Web应用程序中输入验证测试研究综述

Review of Research on Input Validation Testing in Web Applications

在互联网时代,Web应用发展迅猛并且正在成为许多领域的核心业务。输入验证对Web应用程序的安全性和正确性一直起着重要的作用。网络黑客常常利用输入验证功能的漏洞攻击应用系统,造成信息泄露和系统破坏的严重后果。客户端输入验证功能的错误可能导致无法请求服务器或者无效输入请求服务器引起系统崩溃。输入验证功能无疑是Web应用程序软件测试的一个重要关注点,对近些年来输入验证技术的发展进行来概述,提出目前输入验证技术所面临的问题,并对未来的研究方向进行展望。

In the Internet era,Web applications are developing rapidly and are becoming the core business in many fields.Input verification plays animportant role in the security and correctness of Web applications.Network hackers often use the vulnerability of input verification functionto attack application systems,resulting in serious consequences of information disclosure and system damage.An error in the client inputverification function may result in failure to request the server or invalid input request server,causing the system to crash.Input verifica-tion function is undoubtedly an important focus of Web application software testing.This paper summarizes the development of input verifi-cation technology in recent years,and puts forward the problems faced by input verification technology at present and prospects the futureresearch direction.