Efficient industrial control protocol fuzz test method

Abstract

The invention belongs to the field of industrial control safety technology and in particular relates to an efficient industrial control protocol fuzz test method, comprising the following steps: analyzing a protocol format, varying a single weak point in a protocol by adopting a strategy in a variation strategy set Mut, generating an original one-dimensional deformed sample set, sending to to-be-tested equipment as a test sample set TDB, detecting equipment exception record feedback information, calculating a fitness function, selecting a parent sample set FDB based on a roulette strategy, performing crossover and variation on individuals in the parent sample set FDB in pairs and generating a new son sample set SDB, and taking the parent sample set FDB and the son sample set SDB as a testsample set TDB for a test in a new round; and repeating by using the new test sample set TDB until dimensionality is saturated. The method provided by the invention generates a multi-dimensional testcase based on multiple strategy variances of fields at the same time, has diversity and can raise a multi-contact exception caused by adoption of different strategy variances on different fields.

Description

technical field [0001] The invention belongs to the technical field of industrial control security, and in particular relates to an efficient industrial control protocol fuzzy testing method. Background technique [0002] With the accelerated development of industrial digitalization, networking, and intelligence, industrial control security is facing new challenges such as increasing security vulnerabilities, accelerated penetration of security threats, and complex and diverse attack methods. How to solve the problem of industrial control security has become a severe challenge for enterprises, and has been highly valued by the country. Due to the high real-time and reliability requirements of industrial control systems, many traditional network security methods cannot play a good role in the field of industrial control. [0003] At present, when detecting industrial control network security vulnerabilities, technologies such as port service scanning and vulnerability featur...

AI Technical Summary

Problems solved by technology

Traditional fuzz testing has defects such as low code coverage and inability to identify multi-point trigger vulnerabilities

The industrial control protocol is session-oriented, highly structured, and has many control fields. The direct application of the fuzzing test method to the industrial control protocol requires the construction of a large number of mutators, facing the problem of combination explosion, and the test efficiency is not high.

Images