Approaches For Testing Network Security Support Of Operating Systems

With the development of the Internet,the key to Internet access information is data security.As the basic software of the information system,the operating system provides many measures to enhance the security function.The testing of operating system security function,especially the testing of internet security function is also increasingly important.But,existing test tools have incomplete test function and usually only test certain internet security function.Therefore,providing a comprehensive set of automated testing solutions for the internet security support subsystem is of great significance to ensure the security of the operating system.Analyzing the requirements of existing security standards related to internet security support.Divided test items into three categories: testing the security of internet services and internet objects,testing the audit function of internet behavior,security test of network data transmission process.Test items include: test audits for abnormal internet behavior,audit data storage integrity testing,audit data synchronization detection,internet transmission data integrity protection test and internet transmission data encryption protection test.For the testing of these safety function points,I designed the overall test plan.For each test item,analyzing safety standards,design detailed test methods and give the criteria to determine whether the operating system passed the test.In the above-described tests of several test points,including the following main program modules: abnormal network behavior generation module,file upload module,file system integrity detection module,audit log synchronization detection module,packet tampering module,network transmission data encryption detection module,abnormal network behavior generation module and file upload module are mainly used to support the audit function for testing abnormal internet behavior.The file system integrity detection module is mainly used to directly test the storage integrity protection function of audit data,audit log synchronization detection module used to test the synchronization of audit data directly,the data packet tampering module is used to support the integrity protection function of the test internet transmission data,network transmission data encryption detection module is used to support the encryption detection function of the test internet transmission data,operating system command calling module and result judgment module are common modules for all test items.For the test items,given the interactive process and specific test steps of the test module.Test the network security support of the Kylin operating system,the results show that the test module function can support the testing of network security functions and automated to a certain extent.