CN103268433B - Based on the mobile terminal system safety automation evaluation system attacked and method - Google Patents

Abstract

The invention discloses a kind of mobile terminal system safety automation evaluation system based on attack and method, described evaluation system comprises computer terminal and multiple mobile terminal, and computer terminal comprises safe condition space module, safe condition generation module, integrated attack storehouse, vector of attack generation module, attacks driver module and results analyses module; Mobile terminal comprises module safety state setting module and attack test module.The present invention carries out test analysis under can being in different safe condition to system, can objective, accurately safely security evaluation is carried out to mobile terminal system, and not by the restriction of mobile-terminal platform resource, more easily realize the security evaluation of mobile terminal, there is the advantage that testing process is simple, operation repetition rate is low.

Description

Based on the mobile terminal system safety automation evaluation system attacked and method

Technical field

The invention belongs to mobile message security fields, relate to safety automation test, a kind of mobile terminal system safety automation evaluation system based on attack of special design and method.

Background technology

Mobile intelligent terminal safety has become the focus of industry common concern, and testing and assessing to mobile intelligent terminal security of system is the basis ensureing mobile message safety.Existing security evaluation method and instrument mainly measured security functional testing, lacks objective attack resistance performance test.In practice, because system is not different with the security setting intensity under scene in the same time, system is not in a constant safe condition always, and conventional test methodologies shortage is in the test analysis under different safe condition for system, and testing process is loaded down with trivial details, test operation repetition rate is high, subjectivity is strong.And due to the restriction of mobile-terminal platform resource, make the security evaluation system based on security functional testing method be difficult to realize.

Summary of the invention

The object of the invention is to overcome the deficiencies in the prior art, a kind of mobile terminal system safety automation evaluation system based on attack and method are provided, this system carries out test analysis under can being in different safe condition to system, can objective, accurately safely security evaluation is carried out to mobile terminal system, and not by the restriction of mobile-terminal platform resource.

The object of the invention is to be achieved through the following technical solutions: based on the mobile terminal system safety automation evaluation system attacked, it comprises computer terminal and multiple mobile terminal, and described computer terminal comprises with lower module:

Safe condition space module: according to needs to be measured, designs and customizes out safe condition space needed for each to be measured and store;

Safe condition generation module: take out space to be measured from safe condition space module, generate safe condition vector and send to the safe condition of each mobile terminal that module is set respectively, receive the feedback information of each terminal simultaneously, and be responsible for concerted attack vector generation module generation vector of attack;

Integrated attack storehouse: according to the existing attacker of each plateform system of requirement centralized stores and the instrument of Attack Classification and mapping;

Vector of attack generation module: generate respectively and attack vector of attack corresponding to space;

Attack driver module: according to test dispatching, be injected into corresponding terminal each to be measured respectively by from the vector of attack extracting attack code from the corresponding classification in integrated attack storehouse attacking space generation respectively;

Results analyses module: the size analyzing the test result of each terminal, best safety performance point and correspondence system security overhead, draws the validity of system attack resistance performance and system security function;

Described mobile terminal comprises with lower module:

Safe condition arranges module: each terminal arranges safe condition after receiving safe condition vector and feeds back to the safe condition generation module of computer terminal;

Attack test module: each terminal performs attack test respectively, draws the corresponding performance of each state.

Based on the mobile terminal system safety automation assessment method attacked, it comprises the following steps:

S1: according to needs to be measured, designs and customizes out the safe condition space A needed for each to be measured ₁, A ₂..., A _n, and store;

S2: safe condition generation module takes out safe condition space A from safe condition space module ₁, A ₂..., A _n, generate safe condition vector, and send to the safe condition of each mobile terminal that module is set respectively the safe condition of generation vector;

S3: the safe condition of each mobile terminal arranges after module receives safe condition vector and arranges secure status of mobile terminal, and feeds back to safe condition generation module;

S4: vector of attack generation module generates test space T respectively under the assistance of safe condition generation module ₁, T ₂..., T _ncorresponding test vector;

S5: attack driver module according to test dispatching, respectively by test space T ₁, T ₂..., T _nthe test vector extracting attack code G from the corresponding classification in integrated attack storehouse generated ₁, G ₂..., G _n, and be injected into corresponding terminal each to be measured respectively;

S6: each terminal performs attack test respectively, draws the corresponding performance of each state, and analyzes test result.

The present invention proposes a kind of system and method that can cross-platformly carry out mobile terminal safety and automatically test and assess, test analysis is carried out under can being in different safe condition for system, can objective, accurately safely security evaluation is carried out to mobile terminal system, and not by the restriction of mobile-terminal platform resource, more easily realize the security evaluation of mobile terminal, there is the advantage that testing process is simple, operation repetition rate is low.

Accompanying drawing explanation

Fig. 1 is system architecture schematic diagram of the present invention;

Fig. 2 is assessment method schematic diagram of the present invention.

Embodiment

Further illustrate technical scheme of the present invention below in conjunction with accompanying drawing, but the content that the present invention protects is not limited to the following stated.

