CN102752174B - System and method for testing safety performance of wireless local area network (WLAN) - Google Patents

Abstract

The invention discloses a wireless local area network security performance testing system and method, the system comprising a wireless local area network security performance testing platform (101), a wireless device test bed (102), a wireless access point test server (103) and a wireless access point The test server (103); the wireless device test bed (102), the wireless access point test server (103) and the security performance test server (104) are connected through a wired LAN; the wireless LAN security performance test platform (101) is respectively Through the wireless device test bed interface (106), the wireless access point test server interface (107). The method includes step 1: the administrator logs in to the account management (201) of the wireless local area network security performance testing platform (101), registers users, and assigns permissions; step 2: the user logs in to the wireless local area network security performance testing platform (101), and performs device management; step 3: The user registers the device. The invention can realize the safety performance test of the wireless local area network.

Description

A wireless local area network security performance testing system and method

technical field

The invention relates to a network security testing system and method thereof, in particular to a WEB remote control-based wireless local area network security performance testing system and method, and the invention belongs to the technical field of wireless network security.

Background technique

Wireless local area network (Wireless LAN, WLAN) is generally used in broadband homes, inside buildings, and inside parks. The typical distance covers tens of meters to hundreds of meters. Currently, the technologies used are mainly 802.11a /b/g series. WLAN uses wireless technology to transmit data, voice and video signals over the air as an alternative or extension to traditional wired networks. The emergence of wireless local area network features solves the problems encountered by the original wired network, and it allows users to expand and extend the wired network arbitrarily. As long as wireless communication is realized through wireless devices such as wireless access points, wireless bridges, and wireless network cards on the basis of wired networks. Compared with the traditional wired network, the application value of WLAN is reflected in: mobility, easy wiring, flexible networking and cost advantages, etc., making wireless technology widely used in Internet access and mobile communication.

Wireless applications do bring great convenience to people, but at the same time, its use is also unstable. The first and foremost issue is the hidden danger of wireless LAN security. The use of wireless LAN is based on the transmission of radio waves. Then radio waves, an invisible and invisible transmission method, are difficult for people to control. Security issues are bound to be difficult to control. Today's wireless LAN security problems are mainly manifested in easy intrusion, illegal wireless access points (Access Point, AP), authorized use of services, service and performance restrictions, address spoofing and session interception, traffic analysis and traffic interception, etc. . In view of the above problems, more and more attention has been paid to the security of wireless local area network, and then it is particularly important to test the security of wireless local area network networking equipment.

IEEE 802.11 series standards from the early Wired Equivalent Privacy (WEP), to the later Wireless Protected Access (WPA) and Wireless Protected Access 2 (Wireless Protected Access V2, WPA2) (ie 802.11 i standard), constantly improving the security mechanism of wireless LAN. my country's self-developed wireless LAN standard GB15629.11 also uses the Wireless Authentication Privacy Infrastructure (WAPI) as a security mechanism. However, these security mechanisms have certain security risks.

Although WEP provides security through encryption, there are still many defects, a) lack of key management; b) integrity check value algorithm is not suitable; c) RC4 algorithm has weaknesses; d) authentication information is easy to forge. It is not an ideal security protocol design to wrap the Temporal Key Integrity Protocol (TKIP) in the WPA mechanism outside of WEP; the security performance of message integrity verification is very weak, and certain countermeasures must be taken to ensure security : TKIP's complex per-packet key (Per-Packet Key) generation method is to adapt to the RC4 algorithm used by WEP. Although the sequence length is extended, the partial reuse mechanism still has loopholes in theory. There are also some deficiencies in WAPI, because the certificate authentication process is out of touch with the key negotiation process, and lacks the corresponding key confirmation mechanism, any attacker with a legal certificate can pass the authentication; only use the public key certificate as the identity certificate, flexibility Not tall enough etc.

In view of the potential safety hazards in the four security mechanisms of WEP, WPA, WPA2 and WAPI, it is of great significance to test the security performance of wireless LAN. Starting from the perspective of four security mechanisms, this patent application classifies and tests the existing wireless local area network networking equipment, and tests the support and stability of the security mechanism of the equipment, so as to test and evaluate the security performance of the wireless local area network. An important means of LAN security.

Existing WLAN performance testing methods mainly include active testing technology and passive analysis technology. The so-called active test means that the tester constructs and executes test cases by simulating the attack behavior against the wireless local area network, and at the same time analyzes the defense capability of the wireless local area network to determine whether there is a security threat in it. Active testing technology has good scalability and is also suitable for detection and analysis of unknown vulnerabilities. For wireless local area networks, active tests can be divided into the following three categories: active tests for confidentiality, active tests for integrity, and active tests for usability. Due to illegal intrusion or attack, protocol data changes, abnormal behavior, data inconsistency, abnormal network traffic and other phenomena, the statistics and analysis methods based on these characteristics are passive analysis techniques. Passive analysis technology includes various detection technologies, such as statistical analysis, pattern matching, protocol analysis, command analysis, state transition analysis, distributed intrusion detection, etc. In addition, passive analysis relies on the existing mature rule base and pattern base. By analyzing the monitored information, it matches with the pattern base to determine whether there are illegal intrusions and attacks on the wireless LAN.

Existing security tests for WLANs mainly focus on physical environment tests and encryption authentication status tests. The physical environment test mainly tests the security risks caused by physical factors such as signal interference, and the encryption and authentication status test mainly tests whether the WLAN uses data encryption and user authentication mechanisms. At present, there are few WLAN security testing tools, and the relatively mature products in the world include: Fluke’s network comprehensive protocol analyzer series, network multimeter series, Netcom series network analyzers and AirMagnet’s portable Computer wireless network test analyzer, etc. The domestic related products are only the WLAN intrusion detection system developed by CA Jinchen Company in early 2004. The implementation of this type of product is basically based on wireless intrusion detection, which can only detect some common attack behaviors, and cannot actively analyze and test. It has limited WLAN security protection capabilities, poor scalability, and is unable to deal with new security vulnerabilities.

