Security analysis method, apparatus and mobile terminal device

Abstract

The application provides a security analysis method, device and mobile terminal equipment. Relates to the application security field, the method comprises: according to user instruction, based on the preset interface test parameter configuration, generates corresponding test instruction, indicates the application to be tested, security test script, pressure equipment and pressure parameter information;Test instruction is output to pressure equipment to test the application to be tested;Wherein, the test instruction is used to trigger the pressure equipment to obtain the security test script, and the pressure equipment is used to test the application to be tested according to the security test script and the pressure parameter information and generate test results;Acquire test results, and based on convolutional neural network information extraction model, test results are analyzed and processed, and security analysis report is generated. This process makes the technical personnel not be limited by space, and the comprehensive and effective test analysis of application security is conveniently realized.

Description

Technical Field

[0001] This application relates to the field of information security, and in particular to a security analysis method, apparatus, and mobile terminal device. Background Technology

[0002] Application security is one of the most significant technological challenges of our time. Technical security testing refers to the examination of a software product before its release, after its basic development is complete, to verify the effectiveness of its security controls.

[0003] In existing technologies, security testing and analysis of applications are usually performed on the computer, using vulnerability scanning software on the computer to perform automated dynamic vulnerability scanning and security analysis of applications.

[0004] However, in the existing technology, technicians need to be near fixed computer equipment to carry out security testing and analysis of applications. The work is spatially limited, and the simulated external security attacks on applications tend to be singular, which cannot easily achieve comprehensive and effective testing and analysis of application security. Summary of the Invention

[0005] This application provides a security analysis method, apparatus, and mobile terminal device to solve the problem that it is currently not convenient to achieve comprehensive and effective testing and analysis of application security.

[0006] In a first aspect, this application provides a security analysis method, which is applied to a mobile terminal device, and the method includes:

[0007] According to user instructions, test parameters are configured based on a preset interface to generate corresponding test instructions, wherein the test instructions are used to indicate the application to be tested, the security test script, the pressure generating device, and the pressure generating parameter information;

[0008] The test command is output to the pressure generating device to test the application under test; wherein, the test command is used to trigger the pressure generating device to obtain the security test script, and the pressure generating device is used to perform security testing on the application under test according to the security test script and the pressure generating parameter information and generate test results;

[0009] The test results are obtained, and the test results are analyzed and processed based on a convolutional neural network information extraction model to generate a security analysis report, wherein the security analysis report is used to evaluate the security of the application under test.

[0010] In one optional implementation, obtaining the test results includes:

[0011] The test results are collected and processed according to a preset time frequency to generate a result dataset, wherein the result dataset includes text result data and image result data corresponding to the application under test at different times.

[0012] In one optional implementation, the test results are analyzed and processed based on a convolutional neural network information extraction model to generate a security analysis report, including:

[0013] Based on the convolutional neural network information extraction model, according to preset keywords, the text result data and image result data at different times are identified, and the security alarm information of the application under test at different times is extracted. The preset keywords indicate the type and content of the security alarm information.

[0014] Based on the security alert information at different times and the path information corresponding to the security alert information, a security analysis report of the application under test is generated.

[0015] In one optional implementation, the method further includes:

[0016] Based on preset risk rules, the risk level of security alarm information at different times is classified and processed to determine the risk level corresponding to each security alarm information.

[0017] Based on the risk level corresponding to the security alarm information at different times, output the corresponding risk warning information.

[0018] In one optional implementation, the method further includes:

[0019] Based on the security analysis report, the preset alarm rules are optimized. The preset alarm rules are the alarm rules for security attacks preset in the application under test.

[0020] In one optional implementation, the method further includes:

[0021] Based on the security analysis report, the functional code of the application under test is analyzed and processed to generate a code vulnerability analysis library.

[0022] Secondly, this application provides a security analysis device, which is applied to a mobile terminal device, and the device includes:

[0023] The first processing unit is used to configure test parameters based on a preset interface according to user instructions and generate corresponding test instructions, wherein the test instructions are used to indicate the application to be tested, the security test script, the pressure generating device and the pressure generating parameter information.

