Automatic simulation test method and system for network security and protection equipment

Abstract

The invention discloses an automatic simulation test method and system for network security protection equipment. The system comprises a control center which is used for reading a test case, receiving a command of a test and distribution platform, notifying a test center to test, receiving a test result of a service test, and returning a test result summary to the test and distribution platform; the test and configuration platform is used for displaying a test and configuration process, issuing the setting value list configuration to the network security and protection equipment, issuing the setting value list configuration to the control center and notifying the control center to test; the test center is used for receiving a command of the control center program, sending a specified message, receiving the specified message and returning a test result to the control center; the alarm center is used for recording alarm information and equipment operation abnormal information generated in the test process; and the tested network security equipment and the simulation master station equipment are used for simulating a real service scene. According to the scheme, the test efficiency is improved, the operation is simple, and the test coverage is comprehensive.

Description

Technical Field

[0001] The present invention belongs to the fields of computers, network communications and network security, and in particular relates to an automated simulation test method and system for network security equipment, which is particularly suitable for vertical encryption authentication devices. Background Art

[0002] With the advancement of science and technology and the continuous development of my country's economy, the power system is gradually developing towards ultra-high voltage and large-scale grid interconnection. The security of data transmission is also a very important link. Due to the complexity of the dispatching network, the frequency of data transmission and the increasingly prominent network security issues, the network security equipment of the power monitoring system plays a very important role in the entire power grid dispatching and control system. With the continuous expansion of the scale of the power grid and the increase in infrastructure plants and stations year by year, the requirements for the testing efficiency and safety of network security equipment are also getting higher and higher.

[0003] The prior art provides a solution for automated configuration based on the background management of network security equipment. Each network security device is configured with fixed values ​​by using the configuration commands provided by the network security device manufacturer. After the configuration, the tester needs to set up the network by himself to conduct a simple simulation test on the communication capability of the network security device. However, the above solution is difficult to operate, requiring the tester to be very familiar with the background of the device. It is inconvenient to operate when configuring multiple policy configurations, and it is easy to omit; it is inefficient, and only a single device can be operated at a time. In addition, the test is not sufficient, and only the functions of the network security device, such as network connectivity, can be tested. Performance testing cannot be taken into account, including the performance of the network security device under frequent communication. Summary of the invention

[0004] In order to solve the deficiencies in the prior art, the present invention provides a method and system for automated simulation testing of network security equipment to solve the technical problems of low efficiency, insufficient testing and difficulty in operation for testers.

[0005] In order to solve the above technical problems, the present invention adopts the following technical solutions.

[0006] The present invention first discloses an automated simulation test system for network security equipment, comprising:

[0007] The control center is used to read test cases, receive commands from the test and matching platform, notify the test center to perform tests, receive test results of business tests, and return a summary of test results to the test and matching platform;

[0008] The test and configuration platform is used to display the test and configuration process, issue the setting list configuration to the network security equipment, issue the setting list configuration to the control center, and notify the control center to conduct the test;

[0009] The test center is used to receive commands from the control center program, simulate the request and sending of IP packets during the test process to evaluate the performance indicators of the device under test, discover security vulnerabilities or defects of the device under test, and return the test results to the control center;

[0010] Alarm center, used to record alarm information and equipment operation abnormality information generated during the test;

[0011] The network security equipment under test and the simulated master station equipment are used to simulate real business scenarios.

[0012] The present invention further includes the following preferred embodiments:

[0013] The test center consists of two test servers, namely test server 1 and test server 2. The test server 1 is connected in series with the network security device under test, and is used to receive instructions issued by the control center and assemble messages. The test server 2 is connected in series with the simulated master station device, and is used to reply to messages and report results.

[0014] The test and matching platform is further used to send fixed value configuration information to the tested network security equipment and the simulated master station equipment respectively, and then notify the control center to perform simulation testing.

[0015] The message is transmitted from the test server 1 to the test server 2 via the tested network security device and the simulated master station device in sequence.

