CN103268433A - Mobile terminal system security automatic evaluation system and method based on attack - Google Patents

Abstract

The invention discloses a mobile terminal system security automatic evaluation system and method based on attack. The evaluation system comprises a computer terminal and a plurality of mobile terminals. The computer terminal comprises a safe state space module, a safe state generating module, a centralized attack base, an attack vector generating module, an attack driving module and a result analysis module. Each mobile terminal comprises a module safe state setting module and an attack testing module. The mobile terminal system security automatic evaluation system and method based on the attack can conduct test analysis of a mobile terminal system in different safe states, can objectively and accurately conduct safety evaluation on the mobile terminal system, is free of limitation caused by mobile terminal platform resources, and enables the safety evaluation of a mobile terminal to be easily achieved. In addition, the mobile terminal system security automatic evaluation system and method based on the attack has the advantages of being simple in testing process and low in repetition rate of operation.

Description

Based on the automatic evaluation system of mobile terminal system safety and the method for attacking

Technical field

The invention belongs to the mobile message security fields, relate to safely test automatically, design a kind of based on the automatic evaluation system of mobile terminal system safety and the method for attacking especially.

Background technology

Mobile intelligent terminal safety has become the focus of industry common concern, and it is the basis that guarantees mobile message safety that the mobile intelligent terminal security of system is tested and assessed.Existing security evaluation method and instrument mainly are based on the security function test of standard, lack objective anti-attack performance test.In practice, since system different constantly with scene under safety that intensity is set is different, system is in a constant safe condition always, and conventional test methodologies lacks at system and is in test analysis under the different safe conditions, and testing process is loaded down with trivial details, and test operation repetition rate height, subjectivity are strong.And because the restriction of mobile-terminal platform resource, feasible security evaluation system based on the security function method of testing is difficult to realize.

Summary of the invention

The objective of the invention is to overcome the deficiencies in the prior art, provide a kind of based on the automatic evaluation system of mobile terminal system safety and the method for attacking, can be in system and carry out test analysis under the different safe conditions, can be objective, accurately mobile terminal system is carried out security evaluation safely, and be not subjected to the restriction of mobile-terminal platform resource.

The objective of the invention is to be achieved through the following technical solutions: based on the automatic evaluation system of attacking of mobile terminal system safety, it comprises computer terminal and a plurality of portable terminal, and described computer terminal comprises with lower module:

Safe condition space module: according to needs to be measured, design and customize out each required safe condition space to be measured and storage;

Safe condition generation module: from the state space module, take out space to be measured, generate the vectorial safe condition that also sends to each portable terminal respectively of safe condition module is set, accept the feedback information of each terminal simultaneously, and responsible concerted attack vector generates;

Integrated attack storehouse: require the existing attacker of each plateform system of centralized stores and instrument according to what attack classification and mapping;

Vector of attack generation module: generate the vector of attack of attacking the space correspondence respectively;

Attack driver module: according to test dispatching, be injected into each corresponding terminal to be measured respectively by from attack the corresponding classification in storehouse, extracting attack code from the vector of attack of attacking the space generation respectively;

Results analyses module: analyze the test result, best safety performance point of each terminal and the size of corresponding security of system expense, the validity of the anti-attack performance of the system that draws and system security function;

Described portable terminal comprises with lower module:

Safe condition arranges module: each terminal receives the safe condition generation module that safe condition is set behind the safe condition vector and feeds back to computer terminal;

The attack test module: each terminal is carried out attack test respectively, draws the corresponding performance of each state.

Based on the automatic assessment method of attacking of mobile terminal system safety, it may further comprise the steps:

S1: according to needs to be measured, design and customize out each required safe condition space A to be measured ₁, A ₂..., A _n, and storage;

S2: the safe condition generation module takes out safe condition space A from the state space module ₁, A ₂..., A _n, generate the safe condition vector, and the safe condition that the safe condition vector that generates sends to each portable terminal respectively arranged module;

S3: the safe condition of each portable terminal arranges and after module receives the safe condition vector secure status of mobile terminal is set, and feeds back to the safe condition generation module;

S4: the vector of attack generation module generates test space T respectively under the assistance of safe condition generation module ₁, T ₂..., T _nCorresponding test vector;

S5: attack driver module according to test dispatching, respectively by test space T ₁, T ₂..., T _nThe test vector that generates extracts attack code G from the corresponding classification in integrated attack storehouse ₁, G ₂..., G _n, and be injected into each corresponding terminal to be measured respectively;

S6: each terminal is carried out attack test respectively, draws the corresponding performance of each state, and test result is analyzed.

