LEVERAGING PERSISTENT IDENTITIES IN WEBSITE TESTING

摘要

A system and method for dynamically scanning one or more features on a Website. The system allows detecting of stored scripting errors, where an attack or injection occurs on a page or feature that results in executing malicious code by another page or feature. The system uses stored test identities and allows testing reuse.

主权项

1. A method comprising:
creating a plurality of test identities that includes a first test identity and a second test identity, wherein the plurality of test identities are used for testing purposes and do not represent users of an online system that comprises a first feature and a second feature; maintaining a testing database comprising a first set of tests associated with the first feature and a second set of tests associated with the second feature; modifying a first attribute associated with the first test identity to create a modified first attribute; after modifying the first attribute, executing the first set of tests associated with the first feature; returning a pass condition when executing, based on the modified first attribute associated with the first test identity and the plurality of test identities, the first set of tests associated with the first feature; after modifying the first attribute, executing the second set of tests associated with the second feature; and returning a failure condition when executing, based on the modified first attribute and the plurality of test identities, the second set of tests associated with the second feature.