As shown in Figure 1, based on the mobile terminal system safety automation evaluation system attacked, it comprises computer terminal and multiple mobile terminal, and described computer terminal comprises with lower module:

Safe condition space module: according to needs to be measured, designs and customizes out safe condition space needed for each to be measured and store;

Safe condition generation module: take out space to be measured from safe condition space module, generate safe condition vector and send to the safe condition of each mobile terminal that module is set respectively, receive the feedback information of each terminal simultaneously, and be responsible for concerted attack vector generation module generation vector of attack;

Integrated attack storehouse: according to the existing attacker of each plateform system of requirement centralized stores and the instrument of Attack Classification and mapping;

Vector of attack generation module: generate respectively and attack vector of attack corresponding to space;

Attack driver module: according to test dispatching, be injected into corresponding terminal each to be measured respectively by from the vector of attack extracting attack code from the corresponding classification in integrated attack storehouse attacking space generation respectively;

Results analyses module: the size analyzing the test result of each terminal, best safety performance point and correspondence system security overhead, draws the validity of system attack resistance performance and system security function;

Described mobile terminal comprises with lower module:

Safe condition arranges module: each terminal arranges safe condition after receiving safe condition vector and feeds back to the safe condition generation module of computer terminal;

Attack test module: each terminal performs attack test respectively, draws the corresponding performance of each state.

As shown in Figure 2, based on the mobile terminal system safety automation assessment method attacked, it comprises the following steps:

S1: according to needs to be measured, designs and customizes out the safe condition space A needed for each to be measured ₁, A ₂..., A _n, and store;

S2: safe condition generation module takes out safe condition space A from safe condition space module ₁, A ₂..., A _n, generate safe condition vector, and send to the safe condition of each mobile terminal that module is set respectively the safe condition of generation vector;

S3: the safe condition of each mobile terminal arranges after module receives safe condition vector and arranges secure status of mobile terminal, and feeds back to safe condition generation module;

S4: vector of attack generation module generates test space T respectively under the assistance of safe condition generation module ₁, T ₂..., T _ncorresponding test vector;

S5: attack driver module according to test dispatching, respectively by test space T ₁, T ₂..., T _nthe test vector extracting attack code G from the corresponding classification in integrated attack storehouse generated ₁, G ₂..., G _n, and be injected into corresponding terminal each to be measured respectively;

S6: each terminal performs attack test respectively, draws the corresponding performance of each state, and analyzes test result.

Related definition of the present invention and Test and analysis:

Definition 1: security function vector F: the vectorial F={f that the various security function of system is formed in certain sequence ₁, f ₂, f ₃, f _n, f _irepresent the independently security function classification of a system.Such as to terminal data safety test demand F _d={ authentication, control of authority, cryptographic storage, completeness check }.

Definition 2: safe condition vector S: the combination of the difference power of system security function forms a uniqueness index S={ s of characterization system current safe state power ₁, s ₂, s ₃, s _n| s _i∈ (2,1,0) }; Wherein s _i{ 2,1,0} represents the classification f of corresponding corresponding F to value _iintensity is set for { comparatively strong, generally, without arranging }.Such as to above-mentioned F _dstochastic generation S _d={ 2,1,0,1} uses symbol expression system S in a safe condition _d, its implication is as shown in the table.

Table 1 Safety Vectors S _dimplication

Definition 3: safe condition space A: the space that all safe conditions vector S of a certain security function vector F generation are formed.

Definition 4: security of system expense o (S _i): to any one safe condition vector S _i, have

$o\left(S_i\right)=\underset{i=1}{\overset{n}{\mathrm{\Σ}}}{s}_i---\left(1\right)$

Definition 5: Secure Threshold S _k: in theory in safe condition space, the most intensity values S of safe condition _max=2,2,2 ..., 2}, the most weak value S _min=0,0,0 ..., 0}, obviously, strength S _max>S ₁={ 1,1,1 ..., 1}>S _min.In fact any safe terminal system can take any safety practice and S _min.System is often for unprofessional user sets the safe minimum threshold state of an acquiescence guarantee the safety that system is basic.If security setting is lower than S _k, the anti-attack ability of system cannot meet the demand for security of domestic consumer.The S finding a security performance and security overhead the best is tested by anti-attack ability _kall highly significant to mobile terminal manufacturer and user.

Definition 6: atomic strike classification G _iand attack effect classification: atomic strike classification refer to have clear and definite attack effect, typically, the type of independently attack means, common comprise read class, revise class, destroy class, invade class, walk around class, crack class, deciphering class, privilege-escalation class etc.Each atom classification is for system independently security function should have clear and definite attack effect, such as deciphering class attacks lost data confidentiality, amendment class is attacked and compromised integrality etc., and defining this pass in literary composition is attack mapping, uses symbol G _i∽ f _jrepresent.Common classification and mapping relations as shown in the table.

Table 2 Attack Classification and mapping implication

Definition 7: attack space G: the set G={G that all atomic strike classification are formed ₁, G ₂, G ₃, G _k| G _i∽ f _j, i=0,1 ... k; J=0,1 ..., n}, G _irepresent an atomic strike classification, G _i={ g _i1, g _i2, g _i3, g _ij, g _ijrepresentative classification G _iexisting any one is attacked and is realized, as attacker, step or virus, wooden horse etc., and defined function sum (G _i) represent G _ithe number of middle element.

