Test traffic synthesis method and device for network security equipment performance test

Abstract

The invention provides a test traffic synthesis method and a test traffic synthesis device for a test on the performance of network security equipment. Different time slots are obtained by division according to attack traffic distribution requirements, the distribution of attack packets in each time slot is viewed as uniform distribution, and legal packets are inserted into corresponding time slots according to timestamps of the legal packets. By the method, kinds of test traffic required by the test can be flexibly generated.

Description

technical field [0001] The invention relates to network security detection, in particular to test traffic synthesis of network security equipment. Background technique [0002] The performance test of network security devices, such as firewalls, security network management, etc., depends on test traffic. In order to analyze the detection accuracy of network security devices, test traffic is usually composed of normal access traffic (also called legitimate traffic) and attack traffic. In order to analyze the performance of network security devices under heavy load, the attack traffic is often large, and the attack traffic can adopt various methods to hide the attack behavior, such as figure 1 The pulse traffic attack method shown. It can be seen that the test traffic can contain various attack traffic modes. [0003] However, the existing performance testing methods can only generate traffic in the same mode as the captured traffic or traffic at a uniform speed, and cannot ...

AI Technical Summary

Problems solved by technology

This performance testing method is limited by the captured pcap file and the tcpreplay software itself, and the way to generate test traffic is not flexible enough, usually unable to flexibly generate test traffic containing various attack traffic

Images