Automatic penetration testing method for industrial control terminal equipment

Abstract

The invention relates to an automatic penetration test method for industrial control terminal equipment, which introduces the concept of penetration test between equipment, and downloads the penetration test into the equipment in the form of a program, so that the time and energy of safety personnel are saved, and the test process tends to the automatic test; the terminal equipment downloading the program has the function of simultaneously communicating with a plurality of devices to be tested, which means that a plurality of devices can be tested in the same period of time, and all connected devices under the intranet can be tested, so that the test range is expanded, and the time cost is saved; by analyzing the general protocol and expanding the test program, the penetration test can be carried out on the terminal equipment of different brands under the same intranet, and the test expandability is improved.

Description

technical field [0001] The invention belongs to the field of industrial control system security, and in particular relates to an automatic penetration test method for industrial control terminal equipment. Background technique [0002] With the continuous integration of industrialization and informatization, more and more information technologies have poured into the industrial production environment, which has greatly improved the efficiency of industrial production and reduced the cost of cables used for communication. However, while enjoying the convenience brought by information technology, it also introduces security problems that have never been faced in the industrial field before. The original industrial control system is an "information island", and a closed-loop system including equipment control, equipment communication, data monitoring, and data collection is formed inside the factory. With the continuous integration with information technology, more and more in...

AI Technical Summary

Problems solved by technology

In the penetration test of industrial control equipment, due to the particularity of industrial control private protocols, the results detected by traditional tools such as Nmap only include device version, port opening information, product serial number, etc. Further analysis of industrial control equipment requires manual testing by security personnel. Construct protocol packets to communicate with devices to obtain sensitive information, which is very unfavorable for automated security testing

At the same time, due to the large number of industrial control terminal devices, it will take a huge amount of time to test all the devices under the intranet.

Images