A stress testing method for a trusted DCS trusted management platform and related equipment

Abstract

The application discloses a pressure test method of a trusted DCS trusted management platform and related equipment, uploads a Python script and a configuration file required for running the script to a client, wherein the client and a measured host computer device are in the same network test environment, the test is performed in the same network environment, network delay and unstable factors can be reduced to affect the test result, the test result is more reliable, a python script is created and a json configuration file is edited, the python script is run on the client, a plurality of host computer devices are connected in the program, the script is run on the client, monitoring and management are facilitated, a plurality of devices can be simultaneously connected and tested, a test period is greatly shortened, the trusted management platform is pressure tested according to the python script and the json configuration file, the trusted management platform is comprehensively and deeply tested through simulation of a plurality of scenes and concurrent requests, manual test time and labor cost are significantly reduced through automatic test scripts, and test accuracy and consistency are improved.

Description

TECHNICAL FIELD

[0001] The application belongs to the technical field of DCS host computers, and particularly relates to a stress test method for a trusted DCS trusted management platform and related equipment. BACKGROUND

[0002] The existing trusted DCS host computer integrates functions such as trusted startup, static trusted verification, dynamic trusted verification, trusted whitelist, process protection, and application program access control. The trusted management platform provides setting and deletion strategies for functions such as trusted startup, static trusted verification, dynamic trusted verification, trusted whitelist, process protection, and application program access control in multiple DCS host computer systems, and obtains and displays the trusted state of the DCS host computer, trusted function alarms, and other management and control functions. Users can easily and conveniently check the DCS host computer alarm content through the trusted management platform. After the management platform is deployed, a large number of alarms need to be generated on the management platform for stress testing, to test the bottleneck of the trusted management platform alarm capacity and whether the management platform is smooth in use under a large number of alarms.

[0003] Ordinary shell scripts can only be executed on a single host computer device, and if a large number of host computer devices need to generate alarms simultaneously, shell scripts need to be created on each device, which is relatively cumbersome to operate. SUMMARY

[0004] The application provides a stress test method for a trusted DCS trusted management platform and related equipment, which solves the problem that ordinary shell scripts can only be executed on a single host computer device, and if a large number of host computer devices need to generate alarms simultaneously, shell scripts need to be created on each device, which is relatively cumbersome to operate.

[0005] To achieve the above-mentioned purpose, the application provides the following technical scheme:

[0006] A stress test method for a trusted DCS trusted management platform, comprising:

[0007] uploading a Python script and a configuration file required for running the script to a client, wherein the client and the measured host computer device are in the same network test environment;

[0008] creating a python script and editing a json configuration file;

[0009] running the python script on the client, and connecting multiple host computer devices in the program;

[0010] performing stress testing on the trusted management platform according to the python script and the json configuration file.

[0011] Preferably, the test instructions provided by the python script include:

[0012] reading the content of a specified json configuration file;

[0013] remotely calling the host computer device to control the host computer device to execute the commands in the json configuration file;

[0014] determining whether the alarms on the management platform are consistent with the number of alarms generated in the json configuration file;

[0015] generating a test report.

[0016] Preferably, the json configuration file specifies the following information:

[0017] specifying the command that generates the alarm;

[0018] specifying the number of alarms generated;

[0019] specifying the number of times of execution.

[0020] Preferably, the command for generating an alarm includes:

[0021] static trusted verification alarm, trusted whitelist alarm, process protection alarm, dynamic trusted verification alarm, and application access control alarm.

[0022] Preferably, the steps of the dynamic trusted verification alarm are:

[0023] the command to start the dynamic trusted verification module;

[0024] the command to configure the dynamic trusted verification policy of the execution program;

[0025] the command to tamper with the process segment of the program after running the program with the dynamic trusted verification policy, so that the dynamic trusted verification policy of the process is untrusted.

[0026] Preferably, the steps of the application access control alarm include:

[0027] the command to start the application access control policy;

[0028] the command to configure the application access control policy of the file;

[0029] the command to tamper with, rename, and delete the file with the application access control policy using a non-host file

[0030] Preferably, the stress test on the trusted management platform includes:

[0031] stress testing the trusted management platform according to the json configuration file;

[0032] According to the python script, it is judged whether the alarm on the trusted management platform is consistent with the number and type of alarms generated by the command specified in the json file;

[0033] According to the python script, a test report is generated.