[0016] The alarm center is further used to receive the system logs of the alarms reported by the tested network security equipment and the simulated master station equipment, and notify the alarm center.

[0017] The alarm center is further used to receive information about errors generated by the control center.

[0018] After receiving the message from the test server 1, the test server 2 replies to the test server 1 and reports the result to the control center. After receiving the reply message from the test server 2, the test server 1 reports the result to the control center.

[0019] The present invention also discloses a network security equipment automated simulation test method using the aforementioned network security equipment automated simulation test system, comprising:

[0020] Step 1: The test and configuration platform issues setting lists to the network security equipment under test and the simulated master station equipment respectively for setting configuration;

[0021] Step 2: After the test platform sends the test instruction to the control center, the control center obtains the corresponding test case and sends the test case to the test server 2; when the test server 2 is ready, the control center notifies the test server 1 to assemble the message and send it to the test server 2 to start the simulation test;

[0022] Step 3: Test server 1 assembles the message and sends it. The message reaches test server 2 via the network security device under test and the simulated master station device. After receiving the message, test server 2 verifies the message in combination with the test case to determine the test result. Then it replies. The reply message reaches test server 1 via the simulated master station device and the network security device under test. After receiving the reply, test server 1 reports the test result to the control center.

[0023] Step 4: While replying, test server 2 sends a message to the control center to notify the test result; after receiving the reply message from test server 2, test server 1 reports the result to the control center, and the test ends.

[0024] Accordingly, the present application also discloses a terminal, including a processor and a storage medium;

[0025] The storage medium is used to store instructions;

[0026] The processor is used to operate according to the instructions to execute the steps of the aforementioned network security equipment automated simulation testing method.

[0027] Correspondingly, the present application also discloses a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the steps of the aforementioned network security equipment automated simulation test method are implemented.

[0028] The beneficial effects of the present invention are that, compared with the prior art, the present invention provides an automated simulation test method and system for network security equipment, which can effectively improve the testing and matching of network security equipment, provide strong support for testing and matching staff, and realize the automated testing and matching of network security equipment; realize simulation testing of network security equipment, including simulation of the actual network environment of network security equipment, stability of network connection, integrity of data packet sending and receiving, and stability of large file transmission; adopt customizable test case management to truly realize customizable and selectable testing of specific tunnel strategies; have wide coverage and high flexibility. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 It is a structural schematic diagram of the network security equipment automated simulation test system in the present invention. DETAILED DESCRIPTION

[0030] In order to make the purpose, technical solution and advantages of the present invention more clear, the technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0031] The embodiments described in this application are only some embodiments of the present invention, not all embodiments. Based on the spirit of the present invention, other embodiments obtained by ordinary technicians in this field without creative work are all within the protection scope of the present invention.

[0032] In view of the shortcomings of the prior art, the present invention proposes an automated simulation test method and system for network security equipment, which not only improves the efficiency of network security equipment testing and matching by simulating a real network environment, but also simulates real business scenarios to improve the test coverage and equipment security. The method is also applicable to encryption authentication gateways and encryption cards.

[0033] See also Figure 1 As shown, the network security equipment automation simulation test system of the present invention includes a test and matching platform, a control center, a test center, an alarm center, a network security equipment to be tested, and a simulated master station device.

[0034] The control center is used to read test cases, receive commands from the test and configuration platform, notify the test center to perform tests, receive test results from business tests, and return a summary of test results to the test and configuration platform;

[0035] The test and configuration platform is used to display the test and configuration process, issue the setting list configuration to the network security equipment, issue the setting list configuration to the control center, and notify the control center to conduct the test;

[0036] The test center consists of two test servers, which are used to deploy simulated business test programs on both sides of the internal and external networks of the device under test, simulate the business connection and data interaction between the main station and the factory server; receive commands from the control center program, send specified messages, receive specified messages, and return test results to the control center; during the test, the test center simulates the request and sending of IP messages to evaluate the performance indicators such as throughput, delay and packet loss rate of the device under test; by sending specific types of IP messages (such as unknown protocol messages, malformed messages, etc.), possible security vulnerabilities or defects in the device under test are discovered; supported test points include: secondary message forwarding, three-layer message forwarding, four-layer message pass verification, data delay test, high-concurrency connection test, large-flow stability test, and alarm test.

