Device and method for verifying programmable logic controller (PLC) firmware integrity

Abstract

The invention discloses a device and method for verifying programmable logic controller (PLC) firmware integrity. The device comprises a base line establishment unit, a PC simulation PLC intercepting unit and a verification unit. The base line establishment unit is used for intercepting security firmware data and establishing 32-bit base lines on the basis of an MD5 Hash algorithm; the PC simulation PLC intercepting unit is used for transmitting unknown security firmware to a PC of a simulation PLC, intercepting the unknown security firmware and working out 32-bit firmware abstracts through the MD5 Hash algorithm; and the verification unit is used for performing comparing verification on the base lines and the firmware abstracts. Integrity verification is performed on the unknown security firmware before the unknown security firmware is loaded to the PLC, and the device and the method guarantee that the firmware led into the PLC is complete. Malicious damage to the firmware caused by lawbreakers or competitors of the same kind is avoided.

Description

technical field [0001] The invention relates to a PLC firmware integrity verification device and a verification method, in particular to a PLC firmware integrity verification device and a verification method based on an MD5 hash algorithm. Background technique [0002] With the rapid development of network technology and communication technology, and widely used in large and small control systems, security issues have become the object of extensive research in control systems. Among them, the safety of the field programmable logic controller PLC is the most important, and when it comes to the safety of the PLC, the integrity of its firmware is the most important. [0003] At present, the need to burn firmware into the PLC mainly occurs in the following two situations: production PLC and upgrade PLC. When the PLC manufacturer needs to import firmware or the user needs to upgrade the PLC firmware, purchase PLC firmware from the PLC firmware manufacturer. In the process of PL...

AI Technical Summary

Problems solved by technology

In the process of PLC production, the PLC firmware is vulnerable to attacks by criminals or competitors. Once the integrity of the PLC firmware has not been verified, and it itself has defects or is attacked, it will lead to the scrapping of mass-produced PLCs and directly cause immeasurable losses; During the upgrade process, the PLC system is usually upgraded by the staff of the PLC manufacturer or by the user on site. However, when the staff or users get the upgraded firmware, they cannot be sure of its security. If the upgrade is performed directly, it may cause the upgrade of the PLC. If it fails, the PLC will be scrapped if it is serious

[0004] However, the security of PLC firmware is rarely verified nowadays. In order to verify the integrity of PLC firmware, a new verification method is urgently needed.

Images