软件安全性测试方法与工具  

Software security testing methods and tools

作　　者：施寅生[1] 邓世伟[1] 谷天阳[1] 

机构地区：[1]北京系统工程研究所,北京100101

出　　处：《计算机工程与设计》2008年第1期27-30,共4页Computer Engineering and Design

摘　　要：软件的应用越来越广泛,规模和复杂度不断提高,软件中的安全缺陷与漏洞也在不断增多,软件安全性问题日益突出。软件安全性测试是保证软件安全性、降低软件安全风险的重要手段。论述了软件安全性测试的特点、内容,重点研究了国内外软件安全性测试的主要方法与工具,分析了各种方法的优缺点与适用范围,提出了一种安全性测试工具的分类方法,总结了当前研究工作并指出了未来软件安全性测试技术的研究重点与发展方向。Software applications have become wider and the size and complexity has been ever-increasing. Security flaws and vulnerabilities in the software are growing. Software security problems have become increasingly prominent. Software security testing is an important means to ensure software security and decrease security risks. The main features and content of software security testing is discussed, and the major methods and tools of domestic and foreign software security testing are investigated the advantages and disadvantages of various methods and the scope of application are analyzed, a classification of security testing tools is presented. In conclusion, the present study is summarized and future focus and development directions of software security testing technology are pointed out

关 键 词：安全性测试 安全功能测试 安全漏洞测试 语法测试 模糊测试 

分 类 号：TP311.51[自动化与计算机技术—计算机软件与理论]