Research And Implementation Of The Firewall Automated Test Tool

In today’s era of rapid development of the Internet, the firewall has long been widely used in a variety of network environments, as a bulwark and network security tool against network attacks. Therefore, the firewall’s ability to effectively protect the user network security is particularly important. At present, the firewall devices for functional testing solutions mainly rely on manual testing. However, test efficiency is very low, and it is difficult to ensure the completeness of the test.In the light of this situation, this thesis proposes an idea of a firewall automated testing tool. That is an efficient test method, using PC instead of expensive test equipment, and automated test procedures instead of the traditional manual testing. This thesis researches and implements a firewall automated test tool in VC++ environment, using Winpcap network programming and referring the process of manual testing. The test tool completes the most work of the functional testing of firewall efficiently.This thesis firstly introduced the issue background and significance, the research and application status at home and abroad, described the necessity of developing a firewall automated testing tool. Secondly, the goal and function requirement of the system were analyzed, including firewall manual testing methods and processes, and the goal and function requirement to convert it into automated testing system. The method is divided into two parts, i.e., " the test preparation" and "the test execution". Thirdly, the analysis and design of the system were described, including design goals, the division and design of the system functional modules. After that, it described the detailed design and concrete realization of the various modules of the system, including the card selection, the packet structure, import traffic model, standardized test cases, and using the program to parse, generating test systems, flow playback and display system configuration information. Test execution module includes 3 parts, that is, single-step execution, select execution, and batch execution. It achieved sending packets, packet filtering, packet capture and parse using Winpcap network programming. At last, the thesis presented the system test cases and results. Test results show that the realized system achieves the requirements of the design goal.