CN116107911A - Privacy compliance automatic auditing method, device and system based on event replay - Google Patents

Privacy compliance automatic auditing method, device and system based on event replay Download PDF

Info

Publication number
CN116107911A
CN116107911A CN202310345406.2A CN202310345406A CN116107911A CN 116107911 A CN116107911 A CN 116107911A CN 202310345406 A CN202310345406 A CN 202310345406A CN 116107911 A CN116107911 A CN 116107911A
Authority
CN
China
Prior art keywords
test
event
app
operation event
test equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202310345406.2A
Other languages
Chinese (zh)
Inventor
王滨
朱伟康
周少鹏
方璐
毕志城
万里
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hangzhou Hikvision Digital Technology Co Ltd
Original Assignee
Hangzhou Hikvision Digital Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou Hikvision Digital Technology Co Ltd filed Critical Hangzhou Hikvision Digital Technology Co Ltd
Priority to CN202310345406.2A priority Critical patent/CN116107911A/en
Publication of CN116107911A publication Critical patent/CN116107911A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/36Preventing errors by testing or debugging software
    • G06F11/3668Software testing
    • G06F11/3672Test management
    • G06F11/3688Test management for test execution, e.g. scheduling of test suites
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/62Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245Protecting personal data, e.g. for financial or medical purposes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/4302Content synchronisation processes, e.g. decoder synchronisation
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/431Generation of visual interfaces for content selection or interaction; Content or additional data rendering
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04NPICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs
    • H04N21/44008Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream, rendering scenes according to MPEG-4 scene graphs involving operations for analysing video streams, e.g. detecting features or characteristics in the video stream
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

The application provides a privacy compliance automatic auditing method, device and system based on event replay, wherein the method comprises the following steps: receiving a video stream sent by test equipment, decoding the video stream, and synchronizing a screen picture obtained by decoding to a Web end for display; generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment so that the test equipment executes corresponding simulation operation according to the received operation event; and in the auditing process of the APP to be tested, carrying out event replay according to the operation event sequence, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal. The method can improve the automation degree of the auditing flow and the APP privacy compliance auditing efficiency.

