关键词: 信息安全测试, 测试用例, 本体, 测试用例模型, 安全测试知识

Abstract: In information security testing activities, information security test cases play a crucial role in the objectivity and validity of test results. The construction of the information security test case library is one of the key and difficult points in information security testing and test automation. At present, there is no applicable information security test case library that can effectively support the development of information security testing activities. The information security test case library model based on ontology classifies the domain knowledge of information security test cases on the basis of the formal description of information security test cases, and constructs a shared, reusable and extensible information security test case ontology model. According to the built ontology model, the knowledge of SQL injection test cases in Web application security testing is obtained, which verifies the correctness and effectiveness of the model.

Key words: information security testing, test case, ontology, test case model, security test knowledge