The present invention proposes a kind of system and method that can cross-platformly carry out the automatic test and appraisal of portable terminal safety, can be at system and carry out test analysis under the different safe conditions, can be objective, accurately mobile terminal system is carried out security evaluation safely, and be not subjected to the restriction of mobile-terminal platform resource, the security evaluation of easier realization portable terminal has that testing process is simple, the low advantage of operation repetition rate.

Description of drawings

Fig. 1 is system architecture synoptic diagram of the present invention;

Fig. 2 is assessment method schematic diagram of the present invention.

Embodiment

Further specify technical scheme of the present invention below in conjunction with accompanying drawing, but the content that the present invention protects is not limited to the following stated.

As shown in Figure 1, based on the automatic evaluation system of attacking of mobile terminal system safety, it comprises computer terminal and a plurality of portable terminal, and described computer terminal comprises with lower module:

Safe condition space module: according to needs to be measured, design and customize out each required safe condition space to be measured and storage;

Safe condition generation module: from the state space module, take out space to be measured, generate the vectorial safe condition that also sends to each portable terminal respectively of safe condition module is set, accept the feedback information of each terminal simultaneously, and responsible concerted attack vector generates;

Integrated attack storehouse: require the existing attacker of each plateform system of centralized stores and instrument according to what attack classification and mapping;

Vector of attack generation module: generate the vector of attack of attacking the space correspondence respectively;

Attack driver module: according to test dispatching, be injected into each corresponding terminal to be measured respectively by from attack the corresponding classification in storehouse, extracting attack code from the vector of attack of attacking the space generation respectively;

Results analyses module: analyze the test result, best safety performance point of each terminal and the size of corresponding security of system expense, the validity of the anti-attack performance of the system that draws and system security function;

Described portable terminal comprises with lower module:

Safe condition arranges module: each terminal receives the safe condition generation module that safe condition is set behind the safe condition vector and feeds back to computer terminal;

The attack test module: each terminal is carried out attack test respectively, draws the corresponding performance of each state.

As shown in Figure 2, based on the automatic assessment method of attacking of mobile terminal system safety, it may further comprise the steps:

S1: according to needs to be measured, design and customize out each required safe condition space A to be measured ₁, A ₂..., A _n, and storage;

S2: the safe condition generation module takes out safe condition space A from the state space module ₁, A ₂..., A _n, generate the safe condition vector, and the safe condition that the safe condition vector that generates sends to each portable terminal respectively arranged module;

S3: the safe condition of each portable terminal arranges and after module receives the safe condition vector secure status of mobile terminal is set, and feeds back to the safe condition generation module;

S4: the vector of attack generation module generates test space T respectively under the assistance of safe condition generation module ₁, T ₂..., T _nCorresponding test vector;

S5: attack driver module according to test dispatching, respectively by test space T ₁, T ₂..., T _nThe test vector that generates extracts attack code G from the corresponding classification in integrated attack storehouse ₁, G ₂..., G _n, and be injected into each corresponding terminal to be measured respectively;

S6: each terminal is carried out attack test respectively, draws the corresponding performance of each state, and test result is analyzed.

Related definition of the present invention and test and appraisal are analyzed:

Definition 1: security function vector F: the vectorial F={f that the various security functions of system constitute in certain sequence ₁, f ₂, f ₃, f _n, f _iRepresent the independently security function classification of a system.For example to terminal data safety test demand F _d={ authentication, control of authority are encrypted storage, completeness check }.