Description

Privacy compliance automatic auditing method, device and system based on event replay
Technical Field
The application relates to the technical field of information security, in particular to a privacy compliance automatic auditing method, device and system based on event replay.
Background
In an enterprise production environment, at least two rounds of compliance detection are required before an APP (application program) is released online in order to meet the supervision requirement on privacy compliance. Generally, a service developer can perform one-time privacy compliance detection on the APP in a testing stage, and before formally publishing on line, related auditors are required to perform one-time privacy compliance audit on the APP.
On the one hand, since there are a large number of identical and repetitive operations in a multi-round compliance detection for a certain APP. On the other hand, because auditors are not participants in the business development process, the auditors are unfamiliar with the functions of the APP, certain learning cost exists when the APP is audited, and the problem that the detection coverage is not comprehensive is usually existed. These problems lead to the problems of low audit efficiency, untimely feedback and long rectification period of an APP when privacy compliance audit is carried out.
Disclosure of Invention
In view of this, the present application provides a privacy compliance automated auditing method, apparatus and system based on event replay.
Specifically, the application is realized by the following technical scheme:
according to a first aspect of an embodiment of the present application, there is provided a privacy compliance automated auditing method based on event replay, applied to a service center of an automated auditing system, where the automated auditing system further includes a testing device and a Web terminal, the method includes:
Receiving a video stream sent by test equipment, decoding the video stream, and synchronizing a screen picture obtained by decoding to a Web end for display; the video stream is obtained by screen picture acquisition and coding in the running process of the test equipment;
generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment so that the test equipment executes corresponding simulation operation according to the received operation event; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
and in the auditing process of the APP to be tested, carrying out event replay according to the operation event sequence, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
According to a second aspect of embodiments of the present application, there is provided a privacy compliance automated auditing apparatus based on event replay, deployed in a service center of an automated auditing system, the automated auditing system further including a testing device and a Web terminal, the apparatus including:
The picture processing unit is used for receiving the video stream sent by the testing equipment, decoding the video stream and synchronizing the screen picture obtained by decoding to the Web end for display; the video stream is obtained by screen picture acquisition and coding in the running process of the test equipment;
the test unit is used for generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment so that the test equipment executes corresponding simulation operation according to the received operation event; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
and the auditing unit is used for replaying the event according to the operation event sequence in the auditing process of the APP to be tested, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
According to a third aspect of embodiments of the present application, there is provided an electronic device comprising a processor and a memory, wherein,
A memory for storing a computer program;
and a processor configured to implement the method according to the first aspect when executing the program stored in the memory.
According to a fourth aspect of embodiments of the present application, there is provided an automated auditing system, comprising: service center, test equipment and Web end, wherein:
the testing equipment is used for acquiring and encoding screen pictures to obtain video streams in the running process and sending the video streams to the testing equipment;
the service center is used for receiving the video stream sent by the test equipment, decoding the video stream and synchronizing the screen picture obtained by decoding to the Web end for display;
the service center is further used for generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
the test equipment is also used for executing corresponding simulation operation according to the received operation event;
The service center is further used for carrying out event replay according to the operation event sequence in the auditing process of the APP to be tested, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
According to the privacy compliance automatic auditing method based on event replay, through deployment of an automatic auditing system comprising a service center, test equipment and a Web end, the test equipment can acquire and encode screen pictures in the running process, an obtained video stream is sent to the service center, the service center decodes the screen pictures to obtain and synchronize the screen pictures to the Web end for display, and a screen mirroring technology is used for synchronizing the running condition state of the test equipment to the Web end for display, so that related personnel can watch the screen pictures of the test equipment through the Web end; in the test process of the APP to be tested, the service center can convert the operation instruction of the screen picture displayed in the Web end into an operation event according to the operation instruction input by the Web end, on one hand, the operation event is stored in the form of an operation event sequence, the UI interactive operation of the application program by the test personnel is converted into a data event sequence and is stored in a lasting mode, on the other hand, the operation event is sent to the test equipment, so that the test equipment executes the corresponding simulation operation according to the received operation event, in the audit process of the APP to be tested, the service center can play the event according to the operation event sequence stored in the test process, generate the audit record according to the privacy behavior related record received in the audit process, and display the privacy behavior related record in the audit process through the Web end.
Drawings
FIG. 1 is a flow chart of a privacy compliance automated auditing method based on event replay, as shown in an exemplary embodiment of the present application;
FIG. 2 is a schematic diagram of an architecture of an automated auditing system according to an exemplary embodiment of the present application;
FIG. 3A is a test procedure workflow diagram illustrating an exemplary embodiment of the present application;
FIG. 3B is a flowchart illustrating an audit process according to an exemplary embodiment of the present application;
FIG. 4 is a schematic diagram of a privacy compliance automated auditing apparatus based on event replay according to an exemplary embodiment of the present application;
fig. 5 is a schematic diagram of a hardware structure of an electronic device according to an exemplary embodiment of the present application;
fig. 6 is a schematic structural diagram of an automated auditing system according to an exemplary embodiment of the present application.
Detailed Description
Reference will now be made in detail to exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numbers in different drawings refer to the same or similar elements, unless otherwise indicated. The implementations described in the following exemplary examples are not representative of all implementations consistent with the present application. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present application as detailed in the accompanying claims.
The terminology used in the present application is for the purpose of describing particular embodiments only and is not intended to be limiting of the present application. As used in this application and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
In order to better understand the technical solutions provided by the embodiments of the present application and make the above objects, features and advantages of the embodiments of the present application more obvious, the technical solutions in the embodiments of the present application are described in further detail below with reference to the accompanying drawings.
Referring to fig. 1, a flow chart of a privacy compliance automatic auditing method based on event replay according to an embodiment of the present application is shown in fig. 1, and the privacy compliance automatic auditing method based on event replay may include the following steps:
step S100, receiving a video stream sent by test equipment, decoding the video stream, and synchronizing a screen picture obtained by decoding to a Web end for display; the video stream is acquired and encoded by the screen picture in the running process of the test equipment.
In the embodiment of the application, in order to improve APP privacy compliance audit efficiency, an automatic audit system is provided, and the automatic audit system can comprise a service center, test equipment and a Web end.
