{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T18:26:54Z","timestamp":1773772014918,"version":"3.50.1"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2018,6,1]],"date-time":"2018-06-01T00:00:00Z","timestamp":1527811200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100004955","name":"\u00d6sterreichische Forschungsf\u00f6rderungsgesellschaft","doi-asserted-by":"publisher","award":["851205,854188"],"award-info":[{"award-number":["851205,854188"]}],"id":[{"id":"10.13039\/501100004955","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004955","name":"\u00d6sterreichische Forschungsf\u00f6rderungsgesellschaft","doi-asserted-by":"publisher","award":["851205"],"award-info":[{"award-number":["851205"]}],"id":[{"id":"10.13039\/501100004955","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004955","name":"\u00d6sterreichische Forschungsf\u00f6rderungsgesellschaft","doi-asserted-by":"publisher","award":["854188"],"award-info":[{"award-number":["854188"]}],"id":[{"id":"10.13039\/501100004955","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Software Qual J"],"published-print":{"date-parts":[[2019,6]]},"DOI":"10.1007\/s11219-018-9412-z","type":"journal-article","created":{"date-parts":[[2018,6,1]],"date-time":"2018-06-01T03:24:59Z","timestamp":1527823499000},"page":"703-729","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Testing TLS using planning-based combinatorial methods and execution framework"],"prefix":"10.1007","volume":"27","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8588-1924","authenticated-orcid":false,"given":"Dimitris E.","family":"Simos","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Josip","family":"Bozic","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bernhard","family":"Garn","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Manuel","family":"Leithner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Feng","family":"Duan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kristoffer","family":"Kleine","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Lei","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Franz","family":"Wotawa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,6,1]]},"reference":[{"key":"9412_CR1","unstructured":"AlFardan, N., & Paterson, K.G. (2012). Plaintext-recovery attacks against datagram tls. In Network and distributed system security symposium (NDSS 2012)."},{"key":"9412_CR2","doi-asserted-by":"crossref","unstructured":"Berbecaru, D., & Lioy, A. (2007). On the robustness of applications based on the ssl and tls security protocol. In European Public key infrastructure workshop (pp. 248\u2013264). Springer.","DOI":"10.1007\/978-3-540-73408-6_18"},{"key":"9412_CR3","doi-asserted-by":"crossref","unstructured":"Beurdouche, B., Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Kohlweiss, M., Pironti, A., Strub, P.Y., Zinzindohoue, J.K. (2015). A messy state of the union: taming the composite state machines of tls. In Proceedings of the 36th IEEE symposium on security and privacy.","DOI":"10.1109\/SP.2015.39"},{"key":"9412_CR4","unstructured":"Beurdouche, B., Delignat-Lavaud, A., Kobeissi, N., Pironti, A., Bhargavan, K. (2015). Flextls: a tool for testing tls implementations. In 9th USENIX Workshop on offensive technologies (WOOT\u201915)."},{"key":"9412_CR5","doi-asserted-by":"crossref","unstructured":"Bhargavan, K., & Leurent, G. (2016). Transcript collision attacks: breaking authentication in tls, ike, and ssh. In Network and distributed system security symposium\u2013NDSS 2016.","DOI":"10.14722\/ndss.2016.23418"},{"key":"9412_CR6","doi-asserted-by":"crossref","unstructured":"Bhargavan, K., Lavaud, A.D., Fournet, C., Pironti, A., Strub, P.Y. (2014). Triple handshakes and cookie cutters: breaking and fixing authentication over tls. In 2014 IEEE Symposium on security and privacy (SP) (pp. 98\u2013113). IEEE.","DOI":"10.1109\/SP.2014.14"},{"key":"9412_CR7","doi-asserted-by":"crossref","unstructured":"Blum, A., & Furst, M. (1995). Fast planning through planning graph analysis. In IJCAI95 (pp. 1636\u20131642).","DOI":"10.21236\/ADA303260"},{"key":"9412_CR8","unstructured":"Bozic, J., & Wotawa, F. (2014). Plan it! automated security testing based on planning. In Proceedings of the 26th IFIP WG 6.1 international conference (ICTSS\u201914) (pp. 48\u201362)."