基于SDL的软件安全测试方法研究

提出了一种基于软件安全开发生命周期（SDL）的软件安全测试方法,把现有单一的软件安全测试环节变为有计划的安全测试设计、安全编码测试、安全审计测试和上线安全测试的过程,并给出了详细的模块设计和方法分析。与传统方法相比,这种系统化的安全测试思想可以有效地降低软件成型后的测试成本,减少测试后补丁的研发数量,从而进一步提高开发效率。

Research on SDL-based Software Security Testing Method

In order to change single software security testing into a planned process consisting of security testing design, security coding testing, security audit testing and online security testing, this paper proposes a software security testing method based on software development lifecycle （SDL）, and describes its modules design and method analysis in detail. Compared with the traditional methods, the systematic test idea used by the method can effectively reduce the huge cost of testing after the software accomplished and the numbers of patches after the test, further improve the development efficiency.