Definition 2: safe condition vector S: different strong and weak uniqueness index S={ s that constitute characterization system current safe state power of system security function ₁, s ₂, s ₃, s _n| s _i∈ (2,1,0) }; S wherein _iValue { 2,1,0 } is represented the classification f of corresponding corresponding F _iIntensity is set is { stronger, general, as not have setting }.For example to above-mentioned F _dGenerate a S at random _dSymbol is used in={ 2,1,0,1 }

The expression system is in a safe condition S _d, its implication is as shown in the table.

The vectorial S of table 1 safety _dImplication

Function f i	Value	Implication
			Password is differentiated	2	The strong password identity is set to be differentiated
Control of authority	1	Common authority access control is set
			Encrypt storage	0	Do not adopt and encrypt storage
Complete checks	1	Adopt the verification of common intensity

Definition 3: safe condition space A: the space that all safe condition vector S that a certain security function vector F is generated constitute.

Definition 4: security of system expense o(S _i): to any one safe condition vector S _i, have

$o\left(S_i\right)=\underset{i=1}{\overset{n}{\mathrm{\Σ}}}{s}_i---\left(1\right)$

Definition 5: safe thresholding S _k: in theory in the safe condition space, the strongest value S of safe condition _Max=2,2,2 ..., 2 }, the most weak value S _Min=0,0,0 ..., 0 }, obviously, strength S _MaxS ₁={ 1,1,1 ..., 1}〉and S _MinIn fact can to take any safety practice be S to any safe terminal system _MinSystem tends to set into unprofessional user the safe minimum threshold state of an acquiescence

Guarantee the safety that system is basic.If safety setting is lower than S _k, the anti-attack ability of system can't satisfy the demand for security of domestic consumer.Test to seek the S an of security performance and security overhead the best by anti-attack ability _kAll be highly significant to portable terminal manufacturer and user.

Definition 6: atomic strike classification G _iAnd attack effect classification: the atomic strike classification refer to have clear and definite attack effect, typically, the type of attack means independently, common comprise read class, revise class, destroy class, invade class, walk around class, crack class, deciphering class, privilege-escalation class etc.Each former subclassification is at system's security function independently

Should have clear and definite attack effect, for example decipher class and attack the lost data confidentiality, revise class and attack and damaged integrality etc., this pass of definition is to attack mapping in the literary composition, uses symbol G _i∽ f _jExpression.Common classification and mapping relations are as shown in the table.

Table 2 is attacked classification and mapping implication

Atomic strike	Mapping	The attack effect implication
			Revise class	Complete checks	The corrupt data integrality
Destroy class	Availability	Damaged system availability
			The invasion class	Control of authority	Illegally obtain corresponding authority
Walk around class	The audit monitoring	Walk around system audit mechanism
			Promote class	Control of authority	The higher authority of illegal acquisition
Crack class	Authentication	Crack user password
			The deciphering class	Encrypt storage	The decrypted user confidential data

Definition 7: attack space G: the set G={G that all atomic strike classification constitute ₁, G ₂, G ₃, G _k| G _i∽ f _j, i=0,1 ... k; J=0,1 ..., n}, G _iRepresent an atomic strike classification, G _i={ g _I1, g _I2, g _I3, g _Ij, g _IjRepresentative classification G _iExisting any one attacked and realized, as attacker, step or virus, wooden horse etc., and defined function sum(G _i) expression G _iThe number of middle element.

Define 8 vector of attack t`: each classification G from attack space G <sub>i</sub>In choose a daughter element g arbitrarily <sub>Ij</sub>, constitute a k dimensional vector t`={ t ₁, t ₂..., t _kBe called test vector.Obviously, any component t among the t` <sub>i</sub>∽ f <sub>j</sub>The t` that might constitute formed test space T, test vector quantity:

$\mathrm{sum}\left(T\right)=\underset{i=1}{\overset{k}{\mathrm{\&Pi;}}}\mathrm{sum}\left(G_i\right)---\left(2\right)$

If sum(F)=n, then total test volume E(F of F) be:

$E\left(F\right)=3^n\&CenterDot;\underset{i=1}{\overset{k}{\mathrm{\&Pi;}}}\mathrm{sum}\left(G_i\right)---\left(3\right)$

Definition 9: test output vector R.The definition trial function:

$R_{\mathrm{ij}}=\{r_{\mathrm{ij}}^1,r_{\mathrm{ij}}^2...,r_{\mathrm{ij}}^k\},$

I=1,2 ..., sum (A) is illustrated in safe condition S _iCarry out test vector down,

The test output that obtains

R _IjThe element value be that (2,1,0) is represented respectively

In the attack effect of each element be (effectively, undetermined, invalid).