In view of the defects and deficiencies in the above WLAN security testing tools, this patent proposes a WLAN security performance testing system and method based on WEB remote control. It involves a wireless local area network security performance testing scheme based on penetration testing. Penetration testing is an evaluation method for evaluating the security of computer network systems by simulating the attack method of malicious hackers. This process includes passive analysis and active testing of any weaknesses, technical flaws or loopholes in the system. This analysis is carried out from a position where an attacker may exist, and from this position, the security hole is conditionally and actively exploited to carry out the attack. In the plan, a specific penetration testing platform is designed, an attack sample library for wireless LAN is built, and a specific penetration testing execution process is formulated, which is easy to operate and highly integrated in automation.

Contents of the invention

Technical problem: The purpose of the present invention is to realize the security performance test of the wireless local area network, and provide a system and method for testing the security performance of the wireless local area network based on WEB remote control.

Technical solution: In order to solve the above technical problems, the present invention provides a wireless local area network security performance testing system, the system includes a wireless local area network security performance testing platform, a wireless device test bed, a wireless access point test server and a wireless access point test server ;in,

The wireless device test bed, the wireless access point test server and the security performance test server are connected through a wired LAN;

The wireless local area network security performance test platform connects with the wireless device test bed, wireless access point test server and The security performance testing server communicates;

The wireless local area network security performance test platform communicates with the wireless device test bed interface, configures the wireless device to be tested, sends and extracts device information, starts the network connectivity test, ends the network connectivity test, and verifies the compliance of the security protocol;

The wireless LAN security performance testing platform communicates with the wireless access point test server interface, and performs channel parameter configuration and access point configuration for the wireless test environment;

The wireless local area network security performance testing platform communicates with the security performance testing server interface, and conducts vulnerability analysis and penetration testing of the wireless equipment to be tested;

The wireless device test bed is used for the configuration of the wireless device to be tested, and cooperates with the wireless access point test server and the security performance test server to complete the security protocol compliance verification and device protocol security test;

The wireless access point test server is used for channel parameter configuration and access point configuration, and cooperates with the wireless device test bed and security performance test server to complete security protocol compliance verification and device protocol security testing;

The security performance test server is used for vulnerability analysis and penetration testing, and cooperates with the wireless device test bed and wireless access point test server to complete security protocol compliance verification and device protocol security testing.

Preferably, the WLAN security performance testing platform includes: account management, project management, report management, help instructions, device management, device registration, device protocol security testing, and security protocol compliance verification;

Account management, which is used to manage the account of the wireless LAN security performance test platform, and use the test system to perform test work according to the authority;

Project management, used to manage device protocol security tests, modify or delete test results;

Report management, used to manage security protocol compliance verification and device protocol security test module results, combined with device information stored in device registration for report generation and management;

Help instructions, used for the operation instructions of the wireless LAN security performance test platform;

Device management, used to manage device registration, security protocol compliance verification and device protocol security testing, and complete device registration and security testing;

Device registration, used to call the configuration module to configure the device with the wireless device test bed interface when extracting device information;

Safety protocol compliance verification, used to call the socket communication module and function module to verify the safety protocol compliance of the device;

The device protocol security test is used to call the socket communication module and the function module to start/end the network connectivity test on the device.

Preferably, the wireless device test bed includes: a configuration module, a socket communication module and a function module, wherein,

The configuration module is used to complete the configuration function of the wireless device to be tested;

The socket communication module is used to complete the command and information interaction between the wireless device test bed and the wireless LAN security performance test platform, and call specific function modules according to the command;

The function module is used to complete the function for the instruction from the socket communication module.

Preferably, the wireless access point test server includes: a channel configuration module and an access point configuration module, wherein,

The channel configuration module is used to receive configuration instructions from the wireless local area network security performance testing platform, and complete the configuration of the test protocol configuration script file;

The access point configuration module is used to receive the start/close wireless test environment instruction from the wireless local area network security performance test platform, and complete the start or close of the corresponding environment.

Preferably, the security performance testing server includes: a vulnerability analysis module and a penetration testing module, wherein,

The vulnerability analysis module is used to realize the vulnerability analysis of the wireless device to be tested by calling the vulnerability analysis function;

The penetration testing module is used for calling the penetration testing function to realize the penetration testing of the wireless device to be tested.

The present invention also provides a method for testing the security performance of a wireless local area network, the method comprising the following steps:

Step 1: The administrator logs in to the account management of the wireless LAN security performance testing platform, registers users, and assigns permissions;

Step 2: The user logs in to the WLAN security performance testing platform for device management;

Step 3: The user registers the device;

Step 4: After the user successfully registers the device, verify the compliance of the security protocol of the wireless device to be tested;

Step 5: After the verification is completed, perform a device protocol security test on the wireless device to be tested;

Step 6: The logged-in user can view the security evaluation report of the security protocol compliance verification and device protocol security test for the wireless device under test through the report management.

Preferably, in step 3, device registration includes the following steps:

Step 31: The logged-in user enters device registration through device management;

Step 32: Fill in the basic information of the device and select the device type;

Step 33: Remotely log in to the wireless device test bed, call the configuration module to configure the wireless device to be tested, and the wireless LAN security performance test platform extracts device information.

