Data layered generation method based on fuzzy testing of industrial control protocol

Abstract

The invention discloses a data layered generation method based on fuzzy testing of an industrial control protocol. The data layered generation method comprises the following steps of: (1), performing data layering according to a network protocol or a service requirement; (2), respectively loading script configuration files in various levels; (3), analyzing the script configuration files, and generating variables in different data types; (4), sequentially generating fuzzy testing data according to the increasing level sequence of the script configuration files; (5), stitching data generated in all the levels, so that a complete data packet is formed; and (6), sending the packaged data packet to tested equipment. The data layered generation method disclosed by the invention has the advantages that: a protocol is decomposed into multiple layers; the protocol data generation complexity is reduced; protocol data in each layer can correspond to multiple script configuration files; therefore, supports are provided for data diversity; the script configuration files can be freely combined; therefore, more service requirements can be satisfied; repetitive workloads are unnecessary; and accumulation of a fuzzy testing database is facilitated.

Description

technical field [0001] The invention relates to a data layered generation method based on industrial control protocol fuzzy testing, and belongs to the technical field of industrial control. Background technique [0002] At present, with the continuous integration of industrialization and informatization, more and more information technologies have been applied to the industrial field. At the same time, due to the widespread use of common software, hardware and network facilities in industrial control systems, as well as the integration with enterprise management information systems, industrial control systems are becoming more and more open, and data exchange occurs with enterprise intranets and even the Internet. Therefore, industrial control vulnerability mining was started for industrial control equipment. For example, the patent application number CN99804465.2 discloses a data distribution system including several data sources capable of sending data items, and a data ...

AI Technical Summary

Problems solved by technology

[0006] 1. Since most of the current industrial protocols are based on the TCP / IP protocol stack, the way of generating data at one time increases the complexity of script configuration files

[0007] 2. The method of generating test data at one time is not conducive to the reusability of data generation, that is, the process of generating data each time is a lot of repetitive work

[0008] 3. It is not conducive to the accumulation of fuzz test database

It can be seen that there is a big difference in the complexity of data generation between the split method and the non-hierarchical method.

Images