Enhancing Security Testing for Identity Management Implementations: Introducing Micro-Id-Gym Language and Micro-Id-Gym Testing Tool
We introduce MIG-L, a declarative language for the specification of security tests, and MIG-T, a testing tool, for identity management solutions based on SAML and OAuth/OpenID Connect. We verify compliance with best current practices and detect known vulnerabilities.
Authors
- Roberto Carbone (ORCID: https://orcid.org/0000-0003-2853-4269)
- Andrea Bisegna (ORCID: https://orcid.org/0000-0002-8055-5262)
- Silvio Ranise (ORCID: https://orcid.org/0000-0001-7269-9285)
- Matteo Bitussi (ORCID: https://orcid.org/0000-0002-0593-6591)
Institutions
- University of Trento (IT)
- Fondazione Bruno Kessler (IT)
Publication Details
- Journal
- IEEE Security & Privacy
- Published
- 2024-09-26
- DOI
- https://doi.org/10.1109/msec.2024.3450277
- Citations
- 1
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.35