US 10,764,319 B2 · Intelligent automated security vulnerability detection and analysis for industrial internet of things (IIOT) devices

Abstract

A method, an electronic device, and a computer readable medium for vulnerability detection are disclosed. The method includes generating a mapped dataset of a portion of an OPC UA server by mapping the portion of the server, wherein the server is compatible with OPC UA machine to machine (M2M) protocol communication including transport encodings and services. The method also includes identifying input test data to test the portion of the server based in part on the mapped dataset set in order to detect errors. The method further includes performing a plurality of targeted attacks by loading the input test data onto the portion of the server. In response to loading the input test data into the server, the method includes monitoring responses of the server to detect an error. Further, in response to detecting the error the method includes generating a report that indicates the detect error.

Claims18

Dependent claims

A method for vulnerability detection, the method comprising:

generating a mapped dataset of a portion of an OPC Unified Architecture (UA) server by mapping the portion of the OPC UA server, the generated mapped dataset identifies OPC UA nodes, wherein the OPC UA server is compatible with machine to machine (M2M) OPC UA protocol communication including transport encodings and services;
identifying input test data to test the portion of the OPC UA server based in part on the mapped dataset set in order to detect errors;
performing a plurality of targeted attacks by loading the input test data onto the portion of the OPC UA server;
obtaining at least one attack vector dataset associated with the OPC UA server;
and mapping the input test data to fuzz test object oriented data of the OPC UA server, wherein the input test data is identified from the at least one attack vector data set;
in response to loading the input test data into the OPC UA server, monitoring responses of the OPC UA server to detect an error;
and in response to detecting the error, generating a report that indicates the error.

4 more elements

An electronic device for vulnerability detection, the electronic device comprising:

a communication unit configured to communicate with an OPC Unified Architecture (UA) server;
an interface;
and a processor operably connected to the communication unit and the interface, wherein the processor is configured to:
generate a mapped dataset of a portion of the OPC UA server by mapping the portion of the OPC UA server, the generated mapped dataset identifies OPC UA nodes, wherein the OPC UA server is compatible with machine to machine (M2M) OPC UA protocol communication including transport encodings and services;
identify input test data to test the portion of the OPC UA server based in part on the mapped dataset set in order to detect errors;
perform a plurality of targeted attacks by loading the input test data onto the portion of the OPC UA server;
obtain at least one attack vector dataset associated with the OPC UA server;
and map the input test data to fuzz test object oriented data of the OPC UA server, wherein the input test data is identified from the at least one attack vector data set;
in response to loading the input test data into the OPC UA server, monitor responses of the OPC UA server to detect an error;
and in response to detecting the error, generate a report that indicates the error.

7 more elements

A non-transitory computer readable medium embodying a computer program, the computer program comprising computer readable program code that when executed by a processor of an electronic device causes the processor to:

generate a mapped dataset of a portion of a OPC United Architecture (UA) server by mapping the portion of the OPC UA server, the generated mapped dataset identifies OPC UA nodes, wherein the OPC UA server is compatible with machine to machine (M2M) OPC UA protocol communication including transport encodings and services;
identify input test data to test the portion of the OPC UA server based in part on the mapped dataset set in order to detect errors;
perform a plurality of targeted attacks by loading the input test data onto the portion of the OPC UA server;
obtain at least one attack vector dataset associated with the OPC UA server;
and map the input test data to fuzz test object oriented data of the OPC UA server, wherein the input test data is identified from the at least one attack vector data set;
in response to loading the input test data into the OPC UA server, monitor responses of the OPC UA server to detect an error;
and in response to detecting the error, generate a report that indicates the error.

4 more elements

Dependencies are inferred from the claim text.

Intelligent automated security vulnerability detection and analysis for industrial internet of things (IIOT) devices

Life of this patent

Intelligent automated security vulnerability detection and analysis for industrial internet of things (IIOT) devices

Life of this patent

Abstract

Claims18