【摘要】：在如今這個互聯網飛速發(fā)展的時代,防火墻作為抵御網絡攻擊、保護網絡安全的工具,早已被普遍地應用于各種網絡環(huán)境中。因此,防火墻的質量如何,能否有效地保障用戶網絡的安全就顯得尤為重要。目前,對防火墻設備進行功能測試的方案主要是依靠手工測試,測試效率很低,并且難以保證測試的完備性。針對上述情況,本文提出了防火墻自動化測試工具的設想。即用PC代替昂貴的測試儀器,用程序自動化的測試代替?zhèn)鹘y(tǒng)手工測試,進而提高測試的效率。參照手工測試的流程,在VC++環(huán)境下,使用Winpcap進行網絡編程,設計并實現了一個防火墻自動化測試工具,該工具能夠僅使用PC就可以高效地完成防火墻設備功能測試的大部分內容。本文首先介紹了防火墻自動化測試工具的研究背景和意義,深入研究了國內外的研究現狀,闡述了開發(fā)防火墻自動化測試工具的必要性。其次,分析了系統(tǒng)應達到的目標和功能上的需求,包括：防火墻手工測試的方法和流程,以及將其轉化為自動化測試系統(tǒng)應達到的目標以及需要滿足的功能上的要求。將防火墻手工測試的方法轉化成自動化測試的方法,需要分為測試準備階段和測試執(zhí)行階段兩部分。因此,分析了這兩部分在功能上的需求。然后,介紹了系統(tǒng)的分析與設計,其中包括：設計目標、功能模塊的劃分和設計。接著,針對系統(tǒng)各模塊的設計和具體實現進行了詳細闡述,包括：網卡選取、報文構造、導入流量模型、對測試用例進行規(guī)范化,并用程序進行解析、生成測試系統(tǒng)、測試執(zhí)行、流量回放、顯示系統(tǒng)配置信息等。其中測試執(zhí)行模塊分為單步執(zhí)行、選擇執(zhí)行和批量執(zhí)行三部分,使用Winpcap進行網絡編程,實現發(fā)送報文、過濾報文、捕獲報文和解析報文。最后,介紹了系統(tǒng)測試案例及結果。測試結果表明,所實現的系統(tǒng)達到了預定的設計目標要求。
[Abstract]:In this era of rapid development of the Internet, firewall, as a tool to resist network attacks and protect network security, has long been widely used in various network environments. Therefore, it is particularly important whether the quality of firewall can effectively ensure the security of user network. At present, the functional test scheme of firewall equipment mainly depends on manual testing, the test efficiency is very low, and it is difficult to ensure the completeness of the test. In view of the above situation, this paper puts forward the idea of firewall automation test tool. That is to say, PC is used instead of expensive test instrument, and program automation test is used instead of traditional manual test, so as to improve the efficiency of test. Referring to the process of manual testing, a firewall automation test tool is designed and implemented by using Winpcap for network programming in VC environment. The tool can efficiently complete most of the functional testing of firewall devices using PC alone. This paper first introduces the research background and significance of firewall automation test tool, deeply studies the research status at home and abroad, and expounds the necessity of developing firewall automation test tool. Secondly, the objectives and functional requirements of the system are analyzed, including the methods and processes of manual firewall testing, as well as the objectives that should be achieved by the automated test system and the functional requirements to be met. The method of firewall manual testing needs to be divided into two parts: test preparation phase and test execution phase. Therefore, the functional requirements of these two parts are analyzed. Then, the analysis and design of the system are introduced, including the design goal, the division and design of functional modules. Then, the design and implementation of each module of the system are described in detail, including: network card selection, message construction, import traffic model, standardization of test cases, and analysis with programs to generate the test system. Test execution, traffic playback, display system configuration information, etc. The test execution module is divided into three parts: single step execution, selection execution and batch execution. Winpcap is used for network programming to send messages, filter messages, capture messages and resolve messages. Finally, the system test cases and results are introduced. The test results show that the system meets the predetermined design objectives.
【學位授予單位】：西南交通大學
【學位級別】：碩士
【學位授予年份】：2015
【分類號】：TP393.08

【參考文獻】

相關期刊論文 前10條

1 HE ZhiTao;LIU Chao;YAN HaiHua;;Software testing evolution process model and growth of software testing quality[J];Science China(Information Sciences);2015年03期

2 黃鑫;;防火墻技術與網絡安全[J];電子技術與軟件工程;2014年09期

3 楊s，

本文編號：2476911