Design And Implementation Of Security Test System In Universal Network

Nowadays, the society has highly developed technology and extremely rich information. Both of these features are based on the fast development of information network. People in such a society become strongly depended on the information network. Besides, mastering and application of information network become the measurement of the technology level of a country. For solving network integration and security problems, the next generation network are necessary.The China Government also pays a lot of attention on building and research of the next generation information network. A series of "973" and "863" projects are run. The National Development and Reform Commission started the China Next Generation Internet (CNGI) project in2003, which represent a start point of research and exploitation of next generation information network. In2007, the project of "The Basic Research of Universal Network and Pervasive Service" was run, which was supported by "973" project. This research proposed a two-layer internet model, which involves Universal Network and Pervasive Service. This model applies access ID, routing ID, general routing swithing, accecc ID analyzing and mapping and so on to solve network integration. This model can provide multiple services based on one network, which has high level of security.This paper review literatures to propose methods of analyzing the Universal Network security. In addition, Spirent TestCenter is applied to test the Universal Network. This paper also gives out several testing plan for future work.First, this paper briefly summarizes the security testing and analyzing methods and ideas, which have been proposed so far.Then, since the self-verification and address and ID separation mechanisms, it has own security features. Therefore, this paper proposes several testing plan, which designed for the Universal Network, and test the Universal Network with TestCenter platform.Third, since the Universal Network has several own featured data package, this paper also propose to use the software of Sendidmp to program IDMP data package. With this method, the featured data packages can be tested. This paper introduces and analyzes the IDMP sending program, which provides a solid base for further work.Forth, in the test, this study takes ICMP Flood attack as example. It tests and compares the Universal Network and traditional network under scenarios of different size attacking package.At last, this paper analyzes the testing results and gives out advices for unfolding further test and analysis on the Universal Network.