CAJ | 학술논문

针对现有的渗透测试模型未考虑到移动互联网环境下的一些安全漏洞问题，本文提出了移动互联网web应用的渗透测试模型。该模型对移动互联网环境下渗透测试所涉及的各个模块进行系统的管理，并根据该渗透测试模型对手机银行业务进行了实际测试，测试结果表明该模型在提高渗透测试效率上具有有效性。
침대현유적삼투측시모형미고필도이동호련망배경하적일사안전루동문제，본문제출료이동호련망web응용적삼투측시모형。해모형대이동호련망배경하삼투측시소섭급적각개모괴진행계통적관리，병근거해삼투측시모형대수궤은행업무진행료실제측시，측시결과표명해모형재제고삼투측시효솔상구유유효성。
Aiming at some mobile Internet web application security vulnerabilities, a penetration testing model for mobile Internet web application is designed in the paper. The model takes the system management of test modules that are included in penetration testing process. Then an actual test of the mobile phone banking is taken based on this penetration testing model and shows that the model is effective to some extent.