摘要： 环境错误注入是一种动态的测试软件脆弱性的技术,建立在对系统脆弱性分类模型的基础上,通过选择一个恰当的错误模型,测试系统有意识地触发软件内部存在的安全漏洞。该测试方法对于通常使用的静态检测方法,是一种重要的补充。文章论述了环境错误注入系统的一种实现机制。

关键词: 错误注入, 软件测试, 脆弱性

Abstract: Environment fault injection is a kind of dynamic automated vulnerability testing technology. Based on system vulnerability classification model, people can choose a proper fault model, then trigger the vulnerabilities that exist inside software. The testing technology is an important supplement to ordinary static testing technology such as source code scanning. The article describes a kind of software fault injection implementation.

中图分类号: 

• TP311.52