| Along with the increasingly exacerbated threats of network attack, the attack resistance ability of important host and facility, such as servers, network facilities and security facilities, draw more and more attention. Attack Resistance Test(ART) evaluates the target system's resistance ability against network attacks by the way of implementing simulative attacks against target system, and it's a kind of direct and effective reverse security test.Attack Resistance Test needs to launch lots of attacks against the target system. Special attack language is convenient for the development, integration and unification of attack programs, and can be used to describe the attack information used in ART. As the attack languages in existence can not fully satisfy the request of ART, in this paper, based on the deep-in reseach on the components of network attacks, an attack script language oriented to Attack Resistance Test (AASL) is designed and realized. The main work of this paper includes the following:1,The atomic attacks of two types of typical attack—DoS attack and buffer overflow attack are analysed and picked up. The method of atom theory is imported to the research on network attack, through the detailed disassembly of network attack, atomic attacks and the relation between them is used to describe the constitution and structure of network attack. Through the method of attack samples analysis and based on the general phases of attack process, atomic attacks of DoS attack and buffer overflow attack are picked up. Futher the prevalence and entireness of the atomic attacks proposed is analysed. Atomic attacks are fundamental for the design of attack language elements, helpful to the analysis of general network process and constitution, useful to construct attack behavior flexibly and effectively.2,The attack language oriented to ART AASL is designed. According to the correlation with attack, the syntax of AASL is composed of field-independent and field-related sections: the field-independent syntax of AASL is designed from reference to C and NASL, and baed on the atomic attacks distilled in this paper the attack field-related section of AASL is designed, all kinds of atomic attacks are denoted in forms of build-in fuctions. Through the discussion of AASL's constitution, the description ability of AASL is analysed.3,The interpreter of AASL is designed and realized. The overall structure of AASL is designed according to the fuction of AASL interpreter and compiler theory. The symbol table of AASL is established, and the main fuction of lexical analyzer and syntax analyzer is accomplished using Flex and Bison tool. The field-related build-in fuctions of AASL are realized in C, and the semantic action inplemention of AASL is realized through the traversal of syntax tree and the call of atomic attack build-in fuctions. Tests prove that AASL interpreter can legitimately and effectively interpret and implement AASL scripts.4,AASL script examples are presented to verify the attack ability of AASL. Based on the analysis of the scripts, refering to the request of Attack Resistance Test, we analyse and summarize the characteristics of AASL. AASL can realize network attack conveniently and easily and provide customed attack information for Attack Resistance Test. |
