嵌入式应用软件安全性测试系统设计与实现  

Design and implementation of embedded application security testing system

作　　者：周亮[1] 张楠 韩丽芳[1] ZHOU Liang1, ZHANG Nan2, HAN Li-fang1(1. China Electric Power Reaserch Institute, Beijing 100192, China; 2.Nari Group Corporation, Nanjing 210000, Chin)

机构地区：[1]中国电力科学研究院,北京100192 [2]南京南瑞集团公司,江苏南京210000

出　　处：《电子设计工程》2018年第5期57-60,66,共5页Electronic Design Engineering

基　　金：国家电网公司总部科技项目(XX71-15-036)

摘　　要：目前软件安全性测试的目的就是在软件运行过程中模拟安全保障措施所面对的异常情况,而传统测试系统存在测试性能低,故障不能灵活注入,测试速度慢等问题,为此,提出了故障注入的嵌入式应用软件安全性测试系统设计。针对系统硬件,构造了安全性测试系统框架,该框架是由测试敏感器、实际执行组件、计算机控制器共同组成的,并通过数字仿真测试平台的建立,设置故障状态;建立测试环境通信渠道,使用GDB技术对故障底层机理进行调试,利用RSP通信协议实现程序间交叉测试,由此完成系统设计。选择实验环境进行实验验证,结果表明,该系统具有较高的软件测试性能,能够实现异常故障的灵活注入,进而促进软件能够快速的达到故障状态,使软件安全性的测试能够快速的完成。The purpose of the simulation facing the safeguards present software security testing is in the process of software running of the abnormal situation, and the traditional low test performance test system, fault not flexible injection, test the problem such as slow speed, therefore, puts forward a fault injection of embedded application software security testing system design. Security testing system was constructed according to the system hardware, framework, the framework is performed by the testing sensor, the actual component, computer controller together, and through the establishment of the digital simulation test platform, set the fault state; Establish test environment communication channel, use GDB technology to debug the underlying mechanism of fault, and use the RSP communication protocol to implement interprogram cross test, so as to complete system design. Choice experiment environment experiment, results show that the system has high performance of software testing, abnormal failure of flexible injection can be accomplished, thus promoting software can quickly achieve fault state, the software security testing can be completed quickly.

关 键 词：嵌入式 应用软件 安全性测试 故障注入 系统设计 

分 类 号：TN9[电子电信—信息与通信工程]