Rapid penetration testing methods and testing devices for mobile devices

Abstract

This invention discloses a rapid penetration testing method and apparatus for mobile devices, relating to the field of device testing technology. The method includes: determining whether the mobile device is undergoing its first penetration test; if the mobile device is undergoing its first penetration test: performing a test environment detection operation to obtain first environment detection information; determining a test function module based on the first environment detection information; performing a corresponding penetration test operation based on the test function module to generate a corresponding first test result; if the mobile device is not undergoing its first penetration test: performing a test environment detection operation to obtain second environment detection information; determining whether the test environment has changed based on the second environment detection information; if the test environment has changed, determining an updated function module corresponding to the test environment; performing a corresponding penetration test operation based on the updated function module to generate a second test result.

Description

Technical Field

[0001] This invention relates to the field of equipment testing technology, and more specifically to a rapid penetration testing method and a rapid penetration testing device for mobile devices. Background Technology

[0002] With the continuous development of communication, display and processing technologies, mobile devices are widely used in all aspects of people's lives. As smart mobile devices become more and more popular, they store more and more user data and provide more functions closely related to people's interests, such as payment functions. Therefore, the security requirements for mobile devices are getting higher and higher.

[0003] To ensure the security of mobile devices, security testing, such as penetration testing, is required before their use. Currently, there is no unified standard for security testing of mobile devices. Often, enterprise managers conduct targeted penetration tests based on the mobile devices involved in their operations or business. Common penetration testing methods include: testing the security of device ports, conducting fraud tests on mobile devices, and using device fingerprint-based security verification methods. However, technical personnel have discovered the following technical problems with existing testing methods during application:

[0004] Existing penetration testing methods require technical personnel to pre-determine corresponding testing strategies and configure corresponding testing rules based on the actual situation of the enterprise. Therefore, on the one hand, it causes a lot of preliminary work for technical personnel, reduces work efficiency, and greatly increases testing costs. On the other hand, the above-mentioned penetration tests are often only performed once, or only once within a very long period of time, so the effectiveness and real-time performance of the tests are poor. However, mobile devices are frequently used by people in daily life, so their security may change at any time. Therefore, existing penetration testing methods cannot meet the actual needs of users. Summary of the Invention

[0005] To overcome the aforementioned technical problems in the prior art, embodiments of the present invention provide a rapid penetration testing method and testing device for mobile devices. By automatically matching the corresponding testing function modules during penetration testing on the mobile device and executing the corresponding penetration test according to the testing environment change information of the mobile device, the testing efficiency is greatly improved, the testing workload is reduced, and the actual testing needs of users are met.

[0006] To achieve the above objectives, embodiments of the present invention provide a rapid penetration testing method for mobile devices. The method includes: determining whether the mobile device is undergoing its first penetration test; if the mobile device is undergoing its first penetration test: performing a test environment detection operation to obtain first environment detection information; determining a test function module based on the first environment detection information; performing a corresponding penetration test operation based on the test function module to generate a corresponding first test result; if the mobile device is not undergoing its first penetration test: performing a test environment detection operation to obtain second environment detection information; determining whether the test environment has changed based on the second environment detection information; if the test environment has changed, determining an updated function module corresponding to the test environment; performing a corresponding penetration test operation based on the updated function module to generate a second test result.

[0007] Preferably, the first environmental detection information includes multiple detection information, and the step of determining the test function module based on the first environmental detection information includes: obtaining a preset test function library, the test function library including multiple test function modules; sequentially matching each detection information with the test function modules in the preset test function library to obtain a first matching result; and determining the corresponding test function module based on the first matching result.

[0008] Preferably, the testing function modules include a system testing function module, a port testing function module, a peripheral interoperability testing function module, a data read / storage testing function module, a fraudulent application installation testing function module, a permission management testing function module, and a process management testing function module.

[0009] The step of performing corresponding penetration testing operations based on the testing function modules to generate corresponding first test results includes: performing system vulnerability testing operations based on the system testing function module to generate vulnerability scanning results; performing port testing operations based on the port testing function module to generate port scanning results; performing peripheral interoperability testing operations based on the peripheral interoperability testing function module to generate interoperability testing results; performing data read / write testing operations based on the data read / storage testing function module to generate read / write testing results; performing application installation testing operations based on the fraudulent application installation testing function module to generate application installation testing results; performing permission acquisition testing operations based on the permission management testing function module to generate permission acquisition testing results; performing process management testing operations based on the process management testing function module to generate process management testing results; and generating a first test result based on the vulnerability scanning results, the port scanning results, the interoperability testing results, the read / write testing results, the application installation testing results, the permission acquisition testing results, and the process management testing results.

