Software research and development security access control implementation method, device and equipment and storage medium

By splitting functional and interface tests into multiple short-cycle windows, and performing deduplication and replay attack tests on test traffic at the end of each window, the problem of low penetration testing frequency is solved, and efficient automation and timely feedback of security testing in agile development are achieved.

CN121614408AActive Publication Date: 2026-03-06SHENZHEN YEAHKA TECH
4 Cites 0 Cited by

Patent Information

Application Number
CN202610150292.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-02-03
Publication Date
2026-03-06
Estimated Expiration
2046-02-03

AI Technical Summary

Technical Problem

In current software development processes, penetration testing is performed less frequently than version releases, resulting in security vulnerabilities not being identified and patched in a timely manner during iterations. Furthermore, traditional penetration testing models are ill-suited to the rapid iteration requirements of agile development, impacting both development efficiency and security.

Method used

Functional and interface tests are broken down into multiple short-cycle windows. The code to be tested is tested through these windows, and test traffic is captured at the end of each window for deduplication and replay attack tests. Two security checkpoints are set to ensure timely feedback and deep coverage of test results, including access control detection at the first and second preset times.

Benefits of technology

It achieves security coverage for each version in agile development, balances test depth and delivery speed, ensures full automation and efficient collaboration in security testing, and avoids long waiting times and development process interruptions.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses a software research and development security access control implementation method, device and equipment and a storage medium. The method comprises the following steps: splitting a function test and an interface test into a plurality of short-period windows; capturing the test flow at the end of each short-period window, and carrying out duplicate removal processing on the test flow; performing a playback attack test on the test flow subjected to duplicate removal to obtain a test result; performing access control detection on the test result at the first security card point to obtain a first security scanning result; when the detection time of the access control detection exceeds the first preset time and the access control detection is not completed, performing access control detection on the test result at the second safety card point according to second preset time to obtain a second safety scanning result; and reporting the test result, the first security scanning result and the second security scanning result. According to the method, the application with long security test time consumption does not need to block the process, and efficient coordination of security test full-process automation and agile delivery is realized.
Need to check novelty before this filing date? Find Prior Art