[0034] A stress test system of a trusted DCS trusted management platform, comprising:

[0035] An uploading module is configured to upload the python script and the configuration file required for running the script to a client, wherein the client and the measured host computer device are in the same network test environment;

[0036] A creating module is configured to create the python script and edit the json configuration file;

[0037] A running module is configured to run the python script on the client and connect to multiple host computer devices specified in the program;

[0038] A test module is configured to perform stress testing on the trusted management platform according to the python script and the json configuration file.

[0039] A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of a stress test method of a trusted DCS trusted management platform.

[0040] A computer readable storage medium, which stores a computer program, wherein the computer program is executed by a processor to implement the steps of a stress test method of a trusted DCS trusted management platform.

[0041] Compared with the prior art, the present application has the following beneficial effects: the present application provides a stress test method of a trusted DCS trusted management platform, uploads a Python script and a configuration file required for running the script to a client, wherein the client and the measured host equipment are in the same network test environment, and the test is carried out in the same network environment, so that the influence of network delay and unstable factors on the test result is reduced, the test result is more reliable, the python script is created and the json configuration file is edited, the data in the json format is easy to be parsed and processed by Python and other languages, the python script is run on the client, a plurality of host equipment is connected in the program, the script is run on the client, the test process can be controlled centrally, and the test process is convenient to monitor and manage, a plurality of equipment can be connected and tested at the same time, the test period is greatly shortened, the trusted management platform is tested according to the python script and the json configuration file, the trusted management platform is comprehensively and deeply tested through simulation of a plurality of scenes and concurrent requests, and the automatic test script can significantly reduce the time and labor cost of manual test, and improve the accuracy and consistency of the test. BRIEF DESCRIPTION OF DRAWINGS

[0042] Figure 1 A flow chart of the stress test method of the trusted DCS trusted management platform;

[0043] Figure 2 A running diagram of the stress test method of the trusted DCS trusted management platform;

[0044] Figure 3 A block diagram of the stress test system of the trusted DCS trusted management platform. DETAILED DESCRIPTION

[0045] In order to make the objects, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings can be arranged and designed in various different configurations.

[0046] Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the claimed present application, but only represents selected embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art without creative labor based on the embodiments in the present application belong to the scope of protection of the present application.

[0047] It should be noted that similar labels and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures.

[0048] To enable those skilled in the art to better understand the technical solution of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings.

[0049] like Figure 1 The present invention provides a stress testing method for a trusted DCS trusted management platform, comprising:

[0050] Upload the Python script and the configuration files required to run the script to the client, where the client and the host computer device under test are in the same network test environment;

[0051] Create a Python script and edit the JSON configuration file;

[0052] Run a Python script on the client and connect to multiple host computer devices specified in the program;

[0053] Stress tests were performed on the trusted management platform using Python scripts and JSON configuration files.

[0054] Centralized management of test scripts and configuration files via the client facilitates unified control and deployment of the testing process, ensures network consistency between the testing environment (client and host computer devices), reduces the impact of external factors on test results, improves the accuracy and reliability of testing, optimizes the testing process by utilizing resources in the same network environment, and reduces testing costs.

[0055] Python scripts provide the following test commands:

[0056] Read the contents of the specified JSON configuration file;

[0057] Remotely invoke a host computer device and control it to execute commands within a JSON configuration file;

[0058] Determine whether the number of alarms on the management platform matches the number of alarms generated in the execution JSON configuration file;

[0059] Generate a test report.

[0060] To automate the testing process, reduce manual intervention, and improve testing efficiency, the system remotely calls the host computer and executes specified commands to ensure the accuracy and repeatability of tests. It also provides real-time verification of whether alarms on the management platform match expectations, promptly identifies potential problems, and automatically generates test reports for subsequent analysis and problem tracking.

[0061] The json configuration file specifies the following information:

[0062] The command to generate an alarm;

[0063] The number of alarms to generate;

[0064] The number of times to execute.

