Automated measurement method for security software of B/S framework

Abstract

The invention discloses an automated measurement method for security software of a B / S framework, and belongs to the field of automated software measurement. According to the method, a rule configuration interface API is controlled through forced access to the security software of the B / S framework so that the rule configuration interface API can be called by a Python script program; after a file of a parameter format is arranged on the this basis, testers without development experience can complete automated use case compiling and maintaining through the cooperation with an open-source automated testing management framework, the use case compiling and managing difficulty is lowered, and the problem that the dual-computer interface operation can hardly be automated is solved; the method can be perfectly compatible with a Windows system and a Linux system, the complexity of an automation system is lowered, and the testers can conveniently conduct deployment and use; meanwhile, a web interface can be slightly and internally regulated through a subsequent version of the security software by only slightly modifying the rule configuration method, use cases can be normally used, and the maintenance cost is reduced.

Description

technical field [0001] The invention discloses an automatic testing method for B / S architecture security software, which belongs to the field of software automatic testing. Background technique [0002] Mandatory Access Control (MandatoryAccessControl--MAC), an access restriction mechanism used to manage the information in the system by classification and classification, so as to ensure that each user can only access the information that is marked to be accessible by him. Mandatory access control subjects usually refer to users, or intend to run processes or devices on behalf of users. They are the active initiators of access operations and the initiators of information flow in the system, which can make information flow flow between entities. The subject sometimes also becomes an object of access or control. For example, a subject can authorize another subject, and a process may control several sub-processes. At this time, the controlled subject or sub-process is also an ob...

AI Technical Summary

Problems solved by technology

[0005] The present invention aims at the problem that most of the testing tools of the existing automatic mandatory access control security software are based on recording, the maintenance cost is high, and the two-computer cross operation cannot be performed well, and an automatic testing method for the security software of the B / S architecture is provided. , has the advantages of rapid automation conversion, cross-platform, easy-to-use, and supports distributed automation use case execution

Images