Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

On Combinatorial Security Testing for the Tor Anonymity Network Client



Dimitris Simos, Bernhard Garn, Dominik-Philip Schreiber, Manuel Leithner, D. Richard Kuhn, Raghu N. Kacker


In this paper, we present an application of combinatorial security testing to the well-known anonymity network Tor. Rigorous testing of the Tor network is important to evaluate not only its functionality, but also the security it provides to its users. However, such testing efforts are facing challenges including accurate modelling as well as creation of automated and security focused test oracles. We argue that combinatorial test sets fulfilling coverage criteria can be used to enhance and augment currently employed testing approaches of Tor in practice. Results from a case study demonstrate that combinatorial methods are a promising avenue for security testing of the Tor anonymity network client.
Proceedings Title
International Workshop on Combinatorial Testing (IWCT) 2024
Conference Dates
May 27-31, 2024
Conference Location
Toronto, CA


combinatorial testing, combinatorial security testing, anonymity network, Tor


Simos, D. , Garn, B. , Schreiber, D. , Leithner, M. , Kuhn, D. and Kacker, R. (2024), On Combinatorial Security Testing for the Tor Anonymity Network Client, International Workshop on Combinatorial Testing (IWCT) 2024, Toronto, CA, [online], (Accessed May 26, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created April 7, 2024, Updated May 2, 2024