中文摘要：

针对现有的渗透测试模型未考虑到移动互联网环境下的一些安全漏洞问题，本文提出了移动互联网web应用的渗透测试模型。该模型对移动互联网环境下渗透测试所涉及的各个模块进行系统的管理，并根据该渗透测试模型对手机银行业务进行了实际测试，测试结果表明该模型在提高渗透测试效率上具有有效性。

英文摘要：

Aiming at some mobile Internet web application security vulnerabilities, a penetration testing model for mobile Internet web application is designed in the paper. The model takes the system management of test modules that are included in penetration testing process. Then an actual test of the mobile phone banking is taken based on this penetration testing model and shows that the model is effective to some extent.