},{"key":"9412_CR9","doi-asserted-by":"crossref","unstructured":"Bozic, J., & Wotawa, F. (2015). Purity: a planning-based security testing tool. In 2015 IEEE International conference on software quality, reliability and security-companion (QRS-C) (pp. 46\u201355).","DOI":"10.1109\/QRS-C.2015.19"},{"key":"9412_CR10","doi-asserted-by":"crossref","unstructured":"Bozic, J., Kleine, K., Simos, D.E., Wotawa, F. (2017). Planning-based security testing of the SSL\/TLS protocol. In Proceedings of the IEEE international conference on software testing, verification and validation workshops (ICSTW).","DOI":"10.1109\/ICSTW.2017.63"},{"key":"9412_CR11","doi-asserted-by":"crossref","unstructured":"Brubaker, C., Jana, S., Ray, B., Khurshid, S., Shmatikov, V. (2014). Using frankencerts for automated adversarial testing of certificate validation in ssl\/tls implementations. In Proceedings of the 2014 IEEE symposium on security and privacy.","DOI":"10.1109\/SP.2014.15"},{"key":"9412_CR12","unstructured":"de Ruiter, J., & Poll, E. (2015). Protocol state fuzzing of tls implementations. In 24th USENIX Security Symposium (USENIX Security 15) (pp. 193\u2013206)."},{"key":"9412_CR13","unstructured":"Dierks, T., & Rescorla, E. (2008). Rfc 5246: the transport layer security (tls) protocol. The Internet Engineering Task Force."},{"key":"9412_CR14","unstructured":"Dowling, B., Fischlin, M., G\u00fcnther, F., Stebila, D. (2015). A cryptographic analysis of the tls 1.3 handshake protocol candidates. In Proceedings of the 22nd ACM SIGSAC conference on computer and communications security (pp. 1197\u20131210). ACM."},{"key":"9412_CR15","doi-asserted-by":"crossref","unstructured":"Duan, F., Lei, Y., Yu, L., Kacker, R.N., Kuhn, D.R. (2017). Optimizing ipog\u2019s vertical growth with constraints based on hypergraph coloring. In 2017 IEEE International Conference on software testing, verification and validation workshops (ICSTW) (pp. 181\u2013188). IEEE.","DOI":"10.1109\/ICSTW.2017.37"},{"key":"9412_CR16","doi-asserted-by":"crossref","unstructured":"Galler, S.J., Zehentner, C., Wotawa, F. (2010). Aiana: an ai planning system for test data generation. In 1st Workshop on testing object-oriented software systems (pp. 30\u201337).","DOI":"10.1145\/1890692.1890697"},{"key":"9412_CR17","doi-asserted-by":"crossref","unstructured":"Hollenbeck, S. (2004). Transport layer security protocol compression methods.","DOI":"10.17487\/rfc3749"},{"key":"9412_CR18","doi-asserted-by":"crossref","unstructured":"Jager, T., Schwenk, J., Somorovsky, J. (2015). Practical invalid curve attacks on tls-ecdh. In European Symposium on research in computer security (pp. 407\u2013425). Springer.","DOI":"10.1007\/978-3-319-24174-6_21"},{"key":"9412_CR19","doi-asserted-by":"crossref","unstructured":"Kleine, K., & Simos, D.E. (2017). Coveringcerts: combinatorial methods for x.509 certificate testing. In 2017 IEEE International conference on software testing, verification and validation (ICST) (pp. 69\u201379).","DOI":"10.1109\/ICST.2017.14"},{"key":"9412_CR20","doi-asserted-by":"crossref","unstructured":"Krawczyk, H., Paterson, K.G., Wee, H. (2013). On the security of the tls protocol: a systematic analysis. In CRYPTO.","DOI":"10.1007\/978-3-642-40041-4_24"},{"key":"9412_CR21","doi-asserted-by":"crossref","unstructured":"Kuhn, R., Lei, Y., Kacker, R. (2008). Practical combinatorial testing: beyond pairwise. It Professional 10(3).","DOI":"10.1109\/MITP.2008.54"},{"key":"9412_CR22","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/bs.adcom.2015.05.003","volume":"99","author":"DR Kuhn","year":"2015","unstructured":"Kuhn, D.R., Bryce, R., Duan, F., Ghandehari, L.S., Lei, Y., Kacker, R.N. (2015). Chapter one-combinatorial testing: theory and practice. Advances in Computers, 99, 1\u201366.","journal-title":"Advances in Computers"},{"issue":"3","key":"9412_CR23","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1002\/stvr.381","volume":"18","author":"Y Lei","year":"2008","unstructured":"Lei, Y., Kacker, R., Kuhn, D.R., Okun, V., Lawrence, J. (2008). Ipog\/ipog-d: efficient test generation for multi-way combinatorial testing. Software Testing, Verification and Reliability, 18(3), 125\u2013148.","journal-title":"Software Testing, Verification and Reliability"},{"key":"9412_CR24","unstructured":"Leitner, A., & Bloem, R. (2005). Automatic testing through planning. Tech. rep. Technische Universit\u00e4t Graz, Institute for Software Technology."},{"key":"9412_CR25","unstructured":"Mavrogiannopoulos, N., Vercauteren, F., Velichkov, V., Preneel, B. (2012). A cross-protocol attack on the tls protocol. In ACM CCS 12: 19th Conference on computer and communications security."},{"key":"9412_CR26","unstructured":"McDermott, D., Ghallab, M., Howe, A., Knoblock, C., Ram, A., Veloso, M., Weld, D., Wilkins, D. (1998). Pddl - the planning domain definition language. In The AIPS-98 planning competition comitee."