Multi-dimensional anomaly monitoring method for fuzzy test effect

Abstract

The invention discloses a multi-dimensional anomaly monitoring method for a fuzzy test effect. According to the method, a signal monitor is adopted to monitor the signal output state of a target device in real time, so that control errors caused by signal instability can be avoided; a signal jitter calculation algorithm can ensure that the accuracy of a monitoring result can be controlled in a millisecond level, so that false positives can be effectively eliminated; an XML-defined network monitor is adopted, a customized monitor is supported, and therefore, a system has high expansibility andis more accurate in monitoring; a network monitoring and signal monitoring combined method is adopted, so that the real-time status of the target device can be monitored more comprehensively in a multi-dimension manner; and the network monitor can perform monitoring with a test package of an actual test protocol, so that test accuracy can be ensured.

Description

technical field [0001] The invention relates to the technical field of anomaly monitoring methods, in particular to a multi-dimensional anomaly monitoring method for fuzzy testing effects. Background technique [0002] While enjoying the progress, efficiency and benefits brought by open and interconnected technologies, industrial automation control systems and Internet of Things systems are also facing increasingly serious security threats. In response to these security threats, a large number of fuzzing tools have emerged. These tools validate known vulnerabilities and, where possible, uncover unknown vulnerabilities in devices. In the process of fuzz testing, the basis for judging vulnerabilities is mainly the state of the target device. [0003] The response delay of network services provided by industrial control and IoT devices under normal working conditions should be controlled within a certain range, otherwise it will cause client reconnection and even cause the il...

AI Technical Summary

Problems solved by technology

[0007] The advantages of these current detection methods are that they are relatively simple to implement and the detection operation is stable. The disadvantages are as follows:

[0008] 1. It cannot satisfy the self-detection of complex protocols. If the complex protocol of the device under test does not respond but the basic protocol is still normal, method 1 cannot be satisfied. Method 2 must provide a protocol client for each complex protocol. trouble;

[0009] 2. Unable to monitor the hardware status of industrial control and IoT devices;

[0010] 3. Unable to meet the detection requirements of custom protocols

Images