[0024] An output unit is configured to output the test command to the voltage generating device to test the application under test; wherein the test command is configured to trigger the voltage generating device to obtain the security test script, and the voltage generating device is configured to perform security testing on the application under test according to the security test script and the voltage generating parameter information and generate test results;

[0025] The second processing unit is used to acquire the test results and analyze and process the test results based on the convolutional neural network information extraction model to generate a security analysis report, wherein the security analysis report is used to evaluate the security of the application under test.

[0026] Thirdly, this application provides a mobile terminal device, including a memory and a processor;

[0027] The memory is used to store computer programs;

[0028] The processor is configured to read a computer program stored in the memory and execute the security analysis method as described in the first aspect based on the computer program in the memory.

[0029] Fourthly, this application provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the security analysis method as described in the first aspect.

[0030] Fifthly, this application provides a computer program product, including a computer program that, when executed by a processor, implements the security analysis method as described in the first aspect.

[0031] The security analysis method, apparatus, and mobile terminal device provided in this application, through the following steps: configuring test parameters based on a preset interface according to user instructions, generating corresponding test instructions that specify the application under test, the security test script, the pressure generating device, and the pressure generating parameter information; outputting the test instructions to the pressure generating device to test the application under test; wherein, the test instructions trigger the pressure generating device to obtain the security test script, and the pressure generating device performs security testing on the application under test according to the security test script and the pressure generating parameter information and generates test results; obtaining the test results, and analyzing and processing the test results based on a convolutional neural network information extraction model to generate a security analysis report. This process allows technicians to conveniently and effectively perform comprehensive and effective testing and analysis of application security without spatial limitations. Attached Figure Description

[0032] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0033] Figure 1 A flowchart illustrating a security analysis method provided in this application embodiment;

[0034] Figure 2 A flowchart illustrating another security analysis method provided in this application embodiment;

[0035] Figure 3 This is a schematic diagram of the structure of a security analysis device provided in an embodiment of this application;

[0036] Figure 4 This is a schematic diagram of the structure of a mobile terminal device provided in an embodiment of this application;

[0037] Figure 5 This is a block diagram of a terminal device provided in an embodiment of this application.

[0038] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0039] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0040] Application security is one of the most significant technological challenges of our time. Web applications have fueled the rapid development of online activities such as business and social networks, while simultaneously placing higher demands on application security. The advent of the mobile internet era has further complicated application security. Technical security testing refers to the examination of a software product before its release, conducted after basic development is complete, to verify the effectiveness of application security controls. Penetration testing, a type of technical security testing, is a method that assesses the security of a computer system or network by simulating intrusion.

[0041] In one example, traditional technical security testing utilizes network security scanning tools such as AppScan and OWASPZAP to perform automated dynamic vulnerability scanning and security analysis in order to discover and analyze security vulnerabilities in applications.

[0042] However, technical personnel need to be near fixed computer equipment to conduct security testing and analysis of applications, which limits their work due to space constraints. In the information extraction process, most of them use machine learning-based methods and rely on manual feature extraction. However, the manually extracted features come from natural language processing systems or tools, which inevitably have limitations and may introduce errors, which can spread during the information extraction process. The simulated external security attacks on applications tend to be singular, making it difficult to conveniently achieve comprehensive and effective testing and analysis of application security.

[0043] Therefore, this application provides a security analysis method to solve the above-mentioned technical problems.

[0044] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0045] Figure 1 A flowchart illustrating a security analysis method provided in this application embodiment, the method being applied to a mobile terminal device, such as... Figure 1 As shown, the method includes:

[0046] 101. Based on user instructions and a preset interface, configure test parameters and generate corresponding test instructions. The test instructions are used to instruct the application to be tested, the security test script, the pressure generating device, and the pressure generating parameter information.

