一种基于EAI模型的软件安全测试方法

A method of fault injection software testing based on EAI model

研究了一种用于测试软件安全的基于EAI(Environment Application Interaction Model)模型的软件错误注入测试方法,提出了用包裹函数实现软件错误注入的安全测试方法及实现方法.对四个应用软件进行了实际测试,实验结果表明,该方法是有效的.

Software security testing is an important method to assure the security of information.In the Environment Application Interaction Model(EAI Model),a system is composed of an application and its running environment. By injecting faults into the environment,some errors may be triggered,thus the security of the software can be tested.In this paper,we introduce the security testing method of fault injection software testing based on EAI model.We present a security testing method to carry out fault injection based on wrap functions,and use the method to test four kinds of software.The results show that our method is efficient.