Preferably, in step 4, the safety protocol compliance verification includes the following steps:

Step 41: The logged-in user selects the required verification protocol, and performs security protocol compliance verification for the selected protocols one by one;

Step 42: The WLAN security performance testing platform informs the wireless access point test server to start the test environment through the socket, the access point configuration module starts the test environment, and returns the configuration result to the WLAN security performance test platform;

Step 43: The wireless local area network security performance test platform remotely logs in to the wireless device test bed, calls the configuration module to delete the configuration information, and then connects the wireless device to be tested to the wireless test environment created by the wireless access point test server;

Step 44: The wireless LAN security performance test platform informs the wireless device test bed to verify the compliance of the security protocol through the socket, the wireless device test bed calls the function module to verify, and calls the socket communication module to notify the wireless LAN security performance of the verification result testing platform;

Step 45: The WLAN security performance testing platform informs the wireless access point test server to close the test environment through the socket, the access point configuration module closes the test environment, and returns the configuration result to the WLAN security performance test platform.

Preferably, in step 5, the device protocol security test includes the following steps:

Step 51: The wireless LAN security performance testing platform informs the security performance testing server to perform vulnerability analysis through the socket, and the security performance testing server calls the vulnerability analysis module to perform vulnerability analysis on the wireless device to be tested, and returns the result to the wireless LAN security performance testing platform;

Step 52: The logged-in user selects the required test protocol, and performs device protocol security tests one by one for the selected protocols;

Step 53: the wireless local area network security performance testing platform informs the wireless access point test server to start the test environment through the socket, the access point configuration module starts the test environment, and returns the configuration result to the wireless local area network security performance testing platform;

Step 54: The wireless local area network security performance testing platform remotely logs in to the wireless device test bed, calls the configuration module to delete the configuration information, and then connects the wireless device to be tested to the wireless test environment created by the wireless access point test server;

Step 55: The wireless LAN security performance test platform informs the wireless device test bed to start the device protocol security test through the socket, the wireless device test bed calls the function module to start the network connectivity test of the wireless device to be tested, and calls the socket communication module to notify The wireless local area network security performance test platform began to conduct network connectivity tests;

Step and 56: the wireless local area network security performance testing platform informs the security performance testing server to perform the penetration test through the socket, the security performance testing server calls the penetration testing module to perform the test, and informs the wireless local area network security performance testing platform after the penetration test is completed;

Step 57: After the penetration test of the wireless LAN security performance test platform, the wireless device test bed is notified through the socket to end the device protocol security test, and the wireless device test bed calls the function module to extract the network connectivity test result, and calls the socket The communication module notifies the test result of the wireless local area network security performance test platform;

Step 58: The WLAN security performance testing platform informs the wireless access point test server to close the test environment through the socket, the access point configuration module closes the test environment, and returns the configuration result to the WLAN security performance test platform.

Beneficial effects: the present invention is a wireless local area network security performance testing system and method based on WEB remote control. The system is easy to operate and integrates an automated testing process. WPA), Wireless Protected Access 2 (WPA2) and Wireless Authentication and Privacy Infrastructure (WAPI) four security mechanisms for security protocol compliance verification and device protocol security testing, in which device protocol security testing includes vulnerability analysis and penetration testing . The system integrates a variety of security mechanisms, including active and passive testing technologies, to overcome existing products based on wireless intrusion detection, which can only detect some common attack behaviors, cannot actively analyze and test, has poor scalability, and is unable to face new technologies. Weaknesses such as security holes. This system not only verifies the compliance of several security mechanisms and security protocols used by wireless LAN networking equipment for 802.11, but also conducts device protocol security testing for supported security mechanisms, that is, vulnerability analysis and penetration testing, and can test wireless LAN networking The stability of the equipment's support for the four security mechanisms and the existing security risks. Finally, the system can provide a security performance evaluation report through the security protocol compliance verification and equipment protocol security test results.

Description of drawings

Fig. 1 is a schematic diagram of the working principle of the present invention;

Wherein: WLAN security performance test platform 101, wireless device test bed 102, wireless access point test server 103, security performance test server 104, wireless device to be tested 105, WLAN security performance test platform and wireless device test bed interface 106 , an interface 107 between the wireless local area network security performance testing platform and the wireless access point testing server, and an interface 108 between the wireless local area network security performance testing platform and the security performance testing server.

Figure 2 is a schematic diagram of the communication between the wireless local area network security performance test platform and the wireless device test bed;

There are: account management 201, project management 202, report management 203, help instructions 204, device management 205, device registration 206, device protocol security testing 207, security protocol compliance verification 208, configuration module 209, socket communication module 210 , function module 211 .

Fig. 3 is a schematic diagram of the communication between the wireless local area network security performance testing platform and the wireless access point testing server;

There are: a channel configuration module 301 and an access point configuration module 302 .

Fig. 4 is the schematic diagram of the communication between the wireless local area network security performance testing platform and the security performance testing server;

There are: a vulnerability analysis module 401 and a penetration testing module 402 .

Fig. 5 is an overall flowchart of the method of the present invention.

Fig. 6 is a flow chart of the device registration method of the present invention.

Fig. 7 is a flow chart of the verification of the compliance of the safety protocol of the method of the present invention.

Fig. 8 is a flow chart of the device protocol security test of the method of the present invention.

Detailed ways

The present invention will be further described below in conjunction with the accompanying drawings.

The purpose of the present invention is to realize the wireless local area network safety performance test, provide a kind of wireless local area network safety performance test system and method based on WEB remote control, namely the whole test system forms the local area network, the tester can visit the system platform according to any host browser in the local area network, Perform security protocol compliance verification for the four security mechanisms of WEP, WPA, WPA2 and WAPI, construct attack use cases to implement device protocol security testing, and evaluate the security performance of wireless network devices. Aiming at security issues such as the security mechanism of wireless LAN equipment and the existing WEP mechanism authentication information forgery, the weakness of the RC4 algorithm of the WEP mechanism, and the lack of a corresponding key confirmation mechanism in the WAPI mechanism, this system can automatically implement security protocol compliance verification and device protocol verification for it. Security testing, and based on verification and test results, evaluate its security performance.

