电动汽车充电桩自动化渗透测试系统的研究和设计

Research and Design of Automatic Penetration Testing System for Electric Vehicle Charging Piles

信息物理系统(cyber physical systems,CPS)是集计算、通信与控制于一体的智能系统。电动汽车充电设施是一种典型的信息物理系统,但当前大量部署在现场的充电桩终端存在着用户入侵充电桩系统导致系统异常等安全隐患,亟须研究设计一套针对充电桩的自动化渗透测试系统。从指纹扫描、漏洞检测和漏洞挖掘3个方面对充电桩自动化渗透测试系统进行研究与设计,旨在检测已知漏洞和挖掘未知漏洞,有效地对电动汽车充电桩进行全方位的自动化安全检测,提高充电桩的安全防护等级,加强充电桩的安全防护能力,减少针对充电桩安全攻击所造成的信息泄露和经济损失。

Cyber physical system(CPS)is an intelligent system integrating computing,communication and control.As an important gateway to the energy internet,the electric vehicle charging facilities are responsible for important functions such as power supply,metering and billing,data interconnection and charging security,which is also a typical CPS system.There are many potential threats in the charging pile terminals in the field,such as system abnormality caused by user intrusion of charging pile system,which would subsequently threaten the security of the national grid.It is therefore necessary to study and design an automatic penetration testing system for charging piles.This paper makes a research and design of the charging pile automatic penetration testing system from three aspects:fingerprint scanning,vulnerability detection and vulnerability mining,which aims to detect the known vulnerabilities and discover unknown ones,and effectively carry out all-round automatic inspection of charging electric vehicles,subsequently improving the protection level of charging piles,and strengthening the protection capability of charging piles and reducing the information leakage and economic loss caused by the attacks on charging piles.