[0010] Preferably, the mobile device is connected to a cloud server, and the step of determining the test function module based on the first environmental detection information includes: uploading the first environmental detection information to the cloud server; obtaining first feedback information from the cloud server regarding the first environmental detection information, wherein the first feedback information includes a test function module matching each detection information, and the test function module in the first feedback information is updated and maintained by the cloud server in real time.

[0011] Preferably, determining the updated functional module corresponding to the test environment includes: obtaining at least one change information of the test environment based on the second environment detection information; sequentially matching each change information with test functional modules in the preset test function library to obtain a matching functional module; determining whether there is update information for the matching functional module in the cloud server; if so, updating the matching functional module based on the update information to obtain the updated functional module; otherwise, using the matching functional module as the updated functional module.

[0012] Accordingly, the present invention also provides a rapid penetration testing device for mobile devices, the device comprising: a judgment unit for judging whether the mobile device is undergoing its first penetration test; a first-time testing unit for, when the mobile device is undergoing its first penetration test, performing a test environment detection operation to obtain first environment detection information; determining a test function module based on the first environment detection information; performing a corresponding penetration test operation based on the test function module to generate a corresponding first test result; and a non-first-time testing unit for, when the mobile device is undergoing a non-first-time penetration test, performing a test environment detection operation to obtain second environment detection information; judging whether the test environment has changed based on the second environment detection information; determining an updated function module corresponding to the test environment when the test environment has changed; and performing a corresponding penetration test operation based on the updated function module to generate a second test result.

[0013] Preferably, the first environmental detection information includes multiple detection information, and the step of determining the test function module based on the first environmental detection information includes: obtaining a preset test function library, the test function library including multiple test function modules; sequentially matching each detection information with the test function modules in the preset test function library to obtain a first matching result; and determining the corresponding test function module based on the first matching result.

[0014] Preferably, the testing function modules include a system testing function module, a port testing function module, a peripheral interoperability testing function module, a data read / storage testing function module, a fraudulent application installation testing function module, a permission management testing function module, and a process management testing function module. The step of performing corresponding penetration testing operations based on the testing function modules to generate corresponding first test results includes: performing system vulnerability testing operations based on the system testing function module to generate vulnerability scanning results; performing port testing operations based on the port testing function module to generate port scanning results; and performing peripheral interoperability testing operations based on the peripheral interoperability testing function module to generate interoperability test results. The system performs data read / write tests based on the data read / storage test module, generating read / write test results; performs application installation tests based on the fraudulent application installation test module, generating application installation test results; performs permission acquisition tests based on the permission management test module, generating permission acquisition test results; performs process management tests based on the process management test module, generating process management test results; and generates a first test result based on the vulnerability scan results, port scan results, interoperability test results, read / write test results, application installation test results, permission acquisition test results, and process management test results.

[0015] Preferably, the mobile device is connected to a cloud server, and the step of determining the test function module based on the first environmental detection information includes: uploading the first environmental detection information to the cloud server; obtaining first feedback information from the cloud server regarding the first environmental detection information, wherein the first feedback information includes a test function module matching each detection information, and the test function module in the first feedback information is updated and maintained by the cloud server in real time.

[0016] Preferably, determining the updated functional module corresponding to the test environment includes: obtaining at least one change information of the test environment based on the second environment detection information; sequentially matching each change information with test functional modules in the preset test function library to obtain a matching functional module; determining whether there is update information for the matching functional module in the cloud server; if so, updating the matching functional module based on the update information to obtain the updated functional module; otherwise, using the matching functional module as the updated functional module.

[0017] The present invention has at least the following technical effects through the technical solution provided by the present invention:

[0018] By pre-encapsulating each test element involved in the penetration test into a corresponding test function module, and then automatically matching the corresponding test function module when conducting subsequent penetration tests, it is only necessary to detect the test environment of the mobile device, and no longer necessary to manually pre-configure, thereby greatly reducing the workload of technical personnel and improving work efficiency.

