Safety test method and device based on product function test case

Abstract

The invention discloses a safety test method and device based on a product function test case, and relates to the technical field of computers. One specific embodiment of the method comprises the following steps: capturing a function test case in a local area network; classifying the grabbed functional test cases according to the product identifiers; and determining a corresponding function test case from the classified function test cases according to an identifier of a to-be-tested product, and performing safety scanning on the to-be-tested product based on the determined function test case.According to the method, the safety test and the function test are synchronously carried out, the project period is greatly shortened, and the vulnerability repair cost of research and development engineers is also greatly reduced. And moreover, the safety test is performed based on the test case of the function test, so that the test accuracy can be improved.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method and device for safety testing based on product function test cases. Background technique [0002] Security testing is the process of inspecting the product to verify that the product meets the definition of security requirements and product quality standards during the life cycle of IT software products, especially from the basic completion of product development to the release stage. Existing security testing is to conduct black-box or white-box security testing according to the test requirements document provided by the product manager or the technical document provided by software development after the business team submits the security test application. However, for large enterprises, especially large Internet companies, with many business lines, it is difficult for the security team to have the energy to cover all requests from all business lines, and they cannot ...

AI Technical Summary

Problems solved by technology

[0003] In the implementation process of the above-mentioned prior art, there are the following problems: due to the factor of professional division of labor (the security team is not the developer), it is difficult for security testers to ensure that they have enough time to understand the business process and test requirements specification like business testers; The security test of the prior art is a black-box security test, and black-box security testing must verify whether each system function point has a security risk, but before the functional test is completed, it is difficult to guarantee the usability of the system function, so Functional testing and security testing cannot be guaranteed to be carried out at the same time, which delays the project cycle; product security testing through artificially fabricated data does not fit the product process well and affects the accuracy of the test

Images