Research On Optimizing Test Techonolgy Of IPSec Protocol

To ensure the products of IPSec protocol can provide the security services they claimed, the IUTs need test. At present, IPSec protocol conformance testing has some problems such as the coverage of test suite is not complete; test sequence has redundancy and so on. To solve these problems, in this thesis, optimization on IPSec protocol test techonology has been studied.Firstly, on the basis of study on formal description technique, FSM is adopted as the formal model to describe IPSec protocol. BUIO method is adopted to generate test sequences. Generating test sequence based on FSM model can ensure the completeness by making the complete transformation of the model; then equivalence class partition method and boundary value analysis method are adopted to choose test parameters which can ensure the completeness of value choosing as much as possible. Meanwhile, the test sequences generated by BUIO method reduced the redundancy part of test sequences generated by UIO methods. Secondly, test process optimization is studied which is aimed at problems such as the low efficiency of test case execution, and the real coverage is not achieved which are caused by ignoring the relation between test cases. On the basis of research on the characteristics of IPSec, a hierarchy-based process optimization method has been proposed in this thesis to solve the two problems.At the same time, a promotion method of the IPSec hierarchy-based process optimization method has been proposed which can apply to common protocol test procedure optimization.Finally, Test platform is constructed and test practice is carried out, which proved the validation of the test suite optimization and test procedure optimization.