Programmable controller software platform security detection method, device, equipment and medium

Abstract

The invention relates to the technical field of computers, in particular to a programmable controller software platform security detection method and device, equipment and a medium. The method comprises the following steps: acquiring a communication signal between a reader and a tag in a programmable controller software platform; analyzing the communication signal to obtain attribute information of the communication signal; and inputting the attribute information into a preset security assessment model to obtain a security assessment result of the programmable controller software platform. Therefore, the problems that in the prior art, security vulnerabilities in the programmable controller software platform are difficult to quickly detect and find, and diversified detection requirements cannot be met are solved, the intelligent degree during security detection of the programmable controller software platform is improved, the security vulnerabilities can be actively detected, and attack threats are effectively reduced.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a programmable controller software platform security detection method, device, equipment and medium. Background Art

[0002] With the rapid development of industrial digitalization, more and more control devices and equipment are on the cloud, breaking the originally closed and trusted production environment and facing threats such as viruses, Trojans, ransomware, industrial espionage, and hackers from information networks, the Internet, and third-party networks. PLC (Programmable Logic Controller) controllers, which inherently lack security genes, are easily exploited by these threats and cause security incidents. As the most important component of industrial control systems, the security level of PLC controller equipment directly determines the security level of the entire industrial control system.

[0003] In the related technologies, most of the security analysis tools on the market are based on traditional Internet security technologies. Testers manually customize various test cases, collect communication signals in the programmable controller software platform, and manually analyze the security vulnerabilities of the programmable controller software platform.

[0004] However, this method is difficult to quickly detect and discover security vulnerabilities in programmable controller software platforms, and cannot meet diverse detection needs, and urgently needs to be improved. Summary of the invention

[0005] The present application provides a programmable controller software platform security detection method, device, equipment and medium to solve the problem that the existing technology is difficult to quickly detect and discover security vulnerabilities in the programmable controller software platform and cannot meet diversified detection needs. It improves the intelligence level of security detection of the programmable controller software platform, can actively detect security vulnerabilities, and effectively reduce attack threats.

[0006] To achieve the above-mentioned purpose, the first embodiment of the present application proposes a programmable controller software platform security detection method, comprising the following steps:

[0007] Obtain the communication signal between the reader and the tag in the programmable controller software platform;

[0008] parsing the communication signal to obtain attribute information of the communication signal;

[0009] The attribute information is input into a preset security assessment model to obtain a security assessment result of the programmable controller software platform.

[0010] According to one embodiment of the present application, after parsing the communication signal to obtain the attribute information of the communication signal, the method further includes:

[0011] Obtaining a test instruction input by a user, and determining a test case corresponding to the test instruction;

[0012] The attribute information is processed based on the test case.

[0013] According to one embodiment of the present application, the attribute information includes at least one of potential destructiveness, reproducibility, exploitability, impact range, discoverability, physical cost of attack, time cost of attack, impact factor and attack success rate.

[0014] According to one embodiment of the present application, before inputting the attribute information into the preset security assessment model, the method further includes:

[0015] Obtaining attribute information of a plurality of communication signals;

[0016] Preprocessing the attribute information of the plurality of communication signals, and dividing the preprocessed attribute information of the plurality of communication signals into a training set and a validation set;

[0017] The preset neural network is trained using the training set to obtain an initial safety assessment model, and the initial safety assessment model is verified using the verification set until the initial safety assessment model meets the preset conditions, and the iterative training of the preset neural network is terminated to obtain the preset safety assessment model, otherwise the training set of the preset neural network is adjusted and the iterative training is continued.

[0018] According to one embodiment of the present application, after obtaining the security assessment result of the programmable controller software platform, the method further includes:

[0019] Output a safety detection report corresponding to the safety assessment result, wherein the safety detection report includes the safety risk level of the programmable controller software platform and / or the risk response plan of the programmable controller software platform.

