A method and an apparatus for verifying a security policy

Abstract

The present application provides a method and an apparatus for verifying a security policy, wherein the method can be used for a test apparatus for verifying a plurality of security policies on a device under test. The method may include the steps of: sending a plurality of data streams to the device under test in a manner of sending one data stream at a time, wherein the plurality of data streamscorrespond to the plurality of security policies one-to-one; sending a plurality of data streams to the device under test in a manner of sending one data stream at a time; obtaining a matching resultof each security policy, wherein the matching result is a matching result recorded after the device under test matches the received data stream with the plurality of security policies one by one after receiving each data stream; determining a verification result of the plurality of security policies according to the matching result. In this way, the automatic verification of the security policy can be realized, and the automated processing process can check whether the security policy is effective or not, so that the overall verification efficiency and accuracy are improved, the regression testing of the software is more convenient, and the problems such as large contrast and easy to make mistakes in manual testing are solved.

Description

technical field [0001] The present application relates to the technical fields of network communication and software testing, in particular to a method and device for verifying security policies. Background technique [0002] Some devices, such as firewalls and other security devices, will configure security policies. In order to verify whether the security policies are effective, these security policies need to be tested. Taking a security device as an example, there are often a large number of similar security policies in the security device, and test cases for testing these security policies are indispensable in every software version of the security device. [0003] In the prior art, manual testing may be used to test these security policies. However, this type of test has a certain degree of mechanicalness, repeatability, and heavy workload. It is difficult to conduct long-term reliability tests, and it is difficult to achieve a large number of tests in a short period ...

AI Technical Summary

Problems solved by technology

However, this type of test has a certain degree of mechanicalness, repeatability, and heavy workload. It is difficult to conduct long-term reliability tests, and it is difficult to achieve a large number of tests in a short period of time. There are many strategies, which leads to the slow response of the device to process the page-turning query. At the same time, viewing the test results one by one strategy also leads to a large amount of tasks and is easy to make mistakes. The integrity cannot be guaranteed, which seriously affects the execution efficiency and accuracy of the test.

Images