Design And Implementation Of Database Security Model Verification Test System

As the basic software for information storage and processing,the database management system's security is critical to the protection of sensitive information.One of the important tasks for the security function test of the database management system is to verify the security model.The security model provides a framework for the database management system to implement security functions and it is an expression of security policy.When testing,we need to write corresponding test cases according to the requirements of the security model,and use the test cases to detect whether the internal data flow direction of the DBMS meets the security requirements of the security model that it relied on at the beginning of the design.Generating test cases for database security testing based on the security model is of great significance for improving test efficiency and ensuring the security of the database management system.First,analyzing the demand of the database security model verification test system,and designing the system's overall structure through the demand,including the model management module,test template generator,test case generator,test report generator and model data management module.The model management module provides users with the input and display functions of the security model.The user can create a new security model,extend the security model,and view the security model.The test template generator automatically generates test templates by parsing the execution conditions of conversion rules entered by users.First,it edits several basic test scripts used to generate the test templates,and establishes a correspondence between the execution conditions and the basic test scripts.Each time the system analyzes will read the corresponding basic test script and add it to the variable that stores the test template.In order to ensure that the test template can cover the regular access control strategy,it will generate two test scenarios for each condition: qualified and non-compliant;The main job of the test case generator is to replace the variables in the test template with specific values,and use the test template to generate corresponding test scripts for all database operations and objects,and also handle the scripts in special cases when replacing variables.Such as relying on the processing of objects / operation,so as to ensure that the logic of the final generated test cases is correct and can cover all operations and objects in the database;The test report generator includes the execution of test cases and the generation of test reports.It will generate test reports based on the test results of the script and put the report in the designated directory for users to browse;The model data management module provides users with a visual interface for managing the database.The user can manage the database tables,including the addition,deletion,and modification of data.Comparing the test results of the system with the expected results shows that the system can provide users with correct and comprehensive security models and model data management functions.For the security model entered by the user,the system can generate test cases with high accuracy and coverage for it,and the generated test cases can be used to verify the database security model.The test report is comprehensive,clear and easy to understand.