软件测试中的信息安全问题  

The Information Security Protection in Software Testing

作　　者：王昱镔[1] 高博[1] 程楠[1] 吴薇[1] 

机构地区：[1]公安部第一研究所,北京100044

出　　处：《信息网络安全》2013年第5期1-4,共4页Netinfo Security

摘　　要：软件测试的整个生命周期,存在软件信息和相关文件交互、传输的安全风险,若缺少信息安全防护策略和技术上的支撑,会造成源代码等软件重要信息泄露,对软件安全造成威胁。文章根据软件测试过程的要求,分析了软件测试可能存在的安全威胁,提出了测试过程中的信息安全保护方法,确保软件测试安全。There are security risks in software information, documents interaction and transmission throughout the life cycle of software testing process. Lack of information security protection strategy and technical support will result in important information leakage, such as the source code leakage. All of these threaten the safety of software. In accordance with the information security requirements in the software testing process, possible security threats in software testing are analyzed, then the information security protection method during the software testing process is elaborated to ensure the safety of software testing in this oaoer.

关 键 词：软件测试 信息安全 测试过程 

分 类 号：TP311.53[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]