The testing equipment can be used for running the APP to be tested, and synchronizing screen images to the Web end through the service center for relevant personnel (such as research and development self-testing personnel, audit workers and the like) to watch.
The Web end can be used for displaying screen pictures in the running process of the testing equipment and feeding back operation instructions aiming at the screen pictures to the testing equipment through the service center so that the testing equipment responds to the operation instructions to realize testing, auditing and the like of the APP to be tested.
It should be noted that, different users may run the Web end through different terminal devices to watch the screen image of the running process of the test device, and perform UI (User Interface) interaction according to the requirements.
For example, the execution subject of step S100 to step S130 may be a service center.
In the embodiment of the application, during the running process of the test equipment, screen picture acquisition can be performed, such as real screen picture acquisition, the acquired screen picture is encoded, a video code stream (called video stream for short) is obtained, and the video stream is sent to the service center.
The service center can receive the video stream sent by the test equipment, decode the received video stream and synchronize the screen picture obtained by decoding to the Web end for display, so that related personnel can watch the screen picture of the test equipment through the Web end.
Step S110, generating and storing an operation event sequence according to an operation event occurring in the testing process of the APP to be tested, and sending the operation event to the testing equipment so that the testing equipment executes corresponding simulation operation according to the received operation event; the operation event is obtained by converting an operation instruction for a screen picture input through a Web end, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type.
In the embodiment of the application, in the process of testing the APP to be tested through the testing equipment, a tester (such as research and development self-tester) can input an operation instruction aiming at a screen picture of the testing equipment through the Web terminal.
For example, the above operation instruction may be used to implement operation control for the APP to be tested.
The service center can acquire an operation instruction input through the Web terminal for a screen picture of the device to be tested, and convert the acquired operation instruction into an operation event.
For example, the operation event may include a screen coordinate related parameter corresponding to the operation instruction (i.e., a location where the operation instruction occurs), an operation type, and the like.
The operation types may include, but are not limited to, one or more of single click, double click, long press, sliding, etc.
In the embodiment of the application, for the operation event occurring in the testing process of the APP to be tested, the service center can store the operation event on one hand, and further, according to the operation event occurring at different times in the testing process of the APP to be tested, an operation event sequence can be generated, namely, the operation event sequence is converted into a data event sequence by a tester in the UI interactive operation of the application program, and is stored in a lasting manner.
Alternatively, the service center may send the operational event to the test equipment. Under the condition that the test equipment receives the operation event, the corresponding simulation operation can be executed according to the screen coordinates and the operation type corresponding to the operation instruction included in the received operation event.
When the test equipment needs to be described, the screen picture is synchronized to the Web end through the service center for display in the running process, so that the execution result is also reflected in the screen picture and displayed through the Web end under the condition that the test equipment executes corresponding simulation operation according to the received operation event.
In addition, in the embodiment of the application, in the testing process of the APP to be tested, the testing equipment can monitor the privacy behavior of the APP to be tested in the testing process.
By way of example, privacy actions may include, but are not limited to, one or more of sensitive rights application use, privacy data collection, and the like.
The sensitive rights may include, but are not limited to, one or more of location information acquisition rights, camera usage rights, memory card read/write rights, and the like.
The privacy data may include, but is not limited to, one or more of location information, address book information, picture data stored in a memory card, and the like.
Under the condition that the APP to be tested is monitored to generate privacy behaviors, the test equipment can generate privacy behavior related records and send the privacy behavior related records to the service center.
Illustratively, the privacy-related records may include, but are not limited to, one or more of alerts, logs, and the like.
On the one hand, under the condition that the service center receives the privacy behavior related record sent by the test equipment, the service center can generate and store the test record according to the received privacy behavior related record. On the other hand, the service center can display the received privacy behavior related records through the Web end, so that a tester can know the privacy behavior of the APP to be tested.
And step S120, in the auditing process of the APP to be tested, carrying out event replay according to the operation event sequence, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
In the embodiment of the application, in the test process of the APP to be tested, the service center stores the operation instruction received by the APP to be tested in the form of the operation event sequence, so that the operation instruction of the APP to be tested in the test process of a tester can be better restored by replaying the operation event sequence.
Therefore, in the auditing process of the APP to be tested, for example, when the service center receives the auditing request for the APP to be tested, the service center may obtain the operation event sequence stored in the testing process of the APP to be tested, and perform event replay according to the operation event sequence, that is, send each operation event in the operation event sequence to the testing device, and the testing device performs the simulation operation according to the received operation event.
In the process of replaying the event according to the operation event sequence, the testing equipment can monitor the privacy behavior of the APP to be tested, and send the privacy behavior to the service center in a mode of privacy behavior related record.
For privacy behavior related records received in the auditing process, the service center can generate auditing records according to the received privacy behavior related records on one hand, and can display the privacy behavior related records through the Web terminal on the other hand.
It can be seen that, in the method flow shown in fig. 1, by deploying an automatic auditing system including a service center, a testing device and a Web end, the testing device can collect and encode screen images in the running process, the obtained video stream is sent to the service center, the service center decodes the obtained screen images and synchronizes the obtained screen images to the Web end for display, and a screen mirroring technology is used to synchronize the running state of the testing device to the Web end for display, so that related personnel can view the screen images of the testing device through the Web end; in the test process of the APP to be tested, the service center can convert the operation instruction of the screen picture displayed in the Web end into an operation event according to the operation instruction input by the Web end, on one hand, the operation event is stored in the form of an operation event sequence, the UI interactive operation of the application program by the test personnel is converted into a data event sequence and is stored in a lasting mode, on the other hand, the operation event is sent to the test equipment, so that the test equipment executes the corresponding simulation operation according to the received operation event, in the audit process of the APP to be tested, the service center can play the event according to the operation event sequence stored in the test process, generate the audit record according to the privacy behavior related record received in the audit process, and display the privacy behavior related record in the audit process through the Web end.
In some embodiments, the generating the operation event sequence according to the operation event occurring in the test process of the application program APP to be tested may include:
determining the time sequence of each operation event in the test process of the APP to be tested and the time interval of adjacent operation events according to the occurrence time of the operation instruction;
