) (2012)"},{"key":"10_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"248","DOI":"10.1007\/978-3-540-73408-6_18","volume-title":"Public Key Infrastructure","author":"D Berbecaru","year":"2007","unstructured":"Berbecaru, D., Lioy, A.: On the robustness of applications based on the SSL and TLS security protocols. In: Lopez, J., Samarati, P., Ferrer, J.L. (eds.) EuroPKI 2007. LNCS, vol. 4582, pp. 248\u2013264. Springer, Heidelberg (2007). doi:10.1007\/978-3-540-73408-6_18"},{"key":"10_CR11","doi-asserted-by":"crossref","unstructured":"Beurdouche, B., Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Kohlweiss, M., Pironti, A., Strub, P.Y., Zinzindohoue, J.K.: A messy state of the union: taming the composite state machines of tls. In: Proceedings of the 36th IEEE Symposium on Security and Privacy (2015)","DOI":"10.1109\/SP.2015.39"},{"key":"10_CR12","unstructured":"Beurdouche, B., Delignat-Lavaud, A., Kobeissi, N., Pironti, A., Bhargavan, K.: Flextls: a tool for testing tls implementations. In: 9th USENIX Workshop on Offensive Technologies (WOOT 2015) (2015)"},{"key":"10_CR13","doi-asserted-by":"crossref","unstructured":"Bhargavan, K., Lavaud, A.D., Fournet, C., Pironti, A., Strub, P.Y.: Triple handshakes and cookie cutters: breaking and fixing authentication over tls. In: 2014 IEEE Symposium on Security and Privacy (SP), pp. 98\u2013113. IEEE (2014)","DOI":"10.1109\/SP.2014.14"},{"key":"10_CR14","doi-asserted-by":"crossref","unstructured":"Bhargavan, K., Leurent, G.: Transcript collision attacks: Breaking authentication in tls, ike, and ssh. In: Network and Distributed System Security Symposium-NDSS 2016 (2016)","DOI":"10.14722\/ndss.2016.23418"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Bozic, J., Kleine, K., Simos, D.E., Wotawa, F.: Planning-based security testing of the ssl\/tls protocol. In: Proceedings of the IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW) (2017)","DOI":"10.1109\/ICSTW.2017.63"},{"key":"10_CR16","doi-asserted-by":"crossref","unstructured":"Brubaker, C., Jana, S., Ray, B., Khurshid, S., Shmatikov, V.: Using frankencerts for automated adversarial testing of certificate validation in ssl\/tls implementations. In: Proceedings of the 2014 IEEE Symposium on Security and Privacy (2014)","DOI":"10.1109\/SP.2014.15"},{"key":"10_CR17","doi-asserted-by":"crossref","unstructured":"Dierks, T., Rescorla, E.: Rfc 5246: The transport layer security (tls) protocol. The Internet Engineering Task Force (2008)","DOI":"10.17487\/rfc5246"},{"key":"10_CR18","doi-asserted-by":"crossref","unstructured":"Dowling, B., Fischlin, M., G\u00fcnther, F., Stebila, D.: A cryptographic analysis of the tls 1.3 handshake protocol candidates. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, pp. 1197\u20131210. ACM (2015)","DOI":"10.1145\/2810103.2813653"},{"key":"10_CR19","doi-asserted-by":"crossref","unstructured":"Duan, F., Lei, Y., Yu, L., Kacker, R.N., Kuhn, D.R.: Optimizing ipog\u2019s vertical growth with constraints based on hypergraph coloring. In: 2017 IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), pp. 181\u2013188. IEEE (2017)","DOI":"10.1109\/ICSTW.2017.37"},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Hollenbeck, S.: Transport layer security protocol compression methods (2004)","DOI":"10.17487\/rfc3749"},{"key":"10_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"407","DOI":"10.1007\/978-3-319-24174-6_21","volume-title":"Computer Security \u2013 ESORICS 2015","author":"T Jager","year":"2015","unstructured":"Jager, T., Schwenk, J., Somorovsky, J.: Practical invalid curve attacks on TLS-ECDH. In: Pernul, G., Ryan, P.Y.A., Weippl, E. (eds.) ESORICS 2015. LNCS, vol. 9326, pp. 407\u2013425. Springer, Cham (2015). doi:10.1007\/978-3-319-24174-6_21"},{"key":"10_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"429","DOI":"10.1007\/978-3-642-40041-4_24","volume-title":"Advances in Cryptology \u2013 CRYPTO 2013","author":"H Krawczyk","year":"2013","unstructured":"Krawczyk, H., Paterson, K.G., Wee, H.: On the security of the TLS protocol: a systematic analysis. In: Canetti, R., Garay, J.A. (eds.) CRYPTO 2013. LNCS, vol. 8042, pp. 429\u2013448. Springer, Heidelberg (2013). doi:10.1007\/978-3-642-40041-4_24"},{"key":"10_CR23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/bs.adcom.2015.05.003","volume":"99","author":"DR Kuhn","year":"2015","unstructured":"Kuhn, D.R., Bryce, R., Duan, F., Ghandehari, L.S., Lei, Y., Kacker, R.N.: Chapter one-combinatorial testing: theory and practice. Adv. Comput. 