Test system used for network safety product and test method thereof

Abstract

The invention discloses a test system used for a network safety product and a test method thereof. The test system comprises a policy module, a session generating module, a result judge module and a reporting module. The test method comprises the steps as follows: (a) a data structure linked list of a test rule is filled to generate a concrete test case; (b) a client end and a server end program are constructed for respectively simulating hosts in two networks isolated by the network safety product and transferring a test plug-in corresponding to the test case by the client end and server endprogram to generate a corresponding data packet at real time to be transferred to a client end or a server end for sending, thereby generating a network session or a network attack session; and (c) atest result of the test case is judged according to the session finishing status and the network safety product behavioral parameter in the test case. The invention can realize the automatic real-time online detection of the policy configuration effectivity, the anti-attack penetration effectivity and the updating effectivity of the network safety product.

Description

technical field [0001] The invention belongs to the technical field of information security and relates to testing of network security products, in particular to a testing device and testing method for a firewall, a unified threat management (Universal Threat Management, UTM) and a security gateway. Background technique [0002] Network security products such as firewalls, UTMs, and security gateways are important components of computer network security systems and are deployed between different networks (such as trusted internal networks and untrusted public networks) or between network security domains. As the only mandatory access control point, these network security products monitor the network data passing through according to the network security policy, and they have strong anti-attack capabilities. However, even if these security products have passed the offline simulation test of the authoritative evaluation agency and obtained the certification certificate, they a...

AI Technical Summary

Problems solved by technology

[0004] 1. Although manual testing can generate network traffic passing through security devices to conduct real-time online testing of management configuration vulnerabilities, there are many problems such as low efficiency, complex environment configuration, and difficulty in large-scale testing or repeated testing.

[0005] 2. Manual testing When conducting real-time online security testing on network security products, it will be limited by the conditions provided by the target network. For example, there are few network services provided and unfamiliar with the target network.

[0006] 3. Manual testing needs to use the equipment of the target network to participate in the test. When performing certain tests such as transmitting malicious code or executing malicious code, it may introduce security risks and cause damage to the target network.

Images