Penetration testing method for GAP isolation and exchange device

Abstract

The invention discloses a penetration testing method for a GAP isolation and exchange device. The method comprises the concrete steps that (a) policy configuration is tested, wherein according to the working principle, the function and the implementation mode of the tested device, applicable test cases are selected from a preset penetration testing rule base, and test environment parameters are configured; (b) a network attack session is generated, wherein an independent client program and an independent server program are established, hosts in networks at the two ends of the tested device are respectively simulated, afterwards, test plugins corresponding to the test cases are respectively called, and the test environment parameters configured in the step (a) are passed to the test plugins; the test plugins produce corresponding data packets in real time, the data packets are sent through a client or a server, and therefore the network attack session is generated; (c) test results are evaluated, wherein the test results of the test cases are evaluated according to the completion condition of the network attack session and the warning information of the tested device. By the application of the penetration testing method for the GAP isolation and exchange device, automated security testing for the GAP isolation and exchange device can be achieved.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a security test for GAP isolation switching equipment, in particular to a penetration testing method for main security features such as application layer protocol control, content security, intrusion prevention and anti-trojan horse of the GAP isolation switching equipment. Background technique [0002] The network security isolation switching system (GAP isolation switching equipment) adopts the GAP isolation switching technology. The so-called GAP isolation switching, also known as Air GAP (air isolation) technology, its basic technical characteristics are "physical blocking, logical connection", that is, through this technology, it can ensure that the two networks are not connected physically. Logical connection for data exchange. The structure of the network security isolation switching device includes three modules: the internal network processing unit, the exter...

AI Technical Summary

Problems solved by technology

Although this method of manually cooperating with auxiliary tools can test the GAP isolation switching equipment to a certain extent, it has many problems such as low efficiency and complex environment configuration, making it difficult to conduct large-scale, safe and controllable tests.

Images