[0020] According to the programmable controller software platform security detection method proposed in the embodiment of the present application, the communication signal between the reader and the tag in the programmable controller software platform is obtained, and the attribute information of the communication signal is obtained by parsing the communication signal, and the attribute information is input into a preset security assessment model to obtain the security assessment result of the programmable controller software platform. Thus, the problem that the prior art is difficult to quickly detect and discover security vulnerabilities in the programmable controller software platform and cannot meet the diversified detection needs is solved, the intelligence level of the security detection of the programmable controller software platform is improved, and security vulnerabilities can be actively detected, effectively reducing the threat of attacks.

[0021] To achieve the above-mentioned purpose, the second embodiment of the present application proposes a programmable controller software platform security detection device, including:

[0022] An acquisition module, used to acquire the communication signal between the reader and the tag in the programmable controller software platform;

[0023] A parsing module, used for parsing the communication signal to obtain attribute information of the communication signal;

[0024] The evaluation module is used to input the attribute information into a preset security evaluation model to obtain a security evaluation result of the programmable controller software platform.

[0025] According to one embodiment of the present application, after parsing the communication signal to obtain the attribute information of the communication signal, the parsing module is further used to:

[0026] Obtaining a test instruction input by a user, and determining a test case corresponding to the test instruction;

[0027] The attribute information is processed based on the test case.

[0028] According to one embodiment of the present application, the attribute information includes at least one of potential destructiveness, reproducibility, exploitability, impact range, discoverability, physical cost of attack, time cost of attack, impact factor and attack success rate.

[0029] According to one embodiment of the present application, before inputting the attribute information into the preset security assessment model, the assessment module is further used to:

[0030] Obtaining attribute information of a plurality of communication signals;

[0031] Preprocessing the attribute information of the plurality of communication signals, and dividing the preprocessed attribute information of the plurality of communication signals into a training set and a validation set;

[0032] The preset neural network is trained using the training set to obtain an initial safety assessment model, and the initial safety assessment model is verified using the verification set until the initial safety assessment model meets the preset conditions, and the iterative training of the preset neural network is terminated to obtain the preset safety assessment model, otherwise the training set of the preset neural network is adjusted and the iterative training is continued.

[0033] According to one embodiment of the present application, after obtaining the security assessment result of the programmable controller software platform, the assessment module is further used to:

[0034] Output a safety detection report corresponding to the safety assessment result, wherein the safety detection report includes the safety risk level of the programmable controller software platform and / or the risk response plan of the programmable controller software platform.

[0035] According to the programmable controller software platform security detection device proposed in the embodiment of the present application, the communication signal between the reader and the tag in the programmable controller software platform is obtained, and the attribute information of the communication signal is obtained by parsing the communication signal, and the attribute information is input into a preset security assessment model to obtain the security assessment result of the programmable controller software platform. Thus, the problem that the prior art is difficult to quickly detect and discover security vulnerabilities in the programmable controller software platform and cannot meet the diversified detection needs is solved, the intelligence level of the security detection of the programmable controller software platform is improved, and security vulnerabilities can be actively detected, effectively reducing the threat of attacks.

[0036] To achieve the above-mentioned objectives, the third aspect of the present application proposes an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the programmable controller software platform security detection method as described in the above-mentioned embodiment.

[0037] To achieve the above objectives, the fourth aspect of the present application proposes a computer-readable storage medium on which a computer program is stored, and the program is executed by a processor to implement the programmable controller software platform security detection method as described in the above embodiments.

[0038] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0040] Figure 1 A flowchart of a programmable controller software platform security detection method provided according to an embodiment of the present application;

[0041] Figure 2 A schematic block diagram of a programmable controller software platform security detection device provided according to an embodiment of the present application;

[0042] Figure 3 It is a schematic diagram of the structure of an electronic device provided according to an embodiment of the present application. DETAILED DESCRIPTION

[0043] The embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0044] The following describes the programmable controller software platform security detection method, device, equipment and medium proposed according to the embodiments of the present application with reference to the accompanying drawings. First, the programmable controller software platform security detection method proposed according to the embodiments of the present application will be described with reference to the accompanying drawings.

