# Virtualization Airborne Trusted General Computing Technology
## 4 Experimental Results and Analysis
### Verification of Network Security Protection Capabilities  
In the verification environment for the network security protection capabilities, airborne network security attack testing equipment was added on the basis of the application hosting function verification environment in Figure 4. The equipment was connected to the VAGCSP via a one-channel aviation Ethernet interface, which executed network security tests such as a DDoS attack, worm attack, backdoor attack, and vulnerability scanning and access control penetration testing by sending attack packets to VAGCSP, thereby verifying VAGCSP's network security protection capabilities. The experimental steps were as follows: (1) Trusted loading function of VMs was tested. (2) Application function test was implemented on VAGCSP while sending network attack packets to it. (3) CVE vulnerability scanning test was executed on VAGSCP. (4) Unauthorized network access attack was executed against VAGSCP. The experimental results were examined by checking the output of the test case results running on the testing equipment, as well as the log records  
\begin{table}
\begin{tabular}{c c c c c} \hline \hline  & **VM1** & **VM2** & **VM3** & **VM4** \\ \hline Size of Image & 245.32 Mbytes & 202.78 Mbytes & 232.66 Mbytes & 221.64 Mbytes \\ \hline Decryption time & 1.091 s & 0.902 s & 1.035 s & 0.986 s \\ \hline Trusted measurement & 0.772 s & 0.638 s & 0.732 s & 0.698 s \\ \hline OS startup & 6.213 s & 5.568 s & 6.021 s & 5.735 s \\ \hline Total time & 8.076 s & 7.108 s & 7.788 s & 7.418 s \\ \hline \hline \end{tabular}
\end{table}
Table 4: VM startup time test results.  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Test Categories** & **Test Items** & **AGCSP** & **VAGCSP VM** \\ \hline \multirow{3}{*}{Integer calculation} & intrg bit & 0.84 ns & 0.25 ns \\  & intrg div & 29.2 ns & 9.74 ns \\  & intrg mod & 14.2 ns & 10.1 ns \\ \hline \multirow{3}{*}{Floating-point calculation} & float add & 6.83 ns & 1.44 ns \\  & float div & 31.9 ns & 4.15 ns \\  & float bog & 45.2 ns & 1.08 ns \\ \hline \multirow{3}{*}{File access} & 10k File Create & 431.8 us & 16.3 us \\  & 10k File Delete & 6.0614 us & 4.8234 us \\  & 100 fd select & 5.558 us & 1.625 us \\ \hline \multirow{3}{*}{Process overhead} & sig inst & 1.14 us & 0.59 us \\  & fork proc & 340 us & 137 us \\ \cline{1-1}  & exec proc & 1075 us & 472 us \\ \cline{1-1}  & shproc & 3835 us & 1190 us \\ \hline \hline \end{tabular}
\end{table}
Table 2: LmBench test results.  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Test Categories** & **Test Items** & **AGCSP** & **VAGCSP VM** \\ \hline \multirow{3}{*}{TCP} & Throughput & 940.2 Mbits/s & 941.8 Mbits/s \\  & Multithread throughput & 961.2 Mbits/s & 963.7 Mbits/s \\  & Uplink/downlink bandwidth & 941.2 Mbits/s & 944.6 Mbits/s \\ \hline \multirow{3}{*}{UDP} & Throughput & 972.6 Mbits/s & 983.9 Mbits/s \\  & Multithread throughput & 985.7 Mbits/s & 992.9 Mbits/s \\  & Uplink/downlink bandwidth & 973.7 Mbits/s & 984.8 Mbits/s \\ \hline \end{tabular}
\end{table}
Table 3: Iperf3 test results.  
of VAGCSP. The experimental results showed that (1) VAGSCP correctly implemented the measurement and loading of VMs. (2) After the injecting network attack, the application functions of VAGCSP were executed correctly. (3) VAGCSP had no vulnerabilities above the low-risk level. (4) VAGSCP could effectively block the unauthorized network access requests, and Figure 6 displays the test results.