Research and application of penetration testing method in industrial control system

Yueliang Zhang; Junyu Wu; Danchen Wang; Shibin Zhang

doi:10.1117/12.2624840

13 December 2021 Research and application of penetration testing method in industrial control system

Yueliang Zhang, Junyu Wu, Danchen Wang, Shibin Zhang

Proceedings Volume 12087, International Conference on Electronic Information Engineering and Computer Technology (EIECT 2021); 120870D (2021) https://doi.org/10.1117/12.2624840
Event: International Conference on Electronic Information Engineering and Computer Technology (EIECT 2021), 2021, Kunming, China

Abstract

The country attaches great importance to the safety risk of industrial control systems. It has issued more than ten national standards for industrial control safety protection and evaluation, but more of them provide guidelines for compliance safety evaluation, and less involve penetration testing. As a powerful method to discover security vulnerabilities, penetration testing can change passive defense to active, discover security weaknesses from the attacker's perspective, and verify the effectiveness of security measures. The difficulty of penetration testing for industrial control systems is that it relies more on the field experience of testers, and needs to refer to factors such as the particularity of the system industry, functional design, equipment configuration differences, and production environment. This article starts from the research on the vulnerability of industrial control systems, focuses on the penetration testing methods of industrial control systems, and analyzes and tells them in combination with actual cases.

Citation Download Citation

Yueliang Zhang, Junyu Wu, Danchen Wang, and Shibin Zhang "Research and application of penetration testing method in industrial control system", Proc. SPIE 12087, International Conference on Electronic Information Engineering and Computer Technology (EIECT 2021), 120870D (13 December 2021); https://doi.org/10.1117/12.2624840

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available