Test model and test method of vulnerability discovery technology

Abstract

The invention discloses a test model and test method of a vulnerability discovery technology, and belongs to the field of software engineering. The method includes the steps that 1, based on existing static and dynamic vulnerability discovery methods, a self-adaptive vulnerability discovery operation environment is constructed; 2, according to different vulnerability types, vulnerability languages and vulnerability trigger methods, a test case set is constructed and configured; 3, the vulnerability discovery test method is executed, the discovery test state is monitored, and meanwhile a test analysis report and statistical test results are output; 4, based on the vulnerability discovery test process model, an integrated test platform is designed and achieved, and the feasibility and validity of the vulnerability discovery test model are further verified. According to the test model and test method of the vulnerability discovery technology, existing typical vulnerability discovery methods and tools are accurately evaluated by means of a series of specific evaluation standards, moreover, comparative analysis is conducted on these methods and tools, and the test model and the test method have certain guiding significance for selection of the most suitable and the most efficient method or tool in the actual vulnerability discovery process.

Description

technical field [0001] The invention belongs to the field of loophole mining in software testing, and relates to a loophole mining technology test model and a testing method. Background technique [0002] With the rapid development of social information technology, various application software emerges at the historic moment in the market. The quality of these software itself is uneven, and most of the software is put into use without standardized review and strict testing, resulting in a large number of software vulnerabilities that can be attacked and exploited in these software. At present, the main factors that threaten system security are unknown loopholes in application software, various communication security protocols, and operating systems that constitute information systems. Due to various reasons, the existence of vulnerabilities is unavoidable. If some serious unknown vulnerabilities are discovered by attackers, these unknown vulnerabilities are likely to be expl...

AI Technical Summary

Problems solved by technology

By examining the previous research results on software vulnerability detection, we found that there are no universal vulnerability detection methods or tools, and they can only play a certain vulnerability detection effect in certain specific situations.

Images