Modeling technology-based software security test method

Abstract

The invention discloses a modeling technology-based software security test method, which comprises the following steps of: transforming a software security defect test behavior demand and a software security function test behavior demand into formalized software security test behavior demand models, and generating security test cases of a finite state machine characteristic sequence based on the acquired models; and meanwhile, extracting security defects for the acquired security test cases, and complementing a security defect library. The method provided by the invention solves the problem of security test demand extraction in the current standard and an engineering system, and ensures the coverage and validity of the software security test demands. Meanwhile, the method provides a test process system from security test demand extraction, formalized demand description to automatic generation of the test cases, forms a set of full software security test method system and support system, shortens the software security test period at the same time of improving the pertinence, and is favorable for improving the software security quality.

Description

technical field [0001] The invention relates to software safety testing technology, in particular to a software safety testing method based on defect modeling technology. Background technique [0002] With the development of computer technology, software products have been applied in more and more fields, which has brought great convenience to people's life, and is changing people's work and life style. The development of culture, culture and technology has had a profound impact. With the rapid development of software level, with the rise of new technologies such as object-oriented, component software, and distributed software, software security has become increasingly serious, and has become an important factor restricting the development and application of software technology. According to the statistics of CERT / CC (Computer Emergency Readiness Team Coordination Center) in the United States, from 1998 to 2009, software security crisis incidents increased by 4724%, with an...

AI Technical Summary

Problems solved by technology

[0013] Purpose of the invention: In order to overcome the deficiencies in the prior art, the present invention provides a software security testing method based on software security functional requirements and security defect modeling technology to solve the acquisition, description, Formal representation and automatic problem generation of efficient test cases, which can be used to effectively guide the testing of software security

Images