Web協(xié)同工作流的交互行為安全驗(yàn)證方法研究及應(yīng)用
發(fā)布時(shí)間:2018-08-04 22:13
【摘要】:隨著Web技術(shù)的快速發(fā)展,多角色的協(xié)同交互成為Web工作流系統(tǒng)的重要特征。針對(duì)Web協(xié)同工作流系統(tǒng)的用戶交互行為,其界面與元素通常不僅受到基于角色的靜態(tài)授權(quán)約束,還受到運(yùn)行時(shí)語境的動(dòng)態(tài)控制,因此必須進(jìn)行安全驗(yàn)證。傳統(tǒng)的驗(yàn)證工具,比如Selenium可以針對(duì)獨(dú)立的業(yè)務(wù)流程,進(jìn)行訪問控制的自動(dòng)化驗(yàn)證,但是缺乏針對(duì)Web工作流系統(tǒng)協(xié)同交互行為的安全驗(yàn)證方法;谝粋(gè)社區(qū)服務(wù)的Web協(xié)同工作流系統(tǒng)進(jìn)行安全驗(yàn)證的需求,本文提出一種基于關(guān)鍵字驅(qū)動(dòng)的協(xié)同任務(wù)調(diào)度(Keyword Driven Collaborative Tasks Scheduling,KDCTS)模型,并基于該模型設(shè)計(jì)了自動(dòng)化測(cè)試框架,將其應(yīng)用到實(shí)際的Web項(xiàng)目中,實(shí)現(xiàn)Web工作流協(xié)同交互行為的自動(dòng)化測(cè)試及安全驗(yàn)證。本文首先介紹了能夠?qū)崿F(xiàn)多角色協(xié)同任務(wù)自動(dòng)化測(cè)試的相關(guān)技術(shù),并對(duì)Web多角色系統(tǒng)的工作流進(jìn)行安全性驗(yàn)證需求分析。然后針對(duì)Web協(xié)同工作流系統(tǒng)中自動(dòng)化測(cè)試的難點(diǎn),采用關(guān)鍵字驅(qū)動(dòng)思想分解任務(wù),設(shè)計(jì)了一種面向協(xié)同工作流的KDCTS任務(wù)調(diào)度模型,該模型基于關(guān)鍵字的依賴配置,采用動(dòng)態(tài)代理技術(shù)在任務(wù)對(duì)象中動(dòng)態(tài)織入同步邏輯,實(shí)現(xiàn)了測(cè)試任務(wù)的協(xié)同調(diào)度。在該調(diào)度模型的基礎(chǔ)上,本文設(shè)計(jì)了一個(gè)面向協(xié)同工作流系統(tǒng)的自動(dòng)化測(cè)試框架,該框架采用關(guān)鍵字驅(qū)動(dòng),支持任務(wù)依賴的配置與解析,支持分布式的協(xié)同測(cè)試,測(cè)試腳本具備較好的復(fù)用性,最后在實(shí)際項(xiàng)目中進(jìn)行了安全驗(yàn)證與分析。最后通過驗(yàn)證表明KDCTS模型及其測(cè)試框架實(shí)現(xiàn),能夠有效實(shí)現(xiàn)對(duì)Web協(xié)同工作流系統(tǒng)交互行為的自動(dòng)化測(cè)試及安全驗(yàn)證,同時(shí)在復(fù)用性和易用性方面具有較好的表現(xiàn)。
[Abstract]:With the rapid development of Web technology, multi-role collaborative interaction has become an important feature of Web workflow system. For the user interaction behavior of Web collaborative workflow system, its interface and elements are not only restricted by role-based static authorization, but also dynamically controlled by runtime context, so security verification must be carried out. Traditional verification tools, such as Selenium, can automate the verification of access control for independent business processes, but there is a lack of security verification methods for collaborative interactions in Web workflow systems. Based on the requirement of a community service Web collaborative workflow system for security verification, this paper proposes a keyword-driven collaborative task scheduling (Keyword Driven Collaborative Tasks scheduling model, and designs an automated testing framework based on this model. It is applied to the actual Web project to realize the automated testing and security verification of collaborative interaction behavior of Web workflow. This paper first introduces the related technologies that can realize the automated testing of multi-role cooperative task, and analyzes the security verification requirements of the workflow of Web multi-role system. Then, aiming at the difficulties of automated testing in Web collaborative workflow system, a KDCTS task scheduling model for collaborative workflow is designed by using keyword driven decomposition method. The model is based on keyword dependent configuration. The synchronization logic is dynamically woven into the task object by using dynamic agent technology, and the cooperative scheduling of test task is realized. Based on the scheduling model, this paper designs an automated testing framework for collaborative workflow system. The framework uses keyword driven, supports task dependent configuration and parsing, and supports distributed collaborative testing. The test script has good reusability. Finally, the security verification and analysis are carried out in the actual project. Finally, it is proved that the KDCTS model and the implementation of its testing framework can effectively realize the automated testing and security verification of the interaction behavior of the Web collaborative workflow system. At the same time, it has a good performance in the aspects of reusability and ease of use.
