Application testing method, client and system

Abstract

The application discloses an application testing method, client and system. Wherein, the application program under test is a browser or an application program with a built-in browser component, and a webpage file is created in advance, which contains the executable code of the application program under test for simulating malicious attack behavior; when testing, the method includes : The test client tries to provide the link address of the webpage file to the application under test, so that when the application under test loads the webpage file through the link address, it tries to read the private files in its private directory by executing the code contained in the webpage file If the content of the privacy file is read, a message carrying the content of the privacy file is sent to the test server, so that the test server determines whether the application under test has a security hole according to the message from the application under test. The application also discloses a corresponding test client and a test system. Utilizing these technical solutions can improve test efficiency and accuracy.

Description

technical field [0001] The invention relates to the field of computer system testing, in particular to an application program testing method, client and system. Background technique [0002] The traditional personal computer (PC) client browses and accesses the services provided by the remote end through the browser (Browser), such as news information, search, social services and other services, Android (Android) client, iOS client and other mobile terminal-based clients End is no exception. For example, there are usually two ways for an Android client to access remote services: one is the same as the traditional PC client, through the browser provided by the Android client (it can be the browser that comes with the Android client or a third-party browser) The second is that the application program (APP) of the Android client can also access the remote service through its own embedded browser component. This APP is also called an APP with a built-in browser component. At p...

AI Technical Summary

Problems solved by technology

[0004] At present, there are some testing technologies for browsers and APPs with built-in browser components in the industry to check whether the tested APP (browser or APP with built-in browser components) can resist the above-mentioned malicious attacks, but these technologies are not It is a static white-box test that requires manual intervention and relies on human experience, so the test efficiency is not high and the test results are inaccurate

Images