Web協(xié)同工作流的交互行為安全驗證方法研究及應(yīng)用
發(fā)布時間:2018-08-04 22:13
【摘要】:隨著Web技術(shù)的快速發(fā)展,多角色的協(xié)同交互成為Web工作流系統(tǒng)的重要特征。針對Web協(xié)同工作流系統(tǒng)的用戶交互行為,其界面與元素通常不僅受到基于角色的靜態(tài)授權(quán)約束,還受到運行時語境的動態(tài)控制,因此必須進(jìn)行安全驗證。傳統(tǒng)的驗證工具,比如Selenium可以針對獨立的業(yè)務(wù)流程,進(jìn)行訪問控制的自動化驗證,但是缺乏針對Web工作流系統(tǒng)協(xié)同交互行為的安全驗證方法;谝粋社區(qū)服務(wù)的Web協(xié)同工作流系統(tǒng)進(jìn)行安全驗證的需求,本文提出一種基于關(guān)鍵字驅(qū)動的協(xié)同任務(wù)調(diào)度(Keyword Driven Collaborative Tasks Scheduling,KDCTS)模型,并基于該模型設(shè)計了自動化測試框架,將其應(yīng)用到實際的Web項目中,實現(xiàn)Web工作流協(xié)同交互行為的自動化測試及安全驗證。本文首先介紹了能夠?qū)崿F(xiàn)多角色協(xié)同任務(wù)自動化測試的相關(guān)技術(shù),并對Web多角色系統(tǒng)的工作流進(jìn)行安全性驗證需求分析。然后針對Web協(xié)同工作流系統(tǒng)中自動化測試的難點,采用關(guān)鍵字驅(qū)動思想分解任務(wù),設(shè)計了一種面向協(xié)同工作流的KDCTS任務(wù)調(diào)度模型,該模型基于關(guān)鍵字的依賴配置,采用動態(tài)代理技術(shù)在任務(wù)對象中動態(tài)織入同步邏輯,實現(xiàn)了測試任務(wù)的協(xié)同調(diào)度。在該調(diào)度模型的基礎(chǔ)上,本文設(shè)計了一個面向協(xié)同工作流系統(tǒng)的自動化測試框架,該框架采用關(guān)鍵字驅(qū)動,支持任務(wù)依賴的配置與解析,支持分布式的協(xié)同測試,測試腳本具備較好的復(fù)用性,最后在實際項目中進(jìn)行了安全驗證與分析。最后通過驗證表明KDCTS模型及其測試框架實現(xiàn),能夠有效實現(xiàn)對Web協(xié)同工作流系統(tǒng)交互行為的自動化測試及安全驗證,同時在復(fù)用性和易用性方面具有較好的表現(xiàn)。
[Abstract]:With the rapid development of Web technology, multi-role collaborative interaction has become an important feature of Web workflow system. For the user interaction behavior of Web collaborative workflow system, its interface and elements are not only restricted by role-based static authorization, but also dynamically controlled by runtime context, so security verification must be carried out. Traditional verification tools, such as Selenium, can automate the verification of access control for independent business processes, but there is a lack of security verification methods for collaborative interactions in Web workflow systems. Based on the requirement of a community service Web collaborative workflow system for security verification, this paper proposes a keyword-driven collaborative task scheduling (Keyword Driven Collaborative Tasks scheduling model, and designs an automated testing framework based on this model. It is applied to the actual Web project to realize the automated testing and security verification of collaborative interaction behavior of Web workflow. This paper first introduces the related technologies that can realize the automated testing of multi-role cooperative task, and analyzes the security verification requirements of the workflow of Web multi-role system. Then, aiming at the difficulties of automated testing in Web collaborative workflow system, a KDCTS task scheduling model for collaborative workflow is designed by using keyword driven decomposition method. The model is based on keyword dependent configuration. The synchronization logic is dynamically woven into the task object by using dynamic agent technology, and the cooperative scheduling of test task is realized. Based on the scheduling model, this paper designs an automated testing framework for collaborative workflow system. The framework uses keyword driven, supports task dependent configuration and parsing, and supports distributed collaborative testing. The test script has good reusability. Finally, the security verification and analysis are carried out in the actual project. Finally, it is proved that the KDCTS model and the implementation of its testing framework can effectively realize the automated testing and security verification of the interaction behavior of the Web collaborative workflow system. At the same time, it has a good performance in the aspects of reusability and ease of use.
【學(xué)位授予單位】:南京理工大學(xué)
【學(xué)位級別】:碩士
【學(xué)位授予年份】:2017
【分類號】:TP393.08
[Abstract]:With the rapid development of Web technology, multi-role collaborative interaction has become an important feature of Web workflow system. For the user interaction behavior of Web collaborative workflow system, its interface and elements are not only restricted by role-based static authorization, but also dynamically controlled by runtime context, so security verification must be carried out. Traditional verification tools, such as Selenium, can automate the verification of access control for independent business processes, but there is a lack of security verification methods for collaborative interactions in Web workflow systems. Based on the requirement of a community service Web collaborative workflow system for security verification, this paper proposes a keyword-driven collaborative task scheduling (Keyword Driven Collaborative Tasks scheduling model, and designs an automated testing framework based on this model. It is applied to the actual Web project to realize the automated testing and security verification of collaborative interaction behavior of Web workflow. This paper first introduces the related technologies that can realize the automated testing of multi-role cooperative task, and analyzes the security verification requirements of the workflow of Web multi-role system. Then, aiming at the difficulties of automated testing in Web collaborative workflow system, a KDCTS task scheduling model for collaborative workflow is designed by using keyword driven decomposition method. The model is based on keyword dependent configuration. The synchronization logic is dynamically woven into the task object by using dynamic agent technology, and the cooperative scheduling of test task is realized. Based on the scheduling model, this paper designs an automated testing framework for collaborative workflow system. The framework uses keyword driven, supports task dependent configuration and parsing, and supports distributed collaborative testing. The test script has good reusability. Finally, the security verification and analysis are carried out in the actual project. Finally, it is proved that the KDCTS model and the implementation of its testing framework can effectively realize the automated testing and security verification of the interaction behavior of the Web collaborative workflow system. At the same time, it has a good performance in the aspects of reusability and ease of use.
【學(xué)位授予單位】:南京理工大學(xué)
【學(xué)位級別】:碩士
【學(xué)位授予年份】:2017
【分類號】:TP393.08
【相似文獻(xiàn)】
相關(guān)期刊論文 前9條
1 胡寧;底恒;;Web Service消息安全驗證機(jī)制[J];開封大學(xué)學(xué)報;2006年04期
2 徐和祥;張永忠;胡運發(fā);;一種安全驗證模式下Deep Web爬蟲的研究[J];計算機(jī)應(yīng)用與軟件;2010年05期
3 白雪;吳長江;楊e,
本文編號:2165329
本文鏈接:http://sikaile.net/guanlilunwen/ydhl/2165329.html
最近更新
教材專著