A detection method and system for iec104 power protocol security testing

Abstract

The invention discloses a detection method for IEC104 power protocol security test, which firstly obtains the IP address of the device to be detected, exchanges messages with the device to be detected through a detection program designed based on the Peach platform, and according to the device to be detected The content of the reply information, combined with the pre-defined rules, construct abnormal data packets and send them to the device to be detected. During the communication process between the detection system and the device to be detected, the monitoring program will also monitor the device to be detected synchronously. If the detection program or monitoring program finds that the device to be detected is abnormal, the detection program will stop constructing the abnormal data message, and then verify the abnormality. Record. The IEC104 power protocol security testing method provided by the present invention takes the station-end equipment that uses the IEC104 power protocol for data transmission as the detection object, and can effectively discover the potential safety hazards of the station-end equipment.

Description

technical field [0001] The invention belongs to the field of information security, and more particularly, relates to a detection method and system for the security test of IEC104 power protocol. Background technique [0002] As the lifeblood of energy that affects national economic development, its importance is self-evident. With the increasing demand for real-time performance in the field of industrial control, the automation trend of power systems has become irreversible, which also leads to the complexity of the operating environment of the power system. Greatly increased, the difficulty of maintaining the stability and security of the power grid system is also gradually increasing. The degree of network security of the operating environment of the power industrial control system has also become one of the factors that check and balance the steady growth of the national economy. Therefore, whether the network security of the operating environment of the power industrial ...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the above defects or improvement needs of the prior art, the present invention provides a detection method and system for the safety test of the IEC104 power protocol, the purpose of which is to solve the problem that the existing equipment using the IEC104 protocol for data transmission cannot control The initiator of the command conducts legality identification, and the power industrial control system lacks network security monitoring means, which leads to technical problems that once used by criminals, it is easy to cause serious security losses to the equipment and even the entire power industrial control system

Images