[0037] The alarm center is used to record alarm information generated during the test, equipment operation abnormality information, etc.

[0038] The network security equipment under test and the simulated master station equipment are used to simulate real business scenarios.

[0039] Among them, the test server 1 of the test center is connected in series with the network security device under test. During the test process, the test and matching platform sends fixed value configuration information to the network security device under test and the simulated master station device, and then notifies the control center to perform simulation testing. The control center sends instructions to the test server 1, and the test server 1 assembles the message, which reaches the test server 2 through the network security device under test and the simulated master station device. The test server 2 replies with the message and reports the result.

[0040] The network security equipment automated simulation test method disclosed in the present invention comprises the following steps:

[0041] Step 1: The test and configuration platform issues setting lists to the network security equipment under test and the simulated master station equipment for setting configuration.

[0042] Step 2: After the test platform sends the test instructions to the control center, the control center obtains the corresponding test cases and sends the test cases to test server 2; after test server 2 is ready, the control center notifies test server 1 to assemble the message and send it to test server 2 to start the simulation test.

[0043] Step 3: Test server 1 assembles the message and sends it. The message reaches test server 2 via the network security device under test and the simulated master station device. After receiving the message, test server 2 verifies the message in combination with the test case to determine the test result. Then it replies. The reply message reaches test server 1 via the simulated master station device and the network security device under test. After receiving the reply, test server 1 reports the test result to the control center. According to the configuration of the test case, the communication between test server 1 and test server 2 can also be carried out in the reverse direction.

[0044] During the test, the network security equipment under test and the simulated master station equipment will report the system log syslog that generates the alarm to the alarm center, and the control center will also notify the alarm center of the error information.

[0045] Step 4: While replying, test server 2 sends a message to the control center to notify the test result; after receiving the reply message from test server 2, test server 1 reports the result to the control center; the test ends here.

[0046] The beneficial effects of the present invention are that, compared with the prior art, the present invention provides an automated simulation test method and system for network security equipment, which can effectively improve the testing and matching of network security equipment, provide strong support for testing and matching staff, and realize the automated testing and matching of network security equipment; realize simulation testing of network security equipment, including simulation of the actual network environment of network security equipment, stability of network connection, integrity of data packet sending and receiving, and stability of large file transmission; adopt customizable test case management to truly realize customizable and selectable testing of specific tunnel strategies; have wide coverage and high flexibility.

[0047] Based on the spirit of the present invention, those skilled in the art can easily think that a computer program product can be obtained based on the aforementioned network security equipment automated simulation test method. The computer program product may include a computer-readable storage medium, which carries computer-readable program instructions for enabling a processor to implement various aspects of the present disclosure. That is, the present application also includes a terminal, including a processor and a storage medium; the storage medium is used to store instructions; the processor is used to operate according to the instructions to perform the steps according to the aforementioned network security equipment automated simulation test method.

[0048] Computer readable storage medium can be a tangible device that can keep and store the instructions used by the instruction execution device. Computer readable storage medium can be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination thereof. More specific examples (non-exhaustive list) of computer readable storage medium include: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a static random access memory (SRAM), a portable compact disk read-only memory (CDROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanical encoding device, for example, a punch card or a convex structure in a groove on which instructions are stored, and any suitable combination thereof. The computer readable storage medium used here is not interpreted as a transient signal itself, such as a radio wave or other freely propagating electromagnetic wave, an electromagnetic wave propagated by a waveguide or other transmission medium (for example, a light pulse by an optical fiber cable), or an electrical signal transmitted by a wire.

[0049] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network can include copper transmission cables, optical fiber transmissions, wireless transmissions, routers, firewalls, switches, gateway computers, and / or edge servers. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing / processing device.