1-8, the wireless local area network security performance testing system provided by the present invention, the system includes a wireless local area network security performance testing platform 101, a wireless device test bed 102, a wireless access point test server 103 and a wireless access point test server 103.

The wireless device test bed 102, the wireless access point test server 103 and the security performance test server 104 are connected through a wired LAN; Interface 107, wireless local area network security performance testing platform and security performance testing server interface 108 communicate with wireless device test bed 102, wireless access point test server 103 and security performance testing server 104; wireless local area network security performance testing platform 101, and wireless equipment The test bed interface 106 communicates, configures the wireless device 105 to be tested, sends and extracts device information, starts the network connectivity test, ends the network connectivity test, and safety protocol compliance verification instructions; the wireless LAN security performance test platform 101 communicates with the wireless access Point test server interface 107 communication, carry out channel parameter configuration and access point configuration to wireless test environment; Test; the wireless device test bed 102 is used for the configuration of the wireless device 105 to be tested, and cooperates with the wireless access point test server 103 and the security performance test server 104 to complete the safety protocol compliance verification and the device protocol security test; the wireless access point test server 103 is used For channel parameter configuration and access point configuration, cooperate with wireless device test bed 102 and security performance test server 104 to complete security protocol compliance verification and device protocol security test; security performance test server 104 is used for vulnerability analysis and penetration test, cooperate with The wireless device test bed 102 and the wireless access point test server 103 complete security protocol compliance verification and device protocol security testing.

Described WLAN security performance testing platform 101 comprises: account management 201, project management 202, report management 203, help explanation 204, device management 205, device registration 206, device protocol safety test 207, safety protocol compliance verification 208; account management 201, used to manage the account of the wireless local area network security performance testing platform 101, and use the test system to perform testing work according to the authority; project management 202, used to manage the device protocol security test 207, modify or delete the test results; report management 203, use To manage the safety protocol compliance verification 208 and the device protocol safety test 207 module results, and combine the device information stored in the device registration 206 for report generation and management; help instructions 204, for the operation instructions of the wireless LAN safety performance test platform 101; device management 205, used to manage device registration 206, security protocol compliance verification 208 and device protocol security test 207, to complete device registration and security testing; device registration 206, used to call configuration with wireless device test bed interface 106 when extracting device information Module 209 configures the device; security protocol compliance verification 208 is used to call the socket communication module 210 and function module 211 to verify the device's security protocol compliance; device protocol security test 207 is used to call the socket communication module 210 and function module 211 start/end network connectivity test on the device.

The wireless device test bed 102 includes: a configuration module 209, a socket communication module 210 and a function module 211, wherein the configuration module 209 is used to complete the configuration function of the wireless device 105 to be tested; the socket communication module 210 uses To complete the instruction and information interaction between the wireless device test bed 102 and the wireless LAN security performance test platform 101, and call the specific function module 211 according to the instruction; the function module 211 is used to complete the function for the instruction from the socket communication module 210 .

The wireless access point test server 103 includes: a channel configuration module 301 and an access point configuration module 302, wherein the channel configuration module 301 is used to receive configuration instructions from the wireless local area network security performance testing platform 101, and complete the test The configuration of the protocol configuration script file; the access point configuration module 302 is used to receive the instruction of starting/closing the wireless test environment from the WLAN security performance testing platform 101, and complete the starting or closing of the corresponding environment.

The security performance testing server 104 includes: a vulnerability analysis module 401 and a penetration testing module 402, wherein the vulnerability analysis module 401 is used to call a vulnerability analysis function to implement a vulnerability analysis of the wireless device 105 to be tested; The penetration testing module 402 is used for calling the penetration testing function to realize the penetration testing of the wireless device 105 to be tested.

The present invention also provides a method for testing the security performance of a wireless local area network, the method comprising the following steps:

Step 1: the administrator logs in to the account management 201 of the wireless local area network security performance testing platform 101, registers users, and assigns permissions;

Step 2: the user logs in to the wireless local area network security performance testing platform 101, and performs device management;

Step 3: The user registers the device;

Step 4: After the user successfully registers the device, the wireless device 105 under test performs security protocol compliance verification;

Step 5: After the verification is completed, perform a device protocol security test on the wireless device 105 to be tested;

Step 6: The logged-in user checks the security evaluation report of the security protocol compliance verification and device protocol security test for the wireless device 105 under test through the report management 203 .

In Step 3, the device registration includes the following steps: Step 31: the logged-in user enters the device registration 206 through the device management 205; Step 32: fills in the basic information of the device, and selects the device type; Step 33: remotely logs in to the wireless device test bed. 102. Call the configuration module 209 to configure the wireless device 105 to be tested, and the wireless local area network security performance testing platform 101 extracts device information.

In step 4, the security protocol compliance verification includes the following steps:

In step 4, the safety protocol compliance verification includes the following steps: Step 41: the login user selects the required verification protocol, and performs the safety protocol compliance verification 208 one by one for the selected protocol; Step 42: the wireless local area network safety performance testing platform 101 passes the The connection informs the wireless access point test server 103 to start the test environment, and the access point configuration module 301 starts the test environment, and returns the configuration result to the WLAN security performance test platform 101; Step 43: the WLAN security performance test platform 101 remotely logs in to The wireless device test bed 102 calls the configuration module 209 to delete the configuration information, and then connects the wireless device 105 to be tested to the wireless test environment created by the wireless access point test server 103; Step 44: the wireless local area network security performance test platform 101 passes the socket Inform the wireless device test bed 102 to perform safety protocol compliance verification, the wireless device test bed 102 calls the function module 211 to verify, and calls the socket communication module 210 to notify the wireless local area network security performance test platform 101 of the verification result; Step 45: wireless local area network The security performance testing platform 101 informs the wireless access point testing server 103 to close the testing environment through the socket, and the access point configuration module 302 closes the testing environment, and returns the configuration result to the wireless LAN security performance testing platform 101 .

