针对Web系统登录安全与资源分配等问题,使用变异测试、访问控制等技术构造测试脚本模型,建立相对通用的测试脚本模板.数据驱动与待测系统登录接口实现了关联,对变异后的模板脚本进行了调试.利用湖北软件测试公共服务平台的测试工具构造了自动化测试实例,建立了多用例访问请求,并且执行了测试.最后,对一些实际的Web系统进行测试.结果表明,该模型能够检测Web用户登录安全与访问控制资源分配等错误,为Web用户登录安全提供了一种技术的检测手段. In order to solve the problems such as login security and resource allocation in Web system, a test script model is constructed by using mutation testing and access control techniques, and a relatively universal test script template is established.Data driven is associated with the login interface of the system under test, The test was carried out.Automatic test cases were constructed by using the testing tools of Hubei software testing public service platform, multi-user access requests were set up, and the test was carried out.Finally, some real Web systems were tested.The results show that the model can detect Web user login security and access control resource allocation errors, Web users login security provides a means of testing technology.