[0047] For example, different applications require different security test scripts and corresponding test parameters when performing security testing and analysis. The user issues user commands according to actual needs, specifying the application under test, the security test script, the pressure-generating device, and the pressure-generating parameter information. The mobile terminal device, based on the user commands, configures the test parameters for the testing and analysis process of the application under test on a preset interface, generating corresponding test commands. These test commands instruct the application under test, the security test script, the pressure-generating device, and the pressure-generating parameter information. The preset interface may include options for some test parameters. Pressure-generating parameters may include request path information, used by the mobile terminal device to instruct the pressure-generating path of the pressure-generating device, and proxy settings. Setting the proxy to the mobile terminal's own address allows the mobile terminal to subsequently obtain the test results, i.e., the pressure-generating results.

[0048] 102. Output test commands to the pressure generating device to test the application under test; wherein, the test commands are used to trigger the pressure generating device to obtain the security test script, and the pressure generating device is used to perform security tests on the application under test according to the security test script and the pressure generating parameter information and generate test results.

[0049] For example, after the test command is output, the test command will trigger the pressure generating device to obtain the security test script. For example, it will trigger the data transfer station storing the security test script to send the security test script indicated in the test command to the pressure generating device. This will enable the pressure generating device, i.e. the pressure generating machine, to perform security testing on the application under test according to the security test script and the pressure generating parameter information and generate test results.

[0050] 103. Obtain test results and analyze and process the test results based on the convolutional neural network information extraction model to generate a security analysis report. The security analysis report is used to evaluate the security of the application under test.

[0051] For example, the mobile terminal monitors the testing process and periodically obtains the test results during the testing process. Based on the convolutional neural network information extraction model, it promptly identifies, extracts, records, and analyzes the risk alarm information in the test results to generate a security analysis report for the application under test.

[0052] In summary, the security analysis method provided in this embodiment involves the following steps: configuring test parameters based on a preset interface according to user instructions, generating corresponding test instructions that specify the application under test, the security test script, the pressure generating device, and the pressure generating parameter information; outputting the test instructions to the pressure generating device to test the application under test; wherein, the test instructions trigger the pressure generating device to obtain the security test script, and the pressure generating device performs security testing on the application under test based on the security test script and the pressure generating parameter information and generates test results; acquiring the test results, and analyzing and processing the test results based on a convolutional neural network information extraction model to generate a security analysis report. This process allows technicians to conveniently and effectively perform comprehensive and effective testing and analysis of application security without spatial limitations.

[0053] Figure 2 A flowchart illustrating another security analysis method provided in this application embodiment, the method being applied to a mobile terminal device, such as... Figure 2 As shown, the method includes:

[0054] 201. Based on user instructions and a preset interface, configure test parameters and generate corresponding test instructions. The test instructions are used to instruct the application under test, the security test script, the pressure generating device, and the pressure generating parameter information.

[0055] For example, this step is the same as step 101, and will not be repeated here.

[0056] 202. Output test commands to the pressure generating device to test the application under test; wherein, the test commands are used to trigger the pressure generating device to obtain the security test script, and the pressure generating device is used to perform security tests on the application under test according to the security test script and the pressure generating parameter information and generate test results.

[0057] For example, this step is the same as step 102, and will not be repeated here.

[0058] 203. Collect and process the test results according to the preset time frequency to generate a result dataset, which includes text result data and image result data corresponding to the application under test at different times.

[0059] For example, the mobile terminal's server monitors the testing process and periodically collects the test results generated by the test, i.e., the stress test results, according to a preset time frequency. For example, it automatically performs text monitoring and screenshot monitoring on the stress test results generated by the test at certain time intervals, collects the text result data and image result data corresponding to the application under test at different times, and generates a result dataset.

[0060] In one example, the collection of test results can also be triggered by the user.

[0061] 204. Based on the convolutional neural network information extraction model, according to preset keywords, the text result data and image result data at different times are identified, and the security alarm information of the application under test at different times is extracted. The preset keywords indicate the type and content of the security alarm information.

[0062] For example, based on a convolutional neural network information extraction model, according to preset keyword information, namely the type and content of security alarm information, the model identifies text result data and image result data at different times, and extracts the security alarm information of the application under test at different times during the test process. The convolutional neural network information extraction model avoids manual feature extraction and utilizes neural networks to achieve information extraction from the power supply end to the mobile terminal.

[0063] 205. Based on the security alarm information at different times and the path information corresponding to the security alarm information, generate a security analysis report for the application under test. The security analysis report is used to evaluate the security of the application under test.

