PLC source code vulnerability detection method and device based on rule engine
By preprocessing and matching the PLC source code based on the rules engine, the problems of inflexible detection requirements and undetected logical vulnerabilities in the existing technology are solved, and more accurate and efficient vulnerability detection is achieved.
CN119760711APending Publication Date: 2025-04-04SECZONE TECH CO LTD
0 Cites 2 Cited by
Patent Information
- Application Number
- CN202411779909.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-05
- Publication Date
- 2025-04-04
AI Technical Summary
Technical Problem
Existing PLC source code vulnerability detection methods are difficult to flexibly meet different detection needs, and may lead to logical vulnerabilities not being detected, resulting in cross-domain vulnerabilities.
Method used
The PLC source code is preprocessed based on the rules engine, and a unified format data structure file is generated based on this, and the configuration security rules are matched to output vulnerability information.
Benefits of technology
It realizes more flexible vulnerability detection, and can more accurately detect logical vulnerabilities and cross-domain vulnerabilities in PLC devices, improving detection efficiency and accuracy.
✦ Generated by Eureka AI based on patent content.
Abstract
The present application discloses a method and device for detecting vulnerabilities in PLC source code based on a rule engine, the method comprising: configuring security rules of the rule engine based on a vulnerability library, the security rules being stored in the rule library of the rule engine, and each security rule corresponding to a vulnerability type; preprocessing the PLC source code to obtain a data structure file in a unified format; matching the data structure file with each security rule of the rule engine; if there is a successfully matched security rule, outputting a file including vulnerability information based on the successfully matched installation rule. By performing vulnerability detection on the PLC source code based on the rule engine, the security rules in the rule engine can be modified and customized according to actual needs, so that different detection needs can be met more flexibly.
Need to check novelty before this filing date? Find Prior Art