In step 5, the device protocol security test includes the following steps: Step 51: the wireless local area network security performance testing platform 101 informs the security performance testing server 104 to perform vulnerability analysis through the socket, and the security performance testing server 104 calls the vulnerability analysis module 401 to be tested The wireless device 105 performs vulnerability analysis, and returns the result to the WLAN security performance testing platform 101; Step 52: the login user selects the required test protocol, and performs the device protocol security test one by one for the selected protocol; Step 53: WLAN security performance The test platform 101 informs the wireless access point test server 103 to start the test environment through the socket, and the access point configuration module 301 starts the test environment, and returns the configuration result to the WLAN security performance test platform 101; Step 54: WLAN security performance test Platform 101 remotely logs in to wireless device test bed 102, calls configuration module 209 to delete configuration information, then connects wireless device 105 to be tested to the wireless test environment created by wireless access point test server 103; Step 55: WLAN security performance test platform 101 informs the wireless device test bed 102 to start the device protocol security test 207 through the socket, the wireless device test bed 102 calls the function module 211 to start the network connectivity test of the wireless device 105 to be tested, and calls the socket communication module 210 to inform the wireless LAN The security performance testing platform 101 starts to perform the network connectivity test; step and 56: the wireless local area network security performance testing platform 101 informs the security performance testing server 104 to carry out the penetration test through the socket, and the security performance testing server 104 calls the penetration testing module 402 to carry out Test, inform the WLAN security performance testing platform 101 after the penetration test ends; Step 57: The WLAN security performance testing platform 101 informs the wireless device test bed 102 to end the device protocol security test 207 through the socket after the penetration test is finished, The wireless device test bed 102 calls the function module 211 to extract the network connectivity test result, and calls the socket communication module 210 to inform the WLAN security performance test platform 101 of the test result; Step 58: The WLAN security performance test platform 101 passes the socket Informing the wireless access point test server 103 to close the test environment, the access point configuration module 302 closes the test environment, and returns the configuration result to the WLAN security performance test platform 101 .

Specifically, as shown in Figure 1, this WLAN security performance testing system comprises a WLAN security performance test platform 101, a wireless device test bed 102, a wireless access point test server 103, a security performance test server 104, a WLAN security performance The test platform 101 serves as the main control platform of the system. First, the wireless device 105 to be tested connects to the wireless device test bed 102, and then registers on the wireless LAN security performance test platform 101. The performance test platform 101, the wireless device test bed 102 and the wireless access point test server 103 perform security protocol compliance verification on the wireless device 105 to be tested according to the work flow, and pass the wireless local area network security performance test platform 101, the wireless device test bed 102, the wireless access point The entry point test server 103 and the security performance test server 104 perform the device protocol security test on the wireless device 105 to be tested according to the workflow, and finally the WLAN security performance test platform 101 provides a security performance evaluation report.

As shown in Figure 2, this figure is mainly the description of the wireless local area network security performance test platform 101 module, the wireless device test bed 102 module description and the wireless local area network security performance test platform and the wireless device test bed interface 106 description, the wireless local area network security performance test platform 101 Including account management 201, project management 202, report management 203, help instructions 204 and device management 205, among which the device management 205 includes device registration 206, device protocol security test 207 and security protocol compliance verification 208; wireless device test bed 102 includes a configuration module 209 , a socket communication module 210 and a function module 211 . The functions of the wireless local area network security performance test platform and the wireless device test bed interface 106 include remote login to the wireless device test bed and sending socket commands to the wireless device test bed to implement network connectivity testing and security protocol compliance verification.

As shown in Figure 3, this figure is mainly the description of the module 101 of the wireless local area network security performance test platform, the description of the 103 module of the wireless access point test server, and the description of the interface 107 between the security performance test platform of the wireless local area network and the wireless access point test server. The point test server 103 includes a channel configuration module 301 and an access point configuration module 302. The functions of the WLAN security performance test platform and the wireless access point test server interface 107 include configuring channel parameters, starting the test environment and closing the test environment.

As shown in Figure 4, this figure is mainly the description of the module of the wireless local area network security performance test platform 101, the description of the module of the security performance test server 104, and the description of the interface 108 of the security performance test platform of the wireless local area network and the security performance test server. The performance analysis module 401 and the penetration testing module 402, the functions of the wireless local area network security performance testing platform and the security performance testing server interface 108 include calling a vulnerability analysis function and calling a penetration analysis function.

Below in conjunction with wireless local area network security performance test platform 101, wireless equipment test bed 102, wireless access point test server 103, security performance test server 104 and wireless local area network security performance test platform and wireless equipment test bed interface 106, wireless local area network security performance test platform The interface with the wireless access point test server 107, the interface between the wireless local area network security performance test platform and the security performance test server 108 will introduce the specific implementation method in detail.

As shown in Figure 1, this wireless local area network security performance test system includes a wireless local area network security performance test platform 101, a wireless device test bed 102, a wireless access point test server 103, and a security performance test server 104. The device 105 is installed in the wireless device test bed 102 , and the protocols requiring security certificate verification should install corresponding certificates in the wireless device test bed 102 .

