Mobile application automation security testing platform

Abstract

A mobile application automation security testing platform is used for detecting security of Android applications, so as to verify whether the Android applications coincide with security standards. The platform is capable of performing component analysis on an application installed on an Android system, and by means of an exposed component, determining an attack surface, carrying out a penetration test, and mining out a vulnerability of the application in depth, wherein a coverage of the test comprises an authentication bypass test, an SQL impregnation test, insecurity of data storage and reading of a file system and the like. During a test process, acquisition of a root permission of a mobile phone terminal is not required, and it can be ensured that the mobile phone terminal interacts with other application and operating systems as a common Android application. Different from an automated scanning tool of a web field, the testing platform is an interactive security testing platform, and during a use process, the user only needs to input a command on a working state (PC terminal) of the user, and the command is transferred to a proxy program on an Android device via a connection of a port and executed, so as to complete the whole security test.

Description

technical field [0001] The invention belongs to the field of software testing and relates to the technical field of automation. Background technique [0002] Mobile terminals and applications continue to be promoted in various business systems of enterprises, so that the office is no longer limited by time and place, which greatly improves work efficiency. While it brings many conveniences, the security of enterprise information is also paid more attention to. The business data and sensitive information contained in mobile APPs are facing more threats, and the security issues of mobile APPs are becoming more and more prominent, such as: mobile APPs are attacked by cross-site scripting during use, sensitive data is stolen, codes are illegally tampered with, and passwords are cracked Wait. In the face of these threats, it is very necessary to be able to find a fast and convenient mobile application security testing solution. [0003] For the security testing of mobile applic...

AI Technical Summary

Problems solved by technology

On the other hand, based on the characteristics of mobile applications that are not controlled by time and place, and the open source code of the Android system, the probability of its application program being damaged is greatly increased, and the focus of software security testing is still relatively mature. Web security research has led to the slow development of mobile application security testing technology

Images