Service Introduction

Information System WebSecurity Vulnerability ScanIt is a professional detection service for identifying security vulnerabilities and conducting risk assessment in Web application systems. The aim is to discover security vulnerabilities, security configuration flaws and potential attack risks existing in the system, reduce the risks of network attacks and data leaks, and enhance the overall security protection capabilities of the system.

Our evaluation institution is based on GB/T 25000.51-2016 "System and Software Engineering - System and Software Quality Requirements and Evaluation (SQuaRE) - Part 51: In accordance with the "Quality Requirements and Test Details for Ready Available Software Products (RUSP)" and relevant cybersecurity technical specifications, a combination of automated scanning and manual review is adopted to conduct security vulnerability detection on Web applications. Focus on verifying the following Web security risks, conduct risk rating, impact analysis and rectification suggestions for vulnerabilities, and ultimately form a standardized WebSecurity Vulnerability Scan<Software Test Report"."

The Web security risks are as follows:

SQL Injection

Cross-site Scripting (XSS

File upload

Command execution

Identity authentication

Access Control

Leakage of sensitive information

Security configuration

Information System WebSecurity Vulnerability ScanIt is applicable to scenarios such as information system construction, security checks before system launch, security patrols, rectification for level protection, security operation and maintenance, and special network security inspections in industries including government, enterprises and institutions, finance, healthcare, education, energy, and the Internet.

Independent third-party testing can help construction units promptly grasp the security status of Web applications, providing an objective basis for vulnerability repair, security reinforcement and continuous secure operation. It is an important technical means to ensure the safe and stable operation of information systems.

Test range

Test basis and cycle

Test basis

In accordance with GB/T 25000.51-2016 "Systems and Software Engineering - Systems and Software Quality Requirements and Evaluation (SQuaRE) - Part 51: Quality requirements and test details for ready-to-use software products (RUSP)", requirements specification, contracts, design documents, etc.

Test cycle

It takes 5 to 15 working days. Special requests can be expedited.

Testing process

  1. 01

    Demand communication

    Confirm the system scope, acceptance objectives and report purposes.

  2. 02

    Data review

    Sort out contracts, requirements, configuration items and deployment materials.

  3. 03

    Formulate a plan

    Form an assessment plan, use cases and execution arrangements.

  4. 04

    Carry out the test

    Conduct a tripartite evaluation and verification of the configuration items in accordance with the standards.

  5. 05

    Deliver the report

    Issue test reports and support acceptance and archiving.

Output results

Testing Report

Software Test Report

CNAS CMA
Purpose of the report Acceptance, auditing, bidding and tendering
Report content Test conclusions, basis, and records
Service recipients Government agencies, universities, enterprises and public institutions
Delivery method Electronic scanned copy, paper version
Cover example of CMA/CNAS software test report

Authority

Form a reviewable third-party testing conclusion based on the CNAS national accredited laboratory qualification, testing basis and execution records.

Traceable

Retain records of test cases, software defects, retests and inspection results, and adapt to the archiving of information-based acceptance materials.

It can be placed on the ground

The software test report expression is oriented towards review, expert acceptance and project management units, reducing the cost of secondary interpretation.

Service advantages

CMA/CNAS national recognized testing capabilities

Establish standardized processes around software evaluation, informatization acceptance, and the delivery of third-party software test reports. The reports should be clearly expressed, facilitating review and archiving.

1000+ Cumulative issuance of reports
30+ Covering industry fields
99% Report acceptance pass rate
10"Year +" Experience in testing services

CMA/CNAS qualification

The report is stamped with the CMA metrological certification and CNAS accreditation marks, which have legal effect and directly meet the requirements for project acceptance and auditing.

Independent third party

The testing institution has no interest connection with the developer or the client. The testing process operates independently and the conclusions are true and reliable.

Fair and objective

Strictly in accordance with national standards and contractual agreements, the test conclusions are not subject to interference by the client and can stand up to review and re-examination.

Serve the whole country

Support remote and on-site detection of software projects across the country, standardize service processes, and ensure consistent report quality.

Relevant successful cases

Security testing of the information system for the provincial platform project of performance Evaluation of public hospitals in Gansu Province

Security testing of the information system for the provincial platform project of performance Evaluation of public hospitals in Gansu Province

The provincial platform project V2.8.5 for public hospital performance assessment conducted information system security testing. The testing work was carried out from two aspects: security function acceptance and web application vulnerability scanning. Through strict execution of the tests, including the initial test and regression test, a software evaluation report was issued.
The functional and information system security acceptance test of the "Ecological Cloud" Comprehensive Service Platform project of Shaanxi Provincial Forestry Investigation and Planning Institute

The functional and information system security acceptance test of the "Ecological Cloud" Comprehensive Service Platform project of Shaanxi Provincial Forestry Investigation and Planning Institute

The "Ecological Cloud" comprehensive service platform construction project in Shaanxi Province carried out testing work from two aspects: functionality and information system security. Through strict execution of tests, including initial tests and regression tests, a software acceptance test report was issued.

Solution entry

Software Test Report for the Final Acceptance of Scientific and Technological Research projects

The conclusion and acceptance of scientific and technological research projects require software testing reports. The conclusion and acceptance report should formulate testing plans and strategies in accordance with the requirements of project conclusion and acceptance. Only in this way can the conclusion and acceptance of scientific research projects be meaningful. The content of the software testing report covers the main technical indicators such as functions, performance, and security. A high-quality testing report can not only help the project to be concluded smoothly It can also lay a foundation for the subsequent transformation of achievements.

Software Project Acceptance Test Report - CNAS Software Inspection

The acceptance testing of software research projects covers multi-dimensional assessment requirements such as functionality, performance, and security. The acceptance process of software research projects follows the GB/T 25000.51-2016 standard. The cover of the software test report is stamped with the CNAS logo, and the test report is guaranteed by national authoritative qualifications, which helps the project to be accepted smoothly and improves the quality of the software.

Software acceptance testing for Internet of Things (iot) intelligent devices

By providing software acceptance testing solutions for Internet of Things (iot) smart devices, the software quality and network security of iot products are guaranteed. The key elements of software acceptance testing: functional testing, performance testing, security and privacy testing, compatibility testing, and user experience testing. These elements jointly ensure the overall quality of Internet of Things products.