[0065] Test parameters can be flexibly set through the configuration file to meet different testing needs. The test scenario can be adjusted without modifying the script code, improving test efficiency. The configuration file content is clear and explicit, easy to understand and maintain.

[0066] The command to generate an alarm includes:

[0067] Static trusted verification alarm, trusted whitelist alarm, process protection alarm, dynamic trusted verification alarm, and application access control alarm.

[0068] Covering multiple alarm types ensures comprehensive testing of the trusted management platform. Testing for specific security threats improves test effectiveness and deepens the testing of the security protection capabilities of the management platform, discovering potential security vulnerabilities.

[0069] The steps of the dynamic trusted verification alarm are:

[0070] The command to start the dynamic trusted verification module;

[0071] The command to configure the dynamic trusted verification policy of the execution program;

[0072] After running the program with the dynamic trusted verification policy, tamper with the process segment of the program to make the dynamic trusted verification policy of the process untrusted.

[0073] Simulate security threats in a dynamic environment to improve test authenticity and reliability. Verify the effectiveness of the dynamic trusted verification policy to ensure its protection in actual scenarios. Through operations such as tampering with process segments, potential security vulnerabilities and weaknesses are discovered.

[0074] The steps of the application access control alarm include:

[0075] The command to start the application access control policy;

[0076] The command to configure the application access control policy in the configuration file;

[0077] The command to tamper with, rename, and delete files with the application access control policy using non-host files.

[0078] Verify the effectiveness of the application access control policy, ensure the safe access of resources, test the robustness of the access control policy through tampering, renaming and deleting, etc., improve the defense capability of the platform against malicious operations, and ensure business continuity.

[0079] The stress test of the trusted management platform includes

[0080] According to the json configuration file, the stress test of the trusted management platform is carried out;

[0081] According to the python script, it is judged whether the alarm on the trusted management platform is consistent with the number and type of alarms generated by executing the command specified in the json file;

[0082] According to the python script, a test report is generated.

[0083] Combined with the configuration file and the script, systematic testing is carried out to ensure the comprehensiveness and depth of the test, to judge the alarm consistency in real time, to find problems and feedback in time, and to summarize the test results through the test report, to provide basis for subsequent optimization and improvement.

[0084] As shown in Figure 2 An embodiment of the present application provides a stress test method of a trusted DCS trusted management platform, including

[0085] 1. Upload the Python script and the configuration file required for running the script to the client, wherein the client and the measured host computer device are in the same network test environment;

[0086] 2. Create a python script: the python script mainly provides the following test instructions:

[0087] 1) The content of the specified json file can be read;

[0088] 2) Remote call the host computer device to let the host computer device execute the command in the json file; (The number of host computer devices can be multiple)

[0089] 3) Judge whether the alarm on the management platform is consistent with the number of alarms generated by executing the json file;

[0090] 4) Generate a test report.

[0091] 3. Edit the json configuration file: the json configuration file specifies the following information:

[0092] 1) The command for generating an alarm;

[0093] Static trusted verification alarm:

[0094] The command for starting the static trusted verification module;

[0095] Command to configure file static trust policy;

[0096] Command to tamper, delete or rename file with static trust policy; (an alarm will be generated at this time)

[0097] Trust whitelist alarm:

[0098] Command to start the whitelist module;

[0099] Command to execute programs without whitelist policy, link dynamic link libraries without whitelist policy, and load kernel modules without whitelist policy; (an alarm will be generated at this time)

[0100] Process protection alarm:

[0101] Command to start the process protection module;

[0102] Command to configure process protection policy for specified program;

[0103] Command to kill the process of the program after running the program with process protection policy; (an alarm will be generated at this time)

[0104] Dynamic trust verification alarm:

[0105] Command to start the dynamic trust verification module;

[0106] Command to configure dynamic trust verification policy for executing programs;

[0107] Command to tamper with the process segment of the program after running the program with dynamic trust verification policy, so that the dynamic trust verification policy of the process is not trusted; (an alarm will be generated at this time)

[0108] Application access control alarm:

[0109] Command to start the application access control policy;

[0110] Command to configure file application access control policy;

[0111] Command to tamper with, rename, and delete files with application access control policy using non-subject files; (an alarm will be generated at this time)

[0112] 2) Specify the number of alarms generated;

[0113] 3) Specify the number of executions.

