Network security test analysis system

Abstract

The invention discloses a network security test analysis system. The system comprises a configuration management layer, a traffic preprocessing layer, a traffic virtual machine layer, a traffic protocol stack layer and a driving layer which are sequentially arranged from top to bottom, the configuration management layer is used for formatting configuration management requirements of a user on a system and flow into configuration files and storing the configuration files in a configuration management database for a lower layer to analyze and execute; the traffic preprocessing layer is used for traffic data preprocessing, statistical data processing and test management; the traffic virtual machine layer is used for scheduling and executing concurrency of a traffic virtual machine; the traffic protocol stack layer is used for TCP / IP protocol stack state management in a traffic generation process; and the driving layer is used for inputting and outputting network packets and solving IO of high-speed network packets of the network card.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a network security test and analysis system. Background technique [0002] The realization of attack simulation, especially the realization of high performance, depends on powerful computing power and large enough memory space on the one hand, and depends on the bandwidth that the data path can support on the other hand. If any aspect becomes a bottleneck, it will affect the performance of the system. [0003] The core of attack simulation is to generate network security traffic. In the current industry and academia, there are mainly two solutions for generating network traffic: software simulation and proprietary hardware. The software simulation solution has flexible flow processing and high scalability, but has a large processing overhead and cannot do anything for high-speed network traffic. There are also manufacturers that use proprietary chips to proc...

AI Technical Summary

Problems solved by technology

The software simulation solution has flexible flow processing and high scalability, but the processing overhead is high, and it is powerless for high-speed network traffic

There are also manufacturers that use proprietary chips to process streams, such as proprietary ASIC chips, network processors NP, FPGAs, etc. Since proprietary hardware is used to process streams, the processing performance is much higher than that of software solutions, but the development cycle of proprietary chips Long time and high cost, especially the chip has solidified logic, which is suitable for a single scenario with a clear processing flow, and it has poor scalability for security scenarios that change from time to time.

Images