[0019] Furthermore, by calling the corresponding test function module to execute the corresponding penetration test only according to the changes in the test environment in each subsequent penetration test, instead of performing a full penetration test every time, the testing workload is greatly reduced, the hardware requirements of mobile devices are reduced, and high-frequency penetration tests can be run, thereby meeting the user's security needs.

[0020] Other features and advantages of the embodiments of the present invention will be described in detail in the following detailed description section. Attached Figure Description

[0021] The accompanying drawings are provided to further illustrate embodiments of the present invention and form part of the specification. They are used together with the following detailed description to explain the embodiments of the present invention, but do not constitute a limitation thereof. In the drawings:

[0022] Figure 1 This is a flowchart illustrating the specific implementation of the rapid penetration testing method for mobile devices provided in this embodiment of the invention.

[0023] Figure 2 This is a flowchart illustrating the specific implementation of the test function module based on the first environmental detection information in the rapid penetration testing method for mobile devices provided in this embodiment of the invention.

[0024] Figure 3 This is a schematic diagram of the structure of the rapid penetration testing device for mobile devices provided in an embodiment of the present invention. Detailed Implementation

[0025] The specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are for illustration and explanation only and are not intended to limit the scope of the present invention.

[0026] In this invention, the terms "system" and "network" are used interchangeably. "Multiple" refers to two or more; therefore, in this invention, "multiple" can also be understood as "at least two." "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, or B alone. Additionally, the character " / ", unless otherwise specified, generally indicates that the preceding and following related objects have an "or" relationship. Furthermore, it should be understood that in the description of this invention, terms such as "first" and "second" are used only for descriptive purposes and should not be construed as indicating or implying relative importance or order.

[0027] Please see Figure 1 This invention provides a rapid penetration testing method for mobile devices, the method comprising:

[0028] S10) Determine whether the mobile device is undergoing its first penetration test;

[0029] In the case where the mobile device is undergoing its first penetration test:

[0030] S21) Perform test environment detection operation to obtain first environment detection information;

[0031] S22) Determine the test function module based on the first environmental detection information;

[0032] S23) Based on the test function module, execute the corresponding penetration test operation and generate the corresponding first test result;

[0033] When the mobile device is not undergoing its first penetration test or when the time elapsed since the previous penetration test reaches a preset time interval:

[0034] S31) Perform test environment detection operation to obtain second environment detection information;

[0035] S32) Determine whether the test environment has changed based on the second environmental detection information;

[0036] S33) If it is determined that the test environment has changed, determine the updated functional modules corresponding to the test environment;

[0037] S34) Execute the corresponding penetration testing operation based on the updated functional module to generate a second test result.

[0038] In one possible implementation, in order to achieve fast and accurate penetration testing of mobile devices, before conducting a penetration test, it is first determined whether the mobile device is being penetrated for the first time. For example, this can be done by generating corresponding test logs after performing a penetration test. Before each penetration test, the existence of a penetration test log is checked, and the penetration test log is used to determine whether it is the first penetration test and the content of the previous penetration test.

[0039] In the first embodiment, no penetration test logs were found in the mobile device, thus it was determined to be an initial penetration test. Therefore, a test environment detection operation was immediately performed to obtain the corresponding first environment detection information. For example, when the current test environment is outside the mobile device, since it is not possible to directly obtain much information about the mobile device, the test may be conducted in a black-box manner. Therefore, the system version information, port information, data read / storage rule information, external application installation rule information, and peripheral interoperability configuration information supported by the mobile device can be obtained by detecting whether the system version information, port information, data read / storage rule information, external application installation rule information, and peripheral interoperability configuration information supported by the mobile device can be obtained. Specifically, if it is determined that the system version number of the mobile device can be obtained, a penetration test can be performed on the system version, thereby improving the targeting and accuracy of the penetration test and generating the corresponding first environment detection information.

[0040] In the second embodiment, after the user manually starts the penetration test or after a preset time interval has elapsed since the last penetration test, the user prepares to conduct another penetration test. At the same time, the user finds the penetration logs stored in the mobile device, thus determining that this is not the first penetration test. Therefore, the user performs a test environment detection again. For example, if the current test environment is inside the mobile device, since a lot of information about the mobile device can be directly obtained, the test can be performed in a white-box testing manner. For example, the user can detect whether the system version information, port information, permission management information, process management rules, data read / storage rule information, and internal application installation rule information of the mobile device are obtained, and generate corresponding second environment detection information.

