Research On Test Method Of SSL Protocol

With the commercialization of Internet, the SSL protocol products have been widely used.As a security protocol, Whether the product of SSL protocol implements functions which the protocol claims and whether the product is able to deal with abnormal conditions are problems which are urgent to be sovled. Therefor,Reasearch on the conformance testing and robustness testing of the protocol is of great significance.My research work is carried out based on the methodology and framework for protocol conformance testing defined in ISO/IEC 9646. It mainly includes the following four parts: Firstly, this thesis, according to the particularity of the SSL Protocol's principles, proposes a method named interactive test method which is suitable for both conformance testing and robustness testing.This method is simply structured, and it is easy to control the test process.In addition, it makes the designation of test cases more flexible.Secondly, FSM is used to describe the SSL Protocol to solve the ambiguity of the protocol, and this thesis builds separately FSM modules of the client and server which are the foundation of test sequences generation.Thirdly, guided by state-by-state, the U-method for FSM is choosed to generate test sequences which are filtered based on different purposes.These two methods are combined to generate conformance testing suite and robustness testing suite.Finally, it develops a test executing system with B/S structure and modular programming on which the test cases are executed.Then test results are briefly analysed.It is good to prove that both the interactive test method and the test cases are effective through practical test.