Research On A User-extensible Network Packet Generator

With the rapid development of Internet technology and the popularity of intelligent devices,the network has penetrated into people's production and life in recent years,but also brought about increasingly prominent information security issues.Network security equipment as the gateway of the network interconnection,its own security issues is a direct impact on the security of the entire network.Therefore,the study of network security equipment testing is of great significance.The network packet generator is an important means to discover the hidden danger of the penetration test of the network equipment.The current network packet generators can only send a fixed number of protocol types of network packets and the packet generator rate is difficult to guarantee,so they have been unable to meet the growing test requirements of network security equipment.Aiming at the security,stability and protocol consistency of network security equipment,this thesis presents a user-extensible network security device testing framework and designs a user-extensible network packet generator based on Libnet and Libpcap library.The main work of this thesis is as follows:(1)The related technology and theory are discussed,including the network equipment testing standards and test classification and methods,Libpcap and Libnet open source library,XML and JAXB technology.In addition,the thesis gives a detailed description of the software scalability technology,and focuses on the plug-in technology and code automatic generation technology,which can provide theoretical support for the design and implementation of extensible network packet generator.(2)This thesis designs a user-extensible network packet generator framework by researching a variety of network security equipment testing and analyzing network packet generators,and it adopts the upper and lower computer development mode.The upper computer interactive control module includes two sub-modules,one is human-computer interactive input sub-modules and the other is control command constructing and sending sub-modules.The interactive input sub-module includes block diagram selection input and extensible XML document input.The lower computer simulate sending packets module includes four sub-modules: controlcommand receiving and parsing sub-modules,command processing and data organizing sub-modules,packet constructing and sending sub-modules,constant rate output sub-modules.Moreover,in order to meet the various equipment manufacturers complex test requirements,the thesis designs a extensible communication protocol as a link between the upper and lower computer.(3)Extensible network packet generator is programmed to achieve.The upper computer selects JAVA language in accordance with the communication protocol to construct a command of generating network packet;The lower computer selects the C language to analyze the communication protocol and constructs the network data packet by using a constant rate algorithm to ensure stable transmission of data packets at the same time.(4)Set up the network security equipment test environment and test the generating packet function,scalability and performance of the extensible packet generator for verifying its feasibility and practicality.It is proved that the user-extensible network packet generator designed and implemented has certain feasibility and practicability in this thesis through the analysis of the experimental results and data.