Cyber security testing with automated system message processing for input and result determination
Cyber security testing with automated system message processing for input and result determination is disclosed, including issuing, by a test tool, a call to an authorized service; identifying, by the test tool, one or more system-level error messages generated after issuing the call; determining, by the test tool based on at least one first system-level error message, a missing input for the call to the authorized service; and reissuing, by the test tool, the call to the authorized service with the missing input.
1. A method of cyber security testing with automated system message processing for input and result determination, the method comprising:
issuing, by a test tool, a first call to an authorized service;
identifying, by the test tool, one or more system-level error messages generated after the first call is issued;
determining, by the test tool based on at least a first system-level error message, a missing input for the first call to the authorized service; and
reissuing, by the test tool, the first call to the authorized service with the missing input.
2. The method of claim 1 , wherein the test tool is configured to test for cybersecurity vulnerability.
3. The method of claim 1 , wherein the authorized service is configured to access restricted resources not accessible by the test tool.
4. The method of claim 1 , wherein the test tool is initialized without awareness one or more required inputs for the first call.
5. The method of claim 1 , wherein the first system-level error message is parsed based on a recognized message identifier to determine the missing input.
6. The method of claim 1 , wherein the first system-level error message is generated by at least one of an operating system and a security system.
7. The method of claim 1 further comprising:
issuing, by the test tool, a second call to the authorized service;
identifying, by the test tool, one or more system-level error messages generated after the second call is issued; and
identifying, by the test tool based on at least one second system-level error message, a potential security vulnerability of the authorized service in relation to a test case.
8. The method of claim 7 , wherein the potential security vulnerability is identified based on a sequence of related system-level error messages.
9. The method of claim 7 , wherein the potential security vulnerability includes at least one of service availability and privilege escalation.
10. The method of claim 7 , wherein the second system-level error message is parsed based on a recognized message identifier, and wherein a timestamp parsed from the second system-level error message is correlated to the test case.
11. An apparatus for cyber security testing with automated system message processing for input and result determination, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed therein computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
issuing, by a test tool, a first call to an authorized service;
identifying, by the test tool, one or more system-level error messages generated after the first call is issued;
determining, by the test tool based on at least a first system-level error message, a missing input for the first call to the authorized service; and
reissuing, by the test tool, the first call to the authorized service with the missing input.
12. The apparatus of claim 11 , wherein the authorized service is configured to access restricted resources not accessible by the test tool.
13. The apparatus of claim 11 , wherein the test tool is initialized without awareness one or more required inputs for the first call.
14. The apparatus of claim 11 , wherein the first system-level error message is parsed based on a recognized message identifier to determine the missing input.
15. The apparatus of claim 11 , further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
issuing, by the test tool, a second call to the authorized service;
identifying, by the test tool, one or more system-level error messages generated after the second call is issued; and
identifying, by the test tool based on at least one second system-level error message, a potential security vulnerability of the authorized service in relation to a test case.
16. A computer program product for cyber security testing with automated system message processing for input and result determination, the computer program product comprising a computer readable storage medium having stored thereon computer program instructions that, when executed, cause a computer to carry out the steps of:
issuing, by a test tool, a first call to an authorized service;
identifying, by the test tool, one or more system-level error messages generated after the first call is issued;
determining, by the test tool based on at least a first system-level error message, a missing input for the first call to the authorized service; and
reissuing, by the test tool, the first call to the authorized service with the missing input.
17. The computer program product of claim 16 , wherein the computer program product further comprises computer program instructions that, when executed, cause the computer to carry out the steps of:
issuing, by the test tool, a second call to the authorized service;
identifying, by the test tool, one or more system-level error messages generated after the second call is issued; and
identifying, by the test tool based on at least one second system-level error message, a potential security vulnerability of the authorized service in relation to a test case.
18. The computer program product of claim 17 , wherein the potential security vulnerability is identified based on a sequence of related system-level error messages.
19. The computer program product of claim 17 , wherein the potential security vulnerability includes at least one of service availability and privilege escalation.
20. The computer program product of claim 17 , wherein the second system-level error message is parsed based on a recognized message identifier, and wherein a timestamp parsed from the second system-level error message is correlated to the test case.