A hybrid dynamic stress testing system and method for trusted protection of UOS systems.

Abstract

This invention belongs to the field of dynamic stress testing technology, and provides a hybrid dynamic stress testing system and method for trusted protection of UOS systems. The technical solution includes stress testing the UOS system protection module according to a preset hybrid stress testing strategy, and transmitting the hybrid stress testing strategy and the limit thresholds of various operational monitoring indicators of the UOS system protection module to an intelligent analysis engine component. This engine component monitors the UOS system performance, the protection efficiency of the trusted protection module, and the operation status of the trusted protection module under stress. Based on the monitoring data, the hybrid stress testing strategy is dynamically adjusted and transmitted to a hybrid dynamic stress testing controller component, which then performs stress testing on the UOS system protection module again. Stress testing continues until any operational monitoring indicator of the UOS system protection module fails to meet the limit threshold conditions or the trusted protection module malfunctions. At this point, stress testing stops, and a performance test report is output to a 3D visualization module component. This improves the testing capabilities for high-concurrency and mixed interference scenarios.

Description

Technical Field

[0001] This invention belongs to the field of dynamic stress testing technology, and in particular relates to a hybrid dynamic stress testing system and method for trusted protection of UOS systems. Background Technology

[0002] The statements in this section are merely background information related to the present invention and do not necessarily constitute prior art.

[0003] With the development of computer infrastructure software, the diversification of operating systems has become an important trend. Trusted security protection of operating systems is also a major concern for users, encompassing, but not limited to, user data security and system stability. Among domestically developed operating systems, UnionTech UOS is a significant representative and widely used in the market. UnionTech UOS already possesses trusted security protection mechanisms and systems, including, but not limited to, monitoring the execution of suspicious files, blocking the execution of suspicious files, monitoring the addition of suspicious files, and automatically deleting suspicious files.

[0004] However, as cyberattacks become increasingly complex and large-scale, existing testing methods for trusted protection mechanisms in UOS systems have revealed many limitations. They are unable to effectively evaluate the performance and efficiency of these mechanisms under real, high-intensity attack scenarios. Current testing methods for trusted protection mechanisms in UOS systems are mostly aimed at single, sequential security events, and cannot effectively simulate the complex pressure scenarios in real environments where a large number of suspicious files are created and executed simultaneously, intertwined with a large number of normal system operations. This makes it impossible to accurately evaluate the scheduling stability, resource control capabilities, and overall performance of the protection module under extreme loads. Current testing focuses on functional verification, i.e., "whether it blocks," but lacks fine-grained, quantitative analysis of key links in the protection process. Summary of the Invention

[0005] To address at least one of the technical problems mentioned above, this invention provides a hybrid dynamic stress testing system for trusted protection of UOS systems, which improves testing capabilities in high-concurrency and mixed interference scenarios.

[0006] To achieve the above objectives, the present invention adopts the following technical solution:

[0007] The first aspect of the present invention provides a hybrid dynamic stress testing system for trusted protection of UOS systems, including a hybrid dynamic stress testing controller component, an intelligent analysis engine component, and a three-dimensional visualization module component;

[0008] The hybrid dynamic stress test controller component is used to stress the UOS system protection module according to a preset hybrid stress test strategy, and transmits the hybrid stress test strategy and the limit thresholds of various operation monitoring indicators of the UOS system protection module to the intelligent analysis engine component. The intelligent analysis engine component is used to monitor the performance of the UOS system, the protection efficiency of the trusted protection module, and the operation status of the trusted protection module under stress. After dynamically adjusting the hybrid stress test strategy based on the monitoring data, it transmits it to the hybrid dynamic stress test controller component again to stress test the UOS system protection module until the operation monitoring indicators of any UOS system protection module fail to meet the limit threshold conditions or the trusted protection module operates abnormally. At this point, the stress test stops, and a performance test report is output to the three-dimensional visualization module component.

