An industrial control vulnerability mining method based on protocol state graph depth traversal

Abstract

The invention relates to an industrial control vulnerability mining method based on protocol state diagram depth traversal. The method comprises the steps of (1) obtaining the network data packets of a target device, and preprocessing the network data packets to obtain a data packet set to be analyzed, (2) carrying out partitioning processing on the data packets in the data packet set to be analyzed to obtain a large number of protocol base blocks, (3) extracting a constraint association relation between protocol base blocks in a single data packet and a state transfer association relation between the data packets, and constructing a protocol state diagram on the above basis, (4) traversing the protocol state diagram according to a depth-first mode, and generating and sending a corresponding malformed data packet, and (5) detecting whether the target device is alive, compiling a POC script according to the malformed data packet to carry out vulnerability verification if the target device is failed, and thus finding a security vulnerability in the target device. According to the method, security vulnerabilitys in Internet of things and industrial control system devices can be effectively found, and a problem of poor effectiveness of a traditional vulnerability mining method is solved.

Description

technical field [0001] The invention relates to the technical fields of network protocol security, Internet of Things / industrial control system security and security testing, in particular to a method for mining security loopholes based on deep traversal of protocol state diagrams. Background technique [0002] With the popularity of the Internet of Things, smart cities, and smart grids, various network attacks against the Internet of Things and industrial control system equipment have increased in recent years, exposing a large number of security vulnerabilities in the Internet of Things and industrial control system equipment. Actively discovering and repairing security vulnerabilities in IoT and industrial control system equipment has become an important security protection measure. [0003] Due to the characteristics of IoT devices and industrial control system devices that are closed, difficult to debug, high real-time, and difficult to simulate, traditional vulnerabili...

AI Technical Summary

Problems solved by technology

[0003] Due to the characteristics of IoT devices and industrial control system devices that are closed, difficult to debug, high real-time, and difficult to simulate, traditional vulnerability mining methods, such as reverse analysis, symbolic execution, and taint tracking, are difficult to achieve good results.

Images