Design And Implementation Of Automated Testing Plat-form For Password Recovery System

Password recovery system is widely used in electronic forensics and other fields.It has many characteristics,such as a large number of password hash algorithms,complex password guessing methods and a large scale of software.The automated testing of its function and performance becomes an important guarantee to improve the reliability of this kind of software.The automated software testing technology begins to occupy an increasingly important positition in the field of software testing.However,most of automated testing tools or frameworks for the black-box testing in the industry are developed for the Web software or common system software,the automated testing tools or frameworks for password recovery system are basically not reported.So,this paper designs and develops an automated testing platform for password recovery system.By analyzing and abstracting the original manual testing workflow and requirements,using the idea of data-driven automated testing framework for reference,this automated testing platform uses XML based unified file format to describe the testing task including testing functions and data,and develops the plaintext generation subsystem,ciphertext generation subsystem,external interface subsystem and multiple subsystems including test case management database.This automated testing platform supports four password guessing methods: brute method,mangled wordlist method,hot word and structure method,and mangled hot word and structure method,as well as the correctness and performance testing of 163 password hash algorithms including original hash and demormation,document,operating system,database,identity authentication hash,network protocol,bolg forum,enterprise application software,etc.Finally,the test case management database is used to store and manage a large number of testing data,which is convenient for user to search and reuse in regression testing.The practical application to a password recovery system shows that the automated testing platform can generate 10 million random plaintext data in 100 seconds,and accomplish the task that the large-scale data can not be generated manually in a short time.In addition,the automated correctness testing found the problems and defects of nine password hash algorithms in the password recovery system.The practice proved that the automated testing platform can replace the inefficient manual testing and greatly improve the efficiency of tesing for the password recovery system.