As shown in Fig. 2 and Fig. 3, the wireless device 105 to be tested is installed on the wireless device test bed 102, the wireless adapter driver is first installed, and then the device registration 206 is performed in the device management 205 of the wireless local area network security performance testing platform 101, and the device registration 206 is first It is necessary to fill in information such as the manufacturer, model, and device type of the wireless device 105 to be tested, and then remotely log in to the wireless device test bed 102 through the wireless device test bed interface 106 to perform device information configuration. The LAN security performance testing platform 101 sends an instruction to extract device information, and the socket communication module 210 calls the function module 211 to extract the device information after receiving the instruction, and then returns the device information to the WLAN security performance testing platform 101 by the socket communication module 210 Stored in the database, finally the wireless LAN security performance testing platform 101 detects the wireless channel environment, sends configuration channel parameters to the wireless access point server 103, and the channel configuration module 301 performs channel parameter configuration to all protocol script files, and returns the configuration results to the wireless access point server 103. LAN security performance testing platform 101.

As shown in Fig. 2 and Fig. 3, after the wireless device 105 to be tested performs device registration 206, the security protocol compliance verification is performed, and the login user selects the required verification protocol on the wireless local area network security performance testing platform 101, and then proceeds to the selected protocol one by one. Security protocol compliance verification. First, the wireless local area network security performance testing platform 101 sends the start test environment instruction to the wireless access point testing server 103 through the wireless local area network security performance testing platform and the wireless access point test server interface 107, after the access point configuration module 302 receives the instruction, According to the instructions, the specified security protocol is started to test the environment, and the startup result is returned to the wireless local area network security performance test platform 101; Test the wireless device 105 to access the test environment, the wireless LAN security performance test platform 101 sends a verification instruction to the wireless device test bed 102, the socket communication module 210 receives the instruction and calls the function module 211, and returns the result to the wireless LAN security performance test Platform 101; Finally, the WLAN security performance testing platform 101 sends the closing test environment instruction to the WAP testing server 103 through the WLAN security performance testing platform and the WAP test server interface 107, and the AP configuration module 302 receives After the instruction, close the test environment for the specified security protocol according to the instruction, and return the closing result to the wireless local area network security performance testing platform 101 .

As shown in Fig. 2, Fig. 3, and Fig. 4, after the wireless device 105 to be tested has carried out the security protocol compliance verification, the device protocol security test is carried out, and the login user selects the required test protocol on the wireless local area network security performance testing platform 101, and then for the selected The protocols are tested one by one for device protocol security. Perform vulnerability analysis on the wireless device 105 to be tested. The wireless local area network security performance testing platform 101 calls the vulnerability analysis function through the wireless local area network security performance testing platform and the security performance testing server interface 108. The vulnerability analysis module 401 performs vulnerability analysis on the wireless device 105 to be tested. Analyze, and return the vulnerability analysis report to the wireless local area network security performance testing platform 101 and store it in the database. The wireless device 105 to be tested is subjected to a penetration analysis. At first, the WLAN security performance testing platform 101 sends an instruction to start the test environment to the WAP testing server 103 through the WLAN security performance testing platform and the WAP testing server interface 107. After the entry point configuration module 302 receives the instruction, it starts the test environment for the specified security protocol according to the instruction, and returns the startup result to the WLAN security performance test platform 101; then through the WLAN security performance test platform and the wireless device test bed interface 106 Remotely log in to the wireless device test bed 102 and connect the wireless device 105 to be tested to the test environment; then the wireless local area network security performance test platform 101 sends an instruction to start the network connectivity test to the wireless device test bed 102, and the socket communication module 210 receives the instruction Call function module 211, and result is returned to WLAN security performance testing platform 101; Then, WLAN security performance testing platform 101 calls penetration testing function by WLAN security performance testing platform and security performance testing server interface 108, penetration testing Module 402 performs a penetration test on the wireless device 105 to be tested, and notifies the WLAN security performance testing platform 101 of the test; after the penetration test ends, the WLAN security performance testing platform 101 sends an end network connectivity test command to the wireless device test bed 102 , the socket communication module 210 receives an instruction to call the function module 211, and returns the result to the WLAN security performance testing platform 101; finally, the WLAN security performance testing platform 101 passes the WLAN security performance testing platform and the wireless access point test. The server interface 107 sends an instruction to close the test environment to the wireless access point test server 103. After receiving the instruction, the access point configuration module 302 closes the test environment to the specified security protocol according to the instruction, and returns the closing result to the WLAN security performance test. platform101.

After the wireless local area network security performance testing system completes the wireless device 105 device registration 206, the device protocol security test 207 and the security protocol compliance test 208, the report management 203 generates a security performance evaluation report for the wireless device 105 to be tested, and can The report outputs files in three formats: html, word, and pdf.

As shown in Figure 5, the overall workflow of the present invention is as follows:

1) The super administrator logs in to the account management of the wireless LAN security performance testing platform, registers users, and assigns permissions;

2) The user logs in to the wireless LAN security performance testing platform and enters the device management;

3) Device registration through the test platform;

4) After the device is successfully registered, verify the device's security protocol compliance;

5) After the verification is over, conduct a device protocol security test on the device;

6) The logged-in user can view the security evaluation report of the security protocol compliance verification and device protocol security test for the wireless device under test through the report management.