[0050] The computer program instructions for performing the disclosed operation may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk, C++, etc., and conventional procedural programming languages ​​such as "C" language or similar programming languages. Computer-readable program instructions may be executed completely on a user's computer, partially on a user's computer, executed as an independent software package, partially on a user's computer, partially on a remote computer, or completely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer by any type of network including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect via the Internet). In some embodiments, by utilizing the state information of a computer-readable program instruction to customize an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA) or a programmable logic array (PLA), the electronic circuit may execute a computer-readable program instruction, thereby realizing various aspects of the present disclosure.

[0051] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation methods of the present invention can still be modified or replaced by equivalents, and any modifications or equivalent replacements that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. A network security equipment automated simulation test system, characterized in that: include: The control center is used to read test cases, receive commands from the test and matching platform, notify the test center to perform tests, receive test results of business tests, and return a summary of test results to the test and matching platform; The test and configuration platform is used to display the test and configuration process, issue the setting list configuration to the network security equipment, issue the setting list configuration to the control center, and notify the control center to conduct the test; The test center is used to receive commands from the control center program, simulate the request and sending of IP packets during the test process to evaluate the performance indicators of the device under test, discover security vulnerabilities or defects of the device under test, and return the test results to the control center; Alarm center, used to record alarm information and equipment operation abnormality information generated during the test; The network security equipment under test and the simulated master station equipment are used to simulate real business scenarios.

2. The network security equipment automated simulation test system according to claim 1, characterized in that: The test center consists of two test servers, namely test server 1 and test server 2. The test server 1 is connected in series with the network security device under test, and is used to receive instructions issued by the control center and assemble messages. The test server 2 is connected in series with the simulated master station device, and is used to reply to messages and report results.

3. The network security equipment automated simulation test system according to claim 2, characterized in that: The test and matching platform is further used to send fixed value configuration information to the tested network security equipment and the simulated master station equipment respectively, and then notify the control center to perform simulation testing.

4. The network security equipment automated simulation test system according to claim 3, characterized in that: The message is transmitted from the test server 1 to the test server 2 via the tested network security device and the simulated master station device in sequence.

5. The network security equipment automated simulation test system according to claim 4, characterized in that: The alarm center is further used to receive the system logs of the alarms reported by the tested network security equipment and the simulated master station equipment, and notify the alarm center.

6. The network security equipment automated simulation test system according to claim 5, characterized in that: The alarm center is further used to receive information about errors generated by the control center.

7. The network security equipment automated simulation test system according to claim 6, characterized in that: After receiving the message from the test server 1, the test server 2 replies to the test server 1 and reports the result to the control center. After receiving the reply message from the test server 2, the test server 1 reports the result to the control center.

8. A network security equipment automated simulation test method based on the network security equipment automated simulation test system according to any one of claims 1 to 7, characterized in that: The following steps are involved: Step 1: The test and configuration platform issues setting lists to the network security equipment under test and the simulated master station equipment respectively for setting configuration; Step 2: After the test platform sends the test instructions to the control center, the control center obtains the corresponding test cases and sends the test cases to the test server 2; When test server 2 is ready, the control center notifies test server 1 to assemble the message and send it to test server 2 to start the simulation test; Step 3: Test server 1 assembles the message and sends it. The message reaches test server 2 via the network security device under test and the simulated master station device. After receiving the message, test server 2 verifies the message in combination with the test case to determine the test result. Then it replies. The reply message reaches test server 1 via the simulated master station device and the network security device under test. After receiving the reply, test server 1 reports the test result to the control center. Step 4: While replying, test server 2 sends a message to the control center to notify the test result; after receiving the reply message from test server 2, test server 1 reports the result to the control center, and the test ends.

9. A terminal comprising a processor and a storage medium; characterized in that: The storage medium is used to store instructions; The processor is used to operate according to the instructions to execute the steps of the network security equipment automated simulation testing method according to claim 8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the network security equipment automated simulation test method described in claim 8 are implemented.

Images