A method and device for verifying security policy

Abstract

The present application provides a method and device for verifying a security policy, wherein the method can be used for a test device, and the test device is used for verifying multiple security policies on the device under test; the method may include the following steps: Send multiple data streams to the device under test in the form of one data stream, wherein the multiple data streams are in one-to-one correspondence with the multiple security policies; obtain the matching result of each security policy, wherein the matching result is After receiving each data flow, the device under test matches the received data flow with the multiple security policies one by one and records the matching result; and determines the verification result of the multiple security policies according to the matching result. In this way, the automatic verification of the security policy can be realized. Through the automated processing process, it is possible to quickly verify whether the security policy is effective, improve the overall verification efficiency and accuracy, make the regression test of the software more convenient, and solve the problem of large amount of comparison during manual testing. , error-prone and other issues.

Description

technical field [0001] The present application relates to the technical fields of network communication and software testing, in particular to a method and device for verifying security policies. Background technique [0002] Some devices, such as firewalls and other security devices, will configure security policies. In order to verify whether the security policies are effective, these security policies need to be tested. Taking a security device as an example, there are often a large number of similar security policies in the security device, and test cases for testing these security policies are indispensable in every software version of the security device. [0003] In the prior art, manual testing may be used to test these security policies. However, this type of test has a certain degree of mechanicalness, repeatability, and heavy workload. It is difficult to conduct long-term reliability tests, and it is difficult to achieve a large number of tests in a short period ...

AI Technical Summary

Problems solved by technology

However, this type of test has a certain degree of mechanicalness, repeatability, and heavy workload. It is difficult to conduct long-term reliability tests, and it is difficult to achieve a large number of tests in a short period of time. There are many strategies, which leads to the slow response of the device to process the page-turning query. At the same time, viewing the test results one by one strategy also leads to a large amount of tasks and is easy to make mistakes. The integrity cannot be guaranteed, which seriously affects the execution efficiency and accuracy of the test.

Images