Modbus protocol-oriented fuzz testing method

A technology of fuzz testing and protocols, applied in digital transmission systems, electrical components, transmission systems, etc., can solve problems such as lack of defense means

Active Publication Date: 2016-06-29
SHENYANG INST OF AUTOMATION - CHINESE ACAD OF SCI
View PDF3 Cites 18 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Since the current APT attacks use "0-day" vulnerabilities, there is no effective defense against APT attacks. The only way is to discover "0-day" vulnerabilities before the attackers master the "0-day" vulnerabilities. Patches and upgrades for device vulnerabilities

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Modbus protocol-oriented fuzz testing method
  • Modbus protocol-oriented fuzz testing method
  • Modbus protocol-oriented fuzz testing method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0033] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0034] Considering that the safety test of industrial field equipment and the safety test of IT system have defects in the industrial communication protocol, the industrial control system vulnerability library, and the test feedback results to support the special output mode of embedded electronic equipment, etc., the present invention provides a solution for these The solution to the problem also introduces different processing methods for the dynamic and stat...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a Modbus protocol-oriented fuzz testing method capable of discovering the processing defects of field equipment of an industry control system on Modbus protocol data. The method comprises the steps of dividing a Modbus protocol domain into a static portion and a dynamic portion via expert knowledge, constructing a test data set in the dynamic portion via an abnormal mutation tree method, and greatly filtering fuzz testing cases which do not easily cause faults; integrating the disclosed bug information to construct testing cases, and fusing the testing cases to the fuzz testing cases; mutating one or more testing cases via a genetic algorithm based on the similarity of the disclosed bug information, fusing the one or more testing cases to the fuzz testing cases, finally generating a Modbus protocol-oriented fuzz testing case, designing a response information recognition method of the fuzz testing case, and judging whether defects exist or not. A device for implementing the method works on a Modbus TCP / IP layer, and the processing defects of field equipment on Modbus protocol data can be effectively discovered only by simple point-to-point network configuration.

Description

technical field [0001] The invention in this paper belongs to the field of security technology of industrial control system, specifically a fuzzy measurement method oriented to Modbus protocol. Background technique [0002] Industrial Control System (Industry Control System, ICS) entered the electric power industry earlier, has the longest development time, and adopts the most protocols, mainly including: Modbus, DNP3.0, IEC60870-5-101 / 104, ICCP (ie IEC60870-6 or TASE .2) and IEC61850, etc.; the development of ICS in other industries is relatively lagging behind, and the usage conditions are relatively similar, mainly including Modbus, OPC, etc., so the Modbus protocol is one of the most widely used protocols in domestic industrial control systems. At present, the Modbus protocol has been used in petroleum, It is widely used in industrial control systems or SCADA systems in industries such as electric power, energy, and metallurgy. [0003] The system of the industrial cont...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26
Inventor 于海斌曾鹏尚文利万明赵剑明
Owner SHENYANG INST OF AUTOMATION - CHINESE ACAD OF SCI
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products