generating an operation event sequence according to the time sequence of each operation event and the time intervals of adjacent operation events; wherein, the time interval of the adjacent operation event is recorded in the operation event sequence;
the playing back the event according to the operation event sequence may include:
and playing back the events according to the time sequence of each operation event in the operation event sequence and the time interval of the adjacent operation event.
For example, in order to improve the reduction degree of the operation command in the event replay process and improve the reliability of APP audit realized based on event replay, the service center may further determine the time sequence of each operation event in the test process of the APP to be tested and the time interval of adjacent operation events according to the occurrence time of the operation command in the process of converting the operation command input through the Web terminal for the screen displayed by the Web terminal into the operation event.
In the process of generating the operation event sequence, each operation event can be stored in sequence according to the time sequence of each operation event, and the time interval of the adjacent operation event is recorded.
Accordingly, in the event replay process, the event replay may be performed according to the time sequence of each operation event in the operation event sequence and the time intervals of adjacent operation events.
For example, when the sequence of operation events includes adjacent operation event 1 and operation event 2, and the time interval between operation event 1 and operation event 2 is Δt, during event playback, operation event 1 may be played back first for operation event 1 and operation event 2, and operation event 2 may be played back after the interval Δt.
In some embodiments, the screen coordinate related parameter is determined according to the screen coordinate corresponding to the operation instruction and the width and the height of the Web end screen picture;
in the event replay process, for any operation event, determining the actual coordinate position of the operation instruction at the test equipment end according to the screen coordinate related parameters corresponding to the operation instruction included in the operation event and the real screen width and height of the test equipment end.
By way of example, it is contemplated that the test equipment used to test the APP under test may not be the same as the test equipment used to audit the APP under test, and that the width and height of the screen may not be the same as when the APP under test is running in different test equipment.
Therefore, in order to ensure the restoration of the operation instruction in the event replay process, in the case of performing persistent storage on the operation event, the screen coordinate related parameters may be determined according to the screen coordinates corresponding to the operation instruction and the width and height of the Web-side screen picture.
Correspondingly, in the event replay process, for any operation event, the actual coordinate position of the operation instruction at the test equipment end can be determined according to the relevant parameters of the screen coordinates corresponding to the operation instruction included in the operation event and the width and the height of the screen picture at the test equipment end.
In one example, the above-mentioned screen coordinate related parameter is determined according to the screen coordinate corresponding to the operation instruction and the width and height of the Web-side screen picture, by the following means:
Figure SMS_1
wherein, (βx, βy) are related parameters of screen coordinates, (x, y) are coordinates of a Web end screen picture corresponding to the operation instruction (namely, the coordinates of the operation instruction under the coordinate system of the Web end screen picture), width is the Width of the Web end screen picture, and Height is the Height of the Web end screen picture;
the above-mentioned relevant parameters of screen coordinates corresponding to the operation instruction included according to the operation event, and the actual screen width and height of the test equipment end, determine the actual coordinate position of the operation instruction at the test equipment end, and implement by the following modes:
Figure SMS_2
Wherein, (x ', y') is the screen picture coordinate of the test equipment end corresponding to the screen coordinate related parameter (βx, βy), width 'is the Width of the screen picture of the test equipment end, and Height' is the Height of the screen picture of the test equipment end.
In some embodiments, the privacy compliance automated audit scheme provided by embodiments of the present application may further include:
under the condition of receiving a test request aiming at the APP to be tested, generating a test task aiming at the APP to be tested; the operation event sequence and the test record are stored in association with the test task;
under the condition of receiving a test ending instruction aiming at the APP to be tested, generating an audit task related to the test task;
in the above-mentioned audit process of the APP to be tested, the event replay according to the operation event sequence may include:
and in the auditing process of the APP to be tested, carrying out event replay according to the operation event sequence stored in association with the test task.
For example, considering that there may be a situation in an actual scenario in which multiple APPs need to be tested separately, in order to avoid interference between testing and auditing of different APPs, a service center needs to be able to identify test data and auditing data for the same APP.
Correspondingly, the service center can generate a test task for the APP to be tested under the condition of receiving a test request for the APP to be tested.
For example, the Web terminal may provide a test request initiating function, through which a tester may submit a test request for a specified APP to be tested to a service center, and in the case that the service center receives the test request, the specified APP to be tested may be installed on a test device, and perform operation event sequence storage and test record storage in a test process according to a method flow shown in fig. 1.
For example, for any APP to be tested, an association between the APP to be tested and a test task for the APP to be tested may be established.
For example, the identifier (e.g., name+version number) of the APP to be tested may be used as the identifier (e.g., name) of the test task for the APP to be tested, or a unique identifier may be set for the test task for the APP to be tested, and an association relationship between the unique identifier of the test task and the identifier of the APP to be tested may be established.
In the process of testing the APP to be tested, the operation event sequence and the test record obtained in the mode can be associated with a test task aiming at the APP to be tested based on the identification of the APP to be tested and stored in association with the test task.
The service center may generate an audit task associated with the test task upon receiving a test end instruction for the APP to be tested.
For example, the Web terminal may be provided with a "test end" function button, through which a user may trigger a test end instruction for the APP to be tested that is currently being tested.
For example, the association between the test task and the audit task may be achieved by setting the same identifier, or a unique identifier may be set for the audit task, and an association relationship between the identifier of the audit task and the identifier of the test task may be established.
For any APP to be tested, in the process of auditing the APP to be tested, an associated test task can be determined according to the audit task, an operation event sequence stored in association with the test task is queried, and the APP to be tested is audited in an event replay mode.
In some embodiments, the automated auditing system includes a plurality of test devices; the service center maintains the states of all the test devices, wherein the states of the test devices comprise an idle state or an occupied state;
the method for receiving the video stream sent by the test equipment, decoding the video stream, and synchronizing the screen picture obtained by decoding to the Web end for display further comprises the following steps:
Under the condition that a test request submitted by a target Web end for an APP to be tested is detected, establishing an association relationship between the target Web end and the target test equipment according to the identification information of the target test equipment and the identification information of the target Web end carried in the test request, and switching the state of the target test equipment from an idle state to an occupied state;
the receiving the video stream sent by the test device, decoding the video stream, and synchronizing the screen picture obtained by decoding to the Web end for display may include:
and receiving a video stream sent by the target test equipment, decoding the video stream, and synchronizing a screen picture obtained by decoding to a target Web end for display.
