Vulnerability mining algorithm based on Fuzzing test technology for power industrial control system
HE Jinhong
FENG Nan
FU Qiang
FU Min
LUO Yizhao
Abstract：Aiming at the problem that the traditional vulnerability detection cannot export the system components for analysis resulting from the closed operation environment of industrial control system,the characteristics of industrial control network protocol was combined with the variation factor of test case.An improved vulnerability testing and mining method aimed at Modbus_TCP public protocol for power industrial control system was proposed.According to the interdependence between the variation factor and the industrial control protocol characteristics,the protocol test cases were modified.The variation factors of case characteristic value,the data field length value and the choice of their values were combined and normalized.The execution time of variation factor in the process of protocol testing was simplified.The improved Fuzzing test results aimed at Modbus_TCP public protocol show higher test case acceptance rate and test efficiency,and the average acceptance rate of test samples increasses by at least 50%.
Keywords：electric power industryindustrial control systemvulnerability miningFuzzing testopen sourceanomaly analysis and monitoringdata generationvariation rate
Publication Date：2024-01-25
Online Publishing Date：2025-08-15(First online date of this platform, not the publication date of the document)
Pages：6( 103-108 )