Behavioral model-based software security test case generation method

Abstract

The invention discloses a behavioral model-based software security test case generation method, which comprises the following steps of: (1) determining software security test needs; (2) describing the security test needs by using a test need behavioral model; (3) describing the test need behavioral model by using a unified modeling language (UML) state chart; (4) transforming the UML state chart into a finite state machine (FSM); and (5) automatically generating a security test case based on a characteristic sequence of the FSM. In the behavioral model-based software security test case generation method provided by the invention, security test is performed primarily from a software security defect (SSD) behavior prevention mechanism, an SSD behavior detection mechanism and an SSD behavior response mechanism, so that the one-sidedness and need imperfection of conventional software security tests are overcome and the test effectiveness is ensured. Simultaneously, the test case automatic generation method provided by the invention reduces the workload of testers, improves the efficiency and level of automation of the test and ensures test effects.

Description

technical field [0001] The invention relates to a software testing method, in particular to a behavior model-based software safety test case generation method. Background technique [0002] In recent years, software security incidents have emerged one after another, causing more and more harm. People tend to focus their energy on network security technology and information system security framework, but the latest research shows that the vast majority of serious security crises in recent years are software security issues, the root cause of which is the security flaws in software. Statistics show that the 10 most common software security flaws cause 75% of security breaches. [0003] As an important way to ensure software quality, software testing is of great significance to improving software security, and the key lies in the practicability and effectiveness of security testing methods. Traditional software security testing originates from functional testing technology, w...

Images