[0009] Furthermore, the hybrid dynamic stress test controller component includes a controller script, a file storm script, and a UOS system performance stress test script. The controller script controls the file storm script and the UOS system performance stress test script to perform hybrid stress test on the trusted protection module according to a hybrid stress test strategy. The hybrid stress test strategy includes a file storm stress test strategy and a system performance stress test strategy. The file storm stress test strategy includes changing the number and type of files; the system performance stress test strategy includes changing the percentage of CPU, memory, and storage disk I / O usage.

[0010] Furthermore, the file storm pressure strategy includes batch multi-threaded simultaneous creation of files in the same directory, batch multi-threaded simultaneous creation of different types of executable files in the same directory and automatic execution, batch multi-threaded simultaneous creation of files in different directories, and batch multi-threaded simultaneous creation of different types of executable files in different directories and automatic execution.

[0011] Furthermore, the UOS system performance monitoring metrics include the CPU usage percentage, memory usage percentage, and storage disk I / O usage percentage measured during stress testing;

[0012] The protection efficiency monitoring indicators of the trusted protection module include the alarm and processing time for suspicious newly added files, the alarm and processing time for suspicious executable files, and the handling of abnormal situations;

[0013] The monitoring of the operation of the trusted protection module includes whether the protection function of the trusted protection module is normal and whether the process is normal.

[0014] Furthermore, the hybrid pressure strategy is dynamically adjusted based on the monitoring data and then transmitted to the hybrid dynamic pressure test controller component. The judgment criterion for performing another pressure test on the UOS system protection module is as follows: when the monitoring indicators of UOS system performance and trusted protection module protection efficiency are within the limit threshold and the trusted protection module is operating normally, the corresponding pressure test parameter update strategy is dynamically adjusted and then transmitted to the hybrid dynamic pressure test controller component to perform another pressure test on the UOS system protection module.

[0015] Furthermore, the dynamic adjustment strategy for updating the corresponding load testing parameters includes adjusting the load testing parameters of the file storm script and the UOS system performance stress testing script parameters, and stress testing the UOS system protection module in a cyclical manner.

[0016] The second aspect of the present invention provides a hybrid dynamic stress testing method for trusted protection of UOS systems, which improves the testing capability in high-concurrency and mixed interference scenarios.

[0017] To achieve the above objectives, the present invention adopts the following technical solution:

[0018] A second aspect of the present invention provides a hybrid dynamic stress testing method for trusted protection of UOS systems, comprising the following steps:

[0019] The UOS system protection module is pressurized according to a preset hybrid pressurization strategy;

[0020] Based on a preset hybrid pressurization strategy, monitor the performance of the UOS system, the protection efficiency of the trusted protection module, and the operation of the trusted protection module under pressurization.

[0021] After dynamically adjusting the hybrid pressurization strategy based on monitoring data, the UOS system protection module is pressurized again until the operation monitoring indicators of any UOS system protection module fail to meet the limit threshold conditions or the trusted protection module malfunctions. Then, the pressurization is stopped and a performance test report is output to the 3D visualization module component.

[0022] A third aspect of the present invention provides a computer-readable storage medium.

[0023] A computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the hybrid dynamic stress testing method for trusted protection of a UOS system as described above.

[0024] A fourth aspect of the present invention provides a computer device.

[0025] A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the steps of the hybrid dynamic stress testing method for trusted protection of a UOS system as described above.

[0026] A fifth aspect of the present invention provides a program product.

[0027] A program product, which is a computer program product, includes a computer program that, when executed by a processor, implements the steps in the hybrid dynamic stress testing method for trusted protection of a UOS system as described above.

[0028] Compared with the prior art, the beneficial effects of the present invention are:

[0029] This invention innovatively proposes a hybrid dynamic stress testing system for trusted protection of UOS systems. It realizes performance testing of scenarios such as monitoring the execution of suspicious files, blocking the execution of suspicious files, monitoring the addition of suspicious files, and automatically deleting suspicious files under the trusted protection system of UOS system, thereby improving the testing capability in high-concurrency and mixed interference scenarios.

