Safety test system and method

Abstract

The application provides a safety test system and method. The system specifically comprises a visiting log recording device, a visiting log extraction device and a visiting test device, wherein the visiting log recording device aims at an on-line application program, the characteristic data of a user visiting request is preserved in a visiting log record, and the user visiting request comprises a normal visiting request and an abnormal request; the visiting log extraction device is used for extracting a visiting log record corresponding to the abnormal visiting request from the visiting log record of the on-line application program; and the visiting test device is used for using an obscuring test script to replay and attack the abnormal visit request and cam judge whether a loop hole exists according to the returned respondence. The safety test system and the method provided by the application can reduce the consumed substantive machine resources and manpower resources by safety test, and business logic coverage rate of the safety test is improved.

Description

technical field [0001] The present application relates to the technical field of safety testing, in particular to a safety testing system and method. Background technique [0002] At present, with the mature development of Internet and e-commerce technology, many online application programs provide various convenient and powerful functions (such as online shopping, online banking transactions, etc.) for users to use. The security of these online applications has also become extremely important when it comes to user data or transactions. Whether it is an online application program user or an online service program service provider, they all care about whether the provided functional services have sufficient security considerations. If these commonly used online applications are implanted with malicious programs by hackers, the user's private data will be stolen during the execution of the program, which will cause losses to the user and the service provider. In addition, if...

AI Technical Summary

Problems solved by technology

[0005] 1. It needs to crawl the link pages of online applications in the way of spiders, which will consume additional machine resources;

[0006] 2. Spider-style crawling will also capture a large number of useless pages, and the pages cannot be customized; in this way, using multiple vulnerability verification scripts will generate a large amount of garbage data on the functional points that have add, delete, and modify operations. And normal content will be deleted; this not only consumes a lot of time, but also reduces business logic coverage

[0007] Method 2. In order to avoid consuming additional machine resources, method 2 is based on the URL verification attack test recorded by manual operation behavior; but because it requires manual operation, it will consume a lot of human resources

Images