Abstract: With the fast development of electric energy spot online trading, the new business functions of the power metering system will be deployed constantly. In order to avoid the quality problems of sourse codes after the system version is updated and upgraded, resulting in the economic loss and social impact caused by online business interruption, an intelligent security test platform for power metering system is designed. Based on this platform, the system operation and maintenance personnel only need to move their fingers and to obtain the source codes uploaded by the software development team, then to execute the runnable instructions, the platform can automatically complete the vulnerability scanning testfor the code security and generate the visual analysis report of the code security level, so as to realize the code security vulnerability test and quality control before the version update of the metering system.

Key words: intelligent security test, metering system, SonarQube, security vulnerability scanning, security bug

摘要： 随着电能现货网上交易的快速发展，计量系统新业务功能不断投运，为了避免系统版本更新升级后出现源代码质量问题，导致网上业务中断所带来的经济损失和社会影响，设计一个电能计量系统智能安全测试平台，依据此平台，系统运维人员只需动动手指，获取由软件开发团队上传的源代码，执行可运行指令，就可自动完成代码的安全漏洞扫描测试和生成可视化代码安全等级分析报告，从而实现对计量系统版本更新升级前的代码安全漏洞测试和质量控制。

关键词: 智能安全测试, 计量系统, SonarQube, 安全漏洞扫描, 安全缺陷