[0045] Figure 1 It is a flow chart of a programmable controller software platform security detection method according to an embodiment of the present application.

[0046] like Figure 1 As shown, the programmable controller software platform security detection method includes the following steps:

[0047] In step S101, a communication signal between a reader and a tag in a programmable controller software platform is acquired.

[0048] Specifically, by using network analysis tools or hardware devices, such as RFID (Radio Frequency Identification) protocol, the communication signals transmitted between the reader and the tag within the programmable controller software platform can be captured and recorded. The programmable controller software platform can include several readers and several tags, where the reader can be used to read the information of the tag, and the tag is used to store information and act as a transponder to authenticate the user.

[0049] It is understandable that each tag in the programmable controller software platform can be read by each reader therein, and the communication signal can be a communication signal between any reader and any tag, or a collection of communication signals between multiple tags and multiple readers in the programmable controller software platform.

[0050] In step S102, the communication signal is parsed to obtain attribute information of the communication signal.

[0051] Specifically, the captured communication signal is parsed, that is, the communication signal is decoded into an understandable data format by removing noise from the communication signal, parsing the frame structure and unpacking the data field in the communication signal, etc., the protocol used by the communication signal is determined, and the protocol specification is deeply analyzed to understand the meaning of each field in the communication signal. Based on the protocol analysis, the fields related to the attribute information of the communication signal are extracted from the decoded data.

[0052] In some embodiments, the attribute information includes at least one of potential destructiveness, reproducibility, exploitability, scope of impact, discoverability, physical cost of attack, time cost of attack, impact factor and attack success rate.

[0053] It can be understood that the attribute information of communication signals describes multiple dimensions of communication signals in security analysis, among which potential destructiveness refers to the assessment of the potential damage that may be caused to the target system or network if the communication signal is maliciously exploited, including consequences such as data leakage, service interruption, and system crash; reproducibility refers to the assessment of whether the communication signal is easy to copy and resend. Signals with high reproducibility may be used for replay attacks or other forms of replay behavior; exploitability refers to the assessment of whether the communication signal contains information or vulnerabilities that can be exploited by attackers. For example, if the signal contains unencrypted sensitive data or authentication credentials, the exploitability of this information is high; the scope of impact refers to the assessment of the scope of systems, networks, or users that may be affected if the communication signal is successfully exploited, including directly affected systems and systems that may be indirectly affected due to cascading effects; discoverability refers to the assessment of whether the communication signal contains information or vulnerabilities that can be exploited by attackers. Whether the communication signal is easy to be discovered by security systems, monitoring tools or manual analysis. Communication signals with low detectability may be more difficult to detect and defend against; the physical cost of attack refers to the cost of evaluating the physical resources (such as hardware, equipment, etc.) required to execute an attack based on the communication signal. High physical cost of attack can limit the capabilities of certain attackers; the time cost of attack refers to the time cost required to evaluate the execution of an attack based on the communication signal, including the time required to prepare for the attack, execute the attack and evaluate the results of the attack; the impact factor refers to a comprehensive indicator involving multiple aspects, such as the importance of the attack target, the degree of innovation of the attack technology, the social impact of the attack, etc. The impact factor is used to evaluate the overall importance and potential impact of the attack; the attack success rate refers to the possibility of success of an attack based on the communication signal, which is usually analyzed based on multiple factors such as the vulnerability of the target system, the skill level of the attacker, and the effectiveness of the attack method.

[0054] The above-mentioned multi-dimensional analysis of communication signals helps us understand the security characteristics of communication signals and formulate appropriate defense strategies accordingly.

[0055] Furthermore, in some embodiments, after parsing the communication signal to obtain the attribute information of the communication signal, it also includes: obtaining a test instruction input by a user, and determining a test case corresponding to the test instruction; and processing the attribute information based on the test case.

