摘要： 为提高对工业控制系统的渗透测试效率，保障其安全可靠性并提升系统安全防护能力，基于shell交互技术构建面向工控系统的渗透测试工具框架，并通过Python语言进行实现。设计具有层次结构的网络探测和系统探测模块，利用协议解析和逆向技术对工控协议进行脆弱性检测，同时研究基于工控环境的漏洞利用方式，通过模糊测试模块对测试目标进行漏洞挖掘和脆弱性检测。在此基础上，参考开源Metasploit软件，根据模板规则编写渗透攻击脚本。仿真结果表明，该设计可提高对工控系统的探测效率，降低协议脆弱性检测难度，并且具有结构简明、易于扩展的特点。

关键词: 工业控制系统, 漏洞, 渗透测试, 协议逆向, 模糊测试

Abstract: In order to improve the penetration testing efficiency of an Industrial Control System(ICS),ensure its security and reliability and enhance the system security protection ability,this paper constructs a penetration testing tool framework for ICS based on shell interaction technology and implements it with the Python language.It designs a hierarchical network detection module and system detection module,and uses protocol parsing and reverse technology for vulnerability testing of industrial control protocols.It also researches vulnerability exploitation ways based on the industrial control environment and designs a fuzzy testing module for vulnerability mining and detection of testing targets.On this basis,a penetration attack script is written according to the template rules in reference to the open source software,Metasploit.Simulation results show that this design can improve the detection efficiency for ICS,reduce the difficulty of protocol vulnerability detection.Meanwhile,it has the characteristics of simple structure and easy extension.

Key words: Industrial Control System(ICS), vulnerability, penetration testing, protocol reverse, fuzzy testing

中图分类号: 

• TP399