Research On Security Evaluation Of Download Client

With the rapid development of computer network technology, economic and social information, the Internet and PC gradually go into the people's daily lives. Video News, podcasts, video sharing, network television, streaming media and a series of new applications of new technologies more and more widely used by the general Internet users, network information resources have become indispensable to most Internet users. Therefore, the Internet information access tools (download client) have become the indispensable tool for Internet users. At the same time, the security of the download client is getting more and more important.In this paper, we focus on the security of the current mainstream download client. First, we analyze the existing security risks of TCP/IP protocol that is used by download client, and then study the degree of download client's anti-attacks power. Base on above study, the initial evaluation of the download client security is given.In order to further evaluate the security of download client, the method based on attack testing that reverses to verify the security of the download client is proposed. With this method, we design an evaluation index system of download client security, which matches the special features of the download client. First, the evaluation system extracts the corresponding index from two angles, which are attack effect and attack cost. Then, this paper puts forward the standardization of algorithms for different indexes, and finally constructs the weight matrix by using Analytic Hierarchy Process (AHP) method. After these processes, a comprehensive the safety evaluation system for download client is formed.At last, the paper designs and implements the attack simulation verification platform, and deploy the corresponding experimental environment. Taking HTTP download client for example, we verify the correctness of this evaluation system, by giving the HTTP download client a scientific security evaluation.