[0041] At this point, the corresponding test function modules are further matched based on the above environmental detection information.

[0042] Please see Figure 2 In this embodiment of the invention, the first environmental detection information includes multiple detection information items, and the module for determining the test function based on the first environmental detection information includes:

[0043] S221) Obtain a preset test function library, wherein the test function library includes multiple test function modules;

[0044] S222) Each detection information is matched sequentially with the test function modules in the preset test function library to obtain the first matching result;

[0045] S223) Determine the corresponding test function module based on the first matching result.

[0046] In one possible implementation, after the initial penetration test environment detection operation, the first environment detection information obtained includes system version information, port information, external application installation rule information, and peripheral interoperability configuration information supported by the mobile device. Then, a preset test function library is obtained. For example, the preset test function library is pre-packaged by the technician and stored in the mobile device, and can be directly called when used. The preset test function library includes multiple test function modules. Then, each of the above detection information is matched with the above multiple test function modules in sequence, and a first matching result is obtained.

[0047] In this embodiment of the invention, the testing function modules include a system testing function module, a port testing function module, a peripheral interoperability testing function module, a data read / storage testing function module, a fraudulent application installation testing function module, a permission management testing function module, and a process management testing function module. The step of performing corresponding penetration testing operations based on the testing function modules to generate corresponding first test results includes: performing system vulnerability testing operations based on the system testing function module to generate vulnerability scanning results; performing port testing operations based on the port testing function module to generate port scanning results; and performing peripheral interoperability testing operations based on the peripheral interoperability testing function module to generate interoperability test results. Results: Based on the data read / storage test function module, data read / write test operations are performed, generating read / write test results; based on the fraudulent application installation test function module, application installation test operations are performed, generating application installation test results; based on the permission management test function module, permission acquisition test operations are performed, generating permission acquisition test results; based on the process management test function module, process management test operations are performed, generating process management test results; based on the vulnerability scan results, port scan results, interoperability test results, read / write test results, application installation test results, permission acquisition test results, and process management test results, a first test result is generated.

[0048] Specifically, in this embodiment, the system testing module, port testing module, peripheral interoperability testing module, and fraudulent application installation testing module can be matched based on the first environment detection information. Therefore, the corresponding penetration testing operation is performed according to the above functional modules, and the corresponding first test result is generated.

[0049] In cases other than the initial penetration test, since the operating environment of the mobile device may change at any time, it is necessary to perform a test environment detection operation again and obtain the corresponding second environment detection information. For example, in the first embodiment, it is determined based on the above-mentioned second environment detection information that the test environment has not changed, so it can be determined that the security status of the mobile device is consistent with the previous one, and therefore it is not necessary to repeat the penetration test.

[0050] In the second embodiment, in the second environment detection information mentioned above, it is determined that the system version number of the mobile device has changed, thus determining that the test environment has changed and the functional modules for penetration testing need to be updated. For example, technicians can re-upload the new system test functional modules according to the new system version number, and perform the corresponding system vulnerability testing operations only based on the new system test functional modules to generate new vulnerability scanning results. The second test result is then generated based on the new vulnerability scanning results.

[0051] In this embodiment of the invention, by automatically matching the corresponding penetration testing function module according to the testing environment of the mobile device, the need for manual configuration by technicians is eliminated, thereby greatly reducing the consumption of human resources and lowering the testing cost.

[0052] On the other hand, by performing the initial penetration test and then, in the next penetration test, only obtaining the updated test function modules based on changes in the actual operating environment of the mobile device, the amount of computation required for penetration testing is greatly reduced, and the load on the mobile device is decreased. This allows users to perform penetration tests as needed at any time, thereby greatly improving the real-time performance and effectiveness of penetration testing and meeting actual needs.

[0053] However, in practical applications, changes in the testing environment may not be limited to changes in the mobile device itself, but are also related to changes in the external environment. If the test function modules are stored offline on the mobile device, they cannot keep up with the development and changes in external technologies. Therefore, it is impossible to obtain the latest function test modules at any time, and penetration testing cannot be carried out using the latest function test modules packaged based on the latest technological changes. Thus, it cannot meet the actual needs.

