Game security test method and device and computer readable storage medium
By obtaining game data and determining testing rules based on data types and application scenarios, multi-level game security testing is carried out, which solves the problem of inability to filter deep risks in the existing technology, and achieves more efficient underlying data logic security testing.
Patent Information
- Application Number
- CN202510405765.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-02
- Publication Date
- 2025-08-15
AI Technical Summary
The existing AI-based gaming security testing methods cannot conduct deeper risk filtering, and mainly focus on intuitive security risk control, and lack security testing of the underlying logic of data.
By obtaining game data from the data input interface, determining testing rules based on data types and application scenarios, splitting and filtering game data based on data models and scenario models, and performing multi-level security testing based on data types and application scenarios.
It realizes security testing from the perspective of underlying logic of data, can identify and filter potential risks in the game more deeply, and improves the efficiency and accuracy of security testing.
Smart Images
Figure CN120478980A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of game testing, and in particular to a game safety testing method, device, and computer-readable storage medium. Background Art
[0002] Game security testing is a crucial part of the game development process, helping developers identify and resolve various issues within the game, improving its quality and stability. To improve the efficiency of game security testing and reduce labor costs, AI is often used to conduct game security testing. Game data is first processed using an AI model based on leakage risk to filter out potential leakage risks within the game.
[0003] However, existing AI-based game security testing methods focus more on intuitive security risk control, such as directly determining whether there are sensitive words through semantic recognition, and are unable to perform deeper risk filtering. Summary of the Invention
[0004] The technical problem to be solved by the present invention is to provide a game security testing method, device and computer-readable storage medium, which can achieve deeper security risk testing.
[0005] In order to solve the above technical problems, a technical solution adopted by the present invention is: A game security testing method, comprising: Obtain the game data to be tested from the data input interface; Determine corresponding test rules according to the data type of the game data; The game data to be tested is tested based on the test rules.
[0006] In order to solve the above technical problems, another technical solution adopted by the present invention is: A game safety testing device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the above-mentioned game safety testing method are implemented.
[0007] In order to solve the above technical problems, another technical solution adopted by the present invention is: A computer-readable storage medium stores computer program instructions, which, when executed by a processor, implement the steps of the above-mentioned game safety testing method.
[0008] The beneficial effects of the present invention are: implementing security testing of game data based on the data interface, determining corresponding test rules according to the data type of the game data, and testing the game data based on the test rules, implementing security testing of game data from the perspective of the underlying logic of the data, focusing on the security of the underlying logic of the data, and being able to achieve deeper security risk testing. BRIEF DESCRIPTION OF THE DRAWINGS
[0009] Figure 1 This is a flowchart of the steps of a game security testing method according to an embodiment of the present invention; Figure 2 This is a structural diagram of a game safety testing device according to an embodiment of the present invention; Figure 3 This is a flow chart of the steps for implementing data filtering based on a data interface according to an embodiment of the present invention; Figure 4 A flowchart of the steps for implementing data filtering based on a data model according to an embodiment of the present invention; Figure 5 This is a flowchart of the steps for implementing data filtering based on AI in an embodiment of the present invention. DETAILED DESCRIPTION
[0010] To illustrate the technical content, achieved objectives and effects of the present invention in detail, the following description is given in conjunction with the embodiments and accompanying drawings.
[0011] Please refer to Figure 1 , a game security testing method, comprising: Obtain the game data to be tested from the data input interface; Determine corresponding test rules according to the data type of the game data; The game data to be tested is tested based on the test rules.
[0012] From the above description, it can be seen that the beneficial effects of the present invention are: implementing security testing of game data based on the data interface, determining corresponding test rules according to the data type of the game data, and testing the game data based on the test rules, implementing security testing of game data from the perspective of the underlying logic of the data, focusing on the security of the underlying logic of the data, and being able to achieve deeper security risk testing.