99, 1\u201366 (2015)","journal-title":"Adv. Comput."},{"issue":"3","key":"10_CR24","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1109\/MITP.2008.54","volume":"10","author":"R Kuhn","year":"2008","unstructured":"Kuhn, R., Lei, Y., Kacker, R.: Practical combinatorial testing: beyond pairwise. IT Professional 10(3), 19\u201323 (2008)","journal-title":"IT Professional"},{"issue":"3","key":"10_CR25","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1002\/stvr.381","volume":"18","author":"Y Lei","year":"2008","unstructured":"Lei, Y., Kacker, R., Kuhn, D.R., Okun, V., Lawrence, J.: Ipog\/ipog-d: efficient test generation for multi-way combinatorial testing. Softw. Test. Verification Reliab. 18(3), 125\u2013148 (2008)","journal-title":"Softw. Test. Verification Reliab."},{"key":"10_CR26","doi-asserted-by":"crossref","unstructured":"Mavrogiannopoulos, N., Vercauteren, F., Velichkov, V., Preneel, B.: A cross-protocol attack on the tls protocol. In: ACM CCS 12: 19th Conference on Computer and Communications Security (2012)","DOI":"10.1145\/2382196.2382206"},{"key":"10_CR27","first-page":"733","volume":"14","author":"C Meyer","year":"2014","unstructured":"Meyer, C., Somorovsky, J., Weiss, E., Schwenk, J., Schinzel, S., Tews, E.: Revisiting ssl\/tls implementations: new bleichenbacher side channels and attacks. USENIX Secur. 14, 733\u2013748 (2014)","journal-title":"USENIX Secur."},{"key":"10_CR28","doi-asserted-by":"crossref","unstructured":"Morais, A., Martins, E., Cavalli, A., Jimenez, W.: Security protocol testing using attack trees. In: CSE (2), IEEE Computer Society, pp. 690\u2013697 (2009)","DOI":"10.1109\/CSE.2009.206"},{"key":"10_CR29","doi-asserted-by":"crossref","unstructured":"Raffelt, H., Steffen, B., Berg, T.: Learnlib: A library for automata learning and experimentation. In: Proceedings of the 10th International Workshop on Formal Methods for Industrial Critical Systems (FMICS 2005), pp. 62\u201371 (2005)","DOI":"10.1145\/1081180.1081189"},{"key":"10_CR30","unstructured":"de Ruiter, J., Poll, E.: Protocol state fuzzing of tls implementations. In: 24th USENIX Security Symposium (USENIX Security 15), pp. 193\u2013206 (2015)"},{"key":"10_CR31","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/MC.2016.314","volume":"49","author":"DE Simos","year":"2016","unstructured":"Simos, D.E., Kuhn, R., Voyiatzis, A.G., Kacker, R.: Combinatorial methods in security testing. IEEE Comput. 49, 40\u201343 (2016)","journal-title":"IEEE Comput."},{"key":"10_CR32","doi-asserted-by":"crossref","unstructured":"Somorovsky, J.: Systematic fuzzing and testing of tls libraries. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS 2016) (2016)","DOI":"10.1145\/2976749.2978411"},{"key":"10_CR33","doi-asserted-by":"crossref","unstructured":"Yu, L., Lei, Y., Kacker, R.N., Kuhn, D.R.: Acts: A combinatorial test generation tool. In: 2013 IEEE Sixth International Conference on Software Testing, Verification and Validation (ICST), pp. 370\u2013375. IEEE (2013)","DOI":"10.1109\/ICST.2013.52"},{"key":"10_CR34","doi-asserted-by":"crossref","unstructured":"Yu, L., Lei, Y., Nourozborazjany, M., Kacker, R.N., Kuhn, D.R.: An efficient algorithm for constraint handling in combinatorial test generation. In: 2013 IEEE Sixth International Conference on Software Testing, Verification and Validation (ICST), pp. 242\u2013251. IEEE (2013)","DOI":"10.1109\/ICST.2013.35"}],"container-title":["Lecture Notes in Computer Science","Testing Software and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-67549-7_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,9,25]],"date-time":"2021-09-25T02:35:24Z","timestamp":1632537324000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-67549-7_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319675480","9783319675497"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-67549-7_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"15 September 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICTSS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Testing Software and Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"St. Petersburg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Russia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 October 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 October 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pts2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ictss2017.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}