An industrial control system security experiment system for penetration testing

Abstract

The invention discloses an industrial control system security experiment platform for penetration testing. The platform comprises a virtual industrial control network, a control device, a control object, an attacker module, a data acquisition module and an anomaly detection module, wherein the virtual industrial control network is a three-layer network structure, which is successively an enterprise network, a demilitarized zone, and a control intranet from the outside to the inside; the enterprise network with the demilitarized zone, and the demilitarized zone with the control intranet are allconnected through a gateway; the control device is connected to the control intranet through an Ethernet protocol; the control object comprises a physical model and a simulation model and communicates with the control device; the attacker module is connected to a public network, simulates an attacker, and performs penetration testing on the industrial control system; the data acquisition module collects network flow data of the gateway; and the anomaly detection module is used for implementing anomaly detection of industrial control systems based on network flow data. The platform of the invention can deeply dig into the safety hazards of the industrial control system and has a positive effect on protecting the safety performance of the industrial control system.

Description

technical field [0001] The invention belongs to the field of industrial control system safety, and relates to an industrial control system safety experiment system used for penetration testing. Background technique [0002] An industrial control system refers to a collection of equipment, systems, networks, and controllers used to operate, control, and assist automated industrial processes. It includes data monitoring and acquisition system, distributed control system, programmable logic controller, human-computer interaction interface, intelligent terminal and other systems. The industrial control system is a major key infrastructure related to the development of the national economy and national security, and its safe, stable and efficient operation is very important. However, with the increase in the degree of intelligence and system openness, major security incidents such as Stuxnet and Black Energy in recent years have shown that industrial control systems are facing i...

AI Technical Summary

Problems solved by technology

Even if the malicious person does not know the security configuration of the system, they can still achieve the purpose of destroying the communication and cutting off the industrial control system to obtain the collected data.

Images