[0064] For example, based on the security alarm information collected at different times and the corresponding path information of the security alarm information, a security analysis report of the application under test is generated, which changes over time. This security analysis report records when and under what stress test what type of security alarm information occurred, as well as the specific security alarm content. Therefore, the security of the application under test can be evaluated based on this security analysis report.

[0065] 206. Based on the security analysis report, analyze and process the functional code of the application to be tested, and generate a code vulnerability analysis library.

[0066] For example, based on the generated security analysis report, the security of the application under test can be assessed to determine whether there are security vulnerabilities in the functional code of the application under test, and a code vulnerability analysis library can be generated.

[0067] In summary, the security analysis method provided in this embodiment makes the testing process more controllable by monitoring the testing process and periodically acquiring result data; it improves the accuracy of security alarm information identification by identifying, extracting, and recording result data during the testing process based on a convolutional neural network information extraction model; and it analyzes and processes the functional code of the application under test according to the security analysis report to generate a code vulnerability analysis library, which facilitates code development and reuse and can accelerate software development speed.

[0068] One or more embodiments of this application may further include: optimizing preset alarm rules based on a security analysis report, wherein the preset alarm rules are preset alarm rules for security attacks in the application under test.

[0069] For example, the preset alarm rules are the alarm rules for security attacks preset in the application under test. They indicate the type and content of the security alarm information that the application under test should issue under a security attack. Based on the security analysis report, it can be analyzed whether the application under test issues alarms normally when responding to security attacks, and then the preset alarm rules can be optimized.

[0070] In summary, in this embodiment, the preset alarm rules of the application to be tested are evaluated and optimized based on the generated security analysis report, thereby enabling timely correction of security vulnerabilities in the application.

[0071] One or more embodiments of this application may further include: classifying security alarm information at different times according to preset risk rules to determine the risk level corresponding to each security alarm information; and outputting corresponding risk warning information according to the risk level corresponding to the security alarm information at different times.

[0072] For example, based on preset risk rules in the mobile terminal, security alarm information at different times is classified into risk levels to determine the risk level corresponding to each security alarm, such as high-risk security alarm information, low-risk security alarm information, etc.; according to the risk level corresponding to the security alarm information at different times, corresponding risk warning information is output. For example, a warning can be issued for high-risk security alarm information; or different levels of risk warning information can be output for security alarm information with different risk levels, wherein the preset risk rules indicate the criteria for risk level classification.

[0073] In summary, this embodiment classifies security alarm information into risk levels and outputs corresponding risk warning information based on the risk level of the security alarm information, making the entire testing process more intuitive and allowing users to adjust test parameters in a timely manner based on the test results.

[0074] Figure 3 This is a schematic diagram of a security analysis device provided in an embodiment of this application. The device is applied to a mobile terminal device, such as... Figure 3 As shown, the device includes:

[0075] The first processing unit 31 is used to configure test parameters based on a preset interface according to user instructions and generate corresponding test instructions, wherein the test instructions indicate the application to be tested, the security test script, the pressure generating device and the pressure generating parameter information.

[0076] Output unit 32 is used to output test instructions to the pressure generating device to test the application under test; wherein, the test instructions are used to trigger the pressure generating device to obtain the security test script, and the pressure generating device is used to perform security testing on the application under test according to the security test script and the pressure generating parameter information and generate test results;

[0077] The second processing unit 33 is used to acquire test results and analyze and process the test results based on a convolutional neural network information extraction model to generate a security analysis report. The security analysis report is used to evaluate the security of the application under test.

[0078] In one example, the second processing unit 33 includes:

[0079] The first processing subunit is used to collect and process the test results according to a preset time frequency to generate a result dataset, wherein the result dataset includes text result data and image result data corresponding to the application under test at different times.

[0080] In one example, the second processing unit 33 further includes:

[0081] The second processing subunit is used to identify text result data and image result data at different times based on the convolutional neural network information extraction model and according to preset keywords, and extract security alarm information of the application under test at different times. The preset keywords indicate the type and content of the security alarm information.

