Industrial control protocol differential fuzz testing method based on protocol consistency verification

Abstract

The invention discloses an industrial control protocol difference fuzzy test method and system based on protocol consistency verification. The method comprises the following steps: firstly, based on an official specification document of a target industrial control protocol, constructing a formalized baseline protocol finite-state machine, and generating a consistency verification sequence set covering protocol core logic; secondly, performing consistency testing on a plurality of tested protocol implementation entities, identifying and recording behavior deviation between each entity and the baseline model, and generating inconsistency judgment information; further, a differential fuzzy test case is constructed by utilizing the judgment information to generate an auxiliary vector, a targeted variation strategy is designed, and a final differential fuzzy test case set is generated and optimized; and finally, executing testing in parallel in an isolated virtualization environment, and automatically judging abnormal entities and vulnerability trigger points corresponding to the abnormal entities by performing vectorization processing and similarity analysis on response logs of the entities. According to the method, the problems of target fuzziness, low efficiency and high false alarm rate of an existing fuzzy test method are effectively solved, and the accuracy, the efficiency and the automation level of industrial control protocol security testing are remarkably improved.

Description

Technical Field

[0001] This invention belongs to the field of industrial control system security testing technology, specifically involving a differential fuzzy testing method and system for industrial control protocols based on protocol consistency verification. It is applicable to scenarios where there are multiple different implementation versions of the same industrial control protocol, and can efficiently and accurately discover security vulnerabilities and abnormal behaviors in the protocol implementation. Background Technology

[0002]

[0003] Furthermore, most existing fuzzing frameworks fail to consider behavioral consistency differences between protocol implementations, making it difficult to effectively identify potential security risks caused by implementation deviations. Therefore, there is an urgent need for a novel fuzzing method that can combine protocol specifications, leverage behavioral differences among multiple implementations, and possess high path coverage capabilities. Summary of the Invention

[0004] To address the aforementioned issues, this invention proposes a differential fuzzy testing method for industrial control protocols based on protocol consistency verification. This method formally models the protocol specification, constructs a consistency verification sequence set, performs consistency tests on multiple protocol implementation entities, and identifies their deviations from the specification. Based on the deviation information, it generates a highly targeted differential fuzzy test case set and executes the tests in a parallel environment. Finally, through log vectorization and cosine similarity analysis, it automatically identifies abnormal entities and abnormal trigger points.

[0005] A differential fuzzy testing method for industrial control protocols based on protocol consistency verification. The technical solution of this invention includes the following core steps:

[0006]

[0007]

[0008]

[0009]

[0010]

[0011]

[0012]

[0013]

[0014]

[0015]

[0016]

[0017]

[0018]

[0019]

[0020] This scheme explicitly requires parallel differential execution and isolated environments, demanding the parallel execution of the same test case on multiple entities under test, with each entity configured with an independent but consistent test environment. This ensures that subsequent differential analysis is efficient and effective, directly attributable to implementation differences rather than environmental interference—a detail often overlooked by many general-purpose fuzzing frameworks. Simultaneously, a unified log format records the complete responses of each entity under the same test case, and similarity is used to quantify and compare response behavior. When an entity's response differs significantly from other entities (average similarity below a threshold), it is considered an anomaly. This method can uncover non-crash-related logical inconsistency vulnerabilities.

[0021] Compared with existing technologies, the industrial control protocol differential fuzzy testing method based on protocol consistency verification described in this invention has the following practical advantages: Attached Figure Description

[0022] Figure 1 This is a flowchart of the overall architecture. Detailed Implementation

[0023] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of this invention. The embodiments described in this application are merely some embodiments of this invention, and not all embodiments. Based on the spirit of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of this invention.

[0024] Example 1

[0025]

[0026]

[0027]

[0028]

[0029]

[0030]

[0031]

[0032]

[0033]

[0034]

[0035] Step 2: Construction of Differential Fuzzy Test Case Set

[0036] Step 2.1, Auxiliary Vector Generation. This step aims to integrate the sets of state set differences, event set differences, and state transition differences, and to accurately map the inconsistency decision vectors in the inconsistency decision record set.

