The invention relates to a
penetration test method and
system for mobile applications of a swan monk
system, and the method comprises the steps: obtaining a current version installation
package, extracting static asset data, and capturing dynamic behavior data; constructing a
threat model for the gap distributed architecture; generating a
penetration test case set through the
threat model, and deploying and executing the
penetration test case set; inputting the heterogeneous security
telemetry data into the
risk identification model, and executing a preset corresponding
processing strategy; generating a penetration
test report based on the risk judgment information and the execution result of the
processing strategy; in conclusion, according to the penetration testing method and
system for the mobile application of the swan-mong system, the
threat model for the swan-mong distributed architecture is constructed, and the dynamic
stain tracking and fuzzy testing technology is integrated, so that the cross-
equipment safety risk is systematically detected; the method has the effects of effectively identifying the cross-equipment security threats in the swan-gap distributed architecture and improving the comprehensiveness and accuracy of the penetration test.