Assessing Testing Strategies for Access Control Systems: A Controlled Experiment Romy 21 September 2021