Penetration test framework suitable for industrial control system

Abstract

The invention discloses a penetration test framework suitable for an industrial control system. The penetration test framework comprises the following modules: (1) a functional interaction module based on a test target; (2) asset identification and network topology detection on a target network based on a TCP / IP protocol stack; (3) system detection based on an industrial control simulation client,and acquisition of target fingerprint information through a feature data packet; (4) vulnerability scanning based on an industrial control vulnerability library; (5) vulnerability mining based on anindustrial control proprietary protocol, and a blurring test of an industrial Ethernet protocol test; and (6) penetration attack based on features of the industrial control system, and an effective simulation attack on the test target. The framework can perform an effective penetration test on the industrial control system, and solve the problems of of low detection efficiency of the industrial control system, low coverage of industrial control vulnerabilities, difficult detection of industrial control environment vulnerability and single use of vulnerabilities of the existing penetration testtools.

Description

technical field [0001] The invention belongs to the field of computer technology, especially the field of industrial control security. The invention provides a penetration test framework suitable for industrial control systems, and conducts professional penetration tests on industrial control equipment to improve its safety and reliability. Background technique [0002] At the beginning of the design of the industrial control system, the main considerations were availability and real-time performance, and the early industrial control systems were relatively closed, and the possibility of security attacks was small, so the industrial control system did not consider security at the beginning of the design. With the widespread application of computer technology and network communication technology in industrial control systems, traditional industrial control systems have gradually broken the previous closedness and proprietary nature. Standard and general communication protocol...

AI Technical Summary

Problems solved by technology

[0010] On the basis of the existing work, the purpose of the present invention is to: propose a penetration testing framework suitable for industrial control systems, to solve the problem of low detection efficiency of existing penetration testing tools for industrial control systems, low coverage of industrial control security vulnerabilities, and problems in industrial control environments. Difficulty in vulnerability detection and single exploit method

Images