The tobacco industry faces numerous network security challenges during its digital transformation. With the picture of Chinese information technology application innovation (ITAI), network security issues have become more prominent. This article explores to evaluate network security in the tobacco industry’s digital environment by verification and testing. First, it proposes a security index system for ITAI products. Second, it conducts formal verification using the ProVerif to detect vulnerabilities and security issues in the network system in the ITAI environment. Thirdly, a combination testing method is designed to assess the security of ITAI hosts and security defense products. Through formal verification and testing, this research provides theoretical support and practical guidance for network security protection in the tobacco industry’s digital environment.