Security vulnerability detection method and apparatus based on industrial control system

Abstract

The invention provides a security vulnerability detection method and apparatus based on an industrial control system. The method comprises the following steps: performing ping scanning on industrial control devices within a set address range to obtain an IP address list of online industrial control devices; sending information request data packets to the corresponding online industrial control devices according to the IP address list; determining the device information of the online industrial control devices according to the response information of the online industrial control devices and apreset device information base, wherein the device information comprises multiple of a system manufacturer identifier, product series and model numbers, a firmware version, a device address and a device name; and searching for the vulnerability information of the online industrial control devices from a preset vulnerability information base. By adoption of the security vulnerability detection method and apparatus provided by the invention, the industrial control devices can be comprehensively and effectively detected in an active scanning manner, the practicability is relatively good, and thevulnerability information of different types of devices are searched, so that the safety and stability of the industrial control devices are improved.

Description

technical field [0001] The invention relates to the technical field of industrial control, in particular to a method and device for detecting security loopholes based on an industrial control system. Background technique [0002] Industrial control systems are widely used in industry, electric power, energy, transportation, water conservancy, public utilities and production enterprises. The controlled device is related to the national economy and the people's livelihood. The stable operation of the device is very important. Once the device fails, it will bring more than just Huge economic loss, worse is the social impact. Through the in-depth analysis of numerous industrial control security incidents, it can be seen that most of the industrial control security incidents exploit the "loopholes" of the industrial control system, and then attack the entire industrial control system. Therefore, helping enterprises to find loopholes in time before hackers successfully attack the...

AI Technical Summary

Problems solved by technology

The broadcast data should be obtained from the complicated network, and then useless data should be eliminated. However, during the retrieval period of the device, the target device may not have the behavior of sending packets, so the passive scanning method is difficult to fully and effectively detect the industrial control equipment connected to the network. poor

Images