As shown in Figure 6, the device registration specific workflow of the present invention is as follows:

1) The logged-in user enters the device registration through device management;

2) Fill in the basic information of the device and select the device type;

3) Remotely log in to the wireless device test bed, call the configuration module to configure the device to be tested, and the wireless LAN security performance test platform extracts device information;

As shown in Figure 7, the specific workflow of the security protocol compliance verification of the present invention is as follows:

1) The login user selects the required verification protocol, and performs security protocol compliance verification for the selected protocols one by one;

2) The wireless LAN security performance test platform informs the wireless access point test server to start the test environment through the socket, the access point configuration module starts the test environment, and returns the configuration results to the wireless LAN security performance test platform;

3) The wireless LAN security performance test platform remotely logs in to the wireless device test bed, calls the configuration module to delete the configuration information, and then connects the device to be tested to the wireless test environment created by the wireless access point test server;

4) The wireless LAN security performance test platform informs the wireless device test bed to perform security protocol compliance verification through the socket, the wireless device test bed calls the function module to verify, and calls the socket communication module to notify the wireless LAN security performance test of the verification result platform;

5) The wireless LAN security performance test platform informs the wireless access point test server to close the test environment through the socket, the access point configuration module closes the test environment, and returns the configuration results to the wireless LAN security performance test platform;

As shown in Figure 8, the specific workflow of the device protocol security test of the present invention is as follows:

1) The wireless LAN security performance test platform informs the security performance test server to perform vulnerability analysis through the socket, and the security performance test server calls the vulnerability analysis module to perform vulnerability analysis on the wireless device to be tested, and returns the result to the wireless LAN security performance test platform;

2) The logged-in user selects the required test protocol, and performs the device protocol security test one by one for the selected protocol;

3) The wireless LAN security performance test platform informs the wireless access point test server to start the test environment through the socket, the access point configuration module starts the test environment, and returns the configuration results to the wireless LAN security performance test platform;

4) The wireless local area network security performance test platform remotely logs in to the wireless device test bed, calls the configuration module to delete the configuration information, and then connects the device to be tested to the wireless test environment created by the wireless access point test server;

5) The wireless LAN security performance test platform informs the wireless device test bed to start the device protocol security test through the socket, the wireless device test bed calls the function module to start the network connectivity test of the device under test, and calls the socket communication module to inform the wireless LAN The security performance testing platform starts to conduct network connectivity testing;

6) The wireless LAN security performance testing platform informs the security performance testing server to conduct the penetration test through the socket, and the security performance testing server calls the penetration testing module for testing, and informs the wireless LAN security performance testing platform after the penetration test is completed;

7) After the penetration test of the wireless LAN security performance test platform, the wireless device test bed is notified through the socket to end the device protocol security test, and the wireless device test bed calls the function module to extract the network connectivity test results, and calls the socket communication The module informs the WLAN security performance testing platform of the test results;

The wireless local area network security performance testing platform informs the wireless access point test server to close the test environment through the socket, the access point configuration module closes the test environment, and returns the configuration result to the wireless local area network security performance testing platform.

The above descriptions are only preferred embodiments of the present invention, and the scope of protection of the present invention is not limited to the above embodiments, but all equivalent modifications or changes made by those of ordinary skill in the art according to the disclosure of the present invention should be included within the scope of protection described in the claims.

Claims (6)