[0037]

[0038]

[0039]

[0040]

[0041]

[0042]

[0043]

[0044]

[0045]

[0046]

[0047] It should be noted that the above embodiments are not intended to limit the scope of protection of the present invention. Equivalent transformations or substitutions made based on the above technical solutions all fall within the scope of protection of the claims of the present invention.

Claims

1. A differential fuzzy testing method for industrial control protocols based on protocol consistency verification, characterized in that, Includes the following steps: Step 1, Protocol Consistency Verification: Based on the official specification document of the target industrial control protocol, construct a formalized baseline protocol model and generate a consistency verification sequence set covering the core logic of the protocol. Perform consistency tests on multiple implementation entities of the protocol under test, identify and record the inconsistency judgment records between each entity and the baseline model. Step 2, Differential fuzzy test case set construction: Using the inconsistency decision information obtained in Step 1, construct auxiliary vectors to guide the generation of test cases, and design a mutation function based on this to generate and optimize the final differential fuzzy test case set; Step 3, Perform differential fuzz testing and anomaly detection: Deploy each entity under test in an isolated virtualized environment, send differential test cases to them in parallel, monitor and record their response behavior in real time, and automatically determine abnormal entities and their corresponding vulnerability trigger points by vectorizing and similarity analysis of log data.

2. The industrial control protocol differential fuzzy testing method based on protocol consistency verification as described in claim 1, characterized in that, Step 1, the protocol consistency verification, includes the following sub-steps: Step 1.1, Target Protocol Baseline Modeling: Extract the concepts of state, event, and action, and construct a baseline finite state machine that can represent the legal state transition logic of the protocol; Step 1.2, Consistency Verification and Analysis: Construct a consistency verification sequence set, apply it to multiple implementation entities of the protocol under test, execute the consistency verification through dynamic hierarchical process, record the responses of each entity, and generate a set of inconsistency decision information records containing state set differences, event set differences, and state transition differences based on state machine equivalence analysis.

3. The industrial control protocol differential fuzzy testing method based on protocol consistency verification as described in claim 1, characterized in that, Step 2, the construction of the differential fuzzy test case set, includes the following sub-steps: Step 2.1, Auxiliary Vector Generation: Based on the inconsistency decision information record set output in Step 1.2, construct a differential fuzzy test case to generate an auxiliary vector for the node pointed to by the inconsistency decision information record set. This vector precisely points to a target point to be tested and encapsulates the context information required to trigger the inconsistency. Step 2.2, optimize the test case set: For each auxiliary vector, design a mutation function that includes value mutation and structural mutation, and combine it with the anomaly verification function to generate original test cases. Then, deduplicate and merge all original test cases to form an optimized differential fuzzy test case set.

4. The industrial control protocol differential fuzzy testing method based on protocol consistency verification as described in claim 3, characterized in that, The legal state transition logic construction process in step 1.1 specifically includes the following sub-steps: 。 5. The industrial control protocol differential fuzzy testing method based on protocol consistency verification as described in claim 4, characterized in that, In step 1.2, the joint construction of the consistency verification sequence through the graph structure balancing mechanism and the state unique identification sequence enhancement mechanism includes the following core steps: 。 6. The industrial control protocol differential fuzzy testing method based on protocol consistency verification according to claim 5, characterized in that, The auxiliary vector construction method in step 2.1 includes the following sub-steps: state.

7. The industrial control protocol differential fuzzy testing method based on protocol consistency verification according to claim 6, characterized in that, Step 2.2 is used to verify whether the test cases trigger exceptions or crashes. Specifically, it includes: parameter vector Control, satisfaction For location index.

8. A differential fuzzy testing system for industrial control protocols that implements the method as described in any one of claims 1 to 7, characterized in that, include: The protocol consistency verification module is used to execute step 1; The differential test case generation module is used to execute step 2; The test execution and exception handling module is used to execute step 3.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the industrial control protocol differential fuzzy testing method based on protocol consistency verification as described in any one of claims 1 to 8.

Images