[0054] To address the aforementioned technical issues, in this embodiment of the invention, the mobile device is connected to a cloud server, and the step of determining the test function module based on the first environmental detection information includes: uploading the first environmental detection information to the cloud server; obtaining first feedback information from the cloud server regarding the first environmental detection information, wherein the first feedback information includes a test function module matching each detection information, and the test function module in the first feedback information is updated and maintained by the cloud server in real time.

[0055] For example, in one possible implementation, after performing test environment detection and obtaining the corresponding first environment detection information, the first environment detection information is uploaded to the cloud server. The cloud server matches the first environment detection information with the test function library that is kept up-to-date in real time, obtains the corresponding matching results, and generates the corresponding first feedback information. After the mobile device obtains the first feedback information, it extracts the test function module that matches each detection information and performs penetration testing.

[0056] In this embodiment of the invention, by connecting the mobile device to a cloud server and retrieving the latest testing function modules from the cloud server when penetration testing is required, instead of calling a fixed testing function library stored locally, the space occupied by the mobile device is avoided on the one hand, and the latest testing function modules are ensured on the other hand, so that the penetration test results are the most accurate results, thus meeting the actual needs of users.

[0057] However, in practical applications, the normal operation of the above penetration testing methods depends entirely on the reliability of network communication. Once the network communication is abnormal, no penetration testing can be performed. Mobile devices may cause network communication abnormalities for various reasons (such as weak wireless signals, equipment failure, unpaid bills, etc.). Therefore, in order to ensure that penetration testing can be performed under any circumstances and to ensure the accuracy of penetration testing as much as possible, the above methods need to be further improved.

[0058] In this embodiment of the invention, determining the updated functional module corresponding to the test environment includes: obtaining at least one change information of the test environment based on the second environment detection information; sequentially matching each change information with test functional modules in the preset test function library to obtain a matching functional module; determining whether there is update information for the matching functional module in the cloud server; if so, updating the matching functional module based on the update information to obtain the updated functional module; otherwise, using the matching functional module as the updated functional module.

[0059] In one possible implementation, after obtaining the second environment detection information, it is compared with the first environment detection information. If they are different, it can be determined that the test environment has changed. At this time, at least one change information of the test environment is extracted from the second environment detection information. For example, in this embodiment, the system version number and port information of the mobile device have changed. Therefore, the above two change information are matched with the preset test function library stored locally to obtain the matching function module. Then, it is further determined whether there is update information for the matching function module in the cloud server. For example, if there is a problem with the communication with the cloud server and the above update information cannot be obtained, the matching function module can be directly used as the updated function module for penetration testing to achieve the purpose of offline testing. If the communication with the cloud server is normal and update information for the matching function module is obtained in the cloud server, for example, in one case, the cloud server has updated the matching function module to two versions. Therefore, the matching function module is updated according to the update information. For example, the latest version of the function module is used to replace the matching function module to obtain the updated function module. At this time, penetration testing is performed according to the updated function module to achieve the most accurate penetration testing operation.

[0060] In this embodiment of the invention, the functional modules involved in penetration testing are updated in real time based on a cloud server. Each time a penetration test is required, the relevant functional modules are compared with the functional modules in the cloud server. This achieves the technical effect that each penetration test can be performed with the latest functional modules. At the same time, even if network communication is abnormal, offline penetration testing operations can be performed based on the existing functional modules to meet normal penetration testing requirements, thereby satisfying the actual needs of users.

[0061] The rapid penetration testing apparatus for mobile devices provided in the embodiments of the present invention will now be described with reference to the accompanying drawings.

[0062] Please see Figure 3Based on the same inventive concept, embodiments of the present invention provide a rapid penetration testing device for mobile devices. The device includes: a judgment unit for determining whether the mobile device is undergoing its first penetration test; a first-time testing unit for, when the mobile device is undergoing its first penetration test, performing a test environment detection operation to obtain first environment detection information; determining a test function module based on the first environment detection information; and performing a corresponding penetration test operation based on the test function module to generate a corresponding first test result; and a non-first-time testing unit for, when the mobile device is not undergoing its first penetration test, performing a test environment detection operation to obtain second environment detection information; determining whether the test environment has changed based on the second environment detection information; and, if the test environment has changed, determining an updated function module corresponding to the test environment; and performing a corresponding penetration test operation based on the updated function module to generate a second test result.

