A Study On The Technology Of Performance Test Of Security Products Used In IP Network

The test and evaluation for the security products used in IP network are very important for the development of network security products. The methods and the construction of test platform are studied in this thesis.Firstly, the performance index system of security products is analyzed, in particular, the performance index system for cascade-type equipments and the those for pass-by-type equipments are studied in detail. Secondly, the test method for the key indices and the algorithm implementation for different indices are also studied. Thirdly, the uncertainty problem in the performance test of security products is analyzed, and the measure uncertainty problem in delay performance test is also studied. In this thesis, based on the general evaluation criterion CC(Common Criteria) and for the defects of TCP/IP, the implementation approach of verification test for SYN Flood and Teardrop attacks is given. Finally, the design of the integrated test platform of the network security products is presented.On the management of the test flow process, the different phrases of the test process are studied in the form of life term, and the regulated test flow process is given in this thesis.