[0056] Among them, the test instructions can specify the type or purpose of the test to be performed; the test cases include test scripts, data input and expected output for different types of attribute information.

[0057] Specifically, after obtaining the attribute information of the communication signal, according to the test instructions input by the user, a matching test case is searched from a preset test case library (including different test cases to implement test analysis from different security requirements perspectives). According to the determined test case, the attribute information of the communication signal can be processed, including data verification, pattern matching, security checking, and performance testing.

[0058] For example, test cases may include forgery attacks, identity authentication tests, data tampering, key acquisition, and card cloning. Forgery attacks require the cooperation of commercial test card readers. By forging RFID tag information, the commercial card reader is tricked into reading successfully. If the RFID tag information can be successfully read, a true value is returned, otherwise false is returned. Identity authentication tests send information to the RFID tag through the tester to obtain ID (Identity Document) information. If it can be read successfully, indicating that the RFID tag is encrypted, a true value is returned, otherwise false is returned. Data tampering uses the tester to force a piece of data into the RFID tag to determine whether the data can be illegally written. If it can be written and read, a true value is returned, otherwise false is returned. Key acquisition uses the tester to blast the RFID tag using a dictionary. If the RFID tag's usage key can be successfully obtained, a true value is returned, otherwise false is returned. Card cloning uses the tester to copy the card to a blank card using the existing information and has the card function. If successful, a true value is returned, otherwise false is returned.

[0059] In step S103, the attribute information is input into a preset security assessment model to obtain a security assessment result of the programmable controller software platform.

[0060] In other words, the preset security assessment model takes attribute information as input and can output corresponding security assessment results.

[0061] The following describes in detail how to obtain the preset security assessment model.

[0062] As a possible implementation method, in some embodiments, before inputting the attribute information into a preset security assessment model, it also includes: obtaining the attribute information of multiple communication signals; preprocessing the attribute information of the multiple communication signals, and dividing the attribute information of the preprocessed multiple communication signals into a training set and a verification set; using the training set to train the preset neural network to obtain an initial security assessment model, and using the verification set to verify the initial security assessment model until the initial security assessment model meets the preset conditions, and then ending the iterative training of the preset neural network to obtain the preset security assessment model, otherwise adjusting the training set of the preset neural network and continuing the iterative training.

[0063] Specifically, attribute information of multiple communication signals is obtained, and the attribute information is preprocessed, such as cleaning, data conversion or feature extraction, etc. The preprocessed attribute information is divided into a training set and a validation set. The training set is used to train the neural network model, and the validation set is used to evaluate the model performance during the training process, adjust the hyperparameters, etc., select a suitable neural network as the preset neural network (such as a multi-layer perceptron, a convolutional neural network, etc.), use the training set to iteratively train the preset neural network to obtain an initial security assessment model, optimize the network parameters through back propagation algorithms and gradient descent methods, and after each iterative training, use the validation set to evaluate the performance of the initial security assessment model, and judge whether the initial security assessment model meets the preset conditions based on the performance indicators on the validation set (such as accuracy, recall rate, etc.). If the conditions are not met, the training parameters of the preset neural network (such as learning rate, batch size, etc.) can be adjusted until the initial security assessment model meets the preset conditions, then the iterative training can be terminated, and the initial security assessment model at this time can be used as the preset security assessment model.

[0064] Furthermore, in some embodiments, after obtaining the security assessment results of the programmable controller software platform, it also includes: outputting a security detection report corresponding to the security assessment results, wherein the security detection report includes the security risk level of the programmable controller software platform and / or the risk response plan of the programmable controller software platform.

[0065] That is to say, after obtaining the security assessment results of the programmable controller software platform, a security detection report corresponding to the security assessment results can also be output. According to the security assessment results, the programmable controller software platform can be divided into security risk levels (high, medium, and low). The level classification is usually based on factors such as the severity of the risk, the possibility of occurrence, and the scope of impact, and a detailed risk response plan (or mitigation measures) is provided for each identified higher-level security risk, for example, encryption or obfuscation processing is used for locally stored data.