[0030] This invention refines the granularity of performance evaluation and increases the accuracy of efficiency measurement. It can accurately measure the total latency from the discovery of a suspicious file addition to the completion of alarm and processing, the threat detection throughput in high-concurrency execution scenarios, and the system's recovery and processing time in abnormal situations, so as to promptly identify potential performance bottlenecks.

[0031] Advantages of additional aspects of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. Attached Figure Description

[0032] The accompanying drawings, which form part of this invention, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an improper limitation of the invention.

[0033] Figure 1 This is a schematic diagram of a hybrid dynamic stress testing system for trusted protection of UOS systems provided in an embodiment of the present invention.

[0034] Figure 2 This is a flowchart of a hybrid dynamic stress testing method for trusted protection of UOS systems provided in an embodiment of the present invention. Detailed Implementation

[0035] The present invention will be further described below with reference to the accompanying drawings and embodiments.

[0036] It should be noted that the following detailed description is illustrative and intended to provide further explanation of the invention. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains.

[0037] It should be noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to limit the scope of exemplary embodiments according to the invention. As used herein, the singular form is intended to include the plural form as well, unless the context clearly indicates otherwise. Furthermore, it should be understood that when the terms "comprising" and / or "including" are used in this specification, they indicate the presence of features, steps, operations, devices, components, and / or combinations thereof.

[0038] Example 1

[0039] like Figure 1 As shown, this embodiment provides a hybrid dynamic stress testing system for trusted protection of UOS systems, including a hybrid dynamic stress testing controller component, an intelligent analysis engine component, and a three-dimensional visualization module component;

[0040] The hybrid dynamic stress test controller component is used to stress the UOS system protection module according to a preset hybrid stress test strategy, and transmit the hybrid stress test strategy and the limit thresholds of various operation monitoring indicators of the UOS system protection module to the intelligent analysis engine component. The intelligent analysis engine component is used to monitor the various operation monitoring indicators of the UOS system protection module and the operation status of the trusted protection module under stress, dynamically adjust the hybrid stress test strategy according to the monitoring data, and transmit it to the hybrid dynamic stress test controller component again to stress test the UOS system protection module until any operation monitoring indicator of the UOS system protection module fails to meet the limit threshold conditions or the trusted protection module operates abnormally, at which point the stress test stops and the performance test report is output to the three-dimensional visualization module component.

[0041] This invention creatively realizes performance testing of scenarios such as monitoring the execution of suspicious files, preventing the execution of suspicious files, monitoring the addition of suspicious files, and automatically deleting suspicious files under the trusted protection system of UOS system, thereby improving the testing capability of high concurrency and mixed interference scenarios.

[0042] As a further embodiment, the hybrid dynamic stress test controller component includes a controller script, a file storm script, and a UOS system performance stress test script. The controller script controls the file storm script and the UOS system performance stress test script to perform hybrid stress test on the trusted protection module according to the hybrid stress test strategy.

[0043] The hybrid pressure-increasing strategy includes a file storm pressure-increasing strategy and a system performance pressure-increasing strategy. The file storm pressure-increasing strategy includes changing the number and type of files, etc.; the system performance pressure-increasing strategy includes changing the percentage of CPU, memory, and storage disk I / O usage. The pressure-increasing strategy can be a custom default strategy or can be automatically and dynamically increased according to the strategy updated by the intelligent analysis engine component.

[0044] Specifically, the hybrid dynamic stress test controller component is used to stress the UOS system protection module according to a preset hybrid stress test strategy by customizing the file storm script stress test parameters and the UOS system performance stress test script parameters in the file storm script and the UOS system performance stress test script; the file storm script stress test parameters mainly include, but are not limited to, the number of files and file types, etc.

[0045] The parameters of the UOS system performance stress test script mainly include, but are not limited to, CPU usage percentage, memory usage percentage, and storage disk I / O usage percentage.

[0046] In this embodiment, the file storm and UOS system performance stress-boosting scripts are defined as functions containing parameters that serve as dynamic stress test parameters. These parameters can be called together or selectively. Multi-threaded processing is used for the calls.

