Combinatorial Security Testing—10 Years Later

Simos, Dimitris; Leithner, Manuel; Kuhn, Richard; Garn, Bernhard; Kacker, Raghu; Lei, Yu

doi:https://doi.org/10.1109/MSEC.2026.3658259

Journal Article

Combinatorial Security Testing—10 Years Later

Documentation Topics

Published: February 12, 2026
Citation: IEEE Security & Privacy vol. 24, no. 2, (March-April 2026) pp. 43-51

Author(s)

Dimitris Simos (Salzburg University of Applied Sciences), Manuel Leithner (Salzburg University of Applied Sciences), Richard Kuhn (NIST), Bernhard Garn (Paris Lodron University of Salzburg), Raghu Kacker (NIST), Yu Lei (UTA)

Abstract

Ten years ago, we introduced a research program applying high strength combinatorial test methods to vulnerability and fault detection for cybersecurity. This article discusses advances in the field and where these methods may be effective for today’s complex security problems.

Keywords

computer security; software testing; combinatorial testing; fault detection

Control Families

None selected

Documentation

Publication:
https://doi.org/10.1109/MSEC.2026.3658259

Supplemental Material:
None available

Document History:
02/12/26: Journal Article (Final)

Topics

Security and Privacy

testing & validation

Technologies

combinatorial testing, software & firmware