Safety testing method, device, computer device and storage medium

Abstract

The application relates to a safety testing method, a safety testing device, a computer device and a storage medium. The method includes steps of receiving a current network access request, wherein the current network access request carries with a uniform resource positioning symbol and an access parameter; according to the uniform resource positioning symbol, acquiring a current code corresponding to the current network access request; inserting a probe function in the current code; when the current code is executed according to the access parameter, recording the executing order of a code sentence in the current code through the probe function, and acquiring the executing path of the current code; detecting if the executing path of the current code is consistent with the preset path; ifthe executing path is inconsistent to the preset path, confirming the safety flaw existed in the current code. By adopting the method, the detecting efficiency can be improved.

Description

technical field [0001] The present application relates to the field of security technology, in particular to a security testing method, device, computer equipment and storage medium. Background technique [0002] With the development of Internet technology and the growth of network information, more and more enterprises or individuals provide information services through the Internet. However, when providing information services, defects in application software or operating system design or errors in coding, or design defects in the process of business interaction processing or unreasonable logic processes will form loopholes. In order to prevent vulnerabilities from being exploited intentionally or unintentionally, resulting in losses, it is necessary to conduct vulnerability detection. At present, when detecting vulnerabilities, it is usually necessary to understand the internal structure of the code before performing security testing on the code. However, the amount of d...

AI Technical Summary

Problems solved by technology

However, when providing information services, defects in application software or operating system design or errors in coding, or design defects in the process of business interaction processing or unreasonable logic processes will form loopholes.

In order to prevent vulnerabilities from being exploited intentionally or unintentionally, resulting in losses, it is necessary to conduct vulnerability detection

At present, when detecting vulnerabilities, it is usually necessary to understand the internal structure of the code before performing security testing on the code. However, the amount of data in the code is large, and it takes a lot of time to understand the code structure, resulting in low security detection efficiency.

Images