[0114] 4. Run the python script on the client, the script will connect the specified multiple host devices in the program, if the connection fails, the program will prompt the connection failure and print the failure reason information and try to reconnect, when the upper limit of the number of reconnection is reached and still cannot be connected, the script program will exit and no longer execute the following steps.

[0115] When the client connects the measured host device, start executing the specific business function of the trusted management platform stress test. Including the following test modules:

[0116] 1) Verify the trusted management platform stress test business: according to the content of the json configuration file, execute the command specified in the json file, so that multiple host devices generate alarms at the same time, and the alarms generated by the host device are uploaded to the trusted management platform for display;

[0117] 2) Judgment module: the python script will judge the alarms on the trusted management platform, whether the number and type of alarms generated by executing the command specified in the json file are consistent, and save the result of the judgment, if they are not consistent, the reason needs to be located and investigated;

[0118] 3) Generate test report: reach the specified alarm number and times in the json file, the test is completed. Generate a test report.

[0119] As shown in Figure 3 The present application provides a kind of stress test system of trusted DCS trusted management platform, comprising:

[0120] Upload module: for uploading Python script and the configuration file required for running script to client, wherein the client and the measured host device are in the same network test environment;

[0121] Creation module: for creating python script and editing json configuration file;

[0122] Running module: for running python script on the client, connecting the specified multiple host devices in the program;

[0123] Test module: according to python script and json configuration file, the trusted management platform is tested.

[0124] The test instructions provided by the python script include:

[0125] Read the content of the specified json configuration file;

[0126] Remote call host device, control host device to execute the command in json configuration file;

[0127] Judge whether the alarm on the management platform is consistent with the number of alarms generated by executing the json configuration file;

[0128] Generate a test report.

[0129] The json configuration file specifies the following information:

[0130] The command that generates the alarm;

[0131] The number of alarms generated;

[0132] The number of times of execution.

[0133] The command to generate the alarm includes:

[0134] Static trusted verification alarm, trusted whitelist alarm, process protection alarm, dynamic trusted verification alarm and application access control alarm.

[0135] The steps of the dynamic trusted verification alarm are:

[0136] The command to start the dynamic trusted verification module;

[0137] The command to configure the dynamic trusted verification strategy of the execution program;

[0138] The command to tamper with the process segment of the program with the dynamic trusted verification strategy after running the program, so that the dynamic trusted verification strategy of the process is untrusted.

[0139] The steps of the application access control alarm include:

[0140] The command to start the application access control strategy;

[0141] The command to configure the application access control strategy of the file;

[0142] The command to tamper with, rename and delete the file with the application access control strategy with a non-host file

[0143] The stress test on the trusted management platform includes:

[0144] According to the json configuration file, the stress test on the trusted management platform is performed;

[0145] According to the python script, it is judged whether the alarm on the trusted management platform is consistent with the number of alarms generated by the command specified in the json file and the type;

[0146] According to the python script, a test report is generated.

[0147] The terminal device provided by the embodiment of the present application. The terminal device of the embodiment comprises a processor, a memory and a computer program stored in the memory and executable on the processor. The processor implements the steps in each of the method embodiments when executing the computer program. Alternatively, the processor implements the functions of each module / unit in each of the device embodiments when executing the computer program.

[0148] The computer program can be divided into one or more modules / units, which are stored in the memory and executed by the processor to complete the present application.

[0149] The terminal device can be a desktop computer, a notebook computer, a palm computer, a cloud server and other computing devices. The terminal device can include, but is not limited to, a processor and a memory.

[0150] The processor can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.

[0151] The memory can be used to store the computer program and / or modules. The processor realizes various functions of the terminal device by running or executing the computer program and / or modules stored in the memory, and calling the data stored in the memory.

