Vulnerability detection method for industrial control system

Abstract

The invention provides a vulnerability detection method for an industrial control system. The method comprises the following steps: performing network detection on a target environment based on industrial Ethernet features, identifying an industrial control device, and capturing a session data packet; parsing the data packet according to the industrial control protocol specification and the private protocol reverse technology, and constructing a feature code data packet to perform further system detection to obtain specific fingerprint information; comparing the vulnerability information of amatching target based on the features of an industrial control dedicated vulnerability database, and performing related vulnerability detection based on strategy drive; and performing a fuzzy test based on the industrial control protocol vulnerability, and mining the security vulnerabilities of the industrial control system network, and detecting the security vulnerability. According to the vulnerability detection method provided by the invention, the vulnerability detection is performed on the industrial control target to detect the security vulnerabilities before the network attackers so asto improve the security and reliability of the industrial control system.

Description

technical field [0001] The invention belongs to the field of computer technology, especially the field of industrial control security. The invention provides an industrial control system-oriented vulnerability detection method for detecting the security vulnerability of the industrial control system. Background technique [0002] The industrial control system is an important part of the country's key infrastructure. It is widely used in petroleum and petrochemical, water conservancy, electric power, food processing and sewage treatment industries, mainly for data acquisition and production control. Early industrial control and industrial control systems were physically isolated from the Internet, and most of them used dedicated software and hardware. Therefore, even if there were security risks in the industrial control system, it was difficult for the outside world to access the industrial control system and to conduct research on the industrial control system. However, wi...

AI Technical Summary

Problems solved by technology

[0009] On the basis of the existing work, the purpose of the present invention is to: propose a kind of vulnerability detection method for industrial control system, solve the problem that the existing vulnerability detection method is not strong for industrial Ethernet applicability, the system detection is not deep and the industrial control private protocol poor support

Images