For example, to implement concurrent testing and/or auditing of multiple APPs, an automated auditing system may include multiple testing devices, and a service center may maintain states of the multiple testing devices, such as an idle state or an occupied state, and display the testing devices in the idle state or all the testing devices (i.e., the testing devices including the idle state and the occupied state) through a Web terminal.
The tester can log in the Web terminal through the terminal equipment, check the test equipment in the idle state at present, select the test equipment for performing the test task from the test equipment in the idle state, and initiate the test request. The test request may carry identification information of the selected test device and identification information of the Web terminal (e.g., identification information of a terminal device logging in the Web terminal).
Under the condition that the service center receives a test request for the APP to be tested submitted by any Web end (which is a target Web end in the text), the identification information of the test equipment (which is a target test equipment in the text) and the identification information of the target Web end carried in the test request can be obtained, the association relation between the target Web end and the target test equipment is established according to the identification information of the target test equipment and the identification information of the target Web end, and the state of the target test equipment is switched from an idle state to an occupied state.
Correspondingly, the service center can decode the received video stream under the condition of receiving the video stream sent by the target test equipment, and synchronize the screen picture obtained by decoding to the target Web end for display according to the association relationship between the target Web end and the target test equipment.
Similarly, the service center can display the received privacy behavior related record through the target Web end according to the association relationship between the target Web end and the target test equipment under the condition that the privacy behavior related record sent by the target test equipment is received.
It should be noted that, in the embodiment of the present application, in the case of receiving the test end instruction sent by the target Web end, the service center may delete the association relationship between the target test device and the target Web end, or set the association relationship between the target test device and the target Web end to be invalid, and switch the target test device from the occupied state to the idle state.
In addition, for any APP to be tested, the test equipment used for testing the APP to be tested is not selected by a tester, but can be selected by a service center from the idle test equipment according to a certain strategy, such as a random selection strategy or a polling strategy.
For example, when the service center receives the test request and the test request does not carry the identification information of the target test device, the service center may select one test device from the idle test devices as the target test device according to a preset policy, establish an association relationship between the target Web terminal and the target test device, and switch the state of the target test device from the idle state to the occupied state.
Similarly, in the auditing process, the auditing equipment (such as auditing workers) can also select from the idle state testing equipment or the service center selects from the idle state testing equipment according to a certain policy, and the implementation of the auditing equipment is similar to the selection of the testing equipment in the testing process, and the embodiment of the application will not be repeated.
In some embodiments, after generating the audit record according to the privacy behavior related record received in the audit process, the method may further include:
Comparing the test record with the audit record, and determining the difference between the test record and the audit record;
and outputting audit suggestions according to the difference between the test records and the audit records.
For example, considering that privacy behaviors of an APP to be tested in an audit process and privacy behaviors of the APP to be tested in a test process may have differences due to reasons such as update or authority adjustment of the APP, in order to further improve audit efficiency, for any APP to be tested, in the audit process of the APP to be tested, a service center may compare a test record and an audit record of the APP to be tested under the condition that the audit record of the APP to be tested is obtained, and determine differences between the test record and the audit record.
For example, it may be determined whether there are different alert items between the test record and the audit record, one alert item may correspond to an alert for privacy actions occurring with the test equipment.
Illustratively, the service center may output audit suggestions to assist auditors in APP privacy compliance auditing based on differences between the test records and the audit records.
For example, audit suggestions may include, but are not limited to, one or more of suggestions in the audit process that have been added, subtracted, etc. to the test process.
In order to enable those skilled in the art to better understand the technical solutions provided by the embodiments of the present application, the technical solutions provided by the embodiments of the present application are described below in conjunction with specific scenarios.
In this embodiment, as shown in FIG. 2, an automated auditing system may include: test equipment, a service center and a Web end. System participants can mainly include two types of roles: business self-testers (which may be referred to simply as testers), compliance auditors (which may be referred to simply as auditors, or audit workers).
As shown in fig. 3A and fig. 3B, for a complete privacy compliance audit process, it may include a self-test process (including self-test, self-test and rectification) of the APP to be tested by the business self-test personnel, and an audit process of the APP to be tested by the audit worker, the specific process may be as follows:
1. constructing a daemon and implanting test equipment, wherein the daemon is responsible for collecting and encoding screen pictures when the test equipment runs, pushing the screen pictures to a service center through a video stream, and receiving and responding event signals; the privacy compliance monitoring engine senses, alarms and records privacy behaviors such as sensitive authority application use, privacy data acquisition and the like which are involved in the APP operation process.
2. The service center receives the video stream of the test equipment end, synchronizes the video stream to the Web end in real time after decoding and displays the video stream to the user, and simultaneously monitors operation instructions (such as clicking behaviors) of the user of the Web end.
3. The service tester executes operation instructions (such as clicking operation) through the test equipment screen mirror image displayed by the Web end, and the operation instructions are transmitted back to the service center.
4. Under the condition that the service center monitors the user operation instruction, the position (such as the clicking position of clicking operation) and the type (such as clicking, double clicking or long clicking) of the operation instruction are converted into corresponding screen coordinates and related events, the corresponding screen coordinates and the related events are persisted to a database, and then event signals are sent to the testing equipment.
5. And under the condition that the test equipment monitors an event signal sent by the service center, corresponding simulation operation (such as simulation clicking operation) is executed, and on one hand, the execution result is synchronized to the Web end for display through screen mirroring.
6. Under the condition that the service self-testing personnel test, the service center stores a complete operation event sequence, and under the condition, the complete operation event sequence can be submitted to an audit flow.
7. Under the condition of auditing the APP, the service center can call a corresponding operation event sequence, namely, a service self-testing personnel performs the event replay on the UI interaction execution sequence of the APP, and observes the real-time record of privacy monitoring to obtain an audit record.
The methods provided herein are described above. The apparatus provided in this application is described below:
referring to fig. 4, a schematic structural diagram of a privacy compliance automation auditing apparatus based on event replay according to an embodiment of the present application is shown in fig. 4, where the privacy compliance automation auditing apparatus based on event replay may include:
the picture processing unit 410 is configured to receive a video stream sent by the test device, decode the video stream, and synchronize a screen picture obtained by decoding to the Web terminal for display; the video stream is obtained by screen picture acquisition and coding in the running process of the test equipment;