1. a wireless local area network safety performance testing system, is characterized in that: the system includes a wireless local area network safety performance testing platform (101), a wireless device test bed (102), a wireless access point test server (103) and a safety performance testing server (104); where, The wireless device test bed (102), the wireless access point test server (103) and the security performance test server (104) are connected through a wired local area network; The wireless local area network security performance testing platform (101) respectively passes through the wireless device test bed interface (106), the wireless access point test server interface (107), the wireless local area network security performance testing platform and the security performance testing server interface (108) in the local area network, Communicating with a wireless device test bed (102), a wireless access point test server (103) and a security performance test server (104); The wireless local area network security performance testing platform (101), communicates with the wireless device test bed interface (106), configures the wireless device to be tested (105), sends and extracts device information, starts the network connectivity test, ends the network connectivity test and security protocol Instructions for conformity verification; The wireless local area network security performance testing platform (101), communicates with the wireless access point test server interface (107), and performs channel parameter configuration and access point configuration on the wireless test environment; The wireless local area network security performance testing platform (101), communicates with the security performance testing server interface (108), and performs vulnerability analysis and penetration testing on the wireless device to be tested (105); The wireless device test bed (102) is used for the configuration of the wireless device (105) to be tested, and cooperates with the wireless access point test server (103) and the security performance test server (104) to complete the security protocol compliance verification and the device protocol security test; The wireless access point test server (103) is used for channel parameter configuration and access point configuration, and cooperates with the wireless device test bed (102) and the security performance test server (104) to complete security protocol compliance verification and device protocol security testing; The security performance testing server (104) is used for vulnerability analysis and penetration testing, and cooperates with the wireless device test bed (102) and the wireless access point testing server (103) to complete security protocol compliance verification and device protocol security testing. 2. The wireless local area network security performance testing system according to claim 1, characterized in that: the wireless local area network security performance testing platform (101) comprises: account management (201), project management (202), report management (203) , help instruction (204), device management (205), device registration (206), device protocol security test (207), security protocol compliance verification (208); Account management (201), used to manage the account of the wireless local area network security performance testing platform (101), and use the testing system to perform testing work according to authority; Project management (202), used for managing device protocol security testing (207), modifying or deleting test results; Report management (203), used to manage the results of the safety protocol compliance verification (208) and device protocol safety test (207) modules, and combine the device information stored in the device registration (206) for report generation and management; Help instructions (204), for the operation instructions of the wireless local area network security performance testing platform (101); Device management (205), used to manage device registration (206), security protocol compliance verification (208) and device protocol security test (207), to complete device registration and security testing; Device registration (206), used to call configuration module (209) with wireless device test bed interface (106) to configure device when extracting device information; Safety protocol compliance verification (208), used to call the socket communication module (210) and function module (211) to verify the safety protocol compliance of the device; The device protocol security test (207) is used to call the socket communication module (210) and the function module (211) to start/end the network connectivity test for the device. 3. wireless local area network security performance testing system according to claim 1, is characterized in that: described wireless device test bed (102) comprises: configuration module (209), socket communication module (210) and function module ( 211), where, Configuration module (209), for completing the configuration function of the wireless device to be tested (105); The socket communication module (210) is used to complete the command and information interaction between the wireless device test bed (102) and the wireless local area network security performance test platform (101), and call the specific function module (211) according to the command; The function module (211) is used to complete the function of the instruction from the socket communication module (210). 4. the wireless local area network safety performance testing system according to claim 1, is characterized in that: described wireless access point test server (103) comprises: channel configuration module (301) and access point configuration module (302), in, Channel configuration module (301), is used for receiving the configuration command from wireless local area network security performance test platform (101), and finishes the configuration to test protocol configuration script file; The access point configuration module (302) is used for receiving the start/close wireless test environment instruction from the wireless local area network security performance test platform (101), and completing the start or close of the corresponding environment. 5. The wireless local area network security performance testing system according to claim 1, characterized in that: the security performance testing server (104) comprises: a vulnerability analysis module (401) and a penetration testing module (402), wherein, A vulnerability analysis module (401), used for invoking a vulnerability analysis function to implement a vulnerability analysis of the wireless device to be tested (105); The penetration testing module (402) is used for invoking the penetration testing function to realize the penetration testing of the wireless device (105) to be tested. 6. A wireless local area network security performance testing method, characterized in that: the method may further comprise the steps: Step 1: the administrator logs in to the account management (201) of the wireless local area network security performance testing platform (101), registers users, and assigns permissions; Step 2: the user logs in to the wireless local area network security performance testing platform (101) to perform device management; Step 3: The user registers the device; Step 4: After the user successfully registers the device, the wireless device to be tested (105) performs security protocol compliance verification; Step 5: After the verification is over, perform a device protocol security test on the wireless device to be tested (105); Step 6: The logged-in user checks the security assessment report for the wireless device under test (105) for security protocol compliance verification and device protocol security testing through the report management (203); in: In Step 3, device registration includes the following steps: Step 31: The logged-in user enters the device registration (206) through the device management (205); Step 32: Fill in the basic information of the device and select the device type; Step 33: Remotely log in to the wireless device test bed (102), call the configuration module (209) to configure the wireless device to be tested (105), and the wireless local area network security performance test platform (101) extracts device information; In step 4, the security protocol compliance verification includes the following steps: Step 41: The logged-in user selects the protocol to be verified, and performs security protocol compliance verification for the selected protocols one by one (208); Step 42: The WLAN security performance testing platform (101) informs the WAP test server (103) to start the test environment through the socket, and the AP configuration module (302) starts the test environment, and returns the configuration result to the WLAN security Performance testing platform (101); Step 43: The wireless local area network security performance testing platform (101) remotely logs in to the wireless device test bed (102), calls the configuration module (209) to delete the configuration information, and then connects the wireless device to be tested (105) to the wireless access point test server (103) wireless test environment created; Step 44: The wireless local area network security performance testing platform (101) informs the wireless device test bed (102) to perform security protocol compliance verification through the socket, and the wireless device test bed (102) calls the function module (211) for verification, and calls the socket The interface communication module (210) informs the WLAN security performance testing platform (101) of the verification result; Step 45: The wireless LAN security performance testing platform (101) informs the wireless access point test server (103) to close the test environment through the socket, and the access point configuration module (302) closes the test environment, and returns the configuration result to the wireless LAN security Performance testing platform (101); In step 5, the device protocol security test includes the following steps: Step 51: the wireless local area network security performance testing platform (101) informs the security performance testing server (104) to carry out the vulnerability analysis through the socket, and the security performance testing server (104) calls the vulnerability analysis module (401) to be tested wireless equipment (105 ) carry out vulnerability analysis, and return the result to the wireless local area network security performance testing platform (101); Step 52: The logged-in user selects the required test protocol, and performs device protocol security tests one by one for the selected protocols; Step 53: The wireless LAN security performance testing platform (101) informs the wireless access point test server (103) to start the test environment through the socket, and the access point configuration module (302) starts the test environment, and returns the configuration result to the wireless LAN security Performance testing platform (101); Step 54: The wireless local area network security performance testing platform (101) remotely logs in to the wireless device test bed (102), calls the configuration module (209) to delete the configuration information, and then connects the wireless device to be tested (105) to the wireless access point test server (103) wireless test environment created; Step 55: The wireless local area network security performance testing platform (101) informs the wireless device test bed (102) to start the device protocol security test (207) through the socket, and the wireless device test bed (102) calls the function module (211) to be tested. The device (105) starts the network connectivity test, and calls the socket communication module (210) to inform the wireless local area network security performance testing platform (101) to start the network connectivity test; Step and 56: the wireless local area network security performance testing platform (101) informs the security performance testing server (104) to perform the penetration test through the socket, and the security performance testing server (104) calls the penetration testing module (402) to test, and the penetration test Inform the wireless local area network security performance testing platform (101) after the test is over; Step 57: After the penetration test is completed, the wireless LAN security performance testing platform (101) informs the wireless device test bed (102) through the socket to end the device protocol security test (207), and the wireless device test bed (102) calls the function module (211) Extracting the network connectivity test result, and calling the socket communication module (210) to inform the wireless local area network security performance testing platform (101) of the test result; Step 58: The wireless LAN security performance testing platform (101) informs the wireless access point test server (103) to close the test environment through the socket, and the access point configuration module (302) closes the test environment, and returns the configuration result to the wireless LAN security Performance testing platform (101).