The Design And Implementation Of Simulation Test Software For Network Security Device Based On Content Inspection

At present, malicious code in the Internet flow content is a major threat to the computer network security, such as the various Trojan horses, worms. In order to prevent such content-based attacks, data packets must be done to re-composition and the content must be tested to determine whether they contain malicious codes. Compared to the traditional security equipment, the network security equipment with the function of content inspection can detect the abnormal and malicious programs in the content of the data flow, and reduce the loss caused by malicious codes by strategies controlling.In the research process of the network security device with the function of the content inspection, function and performance testing are essential links. For general test software of network security equipment, it is difficult to construct the data packet of special content, and the software can not meet the testing requirements of network security equipment based on the content testing. Therefore, it is indispensable to test and improve the function and performance of the equipment that develop the simulation test software of network security equipment based on the content testing.The thesis introduces this kind of network security equipment's principle, the focus on the introduction of network isolation equipment. For the functional requirements and performance indicators of a certain network security equipment based on the content testing, the paper analysis and design the simulation test software. Through using the function of separating windows in Microsoft Visual C++, the paper design and achieve systemic interface. Through using SOCKET communications and multi-threading technology, the paper achieve the functions of establishment of communication links, production and transmission of test text. According to performance testing requirements of network security equipment given by RFC2544, the paper achieve the delay calculation through receiving and processing threads package and using bubble algorithm; achieve the calculation of Packet loss rate through using direct measurement method. At last the paper design an integrated test environment and achieve the function of testing of the security , through comprehensive utilization of two kinds of Business.Be applied in the development of a certain type of network security device with the function of the content inspection, it is confirmed the simulation test software run stability and function correctly ,and provide an important technical means for the performance improvement and function testing of network security device.