一种基于协议字段分类的工业控制系统Fuzzing测试方法

A Fuzzing Test Method Based on Protocol Item Types on Industrial Control System

随着信息化和工业化的深度融合,工业控制系统在工业生产过程中得到了越来越广泛的应用,很多研究者开始针对工控系统,特别针对工控网络协议的安全性展开研究,模糊测试则是其中较为活跃的领域之一。当前工业控制系统模糊测试方法,模糊数据过于简单随机、对于异常定位精度不高、测试效率低下等缺点,本文结合工业控制系统高实时性和高可靠性的特点,制定基于字段分类的测试用例生成方法和精确的异常定位方法,提出一种针对工业控制系统的模糊测试方法。最后通过工业控制系统常用协议Modbus对该方法进行了仿真实验,实验结果表明本文提出的方法相对于传统模糊测试方法,效率更高,覆盖率更高。

With the deep integration of information and industrialization, industrial control system has been more and more widely used in the process of industrial production. Many researchers began to study the industrial control system, especially for the security of industrial control network protocol. Fuzzy testing is one of the more active fields. At present, the fuzzy test method of industrial control system, the fuzzy data is too simple and random, the precision of abnormal location is not high, the test efficiency is low. This paper combines the characteristics of high real-time and high reliability of the industrial control system, and makes the test case generation method based on the field classification and the accurate anomaly location method. Finally, the simulation experiment of this method is carried out through the common protocol Modbus of industrial control system. The experimental results show that the method proposed in this paper is more efficient and more coverage than the traditional fuzzy test method.