Mobile terminal system security automatic evaluation system and method based on attack

Abstract

The invention discloses a mobile terminal system security automatic evaluation system and method based on attack. The evaluation system comprises a computer terminal and a plurality of mobile terminals. The computer terminal comprises a safe state space module, a safe state generating module, a centralized attack base, an attack vector generating module, an attack driving module and a result analysis module. Each mobile terminal comprises a module safe state setting module and an attack testing module. The mobile terminal system security automatic evaluation system and method based on the attack can conduct test analysis of a mobile terminal system in different safe states, can objectively and accurately conduct safety evaluation on the mobile terminal system, is free of limitation caused by mobile terminal platform resources, and enables the safety evaluation of a mobile terminal to be easily achieved. In addition, the mobile terminal system security automatic evaluation system and method based on the attack has the advantages of being simple in testing process and low in repetition rate of operation.

Description

technical field [0001] The invention belongs to the field of mobile information security, relates to security automatic testing, and particularly designs an attack-based mobile terminal system security automatic testing system and method. Background technique [0002] Mobile smart terminal security has become a hot spot in the industry, and evaluating the security of mobile smart terminal systems is the basis for ensuring mobile information security. Existing security evaluation methods and tools are mainly based on standard security function tests and lack objective anti-attack performance tests. In practice, the system is not always in a constant security state due to the different strengths of security settings at different times and scenarios of the system, and the traditional test method lacks test analysis for the system in different security states, and the test process is cumbersome. Operation repetition rate is high and subjectivity is strong. And due to the resou...

AI Technical Summary

Problems solved by technology

In practice, the system is not always in a constant security state due to the different strengths of security settings at different times and scenarios of the system, and the traditional test method lacks test analysis for the system in different security states, and the test process is cumbersome. Operation repetition rate is high and subjectivity is strong

And due to the resource limitation of the mobile terminal platform, it is difficult to realize the security evaluation system based on the security function testing method

Images