| With the development of network technology, Web product has been playing a more and more important role in daily life as well as great challenge to related testing work because of its large user groups, diverse operating system and high update speed. However, the current manual testing has been unable to meet the increasingly complex test requirements, not only in efficiency but also the testing coverage. Therefore, automation test turns to be trend for technological development. With extensive application of Web products, network security has also become the focus of attention. In this context, which makes how to find existing security risk in Web products as early as possible during developing period become the urgent needs of Web product developer. But the low level of security automation testing for the Web product in domestic as well as foreign software companies wastes available testing resources in the enterprise and raises testers'work pressure, while work efficiency is reduced.Based on the actual needs of enterprises as well as application context of security testing for Web products, in order to improve the existing test system and to achieve Web product security test automation as well as to improve the efficiency of the tester and the problem that security group creates test cases repeatedly, an automation testing system to scan for security problems in Web products is designed and implemented in this thesis. Effectively integrating the existing software and hardware resources within the enterprise and using XML, Java, Python, SQL and other programming Languages, based on open source testing framework STAF and existing test components (including RFT testing tool, AppScan testing tool and DB2 database, etc.), this testing system implements automation testing activities. Because of cross-platform feature of STAF framework, the automated test system supports a variety of testing platforms as well as distributed deployment test environment, which also makes it easy for users to use and expand. The writer's work mainly concludes two aspects as following:1. According to test requirements and process, system functions are designed for this testing system, including test product installation, test script generation, test script and test data archiving. Meanwhile, in order to achieve better integration of test components, improved reusability of the testing process and less cost for roll back operation under error condition, a test workflow is designed and divided into 8 parts according to the generation and transmission of test data. Within this test workflow, the test functions can be combined more organically, error handling and related log files storage of test components can be more flexible.2. Code and implement system functions as well as testing workflow according to system design. During automated test system implementation process. in order to undertake the testing process and to achieve the transmission and conversion of data between test components, as well as to pool and share test data between different test groups within the company, this thesis implements extended test suite Httplnterceptor and database services DB Service, what both play a link role in the test system, which verifies scalability of the test system.Through the application of practical work, comparing to the traditional manual testing methods and semi-automated testing, efficiency and the usefulness of automated test system have been improved. At the same time, the pooling and sharing of test data are also archieved. |
PDF Full Text Request