[0063] In this embodiment of the invention, the first environmental detection information includes multiple detection information, and the step of determining the test function module based on the first environmental detection information includes: obtaining a preset test function library, the test function library including multiple test function modules; sequentially matching each detection information with the test function modules in the preset test function library to obtain a first matching result; and determining the corresponding test function module based on the first matching result.

[0064] In this embodiment of the invention, the testing function modules include a system testing function module, a port testing function module, a peripheral interoperability testing function module, a data read / storage testing function module, a fraudulent application installation testing function module, a permission management testing function module, and a process management testing function module. The step of performing corresponding penetration testing operations based on the testing function modules to generate corresponding first test results includes: performing system vulnerability testing operations based on the system testing function module to generate vulnerability scanning results; performing port testing operations based on the port testing function module to generate port scanning results; and performing peripheral interoperability testing operations based on the peripheral interoperability testing function module to generate interoperability test results. Results: Based on the data read / storage test function module, data read / write test operations are performed, generating read / write test results; based on the fraudulent application installation test function module, application installation test operations are performed, generating application installation test results; based on the permission management test function module, permission acquisition test operations are performed, generating permission acquisition test results; based on the process management test function module, process management test operations are performed, generating process management test results; based on the vulnerability scan results, port scan results, interoperability test results, read / write test results, application installation test results, permission acquisition test results, and process management test results, a first test result is generated.

[0065] In this embodiment of the invention, the mobile device is connected to a cloud server, and the step of determining the test function module based on the first environmental detection information includes: uploading the first environmental detection information to the cloud server; obtaining first feedback information from the cloud server in response to the first environmental detection information, wherein the first feedback information includes a test function module matching each detection information, and the test function module in the first feedback information is updated and maintained by the cloud server in real time.

[0066] In this embodiment of the invention, determining the updated functional module corresponding to the test environment includes: obtaining at least one change information of the test environment based on the second environment detection information; sequentially matching each change information with test functional modules in the preset test function library to obtain a matching functional module; determining whether there is update information for the matching functional module in the cloud server; if so, updating the matching functional module based on the update information to obtain the updated functional module; otherwise, using the matching functional module as the updated functional module.

[0067] Furthermore, embodiments of the present invention also provide a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method described in the present invention.

[0068] The optional embodiments of the present invention have been described in detail above with reference to the accompanying drawings. However, the embodiments of the present invention are not limited to the specific details in the above embodiments. Within the scope of the technical concept of the embodiments of the present invention, various simple modifications can be made to the technical solutions of the embodiments of the present invention, and these simple modifications all fall within the protection scope of the embodiments of the present invention.

[0069] It should also be noted that the various specific technical features described in the above embodiments can be combined in any suitable manner without contradiction. To avoid unnecessary repetition, the embodiments of the present invention will not describe the various possible combinations separately.

[0070] Those skilled in the art will understand that all or part of the steps in the methods of the above embodiments can be implemented by a program instructing related hardware. This program is stored in a storage medium and includes several instructions to cause a microcontroller, chip, or processor to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, a portable hard drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0071] Furthermore, various different implementations of the present invention can be combined arbitrarily, as long as they do not violate the spirit of the present invention, they should also be regarded as the content disclosed in the present invention.

Claims

1. A method for rapid penetration testing of a mobile device, the method comprising: The method comprises: determining whether the mobile device is a first penetration test; in the case of the mobile device being a first penetration test: performing a test environment detection operation to obtain first environment detection information, the first environment detection information comprising a plurality of detection information, determining a test function module based on the first environment detection information, comprising: obtaining a preset test function library, the test function library comprising a plurality of test function modules; sequentially matching each detection information with a test function module in the preset test function library to obtain a first matching result; determining the corresponding test function module based on the first matching result; the test function module comprises a system test function module, a port test function module, a peripheral interworking test function module, a data reading / storage test function module, a fraudulent application installation test function module, a permission management test function module, and a process management test function module; performing a corresponding penetration test operation based on the test function module to generate a corresponding first test result, comprising: performing a system vulnerability test operation based on the system test function module to generate a vulnerability scan result; performing a port test operation based on the port test function module to generate a port scan result; performing a peripheral interworking test operation based on the peripheral interworking test function module to generate an interworking test result; performing a data read / write test operation based on the data reading / storage test function module to generate a read / write test result; performing an application installation test operation based on the fraudulent application installation test function module to generate an application installation test result; performing a permission acquisition test operation based on the permission management test function module to generate a permission acquisition test result; performing a process management test operation based on the process management test function module to generate a process management test result; generating a first test result based on the vulnerability scan result, the port scan result, the interworking test result, the read / write test result, the application installation test result, the permission acquisition test result, and the process management test result; performing a corresponding penetration test operation based on the test function module to generate a corresponding first test result; in the case of the mobile device being a non-first penetration test: performing a test environment detection operation to obtain second environment detection information; determining whether the test environment has changed based on the second environment detection information; in the case of determining that the test environment has changed, determining an updated function module corresponding to the test environment; performing a corresponding penetration test operation based on the updated function module to generate a second test result.

