Research on Testing and Evaluation Technology for the Effectiveness of Internal Network Security Monitoring Systems Against Unauthorized External Connections

As high-value networks, internal networks primarily rely on physical isolation measures to ensure security and employ monitoring systems to detect and block unauthorized external connections. However, these monitoring systems often suffer from false negatives and false positives, allowing some unauthorized connections to go undetected and posing potential security risks. To evaluate the effectiveness of monitoring systems for unauthorized external connections in internal networks, this study designs and implements a testing system for such monitoring systems. It outlines the testing content and procedures and proposes an evaluation algorithm based on defect deduction and weighted calculation methods. Experimental results demonstrate the feasibility of the designed testing system, methods, and evaluation algorithms, and provide suggestions for improving the monitoring systems based on the findings.