[0152] The modules / units integrated in the terminal device, if realized in the form of software function units and sold or used as independent products, can be stored in a computer readable storage medium. Based on such understanding, all or part of the processes in the above-mentioned embodiment methods can also be completed by a computer program instructing related hardware, and the computer program can be stored in a computer readable storage medium. When the computer program is executed by a processor, the steps of the above-mentioned various method embodiments can be implemented. The computer program includes computer program code, which can be in the form of source code, object code, executable files or some intermediate forms, etc. The computer readable medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signal, telecommunication signal and software distribution medium, etc. It should be noted that the content included in the computer readable medium can be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction, for example, in some jurisdictions, according to legislation and patent practice, the computer readable medium does not include electrical carrier signals and telecommunication signals.

[0153] Although the embodiments of the present application are described above in conjunction with the drawings, the present application is not limited to the above-mentioned specific embodiments and application fields, and the above-mentioned specific embodiments are only illustrative and guiding, but not limiting. Those skilled in the art can make many forms under the guidance of the specification without departing from the scope protected by the claims of the present application, and these all belong to the protection of the present application.

Claims

1. A stress testing method for a trusted DCS trusted management platform, characterized in that, include: Upload the Python script and the configuration files required to run the script to the client, where the client and the host computer device under test are in the same network test environment; Create a Python script and edit the JSON configuration file; Run a Python script on the client and connect to multiple host computer devices specified in the program; Stress tests were performed on the trusted management platform using Python scripts and JSON configuration files. Python scripts provide the following test commands: Read the contents of the specified JSON configuration file; Remotely invoke a host computer device and control it to execute commands within a JSON configuration file; Determine whether the number of alarms on the management platform matches the number of alarms generated in the execution JSON configuration file; Generate a test report; The JSON configuration file specifies the following information: Specify the command to generate the alarm; Specify the number of alarms to generate; Specify the number of times to execute; Commands for generating alarms include: Static trusted verification alarms, trusted whitelist alarms, process protection alarms, dynamic trusted verification alarms, and application access control alarms; Stress testing of the trusted management platform includes: Perform stress tests on the trusted management platform based on the JSON configuration file; The Python script will determine whether the alarms on the trusted management platform are consistent with the number and type of alarms generated by executing the command specified in the JSON file. Generate a test report based on a Python script.

2. The stress testing method for a trusted DCS trusted management platform according to claim 1, characterized in that, The specific steps for dynamic trusted verification alarms are as follows: Command to enable the dynamic trusted verification module; Command to configure the dynamic trusted verification strategy of the executable program; Commands that modify the process segment of a program that has a dynamic trusted verification strategy after it has been run, making the dynamic trusted verification strategy of that process untrusted.

3. The stress testing method for a trusted DCS trusted management platform according to claim 1, characterized in that, The steps for application access control alerts include: Command to enable application access control policies; Commands for configuring application access control policies; Commands that modify, rename, and delete files that have application access control policies, using non-subject files.

4. A stress testing system for a trusted DCS trusted management platform, characterized in that, include: Upload module: Used to upload Python scripts and configuration files required to run the scripts to the client, where the client and the host computer device under test are in the same network test environment; Create module: Used to create Python scripts and edit JSON configuration files; Run module: Used to run Python scripts on the client and connect to multiple host computer devices specified in the program; Testing module: Performs stress tests on the trusted management platform using Python scripts and JSON configuration files; Python scripts provide the following test commands: Read the contents of the specified JSON configuration file; Remotely invoke a host computer device and control it to execute commands within a JSON configuration file; Determine whether the number of alarms on the management platform matches the number of alarms generated in the execution JSON configuration file; Generate a test report; The JSON configuration file specifies the following information: Specify the command to generate the alarm; Specify the number of alarms to generate; Specify the number of times to execute; Commands for generating alarms include: Static trusted verification alarms, trusted whitelist alarms, process protection alarms, dynamic trusted verification alarms, and application access control alarms; Stress testing of the trusted management platform includes: Perform stress tests on the trusted management platform based on the JSON configuration file; The Python script will determine whether the alarms on the trusted management platform are consistent with the number and type of alarms generated by executing the command specified in the JSON file. Generate a test report based on a Python script.

5. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the stress testing method for a trusted DCS trusted management platform as described in any one of claims 1 to 3.

6. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps of the stress testing method for a trusted DCS trusted management platform as described in any one of claims 1 to 3.

Images