[0066] According to the programmable controller software platform security detection method proposed in the embodiment of the present application, the communication signal between the reader and the tag in the programmable controller software platform is obtained, and the attribute information of the communication signal is obtained by parsing the communication signal, and the attribute information is input into a preset security assessment model to obtain the security assessment result of the programmable controller software platform. Thus, the problem that the prior art is difficult to quickly detect and discover security vulnerabilities in the programmable controller software platform and cannot meet the diversified detection needs is solved, the intelligence level of the security detection of the programmable controller software platform is improved, and security vulnerabilities can be actively detected, effectively reducing the threat of attacks.

[0067] Next, the programmable controller software platform security detection device proposed according to the embodiment of the present application is described with reference to the accompanying drawings.

[0068] Figure 2 It is a block diagram of a programmable controller software platform security detection device according to an embodiment of the present application.

[0069] like Figure 2 As shown, the programmable controller software platform safety detection device 10 includes: an acquisition module 100, a parsing module 200 and an evaluation module 300.

[0070] Wherein, the acquisition module 100 is used to acquire the communication signal between the reader and the tag in the programmable controller software platform;

[0071] The parsing module 200 is used to parse the communication signal to obtain the attribute information of the communication signal;

[0072] The evaluation module 300 is used to input the attribute information into a preset security evaluation model to obtain the security evaluation result of the programmable controller software platform.

[0073] Furthermore, in some embodiments, after parsing the communication signal to obtain the attribute information of the communication signal, the parsing module 200 is further used to:

[0074] Obtain the test instructions input by the user and determine the test cases corresponding to the test instructions;

[0075] The attribute information is processed based on the test cases.

[0076] Further, in some embodiments, the attribute information includes at least one of potential destructiveness, reproducibility, exploitability, scope of impact, discoverability, physical cost of attack, time cost of attack, impact factor, and attack success rate.

[0077] Furthermore, in some embodiments, before inputting the attribute information into the preset security assessment model, the assessment module 300 is further configured to:

[0078] Obtaining attribute information of a plurality of communication signals;

[0079] Preprocessing the attribute information of the plurality of communication signals, and dividing the preprocessed attribute information of the plurality of communication signals into a training set and a validation set;

[0080] The preset neural network is trained with the training set to obtain an initial safety assessment model, and the initial safety assessment model is verified with the verification set until the initial safety assessment model meets the preset conditions, and the iterative training of the preset neural network is terminated to obtain the preset safety assessment model, otherwise the training set of the preset neural network is adjusted and the iterative training is continued.

[0081] Further, in some embodiments, after obtaining the safety assessment result of the programmable controller software platform, the assessment module 300 is further used to:

[0082] Output a safety detection report corresponding to the safety assessment result, wherein the safety detection report includes the safety risk level of the programmable controller software platform and / or the risk response plan of the programmable controller software platform.

[0083] It should be noted that the aforementioned explanation of the embodiment of the programmable controller software platform security detection method is also applicable to the programmable controller software platform security detection device of this embodiment, and will not be repeated here.

[0084] According to the programmable controller software platform security detection device proposed in the embodiment of the present application, the communication signal between the reader and the tag in the programmable controller software platform is obtained, and the attribute information of the communication signal is obtained by parsing the communication signal, and the attribute information is input into a preset security assessment model to obtain the security assessment result of the programmable controller software platform. Thus, the problem that the prior art is difficult to quickly detect and discover security vulnerabilities in the programmable controller software platform and cannot meet the diversified detection needs is solved, the intelligence level of the security detection of the programmable controller software platform is improved, and security vulnerabilities can be actively detected, effectively reducing the threat of attacks.

[0085] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. The electronic device may include:

[0086] A memory 301 , a processor 302 , and a computer program stored in the memory 301 and executable on the processor 302 .