[0047] Specifically, the file storm-related pressure-boosting script implementation scenarios in the pressure-boosting strategy include, but are not limited to:

[0048] (1) Create files in batches simultaneously in the same directory using multiple threads. The files include, but are not limited to, binary files, files of different formats, and files with Chinese names. The number of files created and the file types can be adjusted as parameters.

[0049] (2) Create different types of executable files in the same directory simultaneously using multiple threads and execute them automatically. Executable files include, but are not limited to, Python scripts and shell scripts. The number of files created and the file types can be adjusted as parameters.

[0050] (3) Create files in batches and simultaneously in different directories using multiple threads. The files include, but are not limited to, binary files, files of different formats, and files with Chinese names. The number of files created and the file types can be adjusted as parameters.

[0051] (4) Create and automatically execute different types of executable files in different directories simultaneously using multiple threads. Executable files include, but are not limited to, Python scripts and shell scripts. The number of files created and the file types can be adjusted as parameters.

[0052] The UOS system performance-related stress-increasing scripts implemented in the stress-increasing strategy include, but are not limited to:

[0053] (1) The CPU of the UOS system is pressurized, and the pressurization level can be adjusted at will;

[0054] (2) UOS system memory is pressurized, and the pressurization level can be adjusted at will;

[0055] (3) The UOS system storage is pressurized, and the pressurization level can be adjusted at will.

[0056] The above scripts can be combined in any way to apply pressure, reflecting the performance and stability of the trusted protection system under the UOS system, and achieving a hybrid dynamic stress test effect.

[0057] The intelligent analysis engine component includes performance monitoring scripts and intelligent analysis scripts;

[0058] The performance monitoring script is used to monitor the performance of the UOS system, the protection efficiency of the trusted protection module, and the operation of the trusted protection module. The intelligent analysis script is used to dynamically adjust the pressurization strategy based on the monitoring data and pass it to the hybrid dynamic pressure test controller component for re-pressurization testing, realizing dynamic pressurization and dynamic updating of the pressurization strategy, and outputting a report to the 3D visualization module component to present the results.

[0059] It is understood that in this embodiment, the test object is the UOS system trusted protection module. The functions of the trusted protection module include, but are not limited to, monitoring the execution of suspicious files, blocking the execution of suspicious files, monitoring the addition of suspicious files, and automatically deleting suspicious files.

[0060] Specifically, the UOS system performance monitoring metrics mainly include the CPU usage percentage, memory usage percentage, and storage disk I / O usage percentage measured during stress testing.

[0061] The monitoring metrics for the protection efficiency of the trusted protection module include, but are not limited to, the time for monitoring and handling suspicious newly added files, the time for monitoring and handling suspicious executed files, and the handling of abnormal situations. For example, the time for handling suspicious newly added files is the time taken to alert and delete 1,000 suspicious newly added files; the time for handling suspicious executed files is the time taken to alert and block execution when 1,000 suspicious files are executed; and the handling of abnormal situations is the time taken to recover normally when the number of suspicious newly added files is large and the processing capacity is insufficient; and whether the system recovers normally when the UOS system consumes a lot of resources and affects the operation of the trusted module.

[0062] Monitoring the operation of the trusted protection module includes, but is not limited to, whether the protection function of the trusted protection module is normal and whether the process is normal.

[0063] It should be noted that whether the trusted protection module's protection function and process are normal can be determined by those skilled in the art. For example, if 1000 suspicious files are added, but only 990 are alerted and processed, this indicates that the protection function is not normal. As for whether the process is normal, for example, if the trusted protection module's process crashes under pressure, this also indicates abnormal operation.

[0064] By monitoring data from three levels: UOS system performance, trusted protection module protection efficiency, and trusted protection module operation status;

[0065] This invention refines the granularity of performance evaluation and increases the accuracy of efficiency measurement. It can accurately measure the total latency from the discovery of a suspicious file addition to the completion of alarm and processing, the threat detection throughput in high-concurrency execution scenarios, and the system's recovery and processing time in abnormal situations, so as to promptly identify potential performance bottlenecks.