the test unit 420 is configured to generate and store a sequence of operation events according to operation events occurring during a test process of the application program APP to be tested, and send the operation events to the test device, so that the test device executes corresponding simulation operations according to the received operation events; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
And the auditing unit 430 is used for replaying the event according to the operation event sequence in the auditing process of the APP to be tested, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
In some embodiments, the test unit 420 generates the sequence of operation events according to operation events occurring during the test of the application APP to be tested, including:
determining the time sequence of each operation event and the time interval of adjacent operation events in the test process of the APP to be tested according to the occurrence time of the operation instruction;
generating an operation event sequence according to the time sequence of each operation event and the time intervals of adjacent operation events; wherein, the time interval of adjacent operation events is recorded in the operation event sequence;
the audit unit 430 performs event replay according to the operation event sequence, including:
and playing back the events according to the time sequence of each operation event in the operation event sequence and the time interval of the adjacent operation event.
In some embodiments, the screen coordinate related parameter is determined according to the screen coordinate corresponding to the operation instruction and the width and the height of the Web terminal screen picture;
In the event replay process, for any operation event, determining the actual coordinate position of the operation instruction at the test equipment end according to the relevant parameters of the screen coordinates corresponding to the operation instruction included in the operation event and the width and the height of the screen picture at the test equipment end.
In some embodiments, the screen coordinate related parameter is determined according to the screen coordinate corresponding to the operation instruction and the width and the height of the Web end screen picture, by the following ways:
Figure SMS_3
wherein (beta) x , β y ) The (x, y) is the screen coordinate corresponding to the operation instruction, width is the Width of the Web end screen picture, and Height is the Height of the Web end screen picture;
the method comprises the steps that according to the screen coordinate related parameters corresponding to the operation instruction included in the operation event, and the real screen width and the real screen height of the test equipment end, the actual coordinate position of the operation instruction at the test equipment end is determined, and the method is realized in the following mode:
Figure SMS_4
wherein, (x ', y') is a screen coordinate related parameter, (β) x , β y ) The actual coordinate position of the corresponding test equipment end, width 'is the screen Width of the test equipment end, and Height' is the screen Height of the test equipment end.
In some embodiments, the test unit is further configured to generate a test task for the APP to be tested, if a test request for the APP to be tested is received; wherein the sequence of operational events and the test record are stored in association with the test task; generating an audit task associated with the test task under the condition of receiving a test ending instruction for the APP to be tested;
the auditing unit 430 performs event replay according to the operation event sequence in the auditing process of the APP to be tested, including:
and in the auditing process of the APP to be tested, performing event replay according to the operation event sequence stored in association with the test task.
In some embodiments, the automated auditing system includes a plurality of test devices; the service center maintains the states of all the test devices, wherein the states of the test devices comprise an idle state or an occupied state;
the test unit 420 is further configured to, when receiving a test request for the APP to be tested submitted by a target Web terminal, establish an association between the target Web terminal and the target test device according to identification information of the target test device and identification information of the target Web terminal carried in the test request, and switch a state of the target test device from an idle state to an occupied state;
The picture processing unit 410 receives a video stream sent by a test device, decodes the video stream, synchronizes a screen picture obtained by decoding to a Web end for display, and includes:
and receiving the video stream sent by the target test equipment, decoding the video stream, and synchronizing the screen picture obtained by decoding to the target Web end for display.
In some embodiments, the test unit 420 is further configured to generate and store a test record according to the privacy behavior related record received during the test of the APP to be tested, and display the privacy behavior related record through the Web terminal; the privacy behavior related record is sent by the test equipment under the condition that the privacy behavior of the APP to be tested is monitored;
after the audit unit 430 generates an audit record according to the privacy behavior related record received in the audit process, the method further includes:
comparing the test record with the audit record, and determining a difference between the test record and the audit record;
and outputting audit suggestions according to the difference between the test record and the audit record.
The embodiment of the application also provides electronic equipment, which comprises a processor and a memory, wherein the memory is used for storing a computer program; and the processor is used for realizing the privacy compliance automatic auditing method based on event replay when executing the program stored on the memory.
Fig. 5 is a schematic hardware structure of an electronic device according to an embodiment of the present application. The electronic device may include a processor 501, a memory 502 storing machine-executable instructions. The processor 501 and the memory 502 may communicate via a system bus 503. Also, by reading and executing machine-executable instructions in memory 502 corresponding to the event replay based privacy compliance automation audit logic, processor 501 may perform the above described event replay based privacy compliance automation audit method.
The memory 502 referred to herein may be any electronic, magnetic, optical, or other physical storage device that may contain or store information, such as executable instructions, data, or the like. For example, a machine-readable storage medium may be: RAM (Radom Access Memory, random access memory), volatile memory, non-volatile memory, flash memory, a storage drive (e.g., hard drive), a solid state drive, any type of storage disk (e.g., optical disk, dvd, etc.), or a similar storage medium, or a combination thereof.
In some embodiments, a machine-readable storage medium, such as memory 502 in fig. 5, is also provided, having stored thereon machine-executable instructions that when executed by a processor implement the above-described privacy compliance automated auditing method based on event replay. For example, the machine-readable storage medium may be ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.
Embodiments of the present application also provide a computer program product storing a computer program and when executed by a processor causing the processor to perform the above-described privacy compliance automated auditing method based on event replay.
Referring to fig. 6, a schematic structural diagram of an automated auditing system according to an embodiment of the present application, as shown in fig. 6, the automated auditing system may include: service center, test equipment and Web end, wherein:
the testing equipment is used for acquiring and encoding screen pictures to obtain video streams in the running process and sending the video streams to the testing equipment;
the service center is used for receiving the video stream sent by the test equipment, decoding the video stream and synchronizing the screen picture obtained by decoding to the Web end for display;
the service center is further used for generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
The test equipment is also used for executing corresponding simulation operation according to the received operation event;
the service center is further used for carrying out event replay according to the operation event sequence in the auditing process of the APP to be tested, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
In some embodiments, the devices (service center, test device, and Web side) in the automated audit system may implement privacy compliance automated audit based on event replay in the manner described in the above embodiments.
It is noted that relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
The foregoing description of the preferred embodiments of the present invention is not intended to limit the invention to the precise form disclosed, and any modifications, equivalents, improvements and alternatives falling within the spirit and principles of the present invention are intended to be included within the scope of the present invention.

