Method and device for automatically testing application layer protocol

Abstract

The embodiment of the invention relates to a method and a device for automatically testing an application layer protocol, wherein the method comprises the following steps of: resolving a schema file, and generating a messaging control sequence according to a message control logic in the schema file, wherein the messaging control sequence is used for controlling the message content in the schema file; according to the messaging control sequence, sending an application layer message containing the message content resolved from the schema file; receiving the application layer message processed by a tested device, and acquiring the processed message content from the processed application layer message; and detecting the processed message content according to a message detection rule in the schema file. The method and the device for automatically testing the application layer protocol realize comprehensive automatic tests on security gateway devices.

Description

technical field [0001] The invention relates to the technical field of testing, in particular to an application layer protocol automatic testing method and device. Background technique [0002] With the popularization of the network, network security issues have increasingly become the focus of attention. Attacks based on application layer content, such as network attacks, virus file dissemination, and spam flooding, have seriously affected the normal business development. Operators and enterprise users urgently need corresponding equipment for defense to reduce losses, so various gateway devices such as firewalls, virus gateways, and mail gateways have emerged as the times require. These gateway devices generally need to be tested before running in the network to maintain network security. [0003] The traditional test method needs to build a real server and client, and by artificially observing the test results (that is, the data content received by the server or client)...

AI Technical Summary

Problems solved by technology

[0005] The disadvantage of the technical solution of using hardware-based professional test instruments to test the equipment under test is: because the internal program of the professional test instrument cannot be changed flexibly, it has been customized when the professional test instrument leaves the factory, so the professional test instrument The types of supported application layer protocols are relatively small, and the application layer interaction messages are relatively simple, so they cannot be easily transplanted to other application environments; the sequence of interaction messages between the client and the server is only a question-and-answer method, which cannot be flexibly configured The sequence of interactive messages; it is necessary to manually check the correctness of the message processing of the device under test

However, the application layer message is only an application layer message in the correct message format from the normal working network, and does not have the application layer to capture the error message format generated when the client or server is in an abnormal state. The function of the message, and the application layer message of the wrong message format is also a message that destroys network security, so the test is still not comprehensive enough, and it cannot be automated.

Images