2. The method of claim 1, wherein, The mobile device is connected to a cloud server, and the determination of the test function module based on the first environment detection information comprises: uploading the first environment detection information to the cloud server; obtaining first feedback information of the cloud server for the first environment detection information, the first feedback information comprising a test function module matched with each detection information, and the test function module in the first feedback information being updated and maintained by the cloud server in real time.

3. The method of claim 2, wherein, the determination of the updated function module corresponding to the test environment comprises: acquire at least one change information of the test environment based on the second environment detection information; match each change information with a test function module in the preset test function library in sequence to obtain a matched function module; determine whether there is update information for the matched function module in the cloud server; if yes, update the matched function module based on the update information to obtain an updated function module; otherwise, use the matched function module as the updated function module.

4. A mobile device's quick penetration testing apparatus, characterized by, The apparatus comprises: a determination unit configured to determine whether the mobile device is a first-time penetration test; a first-time test unit configured to, in a case where the mobile device is a first-time penetration test: perform a test environment detection operation to obtain first environment detection information; determine a test function module based on the first environment detection information; perform a corresponding penetration test operation based on the test function module to generate a corresponding first test result; the first environment detection information comprises a plurality of detection information, and the determination of the test function module based on the first environment detection information comprises: acquiring a preset test function library, the test function library comprising a plurality of test function modules; matching each detection information with a test function module in the preset test function library in sequence to obtain a first matching result; determining a corresponding test function module based on the first matching result; the test function module comprises a system test function module, a port test function module, a peripheral interconnection test function module, a data reading / storing test function module, a fraudulent application installation test function module, a permission management test function module, and a process management test function module, the performance of the corresponding penetration test operation based on the test function module to generate the corresponding first test result comprises: performing a system vulnerability test operation based on the system test function module to generate a vulnerability scan result; performing a port test operation based on the port test function module to generate a port scan result; performing a peripheral interconnection test operation based on the peripheral interconnection test function module to generate an interconnection test result; performing a data reading / writing test operation based on the data reading / storing test function module to generate a reading / writing test result; performing an application installation test operation based on the fraudulent application installation test function module to generate an application installation test result; performing a permission acquisition test operation based on the permission management test function module to generate a permission acquisition test result; performing a process management test operation based on the process management test function module to generate a process management test result; generating the first test result based on the vulnerability scan result, the port scan result, the interconnection test result, the reading / writing test result, the application installation test result, the permission acquisition test result, and the process management test result; The non-initial test unit is configured to, when the mobile device is not in the initial penetration test, perform a test environment detection operation to obtain second environment detection information, determine whether the test environment has changed based on the second environment detection information, determine an updated function module corresponding to the test environment when it is determined that the test environment has changed, perform a corresponding penetration test operation based on the updated function module to generate a second test result.

5. The apparatus of claim 4, wherein, The mobile device is connected to a cloud server, and the determination of the test function module based on the first environment detection information comprises: uploading the first environment detection information to the cloud server; obtaining first feedback information of the cloud server for the first environment detection information, the first feedback information comprising a test function module matched with each detection information, and the test function module in the first feedback information being updated and maintained by the cloud server in real time.

6. The apparatus of claim 5, wherein, The determination of the updated function module corresponding to the test environment comprises: obtaining at least one change information of the test environment based on the second environment detection information; matching each change information with a test function module in the preset test function library in sequence to obtain a matched function module; determining whether there is update information for the matched function module in the cloud server; if yes, updating the matched function module based on the update information to obtain an updated function module; otherwise, taking the matched function module as the updated function module.

Images