期刊文献+

基于EAI和AOP的软件安全测试及应用研究 被引量:18

Research and Application of Software Security Testing Based on EAI and AOP
下载PDF
导出
摘要 提高软件安全测试方法的易操作性和可复用性在软件工程中具有重要的研究意义。研究了一种用于测试软件安全的基于EAI模型(Environment Application Interaction Model)的软件错误注入测试方法,提出了基于面向方面编程(AOP)实现软件错误注入的安全测试模型(AOEAI)及其实现方法。对应用软件进行了实际测试,实验结果表明,该方法不仅是有效的,而且具有易操作性和可复用性强的特点。 Improving the easy operability and reusability of the software security testing method is important in software engineering. After introducing the security testing method of fault injection software testing based on EAI model, this paper presented a security testing model called as AOEAI and a method to carry out fault injection based on AOP. The testing results in application programs show that this method is not only effective, but also has the characteristics of easy operability and reusability.
出处 《计算机科学》 CSCD 北大核心 2009年第4期169-171,共3页 Computer Science
关键词 EAI模型 面向方面编程 软件安全测试 SQL注入攻击 EAI model, AOP, Software security testing, SQL injection attacks
  • 相关文献

参考文献8

  • 1单锦辉,姜瑛,孙萍.软件测试研究进展[J].北京大学学报(自然科学版),2005,41(1):134-145. 被引量:134
  • 2Du Wenliang, Mathur A P. Testing for software vul2 nerability using environment perturbation [J]. Quality and Reliability Engineering International, 2002,18 (3) : 261-272
  • 3曾凡平.一种基于EAI模型的软件安全测试方法[J].华中科技大学学报(自然科学版),2005,33(z1):304-305. 被引量:3
  • 4Kiezales G, Lamping J, Menhdhekar A, et al. Aspect-Oriented Programming [J]//Proceedings of ECOOP'97, Lecture Notes in Computer Science. Vol. 1241, Springer , 1997 : 220-242
  • 5Belblidia N, Debbabi M, Hanna A. AOP Extension for Security Testing of Programs[J] //Proceedings of the IEEE Canadian Conference on Electrical and Computer Engineering, CCECE' 2006. May 2006:647-650
  • 6Litehfield D,Anley C. The database hacker's handbook [M]. Wiley Publishing Inc, 2005
  • 7Anley C. Advanced SQL injection in SOL server applications [EB/OL]. http://www.creangel, corn/papers/advanced_sql-injection. pdf, An NGS Software Insight Security Research (NISR) Publication, 2002
  • 8AspectJ Web Site. http://www, eclipse, org/aspectj

二级参考文献57

  • 1赵元聪,朱三元.面向对象软件测试的认识[J].计算机应用与软件,1996,13(3):1-4. 被引量:19
  • 2[3]Du Wenliang,Mathur A P.Testing for software vulnerability using environment perturbation [J].Quality and Reliability Engineering International,2002,18(3):261-272
  • 3[4]Stevens W R.UNIX网络编程[M].施振川译.北京:清华大学出版社,2001.
  • 4[5]http://www.gd-info.com/down/info/139.htm
  • 5宫云战 刘海燕 万琳 等.软件测试性的分析与设计技术研究[A]..2000年全国测试学术会议(CTC2000)[C].北京,2000.271-274.
  • 6邵维忠 王立福 梅宏 等 见:杨芙清 何新贵主编.面向对象的软件测试--方法研究及系统设计[A].见:杨芙清, 何新贵主编.软件工程进展[C].北京: 清华大学出版社,1996.115-122.
  • 7Tracey N J. A Search-Based Automated Test-Data Generation Framework for Safety-Critical Software: [PhD thesis]. Department of Computer Science, University of York, 2000.
  • 8Korel B, Al-Yami A M. Assertion-Oriented Automated Test Data Generation. In: Proceedings of the 18^th International Conference on Software Engineering,Berlin:1996. 71-80.
  • 9Korel B, Al-Yami A M. Automated Regression Test Generation. In: Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis, Beach:1998. 143-152.
  • 10Weyuker E J. The Applicability of Program Schema Results to Programs. International Journal of Computer Information Sciences, 1979, 8(5): 387-403.

共引文献135

同被引文献42

引证文献18

二级引证文献89

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部