摘要
针对目前Web系统的性能、安全和功能缺陷,提出一种"安全+性能+功能"测试与系统诊断相结合的测试方案。系统运行时全面测试性能,包括网络连接、数据库与应用服务器;然后测试系统的功能模块;采用先扫描再攻击的方法发现系统的漏洞与脆弱点;重点对系统的脆弱点进行诊断,全面分析后提出解决方案。使用湖北软件测试平台的测试工具构造测试实例,对某些大型Web网络系统进行了测试,实验结果表明,只有经过全方位检测和诊断后的系统才能得到更好应用。
Aimed at the problem of web system performance, security and function defect, a ＂security＋performance＋ftmction＂ test pattern is proposed to detect and diagnose the system comprehensively. Firstly, it tests system performance, including network, system database and application server, and then it tests system function models. Furthermore, it scans and attacks system vulnerabilities. If there are some problems, it is able to diagnose them and provide solution. Some web systems are tested by automation test tools of Hubei software testing platform. As a result, the web system can be applied better by users only after test and diagnostics overall.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第22期4798-4801,共4页
Computer Engineering and Design
基金
河南省科技厅省基础与前沿技术研究基金项目(102300410110)
中小企业公共技术服务机构补助基金项目(08C26244202133)
郑州轻工业学院博士基金项目(200903)
河南教育厅自然科学研究计划基金项目(2009A510015)
关键词
WEB
测试
安全
脆弱点
诊断
web
test
security
vulnerability
diagnostics