[0066] As a further limitation, the intelligent analysis script is used to dynamically adjust the pressure strategy based on monitoring data and pass it to the hybrid dynamic pressure test controller component for re-pressure testing. It compares each monitoring indicator with the set corresponding indicator threshold range. When the UOS system performance and the protection efficiency of the trusted protection module are within the threshold and the trusted protection module is operating normally, it dynamically adjusts the corresponding pressure test parameter update strategy and passes it to the hybrid dynamic pressure test controller component for re-pressure testing. Finally, when the UOS system performance and the protection efficiency of the trusted protection module exceed the threshold or the trusted protection module is operating abnormally, the performance test limit value is obtained.

[0067] Specifically, when the UOS system performance and the protection efficiency of the trusted protection module are within the threshold and the trusted protection module is operating normally, the dynamic adjustment strategy for the corresponding load testing parameters is transmitted to the hybrid dynamic load testing controller component for further load testing. The dynamic adjustment strategy is as follows: by adjusting the load testing parameters of the file storm script and the UOS system performance load testing script parameters, the UOS system protection module is load tested in a cyclical manner until the UOS system performance limit threshold, the trusted protection module protection efficiency limit threshold, or any indicator of the trusted protection module's operation exceeds the set limit threshold, the load testing is terminated.

[0068] Case Description: This test examines the maximum concurrent file creation count under mixed stress conditions of creating files in the same directory and UOS performance, illustrating the entire mixed dynamic stress test process, specifically including:

[0069] 1. Set thresholds for the hybrid dynamic load test controller, such as: setting the alarm time to less than 3 seconds, and setting the CPU, memory, and disk I / O usage percentages of UOS performance to less than 90% each;

[0070] 2. The hybrid dynamic load test controller can be customized with a default hybrid load strategy, such as: the default UOS performance CPU, memory, and disk I / O usage percentage load start is 50%, the number of files created in the same directory load start is 500, and the cyclic load strategy is to increase the CPU, memory, and disk I / O usage percentage by 5% each time, and increase the number of files created in the same directory by 300 each time;

[0071] 3. The hybrid dynamic stress test controller starts stress testing according to the set default hybrid stress testing strategy. The file storm script and the UOS system performance stress testing script stress test from the set default starting point, and at the same time, the set default hybrid stress testing strategy and stress testing threshold are transmitted to the intelligent analysis engine.

[0072] 4. The intelligent analysis engine performs the first round of stress test, judging three aspects: UOS system performance threshold, trusted protection module protection efficiency threshold, and trusted protection module operation status. For example, if the monitored UOS system performance CPU usage percentage is less than 90%, memory usage percentage is less than 90%, disk I / O usage percentage is less than 90%, trusted protection module alarm time is less than 3 seconds, and the number of trusted protection module alarm messages is normal, and the threshold is not reached, the stress test will be dynamically updated according to the cyclic stress test strategy, increasing the CPU, memory, and disk I / O usage percentages by 5% each time and increasing the number of files created in the same directory by 300 each time. The stress test will then be sent to the hybrid dynamic stress test controller for further stress test until any one of the conditions of UOS system performance threshold, trusted protection module protection efficiency threshold, or trusted protection module operation status is not met. If any one of these conditions is not met, the stress test will be terminated, and the test results will be sent to the 3D visualization module.

[0073] This invention monitors performance and protection efficiency, intelligently analyzes monitoring data, outputs test reports to a 3D visualization module for display, and generates new pressure strategy schemes, which are automatically transmitted to the hybrid dynamic pressure test controller to form the next round of pressure testing, thus realizing dynamic updates of the strategy.

[0074] Example 2

[0075] like Figure 2 As shown, this embodiment provides a hybrid dynamic stress testing method for trusted protection of UOS systems, including the following steps:

[0076] Step 1: Pressurize the UOS system protection module according to the preset hybrid pressurization strategy;

[0077] Step 2: Based on the preset hybrid pressurization strategy, monitor the performance of the UOS system, the protection efficiency of the trusted protection module, and the operation of the trusted protection module under pressurization;

[0078] Step 3: After dynamically adjusting the hybrid pressure strategy based on the monitoring data, perform pressure testing on the UOS system protection module again until the operation monitoring indicators of any UOS system protection module fail to meet the limit threshold conditions or the trusted protection module operates abnormally. Stop the pressure testing and generate a performance test report.