[0087] When the processor 302 executes the program, the programmable controller software platform security detection method provided in the above embodiment is implemented.

[0088] Furthermore, the electronic device further comprises:

[0089] The communication interface 303 is used for communication between the memory 301 and the processor 302 .

[0090] The memory 301 is used to store computer programs that can be run on the processor 302 .

[0091] The memory 301 may include a high-speed RAM (Random Access Memory) memory, and may also include a non-volatile memory, such as at least one disk memory.

[0092] If the memory 301, the processor 302 and the communication interface 303 are implemented independently, the communication interface 303, the memory 301 and the processor 302 can be connected to each other through a bus and communicate with each other. The bus can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0093] Optionally, in a specific implementation, if the memory 301, the processor 302 and the communication interface 303 are integrated on a chip, the memory 301, the processor 302 and the communication interface 303 can communicate with each other through an internal interface.

[0094] The processor 302 may be a CPU (Central Processing Unit), or an ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement the embodiments of the present application.

[0095] An embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, the program implements the above-mentioned programmable controller software platform security detection method.

[0096] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0097] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms are not necessarily directed to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0098] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limitations on the present application. Ordinary technicians in this field can change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. A programmable controller software platform security detection method, It is characterized in that The following steps are involved: Obtain the communication signal between the reader and the tag in the programmable controller software platform; parsing the communication signal to obtain attribute information of the communication signal; The attribute information is input into a preset security assessment model to obtain a security assessment result of the programmable controller software platform.

2. The method according to claim 1, It is characterized in that After parsing the communication signal to obtain the attribute information of the communication signal, the method further includes: Obtaining a test instruction input by a user, and determining a test case corresponding to the test instruction; The attribute information is processed based on the test case.

3. The method according to claim 2, It is characterized in that The attribute information includes at least one of potential destructiveness, reproducibility, exploitability, impact range, discoverability, physical cost of attack, time cost of attack, impact factor and attack success rate.

4. The method according to claim 1, It is characterized in that Before inputting the attribute information into the preset security assessment model, the method further includes: Obtaining attribute information of a plurality of communication signals; Preprocessing the attribute information of the plurality of communication signals, and dividing the preprocessed attribute information of the plurality of communication signals into a training set and a validation set; The preset neural network is trained using the training set to obtain an initial safety assessment model, and the initial safety assessment model is verified using the verification set until the initial safety assessment model meets the preset conditions, and the iterative training of the preset neural network is terminated to obtain the preset safety assessment model, otherwise the training set of the preset neural network is adjusted and the iterative training is continued.

5. The method according to claim 1, It is characterized in that After obtaining the safety assessment result of the programmable controller software platform, it also includes: Output a safety detection report corresponding to the safety assessment result, wherein the safety detection report includes the safety risk level of the programmable controller software platform and / or the risk response plan of the programmable controller software platform.

6. A programmable controller software platform security detection device, It is characterized in that include: An acquisition module, used to acquire the communication signal between the reader and the tag in the programmable controller software platform; A parsing module, used for parsing the communication signal to obtain attribute information of the communication signal; The evaluation module is used to input the attribute information into a preset security evaluation model to obtain a security evaluation result of the programmable controller software platform.

7. The device according to claim 6, It is characterized in that After parsing the communication signal to obtain the attribute information of the communication signal, the parsing module is further used to: Obtaining a test instruction input by a user, and determining a test case corresponding to the test instruction; The attribute information is processed based on the test case.

8. The device according to claim 7, It is characterized in that The attribute information includes at least one of potential destructiveness, reproducibility, exploitability, impact range, discoverability, physical cost of attack, time cost of attack, impact factor and attack success rate.

9. An electronic device, It is characterized in that include: A memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the programmable controller software platform security detection method as described in any one of claims 1 to 5.

10. A computer-readable storage medium having a computer program stored thereon, It is characterized in that The program is executed by a processor to implement the programmable controller software platform security detection method as described in any one of claims 1 to 5.

Images