Test method and device and electronic equipment

Abstract

Embodiments of the invention provide a test method and device, and electronic equipment. The method comprises the steps of capturing a request message sent to a target interface by a to-be-tested system, wherein the request message is generated based on a security check item, and the security check item represents a security risk to be checked by the to-be-tested system; sending the request message to the target interface under the condition of obtaining the authority of communication with the target interface to obtain a response message returned by the target interface based on the request message; and comparing the response message with an expected response message of the request message, and obtaining a test result of the to-be-tested system based on a comparison result, thereby achieving the automatic testing, reducing the workload of a tester, and improving the testing efficiency.

Description

technical field [0001] The embodiments of this specification relate to the field of computer technology, and in particular to a testing method, device and electronic equipment. Background technique [0002] Today, with the rapid development of financial technology, finance and technology, finance and the Internet complement each other, and mutual promotion and common development have become a popular trend. In particular, the banking industry is also transforming from traditional counter business to Internet business. Transactions or external network transactions are faced with the risk of user data being stolen, user permissions being cracked, etc., so back-end services must perform security checks on interfaces and strictly control permissions. However, a huge system requires Doing so many security tests is a huge workload for security testers, so it is necessary to develop an automated interface test. [0003] The current interface testing is mainly manual testing or sem...

AI Technical Summary

Problems solved by technology

[0004] However, the current interface testing method still needs manual review after testing

For example, the ability to write and match custom scan rule sets is highly related to the experience and ability of code auditors, so that problems that are matched and intercepted through the above methods still need to be manually reviewed

[0005] Existing interface testing methods require manual review of the analysis results of code scanning tools one by one, which is time-consuming and labor-intensive, and the accuracy of testing and analysis results is not high enough, which is prone to errors

Images