[0079] As a further limitation, in step 1, the hybrid pressure strategy includes a file storm pressure strategy and a system performance pressure strategy. The file storm pressure strategy includes changing the number of files and the file type; the system performance pressure strategy includes changing the percentage of CPU, memory, and storage disk I / O usage.

[0080] File storming strategies include batch multi-threaded creation of files in the same directory, batch multi-threaded creation of different types of executable files in the same directory and automatic execution, batch multi-threaded creation of files in different directories, and batch multi-threaded creation of different types of executable files in different directories and automatic execution.

[0081] As a further clarification, in step 2, specifically, the UOS system performance monitoring indicators mainly include the CPU usage percentage, memory usage percentage, and storage disk I / O usage percentage of the stress test.

[0082] The monitoring metrics for the protection efficiency of the trusted protection module include, but are not limited to, the time for monitoring and handling suspicious newly added files, the time for monitoring and handling suspicious executed files, and the handling of abnormal situations. For example, the time for handling suspicious newly added files is the time taken to alert and delete 1,000 suspicious newly added files; the time for handling suspicious executed files is the time taken to alert and block execution when 1,000 suspicious files are executed; and the handling of abnormal situations is the time taken to recover normally when the number of suspicious newly added files is large and the processing capacity is insufficient; and whether the system recovers normally when the UOS system consumes a lot of resources and affects the operation of the trusted module.

[0083] Monitoring the operation of the trusted protection module includes, but is not limited to, whether the protection function of the trusted protection module is normal and whether the process is normal.

[0084] It should be noted that whether the trusted protection module's protection function and process are normal can be determined by those skilled in the art. For example, if 1000 suspicious files are added, but only 990 are alerted and processed, this indicates that the protection function is not normal. As for whether the process is normal, for example, if the trusted protection module's process crashes under pressure, this also indicates abnormal operation.

[0085] By monitoring data from three levels: UOS system performance, trusted protection module protection efficiency, and trusted protection module operation status;

[0086] In step 3, the hybrid pressure strategy is dynamically adjusted based on the monitoring data and then transmitted to the hybrid dynamic pressure test controller component. The judgment criterion for performing another pressure test on the UOS system protection module is: when the monitoring indicators of UOS system performance and trusted protection module protection efficiency are within the limit threshold and the trusted protection module is operating normally, the corresponding pressure test parameter update strategy is dynamically adjusted and then transmitted to the hybrid dynamic pressure test controller component to perform another pressure test on the UOS system protection module.

[0087] When the performance of the UOS system, the protection efficiency of the trusted protection module exceeds the threshold, or the trusted protection module malfunctions, the performance test limit value of the UOS system protection module is obtained.

[0088] It should be noted that the specific implementation of the hybrid dynamic stress testing system for trusted protection of UOS system in this embodiment of the invention is similar to the specific implementation of the hybrid dynamic stress testing method for trusted protection of UOS system in this embodiment of the invention. For details, please refer to the description in the method section. To reduce redundancy, it will not be repeated here.

[0089] Example 3

[0090] This embodiment provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the hybrid dynamic stress testing method for trusted protection of UOS systems as described above.

[0091] Example 4

[0092] This embodiment provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, it implements the steps in the hybrid dynamic stress testing method for trusted protection of UOS systems as described above.

[0093] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of hardware embodiments, software embodiments, or embodiments combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.

[0094] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, as well as combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0095] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0096] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0097] Those skilled in the art will understand that all or part of the processes in the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. The storage medium can be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc.

