【作者】 王欢欢； 张冬梅； 于亮；

【Author】 Wang Huanhuan;Zhang Dongmei;Yu Liang;Information Security Center,Beijing University of Posts and Telecommunications;

【机构】 北京邮电大学信息安全中心；

【摘要】 随着工业信息化的进程快速推进,工业控制系统面临着更多的安全威胁。因此,必须及时、准确的找出工业控制系统的漏洞,而探测出网络中的工控设备则是其进行漏洞扫描的前提。本文首先介绍了传统的网络探测方法,并通过对PROFTNET的通信协议的研究提出了一种针对工控系统的网络探测方法。通过实验证明,对于传统网络探测工具无法探测到的工控设备,该方法能够有效的对其进行探测并获取其具体信息。更多还原

【Abstract】 With the rapid development of industrial informationization,industrial control system faces more and more security threats.Therefore,We must find out the vulnerabilities of industrial control system timely and accurately,and detect the industrial control equipment in network in is the premise of vulnerability scanning.This paper introduces some traditional network detection method at first,and proposes a network detection method aimed at industrial control system based on the study of the communication protocol of PROFINET.Proved by experiments,the method is effective to the detection of industrial control equipments which traditional network detection tools can’t detect and the detail information.更多还原