Design And Implementation Of Secure Operating System Testing Toolset

Research on the secure os (operating system) testing technique is a new lesson in current domestic, and still have no systematic research literature. The handicraft testing is still current main means, and the domestic is in need of our own tools. Along with the developing continuously in the research concerning secure os in our country, it is the urgent request of designing effective automation testing tools.On the theoretical foundation of the secure os and of the secure testing, this paper tallies up the main current technique and designs a secure os testing and evaluating toolset which is based on Unix/Linux.The automation frame of this toolset is based on the principle of data driven, and the core engine builds the testing suit based on the mechanism of driven table. The testing suit is make up of a set of testing modules, and tests the secure functions of os automatically in os enviroment. The whole result can be born according to evaluation process.The testing procedure is divided into three parts: unit class, subsystem class and system class. The unit class tests checks each function unit (user command, system call) of os which is based on safe mechanisms. The objects of the subsystem class test are each subsystem in os, such as file, process, network, IPC. Each test upon the subsystem will provide validating records to check audit records of os. System class test uses the mature tool to test system's secure funtion. And before these tests, pretest tries to complete validating the enviroment to insure testing, and the objects are all of the system managing commands.This paper makes two contributions primarily: designs an automation testing and evaluating driven framewrok, and designs a multi-class secure testing model.