[0098] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A hybrid dynamic stress testing system for trusted protection of UOS systems, characterized in that, This includes a hybrid dynamic stress test controller component, an intelligent analysis engine component, and a 3D visualization module component; The hybrid dynamic stress test controller component is used to stress the UOS system protection module according to a preset hybrid stress test strategy, and transmit the hybrid stress test strategy and the limit thresholds of various operation monitoring indicators of the UOS system protection module to the intelligent analysis engine component. The intelligent analysis engine component is used to monitor the performance of the UOS system, the protection efficiency of the trusted protection module, and the operation status of the trusted protection module under stress. After dynamically adjusting the hybrid stress test strategy based on the monitoring data, it transmits it to the hybrid dynamic stress test controller component, and stress tests the UOS system protection module again until the operation monitoring indicators of any UOS system protection module fail to meet the limit threshold conditions or the trusted protection module operates abnormally. Then, the stress test is stopped, and a performance test report is output to the three-dimensional visualization module component. The hybrid dynamic stress test controller component includes a controller script, a file storm script, and a UOS system performance stress test script. The controller script controls the file storm script and the UOS system performance stress test script to apply hybrid stress test to the trusted protection module according to a hybrid stress test strategy. The hybrid stress test strategy includes a file storm stress test strategy and a system performance stress test strategy. The file storm stress test strategy includes changing the number and type of files; the system performance stress test strategy includes changing the percentage of CPU, memory, and storage disk I / O usage. File storming pressure strategies include batch multi-threaded creation of files in the same directory, batch multi-threaded creation of different types of executable files in the same directory and automatic execution, batch multi-threaded creation of files in different directories, and batch multi-threaded creation of different types of executable files in different directories and automatic execution. The trusted protection module's protection efficiency monitoring metrics include monitoring and processing time for suspicious newly added files, monitoring and processing time for suspicious executable files, and handling of abnormal situations.

2. The hybrid dynamic stress testing system for trusted protection of UOS systems as described in claim 1, characterized in that, The UOS system performance monitoring metrics include the CPU usage percentage, memory usage percentage, and storage disk I / O usage percentage under load testing. The monitoring of the operation of the trusted protection module includes whether the protection function of the trusted protection module is normal and whether the process is normal.

3. The hybrid dynamic stress testing system for trusted protection of UOS systems as described in claim 1, characterized in that, After dynamically adjusting the hybrid pressure strategy based on monitoring data, the results are transmitted to the hybrid dynamic pressure test controller component. The criteria for re-testing the UOS system protection module are as follows: when the monitoring indicators of UOS system performance and trusted protection module protection efficiency are within the limit threshold and the trusted protection module is operating normally, the corresponding pressure test parameter update strategy is dynamically adjusted and transmitted to the hybrid dynamic pressure test controller component to re-test the UOS system protection module.

4. The hybrid dynamic stress testing system for trusted protection of UOS systems as described in claim 3, characterized in that, The strategy for dynamically adjusting the corresponding load testing parameters includes adjusting the load testing parameters of the file storm script and the UOS system performance stress testing script, and stress testing the UOS system protection module in a cyclical manner.

5. A hybrid dynamic stress testing method for trusted protection of UOS systems, based on the hybrid dynamic stress testing system for trusted protection of UOS systems as described in any one of claims 1-4, characterized in that, Includes the following steps: The UOS system protection module is pressurized according to a preset hybrid pressurization strategy; Based on a preset hybrid pressurization strategy, monitor the performance of the UOS system, the protection efficiency of the trusted protection module, and the operation of the trusted protection module under pressurization. After dynamically adjusting the hybrid pressurization strategy based on monitoring data, the UOS system protection module is pressurized again until the operation monitoring indicators of any UOS system protection module fail to meet the limit threshold conditions or the trusted protection module malfunctions. At this point, pressurization is stopped and a performance test report is generated.

6. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the steps in the hybrid dynamic stress testing method for trusted protection of UOS systems as described in claim 5.

7. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the steps in the hybrid dynamic stress testing method for trusted protection of UOS systems as described in claim 5.

8. A program product, said program product being a computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the steps in the hybrid dynamic stress testing method for trusted protection of UOS systems as described in claim 5.

Images