A flow replay test method and test engine for industrial control protocols

Abstract

The invention relates to a traffic replay test method for industrial control protocols. Based on the transmission of actual industrial control protocol traffic, each original traffic packet of various industrial control protocols is collected and analyzed, according to the original traffic packet and its corresponding The form of each specified data information is stored in the traffic replay configuration management library, and then in the actual replay test, according to the industrial control protocol corresponding to the target industrial control device and the requirements of the test design plan, the original traffic packet is selected for editing, and then the target is realized. Replay test of industrial control equipment; build a test engine based on this, and complete the security test of the target industrial control equipment through the cooperation between various modules. The entire technical solution can be personalized and applicable to more industrial control protocols, and supports multiple types of industrial control traffic packets. , the entire test execution process can realize individualized design, satisfy various test design schemes, and effectively improve the application efficiency of the replay test.

Description

technical field [0001] The invention relates to a flow replay test method and a test engine for industrial control protocols, belonging to the technical field of industrial control protocol testing. Background technique [0002] Traffic replay is a test method in protocol testing. The process of this test method is to analyze the acquired real traffic and generate new same traffic data to send to the target device. This test method makes the target device passively receive the data packets that have already been received, which may cause the current logical state of the target device to be confused, sensitive information leakage and other issues. Therefore, the method of protocol testing using the traffic replay method is actually a simulated network replay attack in . The replay attacker can resend the packets received by the target device according to the attack target, so as to deceive the system. A replay attack can occur because the user repeatedly initiates a request...

AI Technical Summary

Problems solved by technology

However, these tester products are not suitable for industrial control protocol testing. First of all, the types of protocols supported are relatively small, the test depth is not enough, and there is also a lack of customization and expansion capabilities, which cannot meet the actual testing needs.

Images