[0082] The third processing subunit is used to generate a security analysis report for the application under test based on the security alarm information at different times and the path information corresponding to the security alarm information.

[0083] In one example, the device also includes:

[0084] The determination unit is used to classify the risk level of security alarm information at different times according to preset risk rules, and determine the risk level corresponding to each security alarm information.

[0085] The alert unit is used to output corresponding risk alert information based on the risk level of the security alarm information at different times.

[0086] In one example, the device also includes:

[0087] The third processing unit is used to optimize the preset alarm rules based on the security analysis report. The preset alarm rules are the alarm rules for security attacks preset in the application under test.

[0088] In one example, the device also includes:

[0089] The fourth processing unit is used to analyze and process the functional code of the application to be tested based on the security analysis report, and generate a code vulnerability analysis library.

[0090] Figure 4 This is a schematic diagram of the structure of a mobile terminal device provided in an embodiment of this application, as shown below. Figure 4 As shown, the mobile terminal device includes: a memory 41 and a processor 42.

[0091] Memory 41 is used to store computer programs.

[0092] The processor 42 is configured to read a computer program stored in the memory and execute the security analysis method of any of the above embodiments according to the computer program in the memory.

[0093] Figure 5 This is a block diagram of a terminal device provided in an embodiment of this application. The device may be a mobile phone, computer, digital broadcasting terminal, messaging device, game console, tablet device, medical device, fitness device, personal digital assistant, etc.

[0094] The device 800 may include one or more of the following components: a processing component 802, a memory 804, a power supply component 806, a multimedia component 808, an audio component 810, an input / output (I / O) interface 812, a sensor component 814, and a communication component 816.

[0095] Processing component 802 typically controls the overall operation of device 800, such as operations associated with display, telephone calls, data communication, camera operation, and recording. Processing component 802 may include one or more processors 820 to execute instructions to perform all or part of the steps of the methods described above. Furthermore, processing component 802 may include one or more modules to facilitate interaction between processing component 802 and other components. For example, processing component 802 may include a multimedia module to facilitate interaction between multimedia component 808 and processing component 802.

[0096] Memory 804 is configured to store various types of data to support the operation of device 800. Examples of such data include instructions for any application or method operating on device 800, contact data, phonebook data, messages, pictures, videos, etc. Memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0097] Power supply component 806 provides power to various components of device 800. Power supply component 806 may include a power management system, one or more power sources, and other components associated with generating, managing, and distributing power to device 800.

[0098] Multimedia component 808 includes a screen that provides an output interface between device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touchscreen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors may sense not only the boundaries of touch or swipe actions but also the duration and pressure associated with the touch or swipe operation. In some embodiments, multimedia component 808 includes a front-facing camera and / or a rear-facing camera. When device 800 is in an operating mode, such as a shooting mode or a video mode, the front-facing camera and / or rear-facing camera may receive external multimedia data. Each front-facing camera and rear-facing camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

[0099] Audio component 810 is configured to output and / or input audio signals. For example, audio component 810 includes a microphone (MIC) configured to receive external audio signals when device 800 is in an operating mode, such as call mode, recording mode, and voice recognition mode. The received audio signals may be further stored in memory 804 or transmitted via communication component 816. In some embodiments, audio component 810 also includes a speaker for outputting audio signals.

[0100] I / O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to, home buttons, volume buttons, power buttons, and lock buttons.

[0101] Sensor assembly 814 includes one or more sensors for providing state assessments of various aspects of device 800. For example, sensor assembly 814 may detect the on / off state of device 800, the relative positioning of components such as the display and keypad of device 800, changes in the position of device 800 or a component of device 800, the presence or absence of user contact with device 800, the orientation or acceleration / deceleration of device 800, and temperature changes of device 800. Sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 814 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, sensor assembly 814 may also include an accelerometer, a gyroscope, a magnetometer, a pressure sensor, or a temperature sensor.

[0102] Communication component 816 is configured to facilitate wired or wireless communication between device 800 and other devices. Device 800 can access wireless networks based on communication standards, such as WiFi, 2G, or 3G, or combinations thereof. In one exemplary embodiment, communication component 816 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, communication component 816 also includes a near-field communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on radio frequency identification (RFID) technology, Infrared Data Association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0103] In an exemplary embodiment, the apparatus 800 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the methods described above.

