Research On CC-Based Index Architecture For Anti-attack Testing Of Operating Systems

The Anti-attack test is the testing and evaluation for the OS security test. The index system is CC-based system for Anti-attack testing from the security of OS, it is the reflection and level of ability of Anti-attack. The article has done four works around the index of anti-attack test:First, the status in quo and questions has been analysed. Researching on the testing based on the attacking method and the security of OS, the article gives the analysis of the predominance of index architecture for the Anti-attack testing.Secondly, the article gives the theory and flow for creating the index system by deeply analyzing of CC and the theory of PP. Confirming the sequence of threaten, security target, module and index. The flow is according with the OS' security theory and the PP theory, inosculating the security function module.Thirdly, the article gives the index architecture, describing the 42 index form discriminating, rights exaltation, object reuse, tag, attack trace and data protection. The article also gives the check-up method for the index.At last, the article gives the use of the index architecture. Tell the risk evaluation with classes and the risk evaluation without classes. Validating the rationality of the index system by a Anti-attack testing experimentation.Most of the attack penetrations use the hacker tools to attack the OS with no sequence and the range of the testing may be infected largely by the subjective factors. So the result gets little persuasion. The index architecture of the article based on the security function component of PP criterion, combing with the knowledge that using to recover the attack by OS, figure out the blindless and localization caused by the complexity of tested targets in the security testing of OS, make the tesing results more persuasion.