【學(xué)位授予單位】:南京理工大學(xué)
【學(xué)位級(jí)別】:碩士
【學(xué)位授予年份】:2017
【分類號(hào)】:TP393.08
[Abstract]:With the rapid development of Web technology, multi-role collaborative interaction has become an important feature of Web workflow system. For the user interaction behavior of Web collaborative workflow system, its interface and elements are not only restricted by role-based static authorization, but also dynamically controlled by runtime context, so security verification must be carried out. Traditional verification tools, such as Selenium, can automate the verification of access control for independent business processes, but there is a lack of security verification methods for collaborative interactions in Web workflow systems. Based on the requirement of a community service Web collaborative workflow system for security verification, this paper proposes a keyword-driven collaborative task scheduling (Keyword Driven Collaborative Tasks scheduling model, and designs an automated testing framework based on this model. It is applied to the actual Web project to realize the automated testing and security verification of collaborative interaction behavior of Web workflow. This paper first introduces the related technologies that can realize the automated testing of multi-role cooperative task, and analyzes the security verification requirements of the workflow of Web multi-role system. Then, aiming at the difficulties of automated testing in Web collaborative workflow system, a KDCTS task scheduling model for collaborative workflow is designed by using keyword driven decomposition method. The model is based on keyword dependent configuration. The synchronization logic is dynamically woven into the task object by using dynamic agent technology, and the cooperative scheduling of test task is realized. Based on the scheduling model, this paper designs an automated testing framework for collaborative workflow system. The framework uses keyword driven, supports task dependent configuration and parsing, and supports distributed collaborative testing. The test script has good reusability. Finally, the security verification and analysis are carried out in the actual project. Finally, it is proved that the KDCTS model and the implementation of its testing framework can effectively realize the automated testing and security verification of the interaction behavior of the Web collaborative workflow system. At the same time, it has a good performance in the aspects of reusability and ease of use.
【學(xué)位授予單位】:南京理工大學(xué)
【學(xué)位級(jí)別】:碩士
【學(xué)位授予年份】:2017
【分類號(hào)】:TP393.08
【相似文獻(xiàn)】
相關(guān)期刊論文 前9條
1 胡寧;底恒;;Web Service消息安全驗(yàn)證機(jī)制[J];開封大學(xué)學(xué)報(bào);2006年04期
2 徐和祥;張永忠;胡運(yùn)發(fā);;一種安全驗(yàn)證模式下Deep Web爬蟲的研究[J];計(jì)算機(jī)應(yīng)用與軟件;2010年05期
3 白雪;吳長(zhǎng)江;楊e,
本文編號(hào):2165329
本文鏈接:http://sikaile.net/guanlilunwen/ydhl/2165329.html
最近更新
教材專著