Claims (10)

1. The privacy compliance automatic auditing method based on event replay is characterized by being applied to a service center of an automatic auditing system, wherein the automatic auditing system also comprises test equipment and a Web end, and the method comprises the following steps:
receiving a video stream sent by test equipment, decoding the video stream, and synchronizing a screen picture obtained by decoding to a Web end for display; the video stream is obtained by screen picture acquisition and coding in the running process of the test equipment;
generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment so that the test equipment executes corresponding simulation operation according to the received operation event; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
And in the auditing process of the APP to be tested, carrying out event replay according to the operation event sequence, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
2. The method according to claim 1, wherein generating the sequence of operation events from operation events occurring during the testing of the application APP to be tested comprises:
determining the time sequence of each operation event and the time interval of adjacent operation events in the test process of the APP to be tested according to the occurrence time of the operation instruction;
generating an operation event sequence according to the time sequence of each operation event and the time intervals of adjacent operation events; wherein, the time interval of adjacent operation events is recorded in the operation event sequence;
the event replay according to the operation event sequence comprises the following steps:
according to the time sequence of each operation event in the operation event sequence and the time interval of the adjacent operation event, carrying out event replay;
and/or the number of the groups of groups,
the method further comprises the steps of:
generating a test task for the APP to be tested under the condition that a test request for the APP to be tested is received; wherein the sequence of operational events and the test record are stored in association with the test task;
Generating an audit task associated with the test task under the condition of receiving a test ending instruction for the APP to be tested;
in the auditing process of the APP to be tested, carrying out event replay according to the operation event sequence, wherein the event replay comprises the following steps:
and in the auditing process of the APP to be tested, performing event replay according to the operation event sequence stored in association with the test task.
3. The method according to claim 1, wherein the screen coordinate related parameter is determined according to the screen coordinate corresponding to the operation instruction and the width and the height of the Web end screen;
in the event replay process, for any operation event, determining the actual coordinate position of the operation instruction at the test equipment end according to the relevant parameters of the screen coordinates corresponding to the operation instruction included in the operation event and the width and the height of the screen picture at the test equipment end.
4. A method according to claim 3, wherein the screen coordinate related parameter is determined according to the screen coordinate corresponding to the operation instruction and the width and the height of the Web-side screen picture by:
Figure QLYQS_1
wherein (beta) x , β y ) The (x, y) is the screen coordinate corresponding to the operation instruction, width is the Width of the Web end screen picture, and Height is the Height of the Web end screen picture;
The method comprises the steps that according to the screen coordinate related parameters corresponding to the operation instruction included in the operation event, and the real screen width and the real screen height of the test equipment end, the actual coordinate position of the operation instruction at the test equipment end is determined, and the method is realized in the following mode:
Figure QLYQS_2
wherein (x ', y') is a screen coordinate-related parameter (. Beta.) x , β y ) The actual coordinate position of the corresponding test equipment end, width 'is the screen Width of the test equipment end, and Height' is the screen Height of the test equipment end.
5. The method of claim 1, wherein the automated auditing system includes a plurality of test equipment; the service center maintains the states of all the test devices, wherein the states of the test devices comprise an idle state or an occupied state;
the method for receiving the video stream sent by the test equipment, decoding the video stream, and synchronizing the screen picture obtained by decoding to the Web end for display further comprises the following steps:
under the condition that a test request submitted by a target Web end for the APP to be tested is received, establishing an association relationship between the target Web end and the target test equipment according to the identification information of the target test equipment and the identification information of the target Web end carried in the test request, and switching the state of the target test equipment from an idle state to an occupied state;
The method for receiving the video stream sent by the test equipment, decoding the video stream, synchronizing the screen picture obtained by decoding to the Web end for display comprises the following steps:
and receiving the video stream sent by the target test equipment, decoding the video stream, and synchronizing the screen picture obtained by decoding to the target Web end for display.
6. The method according to claim 1, wherein the method further comprises:
generating and storing a test record according to a privacy behavior related record received in the test process of the APP to be tested, and displaying the privacy behavior related record through the Web terminal; the privacy behavior related record is sent by the test equipment under the condition that the privacy behavior of the APP to be tested is monitored;
after generating the audit record according to the privacy behavior related record received in the audit process, the method further comprises the following steps:
comparing the test record with the audit record, and determining a difference between the test record and the audit record;
and outputting audit suggestions according to the difference between the test record and the audit record.
7. The utility model provides a privacy compliance automated audit device based on event replay which characterized in that is disposed in the service center of automated audit system, automated audit system still includes test equipment and Web end, the device includes:
The picture processing unit is used for receiving the video stream sent by the testing equipment, decoding the video stream and synchronizing the screen picture obtained by decoding to the Web end for display; the video stream is obtained by screen picture acquisition and coding in the running process of the test equipment;
the test unit is used for generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment so that the test equipment executes corresponding simulation operation according to the received operation event; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
and the auditing unit is used for replaying the event according to the operation event sequence in the auditing process of the APP to be tested, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
8. The apparatus of claim 7, wherein the test unit generates the sequence of operation events based on operation events occurring during the test of the application APP to be tested, comprising:
Determining the time sequence of each operation event and the time interval of adjacent operation events in the test process of the APP to be tested according to the occurrence time of the operation instruction;
generating an operation event sequence according to the time sequence of each operation event and the time intervals of adjacent operation events; wherein, the time interval of adjacent operation events is recorded in the operation event sequence;
the auditing unit plays back the event according to the operation event sequence, and comprises the following steps:
according to the time sequence of each operation event in the operation event sequence and the time interval of the adjacent operation event, carrying out event replay;
and/or the number of the groups of groups,
the relevant parameters of the screen coordinates are determined according to the screen coordinates corresponding to the operation instructions and the width and the height of the Web end screen picture;
in the event replay process, for any operation event, determining the actual coordinate position of the operation instruction at the test equipment end according to the screen coordinate related parameters corresponding to the operation instruction included in the operation event and the width and the height of the screen picture of the test equipment end;
the screen coordinate related parameters are determined according to the screen coordinates corresponding to the operation instructions and the width and the height of the Web end screen picture in the following modes:
Figure QLYQS_3
Wherein (beta) x , β y ) The (x, y) is the screen coordinate corresponding to the operation instruction, width is the Width of the Web end screen picture, and Height is the Height of the Web end screen picture;
the method comprises the steps that according to the screen coordinate related parameters corresponding to the operation instruction included in the operation event, and the real screen width and the real screen height of the test equipment end, the actual coordinate position of the operation instruction at the test equipment end is determined, and the method is realized in the following mode:
Figure QLYQS_4
wherein, (x ', y') is a screen coordinate related parameter, (β) x , β y ) The actual coordinate position of the corresponding test equipment end, width 'is the screen picture Width of the test equipment end, and Height' is the screen picture Height of the test equipment end;
and/or the number of the groups of groups,
the test unit is further used for generating a test task for the APP to be tested under the condition that a test request for the APP to be tested is received; wherein the sequence of operational events and the test record are stored in association with the test task; generating an audit task associated with the test task under the condition of receiving a test ending instruction for the APP to be tested;
and the auditing unit performs event replay according to the operation event sequence in the auditing process of the APP to be tested, and comprises the following steps:
In the auditing process of the APP to be tested, performing event replay according to an operation event sequence stored in association with the test task;
and/or the number of the groups of groups,
the automated auditing system includes a plurality of test devices; the service center maintains the states of all the test devices, wherein the states of the test devices comprise an idle state or an occupied state;
the test unit is further used for establishing an association relationship between the target Web end and the target test equipment according to the identification information of the target test equipment carried in the test request and the identification information of the target Web end under the condition that the test request submitted by the target Web end for the APP to be tested is received, and switching the state of the target test equipment from an idle state to an occupied state;
the picture processing unit receives a video stream sent by the testing equipment, decodes the video stream, synchronizes a screen picture obtained by decoding to a Web end for display, and comprises the following steps:
receiving a video stream sent by the target test equipment, decoding the video stream, and synchronizing a screen picture obtained by decoding to the target Web end for display;
and/or the number of the groups of groups,
the test unit is further used for generating and storing a test record according to the privacy behavior related record received in the test process of the APP to be tested, and displaying the privacy behavior related record through the Web terminal; the privacy behavior related record is sent by the test equipment under the condition that the privacy behavior of the APP to be tested is monitored;
After generating an audit record according to the privacy behavior related record received in the audit process, the audit unit further comprises:
comparing the test record with the audit record, and determining a difference between the test record and the audit record;
and outputting audit suggestions according to the difference between the test record and the audit record.
9. An electronic device comprising a processor and a memory, wherein,
a memory for storing a computer program;
a processor for implementing the method of any of claims 1-6 when executing a program stored on a memory.
10. An automated auditing system, comprising: service center, test equipment and Web end, wherein:
the testing equipment is used for acquiring and encoding screen pictures to obtain video streams in the running process and sending the video streams to the testing equipment;
the service center is used for receiving the video stream sent by the test equipment, decoding the video stream and synchronizing the screen picture obtained by decoding to the Web end for display;
the service center is further used for generating and storing an operation event sequence according to an operation event occurring in the test process of the application program APP to be tested, and sending the operation event to the test equipment; the operation event is obtained by converting an operation instruction which is input through the Web terminal and aims at the screen picture, and the operation event comprises a screen coordinate related parameter corresponding to the operation instruction and an operation type;
The test equipment is also used for executing corresponding simulation operation according to the received operation event;
the service center is further used for carrying out event replay according to the operation event sequence in the auditing process of the APP to be tested, generating an auditing record according to the privacy behavior related record received in the auditing process, and displaying the privacy behavior related record through the Web terminal.
CN202310345406.2A 2023-03-29 2023-03-29 Privacy compliance automatic auditing method, device and system based on event replay Pending CN116107911A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310345406.2A CN116107911A (en) 2023-03-29 2023-03-29 Privacy compliance automatic auditing method, device and system based on event replay