Define 8 vector of attack t`: each classification G from attack space G <sub>i</sub>in choose arbitrarily a daughter element g <sub>ij</sub>, form a k dimensional vector t`={t ₁, t ₂..., t _kbe called test vector.Obviously, any component t in t` <sub>i</sub>∽ f <sub>j</sub>.The t` likely formed constitutes test space T, test vector quantity:

$\mathrm{sum}\left(T\right)=\underset{i=1}{\overset{k}{\mathrm{\&Pi;}}}\mathrm{sum}\left(G_i\right)---\left(2\right)$

If sum (F)=n, then total test volume E (F) of F is:

$E\left(F\right)=3^n\&CenterDot;\underset{i=1}{\overset{k}{\mathrm{\&Pi;}}}\mathrm{sum}\left(G_i\right)---\left(3\right)$

Definition 9: test output vector R.Definition trial function:

test(S _i，t` _j)＝R _ij(4)

i=1,2 ..., sum (A), represents at safe condition S _iunder, perform test vector the test obtained exports R _ij={ r _ij ¹, r _ij ².。。, r _ij ^k, R _ijelement value be that (2,1,0) represents t` respectively _jin the attack effect of each element be (effectively, undetermined, invalid).

Output vector abbreviation: that classifies to security function due to Attack Classification is mapped as multipair few mapping, so need definition to k dimensional vector R _ijabbreviation is the function simple (R of n-dimensional vector one to one of classifying with security function _ij), its simplifying method is as follows:

If R _ijin there is element r _ij ^a∽ f _c, r _ij ^b∽ f _c, then r is got _ij ^c=max (r _ij ^a, r _ij ^b) represent R _ijmiddle corresponding f _cunique component, wherein max represents and gets maximal value.

Definition 10: security performance d and security performance space D:

security performance

$d_{\mathrm{ij}}(S_i,R_{\mathrm{ij}})=\underset{k=1}{\overset{n}{\mathrm{\&Sigma;}}}(s_k-{r_{\mathrm{ij}}}^k)---\left(5\right)$

Each S _icorresponding multiple d _ij, need transfer to and mapping one by one.Make h=sum (T), get S _icorresponding d _i=min (d _i1, d _i2, d _ih), be called S _iattacking the security performance under the T of space.

Get after determining F and T, can realize test, its algorithm is as follows:

Testing algorithm: f

Above-mentioned simple is for exporting abbreviation function, and plot is Picture function, and mind represents and asks S _icorresponding d _ifunction, horizontal ordinate i represents S _i, ordinate represents the d under this state _i.

Claims (2)

1., based on the mobile terminal system safety automation evaluation system attacked, it comprises computer terminal and multiple mobile terminal, it is characterized in that: described computer terminal comprises with lower module:

Safe condition space module: according to needs to be measured, designs and customizes out safe condition space needed for each to be measured and store;

Safe condition generation module: take out space to be measured from safe condition space module, generate safe condition vector and send to the safe condition of each mobile terminal that module is set respectively, receive the feedback information of each terminal simultaneously, and be responsible for concerted attack vector generation module generation vector of attack;

Integrated attack storehouse: according to the existing attacker of each plateform system of requirement centralized stores and the instrument of Attack Classification and mapping;

Vector of attack generation module: generate respectively and attack vector of attack corresponding to space;

Attack driver module: according to test dispatching, be injected into corresponding terminal each to be measured respectively by from the vector of attack extracting attack code from the corresponding classification in integrated attack storehouse attacking space generation respectively;

Results analyses module: the size analyzing the test result of each terminal, best safety performance point and correspondence system security overhead, draws the validity of system attack resistance performance and system security function;

Described mobile terminal comprises with lower module:

Safe condition arranges module: each terminal arranges safe condition after receiving safe condition vector and feeds back to the safe condition generation module of computer terminal;

Attack test module: each terminal performs attack test respectively, draws the corresponding performance of each state.

2., based on the mobile terminal system safety automation assessment method attacked, it is characterized in that: it comprises the following steps:

S1: according to needs to be measured, designs and customizes out the safe condition space A needed for each to be measured ₁, A ₂..., A _n, and store;

S2: safe condition generation module takes out safe condition space A from safe condition space module ₁, A ₂..., A _n, generate safe condition vector, and send to the safe condition of each mobile terminal that module is set respectively the safe condition of generation vector;

S3: the safe condition of each mobile terminal arranges after module receives safe condition vector and arranges secure status of mobile terminal, and feeds back to safe condition generation module;

S4: vector of attack generation module generates test space T respectively under the assistance of safe condition generation module ₁, T ₂..., T _ncorresponding test vector;

S5: attack driver module according to test dispatching, respectively by test space T ₁, T ₂..., T _nthe test vector extracting attack code G from the corresponding classification in integrated attack storehouse generated ₁, G ₂..., G _n, and be injected into corresponding terminal each to be measured respectively;

S6: each terminal performs attack test respectively, draws the corresponding performance of each state, and analyzes test result.