Industrial control security testing system, and industrial control system

Abstract

The invention discloses an industrial control security testing system, and an industrial control system. The industrial control security testing system comprises a port status scanning module, a testing case recommending module, and a fuzzy testing engine module, wherein the port status scanning module is used for scanning and acquiring a port status of equipment to be tested, which is used as a port status scanning result; the testing case recommending module is used for searching a preset testing case library for a testing case of a service protocol type matched with the port status scanning result when a port is in an open status according to the port status scanning result; and the fuzzy testing engine module is used for generating testing data according to the testing case obtained through the searching, carrying out variation of the testing data, and sending data obtained through the variation to the equipment to be tested for unknown security vulnerability mining. Therefore, the industrial control security testing system and the industrial control system provided by the invention have the advantages that security testing can be efficiently and automatically completed, so that a user can conveniently and efficiently carry out testing case selection and testing, automatic testing is achieved, and the error rate is extremely low.

Description

technical field [0001] The invention relates to the technical field of industrial control, in particular to an industrial control safety detection system and an industrial control system. Background technique [0002] From the perspective of the industrial control system itself, with the development of computer and network technology, especially the deep integration of informatization and industrialization, industrial control systems are increasingly using general protocols, general hardware and general software, and through public networks such as the Internet. Connected business systems are becoming more and more common, which has led to a substantial increase in attacks against industrial control systems, and the vulnerability of industrial control systems is gradually emerging, and information security issues are becoming increasingly prominent. [0003] Mining the unknown security vulnerabilities of the network in the industrial control system requires the fuzzing techn...

AI Technical Summary

Problems solved by technology

[0004] Although the security test platform in the prior art also integrates many test cases of different protocol types, it is up to the user to judge which test case to input when mining unknown security vulnerabilities of the device under test, and after the judgment is completed, the user Select certain test cases by yourself to mine unknown security vulnerabilities of the device under test. On the one hand, the degree of automation is low and the process requires more human participation. On the other hand, due to human participation, the error rate is high

Images