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310345406.2A CN116107911A (en) 2023-03-29 2023-03-29 Privacy compliance automatic auditing method, device and system based on event replay

Publications (1)

Publication Number Publication Date
CN116107911A true CN116107911A (en) 2023-05-12

Family

ID=86254649

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310345406.2A Pending CN116107911A (en) 2023-03-29 2023-03-29 Privacy compliance automatic auditing method, device and system based on event replay

Country Status (1)

Country Link
CN (1) CN116107911A (en)

Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103136101A (en) * 2012-12-31 2013-06-05 博彦科技(上海)有限公司 Software automated testing unified operation platform
CN103455403A (en) * 2013-08-26 2013-12-18 百度在线网络技术(北京)有限公司 Testing method and device
CN104462980A (en) * 2014-12-30 2015-03-25 北京奇虎科技有限公司 Authority management method, device and system of application programs and mobile terminal
CN107766720A (en) * 2016-08-19 2018-03-06 阿里巴巴集团控股有限公司 System, method, apparatus and the test equipment audited to application program
CN111324531A (en) * 2020-02-05 2020-06-23 香港乐蜜有限公司 Application program testing method and device, electronic equipment and storage medium
CN112749088A (en) * 2021-01-13 2021-05-04 挂号网(杭州)科技有限公司 Application program detection method and device, electronic equipment and storage medium
CN114042310A (en) * 2021-11-12 2022-02-15 网易(杭州)网络有限公司 Game operation data collection method and device, computer equipment and storage medium
CN114443453A (en) * 2020-10-30 2022-05-06 腾讯科技(深圳)有限公司 Test data recording method, device, equipment and computer storage medium
CN114546814A (en) * 2020-11-24 2022-05-27 腾讯科技(深圳)有限公司 Recording playback method, recording playback device and storage medium
CN114611132A (en) * 2020-12-08 2022-06-10 奇安信科技集团股份有限公司 Privacy compliance detection method and privacy compliance detection device for mobile application software
CN115146309A (en) * 2022-06-27 2022-10-04 京东科技信息技术有限公司 Privacy compliance detection method, device, server, terminal and storage medium

Patent Citations (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103136101A (en) * 2012-12-31 2013-06-05 博彦科技(上海)有限公司 Software automated testing unified operation platform
CN103455403A (en) * 2013-08-26 2013-12-18 百度在线网络技术(北京)有限公司 Testing method and device
CN104462980A (en) * 2014-12-30 2015-03-25 北京奇虎科技有限公司 Authority management method, device and system of application programs and mobile terminal
CN107766720A (en) * 2016-08-19 2018-03-06 阿里巴巴集团控股有限公司 System, method, apparatus and the test equipment audited to application program
CN111324531A (en) * 2020-02-05 2020-06-23 香港乐蜜有限公司 Application program testing method and device, electronic equipment and storage medium
CN114443453A (en) * 2020-10-30 2022-05-06 腾讯科技(深圳)有限公司 Test data recording method, device, equipment and computer storage medium
CN114546814A (en) * 2020-11-24 2022-05-27 腾讯科技(深圳)有限公司 Recording playback method, recording playback device and storage medium
CN114611132A (en) * 2020-12-08 2022-06-10 奇安信科技集团股份有限公司 Privacy compliance detection method and privacy compliance detection device for mobile application software
CN112749088A (en) * 2021-01-13 2021-05-04 挂号网(杭州)科技有限公司 Application program detection method and device, electronic equipment and storage medium
CN114042310A (en) * 2021-11-12 2022-02-15 网易(杭州)网络有限公司 Game operation data collection method and device, computer equipment and storage medium
CN115146309A (en) * 2022-06-27 2022-10-04 京东科技信息技术有限公司 Privacy compliance detection method, device, server, terminal and storage medium

Similar Documents

Publication Publication Date Title
US10565451B2 (en) Augmented video analytics for testing internet of things (IoT) devices
US8312322B2 (en) System for automated generation of computer test procedures
CN108875837B (en) Apparatus and method for testing target recognition device
US20120131456A1 (en) Capture and Playback for GUI-Based Tasks
CN105144117B (en) To the automatic correlation analysis method of allocating stack and context data
CN103970649B (en) The test method and device of Android terminal application program
US9992379B2 (en) Partial snapshots for creating generalized snapshots
US11294746B2 (en) Extracting moving image data from an error log included in an operational log of a terminal
CN111930703A (en) Automatic log file capturing method and device and computer equipment
CN112835776A (en) Page event reproduction method, page event acquisition method, page event reproduction device and electronic equipment
CN115629968A (en) Test data recording method and device
US20200356461A1 (en) Replication of user interface events
CN111698529B (en) Live broadcast monitoring method, device, equipment and computer readable storage medium
CN116107911A (en) Privacy compliance automatic auditing method, device and system based on event replay
KR101460860B1 (en) GUI Test apparatus using test scenario model based on states and the method thereof
US20100033566A1 (en) Digital logging vcr meta data based system construct
CN110035056B (en) Detection method and device for playing equipment
CN115190293A (en) Dial testing method and device, electronic equipment and computer storage medium
CN110569184B (en) Test method and terminal equipment
KR101484783B1 (en) Digital video recorder and hard disc management method
US9990274B2 (en) Testing integrated business systems
CN112416735A (en) Application program detection method and device, terminal equipment and storage medium
KR101235802B1 (en) Storage media, method and apparatus for performing automatic test using the storage media
JP2009205502A (en) Application recorder/reproducer, method for rewinding application, and application recording/reproduction program
CN112637659B (en) Media audio playing method, device and system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination