Information system interaction behavior analysis method and system

Abstract

The invention discloses an information system interaction behavior analysis method and system, and belongs to the technical field of information interaction. The method comprises the following steps: identifying input information and output information in an interaction request of a target information system, generating an input information node and an output information node, and generating an edge from the input information node to the output information node; generating an edge from the output information node to the input information node based on an information inclusion relationship between the output information node and the input information node among different interaction requests; constructing a request dependency graph according to the input information node, the output information node, the edge from the input information node to the output information node and the edge from the output information node to the input information node; and analyzing the interaction behavior of the target information system by traversing the request dependency graph. The method is low in implementation cost and easy to apply, codes of the target system do not need to be analyzed, and analysis can be carried out only from the outside of the target system.

Description

Technical Field

[0001] The present invention relates to the field of information interaction technology, and in particular to an analysis method and system for information system interaction behavior. Background Art

[0002] With the continuous development of technologies such as cloud computing, the Internet of Things, and 5G, information systems such as Web applications and IoT devices that provide services to users through a "request / response" method have become an important link between people and cyberspace. This type of information system interacts frequently with the outside world, allowing multiple users to interact with it concurrently through different requests.

[0003] However, these increasingly complex interactions also make it difficult for system developers, testers, security analysts, and other personnel to analyze the interactive behaviors of existing systems, especially the dependencies between these interactive behaviors. Summary of the invention

[0004] In view of the above problems, the present invention designs a method and system for analyzing the interactive behavior of an information system, and analyzes the interactive behavior of a target information system by analyzing the data dependency relationship between requests.

[0005] In order to achieve the above-mentioned purpose, the technical solution adopted by the present invention is:

[0006] A method for analyzing interactive behavior of an information system, the method comprising:

[0007] Identify input information and output information in the target information system interaction request, generate input information nodes and output information nodes, and generate edges from the input information nodes to the output information nodes;

[0008] Based on the information inclusion relationship between the output information node and the input information node between different interaction requests, an edge from the output information node to the input information node is generated;

[0009] Constructing a request dependency graph according to the input information node, the output information node, the edge from the input information node to the output information node, and the edge from the output information node to the input information node;

[0010] The interactive behavior of the target information system is analyzed by traversing the request dependency graph.

[0011] Furthermore, the identifying the input information and output information in the target information system interaction request includes:

[0012] Test all interaction requests of the target information system through dynamic testing and record the interaction request process;

[0013] The input information and the output information of the interaction request are identified according to the interaction request process.

[0014] Furthermore, the dynamic testing method includes: a fuzzy testing method or a manual testing method.

[0015] Furthermore, the step of generating an edge from the output information node to the input information node based on the information inclusion relationship between the output information node and the input information node between different interaction requests includes:

[0016] Obtain output information nodes v and input information nodes w corresponding to different interaction requests;

[0017] Determine whether the information of the output information node v contains the information of the input information node w;

[0018] When the information of the output information node v includes the information of the input information node w, an edge from the output information node v to the input information node w is generated.

[0019] Furthermore, analyzing the interactive behavior of the target information system by traversing the request dependency graph includes:

[0020] Traverse the request dependency graph to obtain a request dependency path from node u to node x; wherein the node x is a node of high confidentiality information, and the node u is a node of low confidentiality information;

[0021] The request dependency path is analyzed, and the interaction behavior analysis result is obtained by determining whether there is an interaction request sequence from low confidentiality information to high confidentiality information.

[0022] An analysis system for information system interaction behavior, the system comprising:

[0023] A graph construction module is used to identify input information and output information in the target information system interaction request, generate input information nodes and output information nodes, and generate edges from input information nodes to output information nodes; based on the information inclusion relationship between output information nodes and input information nodes between different interaction requests, generate edges from output information nodes to input information nodes; construct a request dependency graph based on the input information nodes, the output information nodes, the edges from the input information nodes to the output information nodes, and the edges from the output information nodes to the input information nodes;

[0024] The result generation module is used to analyze the interactive behavior of the target information system by traversing the request dependency graph.

[0025] An electronic device comprises: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for analyzing information system interaction behavior described in any one of the above items is implemented.

[0026] A computer-readable storage medium, characterized in that computer program instructions are stored on the computer-readable storage medium, and when the computer program instructions are executed by a processor, the analysis method of information system interaction behavior described in any one of the above items is implemented.

[0027] Compared with the prior art, the present invention has low implementation cost, is easy to apply, does not require analysis of the code of the target system, and only needs to be analyzed from outside the target system. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 Flowchart of the analytical method for information system interaction behavior. DETAILED DESCRIPTION

[0029] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0030] The present invention discloses a method for analyzing information system interaction behavior, such as Figure 1 As shown, the following steps are included:

[0031] (1) Test all interaction requests of the target information system through dynamic testing methods and record the interaction request process. The dynamic testing methods include existing mature dynamic testing methods such as fuzz testing and manual testing.