Output vector abbreviation: because the attack classification is many to few mapping to being mapped as of security function classification, so need definition to k dimensional vector R _IjAbbreviation for the security function function simple(R of n-dimensional vector one to one that classifies _Ij), its simplifying method is as follows:

If R _IjIn have element

Then get

Expression R _IjIn corresponding f _cUnique component, wherein max represents to get maximal value.

Definition 10: security performance d and security performance space D:

$\mathrm{Sys}\&Subset;S_i,$ $S_i\&Subset;A,$ Security performance $d_{\mathrm{ij}}(S_i,R_{\mathrm{ij}})=\underset{k=1}{\overset{n}{\mathrm{\&Sigma;}}}(s_k-r_{\mathrm{ij}}^k)---\left(5\right)$

Each S _iCorresponding a plurality of d _Ij, need transfer mapping one by one to.Make h=sum(T), get S _iCorresponding d _i=min(d _I1, d _I2, d _Ih), be called S _iIn the security performance of attacking under the T of space.

Get decide F and T after, can realize the test, its algorithm is as follows:

Testing algorithm: $S_i\&Subset;A,$ $t_j\&Subset;T,$ F

Above-mentioned simple is output abbreviation function, and plot is the picture function, and mind represents to ask S _iCorresponding d _iFunction, horizontal ordinate i represents S _i, ordinate is represented the d under this state _i

Claims (2)

1. based on the automatic evaluation system of attacking of mobile terminal system safety, it comprises computer terminal and a plurality of portable terminal, it is characterized in that: described computer terminal comprises with lower module:

Safe condition space module: according to needs to be measured, design and customize out each required safe condition space to be measured and storage;

Safe condition generation module: from the state space module, take out space to be measured, generate the vectorial safe condition that also sends to each portable terminal respectively of safe condition module is set, accept the feedback information of each terminal simultaneously, and responsible concerted attack vector generates;

Integrated attack storehouse: require the existing attacker of each plateform system of centralized stores and instrument according to what attack classification and mapping;

Vector of attack generation module: generate the vector of attack of attacking the space correspondence respectively;

Attack driver module: according to test dispatching, be injected into each corresponding terminal to be measured respectively by from attack the corresponding classification in storehouse, extracting attack code from the vector of attack of attacking the space generation respectively;

Results analyses module: analyze the test result, best safety performance point of each terminal and the size of corresponding security of system expense, the validity of the anti-attack performance of the system that draws and system security function;

Described portable terminal comprises with lower module:

Safe condition arranges module: each terminal receives the safe condition generation module that safe condition is set behind the safe condition vector and feeds back to computer terminal;

The attack test module: each terminal is carried out attack test respectively, draws the corresponding performance of each state.

2. based on the automatic assessment method of attacking of mobile terminal system safety, it is characterized in that: it may further comprise the steps:

S1: according to needs to be measured, design and customize out each required safe condition space A to be measured ₁, A ₂..., A _n, and storage;

S2: the safe condition generation module takes out safe condition space A from the state space module ₁, A ₂..., A _n, generate the safe condition vector, and the safe condition that the safe condition vector that generates sends to each portable terminal respectively arranged module;

S3: the safe condition of each portable terminal arranges and after module receives the safe condition vector secure status of mobile terminal is set, and feeds back to the safe condition generation module;

S4: the vector of attack generation module generates test space T respectively under the assistance of safe condition generation module ₁, T ₂..., T _nCorresponding test vector;

S5: attack driver module according to test dispatching, respectively by test space T ₁, T ₂..., T _nThe test vector that generates extracts attack code G from the corresponding classification in integrated attack storehouse ₁, G ₂..., G _n, and be injected into each corresponding terminal to be measured respectively;

S6: each terminal is carried out attack test respectively, draws the corresponding performance of each state, and test result is analyzed.

Images