WAF rule automatic test method and system, storage medium and terminal equipment

Abstract

The invention provides a WAF rule automatic testing method and system, a storage medium and terminal equipment, and belongs to the technical field of software testing. The method comprises the following steps: adding an HTTP request default value and a thread group in a JMeter test tool, adding an HTTP request in a thread of the thread group, and obtaining an attack request for attacking a Web service; setting a CVS data file in the JMeter test tool, and performing parameterization setting on the attack request through the CVS data file; setting an assertion component in the course group, and judging whether all assertion information of the assertion component is successfully asserted or not; if yes, it is judged that the WAF rule use case corresponding to the HTTP request is executed successfully. According to the method, the attack request parameters for testing can be sent in a combined mode and set in a variable mode, the problem that a large amount of time needs to be consumed for troubleshooting due to the fact that testers are afraid of making mistakes every time when the testers write the test parameters can be avoided, and thus the method has better testing efficiency and testing accuracy compared with a traditional WAF rule testing method.

Description

technical field [0001] The invention relates to the technical field of software testing, in particular to a WAF rule automatic testing method, system, storage medium and terminal equipment. Background technique [0002] Apache JMeter is a Java-based testing tool developed by the Apache organization; it is used for stress testing software and was originally designed for web application testing, but later expanded to other testing areas. JMeter can be used for static and dynamic tests, such as Java applets, databases, FTP servers, etc., and can be used to simulate huge loads on servers, networks or objects, test their strength and analyze overall performance under different pressures. Additionally, JMeter enables functional regression testing of applications by creating scripts with assertions to verify that the program returns the expected results. For maximum flexibility, JMeter allows the use of regular expressions to create assertions. With the rapid development of the I...

AI Technical Summary

Problems solved by technology

[0004] Based on this, the present invention provides a WAF rule automatic testing method, system, storage medium and terminal equipment, which can effectively solve the problems of low test efficiency and poor test accuracy when manually testing WAF rules.

Images