[0013] Furthermore, determining the corresponding test rules according to the data type of the game data includes: Determine whether the data type of the game data is single; if so, determine an application scenario of the game data, match a corresponding scenario model according to the application scenario, and determine a corresponding test rule according to the scenario model; If not, the game data is split into a plurality of sub-data with a single data type based on the data model, and a corresponding test rule is determined according to the data type of each sub-data after the split.
[0014] From the above description, it can be seen that when determining the test rules, first determine whether the game data is a single data type based on the data type. If so, further split the game data, and determine the corresponding test rules based on the data type of the split sub-data. If not, determine the application scenario of the game data, match the corresponding scenario model based on the application scenario, and determine the corresponding test rules based on the scenario model to achieve progressive filtering of the game data from data type to application scenario.
[0015] Furthermore, the method further comprises the steps of: Set corresponding test rules according to different data types and establish the corresponding relationship between them; Set corresponding test rules according to different application scenarios and establish the corresponding relationships between them.
[0016] As can be seen from the above description, by setting the correspondence between different data types and corresponding test rules, as well as different application scenarios and corresponding test rules in advance, it is possible to quickly and easily determine the test rules corresponding to the game data.
[0017] Furthermore, the testing of the game data to be tested based on the test rules includes: The test rule includes a preset numerical range, and determines whether the game data to be tested falls within the preset numerical range. If so, the test passes; otherwise, the test fails.
[0018] As can be seen from the above description, by comparing the game data with the preset value range included in the test rules, it is possible to intuitively determine whether the game data passes the test.
[0019] Furthermore, the method further comprises the steps of: Send the game data that passes the test to the data output interface.
[0020] From the above description, it can be seen that after testing the game data, the game data that passes the test is sent to the data output interface, the game data is obtained from the data input interface for testing, and then the game data that passes the test is sent to the data output interface, thereby realizing game security testing based on the data interface and ensuring the correctness of the underlying logic of the data.
[0021] Furthermore, splitting the game data into a plurality of sub-data having a single data type based on the data model includes: Determine the data features corresponding to each data type based on the data model; The game data is split into a plurality of sub-data having a single data type according to data features corresponding to the respective data types.
[0022] From the above description, it can be seen that by determining the data features corresponding to each data model based on the data model, and splitting the game data according to the data features corresponding to each data type, the game data can be split accurately and quickly.
[0023] Furthermore, if the corresponding test rule determined is a test rule corresponding to a data type, then after testing the game data to be tested based on the test rule, the method further includes the following steps: Determine an application scenario of the game data that has passed the test, and retest the game data that has passed the test based on the application scenario.
[0024] From the above description, it can be seen that after the game data is tested based on the test rules corresponding to the data type, further testing is performed based on the application scenario of the game data to perform scenario restrictions, thereby ensuring the security of the game test.
[0025] Furthermore, the method further comprises the steps of: Setting an identifier corresponding to each application scenario of the game data and establishing a mapping relationship between them; The application scenario of determining the game data includes: Determining an application scenario identifier of the game data; The application scenario of the game data is determined according to the application scenario identifier and the mapping relationship.
[0026] It can be seen from the above description that the application scenario of the game data can be determined conveniently and quickly with the help of the application scenario identifier of each application scenario in the game data.
[0027] Please refer to Figure 2 A game safety testing device includes a memory, a processor, and a computer program stored in the memory and runnable on the processor. When the processor executes the computer program, the steps of the above-mentioned game safety testing method are implemented.
[0028] A computer-readable storage medium stores computer program instructions, which, when executed by a processor, implement the steps of the above-mentioned game safety testing method.
[0029] The game security testing method, device, and computer-readable storage medium described above can be applied to security testing of various games. The following describes the method and device through specific implementation methods: In an optional embodiment, if Figure 1 As shown, a game security testing method includes: Obtain the game data to be tested from the data input interface; Determine corresponding test rules according to the data type of the game data; Testing the game data to be tested based on the test rules; The game data that passes the test is sent to the data output interface, that is, the data interface realizes the input and output of game data.