},{"key":"9412_CR27","unstructured":"Memon, A.M., Pollack, M.E., Soffa, M.L. (2000). A planning-based approach to gui testing. In Proceedings of the 13th international software \/ internet quality week (QW\u201900)."},{"key":"9412_CR28","unstructured":"Meyer, C., Somorovsky, J., Weiss, E., Schwenk, J., Schinzel, S., Tews, E. (2014). Revisiting ssl\/tls implementations: new bleichenbacher side channels and attacks. In USENIX Security (Vol. 14, pp. 733\u2013748)."},{"key":"9412_CR29","doi-asserted-by":"crossref","unstructured":"Morais, A., Martins, E., Cavalli, A., Jimenez, W. (2009). Security protocol testing using attack trees. In CSE (2), IEEE Computer Society (2009) (pp. 690\u2013697).","DOI":"10.1109\/CSE.2009.206"},{"key":"9412_CR30","doi-asserted-by":"crossref","unstructured":"Raffelt, H., Steffen, B., Berg, T. (2005). Learnlib: a library for automata learning and experimentation. In Proceedings of the 10th international workshop on formal methods for industrial critical systems (FMICS\u201905) (pp. 62\u201371).","DOI":"10.1145\/1081180.1081189"},{"key":"9412_CR31","unstructured":"Russell, S.J., & Norvig, P. (1995). Artificial intelligence: a modern approach. Prentic Hall."},{"key":"9412_CR32","unstructured":"Shmaryahu, D., Shani, G., Hoffmann, J., Steinmetz, M. (2017). Partially observable contingent planning for penetration testing. In: Proceedings of first international workshop on AI in security (IWAIse)."},{"key":"9412_CR33","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/MC.2016.314","volume":"49","author":"DE Simos","year":"2016","unstructured":"Simos, D.E., Kuhn, R., Voyiatzis, A.G., Kacker, R. (2016). Combinatorial methods in security testing. IEEE Computer, 49, 40\u201343.","journal-title":"IEEE Computer"},{"key":"9412_CR34","doi-asserted-by":"crossref","unstructured":"Simos, D.E., Bozic, J., Duan, F., Garn, B., Kleine, K., Lei, Y., Wotawa, F. (2017). Testing tls using combinatorial methods and execution framework. In Proceedings of the IFIP international conference on testing software and systems (ICTSS\u201917).","DOI":"10.1007\/978-3-319-67549-7_10"},{"key":"9412_CR35","doi-asserted-by":"crossref","unstructured":"Somorovsky, J. (2016). Systematic fuzzing and testing of tls libraries. In Proceedings of the 2016 ACM SIGSAC conference on computer and communications security (CCS\u201916).","DOI":"10.1145\/2976749.2978411"},{"key":"9412_CR36","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/TDSC.2017.2763947","volume":"99","author":"A Walz","year":"2017","unstructured":"Walz, A., & Sikora, A. (2017). Exploiting dissent: towards fuzzing-based differential black box testing of tls implementations. IEEE Transactions on Dependable and Secure Computing, 99, 1\u20131.","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"9412_CR37","doi-asserted-by":"crossref","unstructured":"Yadav, N., Thangarajah, J., Sardina, S. (2017). Agent design consistency checking via planning. In Proceedings of the twenty-sixth international joint conference on artificial intelligence (IJCAI-17).","DOI":"10.24963\/ijcai.2017\/65"},{"key":"9412_CR38","doi-asserted-by":"crossref","unstructured":"Yu, L., Lei, Y., Kacker, R.N., Kuhn, D.R. (2013). Acts: a combinatorial test generation tool. In 2013 IEEE Sixth International Conference on software testing, verification and validation (ICST) (pp. 370\u2013375). IEEE.","DOI":"10.1109\/ICST.2013.52"},{"key":"9412_CR39","doi-asserted-by":"crossref","unstructured":"Yu, L., Lei, Y., Nourozborazjany, M., Kacker, R.N., Kuhn, D.R. (2013). An efficient algorithm for constraint handling in combinatorial test generation. In 2013 IEEE Sixth International Conference on software testing, verification and validation (ICST) (pp. 242\u2013251). IEEE.","DOI":"10.1109\/ICST.2013.35"}],"container-title":["Software Quality Journal"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11219-018-9412-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11219-018-9412-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11219-018-9412-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,6]],"date-time":"2019-06-06T05:14:40Z","timestamp":1559798080000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11219-018-9412-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,6,1]]},"references-count":39,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2019,6]]}},"alternative-id":["9412"],"URL":"https:\/\/doi.org\/10.1007\/s11219-018-9412-z","relation":{},"ISSN":["0963-9314","1573-1367"],"issn-type":[{"value":"0963-9314","type":"print"},{"value":"1573-1367","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,6,1]]},"assertion":[{"value":"1 June 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}