基于业务分析的应用安全综合测试

Application Safety Comprehensive Test Based on Business Analysis

以应用系统的使用者视角,利用业务流程分析的方法剖析交互细节并在数据全生命周期过程进行跟踪与安全分析。采用表单的方式对分析过程进行详细的记录,过程数据可用于安全大数据分析,最终交付数据可指导应用开发人员进行问题修复和丰富知识库。此方法是将现有的分析和测试方法进行组合,通过相对标准化的实施规范和支撑文档确保测试结果。并可在测试工期较短或工期变更的情况下,灵活地调整测试范围和测试方法确保测试顺利开展。

From the aspect of application system user, interaction detail is analyzed with business process analysis method, is also traced and analyzed in the lifecycle of the data. The analysis procedure is recorded with the forms, the procedure data can be used to big data safety analysis. The final delivery data can guide the application developer to repair the problem and enrich knowledge base. The above method combines the available analysis and testing methods, the relative standardized implemen- tation specifications and supporting documents are used to support the testing result. When the testing period is short or changed, the testing method and testing scope are adjusted to ensure the smooth going of the testing.