[0030] The step of determining the corresponding test rules according to the data type of the game data includes: Determine whether the data type of the game data is single; if so, determine an application scenario of the game data, match a corresponding scenario model according to the application scenario, and determine a corresponding test rule according to the scenario model; If not, the game data is split into a plurality of sub-data with a single data type based on the data model, and a corresponding test rule is determined according to the data type of each sub-data after the split.
[0031] The specific implementation process is as follows Figure 3 As shown, it is divided into data preprocessing and filtering and analysis: In the first case, if it is comprehensive game data, that is, object data (i.e., object data) containing various data types such as characters, integers, and time types, data preprocessing is first performed on the game data. Through data processing, the game data is split into data, and each sub-data after data split is filtered into corresponding data categories. Each data category has corresponding data testing rules. In the second case, if it is a single type of game data, filtering and analysis are directly performed, and object filtering is performed according to the corresponding pre-set object rules. More specifically, the first case is to limit the range of built-in attributes of data types under normal circumstances; and the second case is to continue to limit the range in specific application scenarios, that is, based on the access range restriction on basic attributes, the scenario model is used to further restrict the existing model in the scenario. For example, for game data with the data type of int, in the first case, the restriction range is -2,147,483,648 to 2,147,483,647. Only game data that meets the specified type can be obtained through data type restriction; and if combined with specific application scenarios, further restrictions are made. For example, when shopping in a game mall, the range of game data with the data type of int should be limited to greater than or equal to 0. The test rules may be configured in advance. In one implementation: Set corresponding test rules according to different data types and establish the corresponding relationship between them; Set corresponding test rules according to different application scenarios and establish the corresponding relationships between them.
[0032] In another optional embodiment, the testing the game data to be tested based on the test rules includes: The test rule includes a preset numerical range, and determines whether the game data to be tested falls within the preset numerical range. If so, the test passes; otherwise, the test fails.
[0033] In another optional embodiment, as Figure 4 As shown, splitting the game data into multiple sub-data with a single data type based on the data model includes: Determine the data features corresponding to each data type based on the data model; The game data is split into a plurality of sub-data having a single data type according to data features corresponding to the respective data types.
[0034] In another optional embodiment, if the corresponding test rule is a test rule corresponding to a data type, then after testing the game data to be tested based on the test rule, the following steps are further included: Determine an application scenario of the game data that has passed the test, and retest the game data that has passed the test based on the application scenario; In this embodiment, the game data is filtered twice, first based on the data type, and then based on the specific application scenario. When it is implemented, it can be implemented based on AI, such as Figure 5 As shown, when there is an existing scenario, data processing is performed based on the data in the knowledge base in AI. When there is an unknown scenario, AI filters the data based on the object data already in the database.
[0035] The knowledge base stores basic object data types and models built based on scenarios, while the database stores existing object data types and unmatched scenarios. This means there are two data filtering methods: First, filter only specific types of data and combine them with existing knowledge bases; Second, filter the specified type of data in combination with the database; To improve the second filtering method, it is necessary to design scenarios for input and output data, and establish scene object data through the data model in AI. Scene object data is established based on the corresponding data of the game data scene; In other words, the first data filtering method is obtained by combining the basic object with the corresponding scenario, that is, the obtained scene object can quickly filter / acquire the corresponding object data when encountering a similar data application scenario next time.
[0036] Data of a certain data type refers to data with specific object data identifiers that have been filtered and learned by the data model. Specific data types have specific characteristics, such as the specific text data "json{0,2}...". For example, in the following scenario, a game player purchases an item in the mall. The data is constructed as "mall ID + item + item quantity." Therefore, encountering this specific mall ID is considered a specific data model. For example, in the mall, the model's filtering analysis only focuses on the item quantity. Therefore, it filters and displays this, while other factors are ignored. In other words, the knowledge base extracts and filters data based on a specific environment, and this specific environment is determined by a specific environment identifier.
