Method for detecting unauthorized access vulnerability of power mobile application

Abstract

The invention discloses a method for detecting an unauthorized access vulnerability of a power mobile application. The method comprises the steps of obtaining and storing all the user types of the mobile application and the user number corresponding to each user type; constructing http requests aiming at the same operation of different users in the same user type, modifying the http request of one user, sending the modified request to a server-side and analyzing an execution result to detect parallel unauthorized access vulnerabilities; constructing http requests of different users in different user types, modifying the http requests which can be executed by users in certain user types, but cannot be executed by users in other types, sending the modified requests to the server-side, and analyzing the execution results to detect the unauthorized access vulnerabilities; and comprehensively detecting the discovered vulnerabilities and finishing the unauthorized access vulnerability detection. The method for detecting the unauthorized access vulnerability of the power mobile application is used for performing safety assessment on the mobile application in an integrated testing stage and provides support for reducing the safety risk of the mobile application and improving the safety of the mobile application.

Description

technical field [0001] The invention belongs to the technical field, and in particular relates to a method for detecting an unauthorized access vulnerability of an electric power mobile application. Background technique [0002] In recent years, under the background of the rapid development of Internet information technologies such as the Internet of Things and cloud computing, power mobile applications have entered a stage of comprehensive construction. At present, in various fields such as power marketing, on-site operations, data collection, and mobile office, mobile applications are being constructed and promoted to reduce operating costs and improve work efficiency. [0003] With the rapid development of mobile applications, its information security issues have also received more and more attention. If the security vulnerabilities generated in the process of requirements, design, and development of mobile applications are not found and rectified during the integration t...

AI Technical Summary

Problems solved by technology

[0004] In order to overcome the deficiencies in existing automated security testing tools and improve the security of mobile applications, the present invention proposes a method for detecting unauthorized access vulnerabilities in power mobile applications, which solves the problem that existing automated vulnerability testing tools cannot detect such logical loopholes as unauthorized access It can be used to detect unauthorized access vulnerabilities in the integration testing stage before the mobile application goes online, and provide support for the security construction of mobile applications

Images