Reasearch And Implementation Of Security Testing Environment Of Epcglobal System

The EPCglobal system is more and more poplar in life, but its safety can not be guaranteed. It is difficult to determine the effect of a network attack on the attainment of the objectives of complex missions using the existing solutions. Test the system directly can not effectively simulate attack ways, and the implementation of the test is not sustainable, which makes it difficult to improve the defensive measure from the actual attack effect evaluation.Therefore, we need to construct a secure, real-time and controllable test environment, in which to evaluate attack effects and improve defensive measures by the attack.This paper constructs a safe.test environment based on EPCglobal. It builds target range by assets and services, which can simulate all kinds of network attacks and verify effects of different attack methods. In this test environment,take evaluation test and put forward a multi-layered evaluation model based on mission. This model can be used in a large-scale network, automatically evaluate the attack effects on different missions by changing and feedback of vulnerability nodes. We also construct attack management module. It generate new attack plan and choose attack tools by evaluation results automatically, in order to achieve the best effect of attack.Experiments show that this safe test environment can evaluates the effects of different attack methods on the mission directly and accurately. At the same time, the evaluation result is coordinate with the actual situation. Finally, put forward the suggestion through the evaluation in the test environment to improve the security of the EPCglobal system.