Abstract:Many security holes stem from the defects in network protocol implementations. This paper presents an industry best practice of integrated TCP/IP network protocol testing that targets software robustness vulnerabilities. The deployed test system consists of a versatile test engine, a protocol data unit generator and a few auxiliary tools. The specially designed kernel test engine supporting IP/TCP/UDP as carrier protocols drives predefined fault-injected PDU (protocol data unit) to the network unit under test. Its novel callback mechanism and virtual network device connection capability cost-effectively enhance user controlled testing intelligence for verifying protocols with complicated state transitions. The PDU generator aims to provide a systematic solution for rapid test case creation, which is based on new strengthened BNF (Backus-Naur form) language for protocol specification mutation and fault injection. Established on this system, we propose an integrated industry test environment for network protocol code assessment. Initial experiments and case studies with multicast protocols unveiled several robustness violations, which have significant security impacts.

Research on Performance Testing of IKE Protocol

Research and practice on performance test system for IKE protocol

Design and Implementation of Network Layer Testing for IPTV Analyzer

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

VPN Test System Based on IPSec Network Protocol

Accelerating Implementation of IKEv2 by Using Security Coprocessor

Interoperability Test Approach Based on ISM

Implementation of IPSec IKE

Testing Methods of Transmitted Performance about the Local Area Network Based on Ethernet Technology

Simulation Comparision of IKEv1 and IKEv2 Based on Linux

Ml-Ike: A Multilayer Ike Protocol For Tcp Performance Enhancement In Wireless Networks

Analyzing the Security Flaws of Internet Key Exchange Protocols

Vtestkit: A Performance Benchmarking Framework for Virtualization Environments

From Active to Passive — Progress in Testing Internet Routing Protocols

Research on IPSec Prameter Negotiation Process Based on IKE

The Secure Remote Access Based on IKE

Protocol Performance Testing Based On Tiots

LSQ-IKE: A Lightweight Space Key Exchange Protocol

Integrated TCP/IP protocol software testing for vulnerability detection

Analysis and Improvements of the IKEv2 Protocol

AN APPROACH TO PERFORMANCE TESTING FOR SIP SERVERS