Test method and system for plc security defense device
AssigneeUniversity of Science and Technology Beijing
InventorsLun Xie, Weize Li, Zhiliang Wang
Life of this patent
Estimating the term…
Abstract
A test method and system for PLC security defense device are provided. The method including: acquiring by the first test end the information about the device under test, involving the type of communication mode, the type of PLC, the attack type and/or attack rule; after the attack messages to the device under test being generated and sent to the device under test, obtaining by the first test end the assessment results of the PLC security defense device on the basis of the second test end's response message. This is a fast, objective and thorough assessment method to testify security defense function of the device under test.
Claims12
A test method for the PLC security defense device, comprising:
- acquiring, by the first test end, at least one type of communication mode for testing the device under test, and identifying at least one type of PLC corresponding to each type of communication mode;
- determining attack type and/or attack rule corresponding to each type of PLC;
- generating, in the order of the type of communication mode and its corresponding PLC type, attack messages corresponding to each of the attack type and/or attack rule, and sending the attack messages to the device under test in sequence;
- acquiring, by the second end, messages generated by the device under test upon receiving the attack messages, generating response messages according to the acquired messages, and sending the response message to the first test end;
- deriving, by the first test end, the test result of the PLC security defense device according to all of the response messages upon receiving all of the response messages.
A test system for PLC security defense device, which includes:
- the first test end and the second test end, the first test end comprising:
- Type determination module:
- configured to acquire at least one type of communication mode for the device under test, and identifying at least one type of PLC corresponding to each type of communication mode;
- Attack type determination module:
- configured to determine the attack type and/or the attack rule corresponding to each type of the PLC;
- Attack message generation module:
- configured to generate in the order of the type of communication mode and its corresponding PLC type, attack messages corresponding to each of the attack type and/or attack rule, and send the attack messages to the device under test in sequence;
- Test result generation module:
- configured to derive the test result for the PLC security defense device according to all of the response messages acquired by the first test end;
- The second test end including:
- Response message generation module:
- configured to acquire messages generated by the device under test upon receiving the attack messages, generate response messages according to the acquired messages, and send the response message to the first test end.
Dependencies are inferred from the claim text.