Cloud Platform Security Testing Technology And Tools Based On Xen

As a new product information industry,cloud computing represents a new trend in the development of IT industry. It gathers resources, service and data processing to improve the computational efficiency and convenience,and to speed the development of IT industry. While providing convenience and efficiency to users, cloud computing also brought security threats. To provide a safety and reliable environment to the cloud computing users becomes the most important bottleneck. Providing a safe and reliable environment for cloud users has become the biggest bottleneck of its development. As the carrier of the cloud computing, the status of the cloud platform is very important and the security of cloud computing is closely related to the cloud platform. In this paper, the main research object is the mainstream and most stable cloud platform-Xen. To study and analysis on the system principle and security mechanism, at the same time design Xen cloud platform security testing solutions and tools, and to conduct a comprehensive safety tests to Xen cloud platform. The main research content is as follows:1. To research the system framework, security system and external interfaces of the Xen. Due to the opensource for Xen, beginning with the analysis of the source code. Through the module partition of system, module refinement, function verification, to clarify the overall framework of Xen.2. Research on safety evaluation technology for Xen system, design safety evaluation scheme of the Xen and design review process by the testing point. This system is divided into four areas: system security scan key API, system security testing, system security, network security testing security module.3. To design and complete the Xen cloud platform security assessment tools. And then realize the four modules and integration and design the test cases and test scripts. At last to safety test automation the Xen and then analyze the evaluation results to generate test report.In this paper, firstly according to the existing system safety standards to design out the Xen’s safety standards, and putting forward safety assessment method, by analyzing the Xen cloud platform source code and safety evaluation methods. On the basis of analysis to implement a set of Xen safety assessment tools. This tool realizes the whole test process that beginning with the testing environment initialization, automatic generation automatic generating test cases and test scripts, automated testing, the test report generation. This paper designs the evaluation method and tool with good commonality, which can deal with various versions of Xen. And to provide a flexible interface, users can customize design evaluation. At the same time, to make up for the Xen’s defect that there is no evaluation standard and no perfect evaluation method.