Optimizing test data payload selection for testing computer software applications via computer networks
View Patent ↗Testing a computer software application by configuring a first computer to execute a copy of data-checking software used by a computer software application at a second computer, processing a first copy of a test data payload using the data-checking software at the first computer, where the test data payload is configured to test for an associated security vulnerability, determining that the first copy of the test data payload is endorsed by the data-checking software at the first computer for further processing, and sending a second copy of the test data payload via a computer network to the computer software application at the second computer for processing threat.
1. A method for testing a computer software application, the method comprising:
providing, to a first computer, a copy of data-checking software from a second computer, the data-checking software used by a computer application at the second computer;
configuring the first computer to execute the copy of data-checking software used by the computer software application at the second computer;
processing a first copy of a test data payload using the data-checking software at the first computer, wherein the test data payload is configured to test for an associated security vulnerability;
determining that the first copy of the test data payload is endorsed by the data-checking software at the first computer for further processing; and
sending a second copy of the test data payload via a computer network to the computer software application at the second computer for processing threat.
2. The method according to claim 1 and further comprising identifying the data-checking software used by the computer software application.
3. The method according to claim 2 wherein the identifying comprises determining that the data-checking software is any of a sanitizer and a validator.
4. The method according to claim 2 and further comprising instrumenting the computer software application to perform the identifying.
5. The method according to claim 1 wherein the processing comprises processing wherein the test data payload is stored at the first computer.
6. The method according to claim 1 wherein the processing comprises processing wherein the test data payload includes a malicious payload designed to exploit the security vulnerability.
7. The method according to claim 1 wherein the determining comprises determining that the first copy of the test data payload is configured to test for its associated security vulnerability after being processed by the data-checking software at the first computer.
8. The method according to claim 1 wherein the configuring, processing, determining, and sending are performed wherein the computer software application is a web application.