@inproceedings{684f309fa55440929c1f6f7f18639582,
title = "CypherFuzzer: A Tool for Testing Access Control in Graph Databases",
abstract = "The increasing adoption of graph databases in real-world applications highlights the need for robust mechanisms to secure sensitive data stored within these systems. Access control plays a critical role in ensuring data security, and its implementation must be thoroughly tested to prevent unauthorized access and potential vulnerabilities. In this work, we present CypherFuzzer, a novel tool designed to test access control mechanisms in graph databases. By leveraging fuzzing techniques, CypherFuzzer generates semantically valid Cypher queries with the goal to systematically evaluate the query rewriting approaches for enforcing attribute-based access control (ABAC). The tool supports diverse fuzzers for query generation to enhance the relevance and variety of test cases. Our evaluations reveal that CypherFuzzer effectively generates queries that are useful for testing ABAC policies. Despite its strengths, the tool has some limitations related to producing meaningful values for specific attributes or its reliance on randomness. Nevertheless, CypherFuzzer represents a significant step forward in the field of automated security testing of access control mechanisms for graph databases.",
author = "Philipp Reisinger and Daniel Hofer and Bahara Muradi and Josef K{\"u}ng",
year = "2026",
doi = "10.1007/978-981-95-4721-0\_7",
language = "English",
isbn = "978-981-95-4721-0",
series = "Communications in Computer and Information Science",
publisher = " Springer Nature Singapore Pte Ltd. ",
pages = "93--109",
editor = "Dang, \{Tran Khanh\} and Josef K{\"u}ng and Chung, \{Tai M.\}",
booktitle = "Future Data and Security Engineering - 12th International Conference, FDSE 2025, Proceedings",
edition = "1",
}