Abstract
This paper starts with the network level in the realization of industrial control protocol, and gives a fuzzy security test method based on the grammatical model. This paper first expounds the concept of protocol description model, then gives the definition of related grammar, and proposes a grammar model for industrial control protocol based on high-order attribute grammar. The model can accurately describe the format and constraint relationship of the structured data of the industrial control protocol. On this basis, the model proposes a fuzzy security test algorithm, combined with the characteristics of the industrial control protocol, elaborates on the analysis tree structure, test case generation and mutation strategy. At the same time, the model performs comparative experiments by simulating Modbus/TCP communication between the master and slave stations in the industrial control system (based on Modbus/TCP and IEC-104 protocols), and statistically tests the test results. The above method verifies that anomalous results can still be found at a lower time cost when generating fewer test cases. To a certain extent, the experimental results reflect the improved relevance and effectiveness of test cases.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have