Fuzzy test method and system for IEC104 protocol

Abstract

The invention discloses a fuzzy test method and system for an IEC104 protocol. The method comprises the steps: establishing an XML generation file, an XML sending file and an XML monitoring file; analyzing the XML generation file, and generating a fuzzy test use case; analyzing the XML sending file, and sending the fuzzy test use case to a target device which opens the IEC104 protocol; and analyzing the XML monitoring file, and monitoring the service state and the target equipment based on the XML sending file and the configuration data of the XML monitoring file. According to the method, the XML description file is used for performing configuration control on three key processes of fuzzy test use case generation, use case sending and target monitoring, so that the fuzzy test can be carried out on different target equipment protocols on the premise of not modifying metadata analysis tool codes; and alarms are given for different service state changes and system survival according to configuration, so that the efficiency of discovering suspected vulnerabilities is improved in multiple dimensions.

Description

technical field [0001] The invention relates to the technical field of testing of the IEC104 protocol, in particular to a fuzzy testing method and system of the IEC104 protocol. Background technique [0002] The IEC104 protocol is an international standard widely used in industries such as electric power and urban rail transit. In practical application of the IEC104 protocol, due to the large number of equipment manufacturers, inconsistent implementations among manufacturers, and differences in the implementation of different environments, many types of variants of the IEC104 protocol have been produced. The task of developing fuzzing test scripts for these variant protocols alone is very large. Adaptation Poor and difficult to maintain. Due to the inconsistency in the mechanisms for establishing and maintaining sessions between different protocols, the use of pre-generated test packets may cause session interruption and make it impossible to proceed to the next test. More...

AI Technical Summary

Problems solved by technology

In practical application of the IEC104 protocol, due to the large number of equipment manufacturers, inconsistent implementations among manufacturers, and differences in the implementation of different environments, many types of variants of the IEC104 protocol have been produced. The task of developing fuzzing test scripts for these variant protocols alone is very large. Adaptation poor performance and difficult to maintain

Due to the inconsistency of the mechanisms for establishing and maintaining sessions between different protocols, the use of pre-generated test packets may cause the session to be interrupted and the next test cannot be performed

Moreover, in traditional fuzz testing, only the system survival is monitored for the test target, with a single dimension, and the efficiency of finding suspected vulnerabilities is also low

Images