[0032] (2) According to the recorded interactive request process, the input information and output information of the interactive request are identified, input information nodes and output information nodes are generated, and edges from the input nodes to the output nodes are generated. The request input information is generally the parameter value of the request, and the output information is generally the response content of the request.

[0033] (3) Identify the information inclusion relationship between the output nodes and input nodes of different interactive requests. If the output node information of a request contains the input node information of another request, an edge from the output node to the input node is generated. The inclusion relationship means that the parameter value of the input node is included in the response content of the output node.

[0034] (4) The above nodes and edges eventually form a graph, and system users can analyze the interactive behavior of the target information system by traversing the graph.

[0035] The following is a specific example of an analysis method for information system interaction behavior provided by the present invention.

[0036] In the information system interactive behavior analysis method of the present invention, it is assumed that two requests a and b can be sent to the target information system, and the input of request a is u and the output is v, and the input of request b is w and the output is x. Then, the steps of analyzing the interactive behavior of the target information system based on the method of the present invention are as follows:

[0037] (1) Test the two requests a and b manually and record the interaction process of the interactive requests, which includes the input and output content of the two requests.

[0038] (2) Based on the input and output content of requests a and b, four nodes u, v, w, and x are generated, and two edges u->v and w->x are generated.

[0039] (3) Determine whether v (output) contains w (input). If so, generate an edge from v->w.

[0040] (4) Finally, a request dependency graph of u->v->w->x is formed, based on which the interaction behavior of the target information system can be analyzed. For example, assuming that x is high-confidential information and u is low-confidential information, a path search can be performed with u as the starting point and x as the end point to determine whether there is an interaction request sequence from low-confidential information to high-confidential information.

[0041] The above implementation is only used to illustrate the technical solution of the present invention rather than to limit it. Ordinary technicians in this field can modify or replace the technical solution of the present invention with equivalents without departing from the scope of the present invention. The protection scope of the present invention shall be based on the claims.

Claims

1. A method for analyzing interactive behavior of an information system, characterized in that: The method comprises: Identify input information and output information in the target information system interaction request, generate input information nodes and output information nodes, and generate edges from the input information nodes to the output information nodes; Based on the information inclusion relationship between the output information node and the input information node between different interaction requests, an edge from the output information node to the input information node is generated; Constructing a request dependency graph according to the input information node, the output information node, the edge from the input information node to the output information node, and the edge from the output information node to the input information node; The interactive behavior of the target information system is analyzed by traversing the request dependency graph.

2. The method according to claim 1, characterized in that The identifying input information and output information in the target information system interaction request includes: Test all interaction requests of the target information system through dynamic testing and record the interaction request process; The input information and the output information of the interaction request are identified according to the interaction request process.

3. The method according to claim 2, characterized in that The dynamic testing method includes: a fuzzy testing method or a manual testing method.

4. The method according to claim 1, characterized in that: The step of generating an edge from an output information node to an input information node based on the information inclusion relationship between output information nodes and input information nodes between different interaction requests includes: Obtain output information nodes v and input information nodes w corresponding to different interaction requests; Determine whether the information of the output information node v contains the information of the input information node w; When the information of the output information node v includes the information of the input information node w, an edge from the output information node v to the input information node w is generated.

5. The method according to claim 1, characterized in that The analyzing the interactive behavior of the target information system by traversing the request dependency graph includes: Traverse the request dependency graph to obtain a request dependency path from node u to node x; wherein the node x is a node of high confidentiality information, and the node u is a node of low confidentiality information; The request dependency path is analyzed, and the interaction behavior analysis result is obtained by determining whether there is an interaction request sequence from low confidentiality information to high confidentiality information.

6. An information system interactive behavior analysis system, characterized in that: The system comprises: A graph construction module is used to identify input information and output information in the target information system interaction request, generate input information nodes and output information nodes, and generate edges from input information nodes to output information nodes; based on the information inclusion relationship between output information nodes and input information nodes between different interaction requests, generate edges from output information nodes to input information nodes; construct a request dependency graph based on the input information nodes, the output information nodes, the edges from the input information nodes to the output information nodes, and the edges from the output information nodes to the input information nodes; The result generation module is used to analyze the interactive behavior of the target information system by traversing the request dependency graph.

7. An electronic device, characterized in that: The electronic device comprises: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method for analyzing the information system interaction behavior according to any one of claims 1 to 5 is implemented.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the method for analyzing information system interaction behavior according to any one of claims 1 to 5 is implemented.

Images