[0104] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, which can be executed by a processor 820 of the device 800 to perform the above-described method. For example, the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0105] This application also provides a computer program product, which includes a computer program stored in a readable storage medium. At least one processor of a mobile terminal device can read the computer program from the readable storage medium, and the at least one processor executes the computer program to cause the mobile terminal device to perform the solution provided in any of the above embodiments.

[0106] Other embodiments of this application will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this application that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this application are indicated by the following claims.

[0107] It should be understood that this application is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this application is limited only by the appended claims.

Claims

1. A security analysis method, characterized in that, The method is applied to a mobile terminal device, and the method includes: According to user instructions, test parameters are configured based on a preset interface to generate corresponding test instructions. The test instructions are used to instruct the application to be tested, the security test script, the pressure generating device, and the pressure generating parameter information. The pressure generating parameter information includes request path information and proxy settings. The proxy settings are configured as the address of the mobile terminal device so that the mobile terminal device can obtain the test results. The test command is output to the pressure generating device to test the application under test; wherein, the test command is used to trigger the pressure generating device to obtain the security test script, and the pressure generating device is used to perform security testing on the application under test according to the security test script and the pressure generating parameter information and generate test results; The test results are collected and processed according to a preset time frequency to generate a result dataset, wherein the result dataset includes text result data and image result data corresponding to the application under test at different times; Based on the convolutional neural network information extraction model, according to preset keywords, the text result data and image result data at different times are identified, and the security alarm information of the application under test at different times is extracted. The preset keywords indicate the type and content of the security alarm information. Based on security alert information at different times and the path information corresponding to the security alert information, a security analysis report of the application under test is generated, wherein the security analysis report is used to evaluate the security of the application under test; Based on the security analysis report, the functional code of the application under test is analyzed and processed to generate a code vulnerability analysis library.

2. The method according to claim 1, characterized in that, The method further includes: Based on preset risk rules, the risk level of security alarm information at different times is classified and processed to determine the risk level corresponding to each security alarm information. Based on the risk level corresponding to the security alarm information at different times, output the corresponding risk warning information.

3. The method according to claim 1, characterized in that, The method further includes: Based on the security analysis report, the preset alarm rules are optimized. The preset alarm rules are the alarm rules for security attacks preset in the application under test.

4. A security analysis device, characterized in that, The device is used in a mobile terminal device, and the device includes: The first processing unit is configured to configure test parameters based on a preset interface according to user instructions and generate corresponding test instructions. The test instructions are used to indicate the application to be tested, the security test script, the pressure generating device, and the pressure generating parameter information. The pressure generating parameter information includes request path information and proxy settings. The proxy settings are configured as the address of the mobile terminal device so that the mobile terminal device can obtain the test results. An output unit is configured to output the test command to the voltage generating device to test the application under test; wherein the test command is configured to trigger the voltage generating device to obtain the security test script, and the voltage generating device is configured to perform security testing on the application under test according to the security test script and the voltage generating parameter information and generate test results; The second processing unit is used to collect and process the test results according to a preset time frequency to generate a result dataset, wherein the result dataset includes text result data and image result data corresponding to the application under test at different times; Based on the convolutional neural network information extraction model, according to preset keywords, the text result data and image result data at different times are identified, and the security alarm information of the application under test at different times is extracted. The preset keywords indicate the type and content of the security alarm information. Based on security alert information at different times and the path information corresponding to the security alert information, a security analysis report of the application under test is generated, wherein the security analysis report is used to evaluate the security of the application under test; The third processing unit is used to analyze and process the functional code of the application under test according to the security analysis report, and generate a code vulnerability analysis library.

5. A mobile terminal device, characterized in that, Including memory and processor; The memory is used to store computer programs; The processor is configured to read the computer program stored in the memory and execute the security analysis method according to any one of claims 1-3 based on the computer program in the memory.

6. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, implement the security analysis method as described in any one of claims 1-3.

7. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the security analysis method according to any one of claims 1-3.

Images