一种接口漏洞安全测试方法、装置、电子设备及存储介质
By parsing interface attribute information and generating test cases using a large language model, the shortcomings of existing interface security testing tools are addressed, enabling automated and intelligent testing of interface vulnerabilities and improving testing accuracy and efficiency.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- TAIPING FINANCIAL SERVICE CENT (SHANGHAI) CO LTD
- Filing Date
- 2026-05-19
- Publication Date
- 2026-07-17
AI Technical Summary
Existing interface security testing tools cannot dynamically generate payloads for different scenarios or different vulnerability types, resulting in insufficient testing accuracy, flexibility, comprehensiveness, and efficiency.
By acquiring interface attribute information, parsing parameter structure, interface semantic summary and permission identifier, and combining with a large language model to generate reference attack payloads, test cases are automatically generated and test requests are executed to determine the interface vulnerability test results.
It improves the flexibility, accuracy, comprehensiveness and efficiency of interface vulnerability security testing, reduces the false positive and false negative rates, and realizes intelligent testing in complex scenarios.
Smart Images
Figure CN122221273B_ABST