[0037] The database simply restricts data types, that is, it restricts data using object filtering rules. For example, a data range of 0-256 can only know this data range and cannot fine-tune it according to the environment.
[0038] In another optional embodiment, the method further comprises the steps of: Setting an identifier corresponding to each application scenario of the game data and establishing a mapping relationship between them; The application scenario of determining the game data includes: Determining an application scenario identifier of the game data; The application scenario of the game data is determined according to the application scenario identifier and the mapping relationship.
[0039] In another optional embodiment, as Figure 2 As shown, a game safety testing device includes a memory, a processor, and a computer program stored in the memory and runnable on the processor. When the processor executes the computer program, the steps of a game safety testing method described in any one of the above embodiments are implemented.
[0040] In another optional embodiment, a computer-readable storage medium stores computer program instructions thereon, and when the computer program instructions are executed by a processor, the steps of a game safety testing method described in any of the above embodiments are implemented.
[0041] In summary, the game security testing method, device and computer-readable storage medium provided by the present invention implement security testing of game data based on a data interface, and filter game data in combination with data types and data application scenarios. Data can be captured not only through basic data type characteristics but also through application scenarios. The security testing of game data is implemented from the perspective of the underlying logic of the data, focusing on the security of the underlying logic of the data, and can achieve more flexible, efficient and in-depth security risk testing.
[0042] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent transformations made using the contents of the present invention's description and drawings, or directly or indirectly applied in related technical fields, are also included in the patent protection scope of the present invention.
Claims
1. A game safety testing method, characterized in that: include: Obtain the game data to be tested from the data input interface; Determine corresponding test rules according to the data type of the game data; The game data to be tested is tested based on the test rules.
2. A game safety testing method according to claim 1, characterized in that: Determining the corresponding test rules according to the data type of the game data includes: Determine whether the data type of the game data is single; if so, determine an application scenario of the game data, match a corresponding scenario model according to the application scenario, and determine a corresponding test rule according to the scenario model; If not, the game data is split into a plurality of sub-data with a single data type based on the data model, and a corresponding test rule is determined according to the data type of each sub-data after the split.
3. A game safety testing method according to claim 2, characterized in that: Also includes the steps: Set corresponding test rules according to different data types and establish the corresponding relationship between them; Set corresponding test rules according to different application scenarios and establish the corresponding relationships between them.
4. A game safety testing method according to any one of claims 1 to 3, characterized in that: The testing of the game data to be tested based on the test rules includes: The test rule includes a preset numerical range, and determines whether the game data to be tested falls within the preset numerical range. If so, the test passes; otherwise, the test fails.
5. A game safety testing method according to claim 4, characterized in that: Also includes the steps: Send the game data that passes the test to the data output interface.
6. A game safety testing method according to claim 2 or 3, characterized in that: The step of splitting the game data into a plurality of sub-data having a single data type based on the data model includes: Determine the data features corresponding to each data type based on the data model; The game data is split into a plurality of sub-data having a single data type according to data features corresponding to the respective data types.
7. A game safety testing method according to claim 2 or 3, characterized in that: If the determined corresponding test rule is a test rule corresponding to the data type, then after testing the game data to be tested based on the test rule, the method further includes the following steps: Determine an application scenario of the game data that has passed the test, and retest the game data that has passed the test based on the application scenario.
8. A game safety testing method according to claim 2 or 3, characterized in that: Also includes the steps: Setting an identifier corresponding to each application scenario of the game data and establishing a mapping relationship between them; The application scenario of determining the game data includes: Determining an application scenario identifier of the game data; The application scenario of the game data is determined according to the application scenario identifier and the mapping relationship.
9. A game safety testing device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of a game safety testing method as described in any one of claims 1 to 8 are implemented.
10. A computer-readable storage medium having computer program instructions stored thereon, characterized in that: When the computer program instructions are executed by a processor, the steps of a game safety testing method described in any one of claims 1 to 8 are implemented.